CVE-2005-4018

SQL injection vulnerability in ls.php in Landshop Real Estate Commerce System 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 start, 2 searchorder, 3 searchtype, 4 searcharea, and 5 keyword parameters...

CVE-2005-4019

CVE-2005-4019 affects Relative Real Estate Systems, specifically versions 1.02 and earlier. It is a SQL injection in index.php exploitable via the mls parameter, allowing remote execution of arbitrary SQL commands. The vulnerability has a CVSS base score of 7.5 (HIGH) with network access, low att...

CVE-2005-4018

The connected records confirm a SQL injection vulnerability in LandShop Real Estate Commerce System 0.6.3 and earlier via ls.php, exploitable through parameters (start, search_order, search_type, search_area, keyword). The root cause is likely unsanitized user input incorporated into SQL queries,...

Relative Real Estate Systems SQL inj. vuln.

Relative Real Estate Systems SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/relative-real-estate-systems-sql-inj.html Vendor:http://www.dboorn.com/estate/ affected version:1.02 and prior Product Description: Elegant real estate scrip...

Real player media player multiple buffer overflow

Buffer overflows on parsing .rm streams and skin files...

[SA17502] VERITAS Cluster Server for UNIX Buffer Overflow Vulnerability

TITLE: VERITAS Cluster Server for UNIX Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA17502 VERIFY ADVISORY: http://secunia.com/advisories/17502/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: VERITAS Storage Foundation Cluster File System 4.x...

IIS IDA/IDQ Path Disclosure

IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions. An attacker may use this flaw to gain more information about the remote host, and hence make more focused attacks. OpenVAS Vulnerability Test $Id:...

Cabletron Web View Administrative Access (HTTP)

This host is a Cabletron switch and is running Cabletron WebView. This web software provides a graphical, real-time representation of the front panel on the switch. This graphic, along with additionally defined areas of the browser interface, allow you to interactively configure the switch, monit...

Debian DSA-826-1 : helix-player - multiple vulnerabilities

Multiple security vulnerabilities have been identified in the helix-player media player that could allow an attacker to execute code on the victim's machine via specially crafted network resources. - CAN-2005-1766 Buffer overflow in the RealText parser could allow remote code execution via a...

CVE-2005-2710

Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via the 1 image handle or 2 timeformat attribute in a RealPix .rp or RealText .rt file...

security flaw

Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via the 1 image handle or 2 timeformat attribute in a RealPix .rp or RealText .rt file...

CVE-2005-2710

CVE-2005-2710 is a format string vulnerability in RealNetworks RealPlayer and HelixPlayer. The flaw affects processing of RealPix (.rp) and RealText (.rt) files and can allow a remote attacker to execute arbitrary code in the user’s context via crafted files. Public advisories (RHSA-2005-762/788,...

FreeBSD : mplayer & libxine -- MMS and Real RTSP buffer overflow vulnerabilities (91c606fc-b5d0-11d9-a788-0001020eed82)

A xine security announcement reports : By a user receiving data from a malicious network streaming server, an attacker can overrun a heap buffer, which can, on some systems, lead to or help in executing attacker-chosen malicious code with the permissions of the user running a xine-lib based media...

FreeBSD : mplayer -- multiple vulnerabilities (85d76f02-5380-11d9-a9e7-0001020eed82)

iDEFENSE and the MPlayer Team have found multiple vulnerabilities in MPlayer : - Potential heap overflow in Real RTSP streaming code - Potential stack overflow in MMST streaming code - Multiple buffer overflows in BMP demuxer - Potential heap overflow in pnm streaming code - Potential buffer...

CVE-2004-2153

Multiple unknown vulnerabilities in Real Estate Management Software 1.0 have unknown impact and attack vectors...

CVE-2004-2153

Technical details for CVE-2004-2153 are not publicly provided in the supplied documents. No specifics on affected product/version, root cause, impact, or remediation are available here; monitor for updates.

[ GLSA 200506-06 ] libextractor: Multiple overflow vulnerabilities

Gentoo Linux Security Advisory GLSA 200506-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200506-06 : libextractor: Multiple overflow vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200506-06 libextractor: Multiple overflow vulnerabilities Xpdf is vulnerable to multiple overflows, as described in GLSA 200501-28. Also, integer overflows were discovered in Real and PNG extractors. Impact : An attacker could...

libextractor: Multiple overflow vulnerabilities

Background libextractor is a library used to extract meta-data from files. It makes use of Xpdf code to extract information from PDF files. Description Xpdf is vulnerable to multiple overflows, as described in GLSA 200501-28. Also, integer overflows were discovered in Real and PNG extractors...

USN-123-1: Xine library vulnerabilities

Two buffer overflows have been discovered in the MMS and Real RTSP stream handlers of the Xine library. By tricking a user to connect to a malicious MMS or RTSP video/audio stream source with an application that uses this library, an attacker could crash the client and possibly even execute...