CVE-2005-4189

CVE-2005-4189 covers multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith H3 prior to 2.0.6. The issue arises from insufficient input sanitisation in several user-controllable fields (Calendar name when creating calendars; event title when deleting events; Category and Location ...

BasiliX Detection

The remote web server contains a webmail application written in PHP. Description : This script detects whether the remote host is running BasiliX and extracts version numbers and locations of any instances found. BasiliX is a webmail application based on PHP and IMAP and powered by MySQL. OpenVAS...

Opera remote location object cross-domain scripting vulnerability

The remote host contains a web browser that is affected by multiple flaws. Description : The remote host is using Opera, an alternative web browser. This version of Opera on the remote host fails to block write access to the SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might...

DeskNow Mail and Collaboration Server Directory Traversal Vulnerabilities

A directory traversal vulnerability was found in DeskNow webmail file attachment upload feature that may be exploited to upload files to arbitrary locations on the server. A second directory traversal vulnerability exists in the document repository file delete feature. SPDX-FileCopyrightText: 200...

security flaw

Buffer overflow vulnerability in the unicodetobytes in the Service Location Protocol srvloc dissector packet-srvloc.c in Ethereal allows remote attackers to execute arbitrary code via a srvloc packet with a modified length value...

[Full-disclosure] iDEFENSE Security Advisory 10.20.05: Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability

Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.20.05 www.idefense.com/application/poi/display?id=323&type=vulnerabilities October 20, 2005 I. BACKGROUND Ethereal is a full featured open source network protocol analyzer. For more information, see...

CVE-2005-3184

Buffer overflow vulnerability in the unicodetobytes in the Service Location Protocol srvloc dissector packet-srvloc.c in Ethereal allows remote attackers to execute arbitrary code via a srvloc packet with a modified length value...

CVE-2005-3184

Buffer overflow vulnerability in the unicodetobytes in the Service Location Protocol srvloc dissector packet-srvloc.c in Ethereal allows remote attackers to execute arbitrary code via a srvloc packet with a modified length value...

CVE-2005-3184

CVE-2005-3184 : A buffer overflow in the Unicode-to-bytes conversion in the SRVLOC dissector of Ethereal (packet-srvloc.c) can be triggered by a crafted srvloc packet with a modified length, enabling remote code execution. Affected product: Ethereal 0.10.x prior to the security fixes. The public ...

PT-2005-4004 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal affected versions not specified Description: A buffer overflow issue exists in the unicode to bytes function within the Service Location Protocol srvloc dissector. This allows remote attackers to execute arbitrary code by sending a...

Microsoft Security Bulletin MS05-044 Vulnerability in the Windows FTP Client Could Allow File Transfer Location Tampering (905495)

Microsoft Security Bulletin MS05-044 Vulnerability in the Windows FTP Client Could Allow File Transfer Location Tampering 905495 Published: October 11, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Tampering Maximum Severity...

xine-lib <= 1.1 (media player library) Remote Format String Exploit

Exploit for linux platform in category remote exploits =================================================================== xine-lib = 1.1 media player library Remote Format String Exploit =================================================================== !/usr/bin/perl -- When playing an Audio C...

Fedora Core 4 : httpd-2.0.54-10.2 (2005-849)

This update includes two security fixes. An issue was discovered in modssl where 'SSLVerifyClient require' would not be honoured in location context if the virtual host had 'SSLVerifyClient optional' configured CVE-2005-2700. An issue was discovered in memory consumption of the byterange filter f...

Fedora Core 3 : firefox-1.0.1-1.3.1 (2005-182)

This update fixes several security vulnerabilities in Firefox 1.0. It is recommended that all users update to Firefox 1.0.1. Additionally, this update backports several fixes from rawhide. This update enables pango font rendering by default. This update enables smooth scrolling by default. On...

DEBIAN-CVE-2005-2700

sslenginekernel.c in modssl before 2.8.24, when using "SSLVerifyClient optional" in the global virtual host configuration, does not properly enforce "SSLVerifyClient require" in a per-location context, which allows remote attackers to bypass intended access restrictions...

security flaw

sslenginekernel.c in modssl before 2.8.24, when using "SSLVerifyClient optional" in the global virtual host configuration, does not properly enforce "SSLVerifyClient require" in a per-location context, which allows remote attackers to bypass intended access restrictions...

CVE-2004-2373

Technical details beyond the public description are not provided in the supplied documents; monitor for updates for potential details on affected products, versions, root cause, and remediation.

Ethereal 10.x - AFP Protocol Dissector Remote Format String

Ethereal 10.x - AFP Protocol Dissector Remote Format String / etherealv0.10.: AFP remote format string exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc xethereal-afp-fmt.c -o xethereal-afp-fmt ethereal homepage/url: http://www.ethereal.com syntax: ./xethereal-afp-fmt -spSrPanc...

security flaw

CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive...

CVE-2004-2154

CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive...