CVE-2005-3425

CVE-2005-3425 is an XSS vulnerability in gnump3d prior to version 2.9.6 . Remote attackers could inject arbitrary web script or HTML via unspecified vectors, potentially compromising the victim’s browser. The CVE is discussed across multiple advisories (Debian/DSA-877-1, SUSE, Gentoo GLSA 200511-...

CVE-2005-3424: Undefined Security Weakness

Cross-site scripting XSS vulnerability in GNUMP3D before 2.9.5 allows remote attackers to inject arbitrary web script or HTML via 404 error pages, a different vulnerability than CVE-2005-3425...

CVE-2005-3425: Undefined Security Weakness

Cross-site scripting XSS vulnerability in GNUMP3D before 2.9.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2005-3424...

GNUMP3d < 2.9.6 Multiple Remote Vulnerabilities (XSS, Traversal)

The remote host is running GNUMP3d, an open source audio / video streaming server. The installed version of GNUMP3d on the remote host fails to completely filter out directory traversal sequences from request URIs. By leveraging this flaw, an attacker can read arbitrary files on the remote host...

CVE-2005-3123

Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted sequences such as "/.//..//////././", which is collapsed into "/.././" after ".." and "//" sequences are removed...

CVE-2005-3123

Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted sequences such as "/.//..//////././", which is collapsed into "/.././" after ".." and "//" sequences are removed...

CVE-2005-3123

Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted sequences such as "/.//..//////././", which is collapsed into "/.././" after ".." and "//" sequences are removed...

CVE-2005-3123

CVE-2005-3123 affects GNUMP3d (before 2.9.6). Multiple connected advisories describe a directory traversal flaw where crafted URLs allow reading arbitrary files the server’s user can access, due to incomplete path sanitization. Debian/DSA-877-1 and Gentoo GLSA-200511-05 cite remote exploitation; ...

CVE-2005-3123: Undefined Security Weakness

Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted sequences such as "/.//..//////././", which is collapsed into "/.././" after ".." and "//" sequences are removed...

[SECURITY] [DSA 877-1] New gnump3d packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 877-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 877-1] New gnump3d packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 877-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2005 http://www.debian.org/security/faq -...

Multiple gnump3d MP3 streaming server &#40;multiple vulnerabilities&#41;

Crossite scriptin, directory travrsal...

[Full-disclosure] [SECURITY] [DSA 877-1] New gnump3d packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 877-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2005 http://www.debian.org/security/faq -...