CVE-2005-1264

Raw character devices raw.c in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589...

CVE-2005-1264: Undefined Security Weakness

Raw character devices raw.c in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589...

dSMTP Mail Server 3.1b (Linux) - Format String

dSMTP Mail Server 3.1b Linux - Format String / dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit cybertronicatgmxdotnet 05/05/2005 This exploits the "xtellmail" command! bindc0de breaks somehow, cb works fine! remote buffer space is about 256 bytes bad chars: 0x00, 0x20, 0x0a...

dSMTP Mail Server 3.1b Linux Remote Root Format String Exploit

No description provided by source. / dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit cybertronicatgmxdotnet 05/05/2005 This exploits the "xtellmail" command! bindc0de breaks somehow, cb works fine! remote buffer space is about 256 bytes bad chars: 0x00, 0x20, 0x0a and prolly...

dSMTP Mail Server 3.1b (Linux) - Format String

/ dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit cybertronicatgmxdotnet 05/05/2005 This exploits the "xtellmail" command! bindc0de breaks somehow, cb works fine! remote buffer space is about 256 bytes bad chars: 0x00, 0x20, 0x0a and prolly more NOTE: before you start, chang...

CVE-2005-1420

Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to determine the full pathname of the server via a request for an invalid page, as demonstrated using "%20" hex-encoded space...

CVE-2005-1420

Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to determine the full pathname of the server via a request for an invalid page, as demonstrated using "%20" hex-encoded space...

DEBIAN-CVE-2005-0173

squidldapauth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists ACLs via a username with a space at the beginning or end, which is ignored by the LDAP server...

CVE-2005-1190

WebcamXP PRO v2.16.468 and earlier allows remote attackers to cause a denial of service via a long chat name, which takes up too much display space and prevents the chat frame from being properly rendered...

[Full-disclosure] rsnapshot Security Advisory 001

============================================================================ rsnapshot Security Advisory 001 [email protected] http://www.rsnapshot.org/security/ Apr 10th, 2005 Nathan Rosenquist ============================================================================ Severity: high...

Information leak in the Linux kernel ext2 implementation

Description: Information leak in the Linux kernel ext2 implementation References: CAN-2005-0400 Authors: Mathieu Lafon [email protected] Romain Francoise [email protected] Arkoon Security Team Advisory - March 25, 2005 http://arkoon.net/advisories/ext2-make-empty-leak.txt Revision: 1.0 1...

CVE-2005-0919

Adventia Chat 3.1 and Server Pro 3.0 allows remote attackers to inject arbitrary web script or HTML into the chat space, which leaves other users vulnerable to cross-site scripting XSS attacks...

Exploit Labs Security Advisory 2005.2

------------------------------------------------------------ - EXPL-A-2005-002 exploitlabs.com Advisory 031 - ------------------------------------------------------------ - Samsung ADSL Modem - AFFECTED PRODUCTS ================= Samsung ADSL Modem Samgsung Eletronics http://www.samsung.com DETAI...

CVE-2005-0622: Undefined Security Weakness

RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to view the PHP source code via an HTTP GET request for a filename with a trailing 1 . dot or 2 space...

RHEL 4 : ethereal (RHSA-2005:037)

Updated Ethereal packages that fix various security vulnerabilities are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic. A number of security fla...

HP-UX Security patch : PHKL_9580

The remote host is missing HP-UX Security Patch number PHKL9580 . Vulnerability with direct audio user space code %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17116;...

CVE-2005-0173

squidldapauth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists ACLs via a username with a space at the beginning or end, which is ignored by the LDAP server...

CVE-2004-1140

Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service application hang and possibly fill available disk space via an invalid RTP timestamp...

PT-2004-2747 · Ipswitch · Ipswitch Ws Ftp Server

Name of the Vulnerable Software and Affected Versions: Ipswitch WS FTP Server version 4.0.2 Description: The issue allows remote attackers to cause a denial of service disk consumption and bypass file size restrictions via a REST command with a large size argument, followed by a STOR of a smaller...

CVE-2004-1140: Undefined Security Weakness

Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service application hang and possibly fill available disk space via an invalid RTP timestamp...