CVE-2005-1722

CVE-2005-1722 : Unknown vulnerability in the CoreGraphics Window Server for Mac OS X 10.4.x up to 10.4.1 allows local users to inject arbitrary commands into root sessions. Documented impact is local privilege escalation to root; root cause and exact exploit details are not provided in the suppli...

CVE-2005-1722

Unknown vulnerability in the CoreGraphics Window Server for Mac OS X 10.4.x up to 10.4.1 allows local users to inject arbitrary commands into root sessions...

Moderate: Red Hat Security Advisory: gftp security update

An updated gFTP package that fixes a directory traversal issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. gFTP is a multi-threaded FTP client for the X Window System. A directory traversal bug was found in gFTP. If a user...

CVE-2005-1901

Multiple cross-site scripting XSS vulnerabilities in Sawmill before 7.1.6 allow remote attackers to inject arbitrary web script or HTML via 1 the username in the Add User window or 2 the license key in the Licensing page...

Mandrake Linux Security Advisory : openssl (MDKSA-2005:096)

Colin Percival reported a cache timing attack that could be used to allow a malicious local user to gain portions of cryptographic keys CVE-2005-0109. The OpenSSL library has been patched to add a new fixed-window modexp implementation as default for RSA, DSA, and DH private key operations. The...

ImageMagick security update

CentOS Errata and Security Advisory CESA-2005:480-01 Updated ImageMagick packages that fix a denial of service issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagickTM is an image display and manipulation tool for...

Moderate: Red Hat Security Advisory: ImageMagick security update

Updated ImageMagick packages that fix a denial of service issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagickTM is an image display and manipulation tool for the X Window System that can read and write multiple...

Microsoft Internet Explorer - JavaScript 'window()' Crash

milw0rm.com 2005-05-31...

MS Internet Explorer - javascript ""window()"" Crash

No description provided by source. body onLoad="window" milw0rm.com 2005-05-31...

Microsoft Internet Explorer - JavaScript window() Crash

Microsoft Internet Explorer - JavaScript window Crash milw0rm.com 2005-05-31...

Important: Red Hat Security Advisory: ImageMagick security update

Updated ImageMagick packages that fix a buffer overflow issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. ImageMagickTM is an image display and manipulation tool for the X Window System which can read and write multiple...

CVE-2005-1710

Multiple cross-site scripting XSS vulnerabilities in Blue Coat Reporter before 7.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the username in an Add User window or 2 the license key volatile.licensetoadd parameter in the Licensing page...

CVE-2005-1710

Multiple cross-site scripting XSS vulnerabilities in Blue Coat Reporter before 7.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the username in an Add User window or 2 the license key volatile.licensetoadd parameter in the Licensing page...

Fedora Core 2 : mozilla-1.7.6-1.2.2 (2005-248)

A buffer overflow bug was found in the way Mozilla processes GIF images. It is possible for an attacker to create a specially crafted GIF image, which when viewed by a victim will execute arbitrary code as the victim. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the...

BakBone NetVault 7.1 Local Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ======================================================= BakBone NetVault 7.1 Local Privilege Escalation Exploit ======================================================= // ===== Start UnhideNetVaultServiceWindow.c ====== include include int...

BakBone NetVault 7.1 - Local Privilege Escalation

BakBone NetVault 7.1 - Local Privilege Escalation // ===== Start UnhideNetVaultServiceWindow.c ====== include include int main void HWND hWnd; char szWindowName = "C:\Program Files\BakBone Software\NetVault\bin\nvstatsmngr.exe"; printf "Finding window %s\n", szWindowName ; hWnd = FindWindow...

BakBone NetVault 7.1 - Local Privilege Escalation

// ===== Start UnhideNetVaultServiceWindow.c ====== include include int main void HWND hWnd; char szWindowName = "C:\Program Files\BakBone Software\NetVault\bin\nvstatsmngr.exe"; printf "Finding window %s\n", szWindowName ; hWnd = FindWindow NULL, szWindowName ; if hWnd == NULL printf "ERROR!...

Low: Red Hat Security Advisory: xloadimage security update

A new xloadimage package that fixes bugs in handling malformed tiff and pbm/pnm/ppm images, and in handling metacharacters in filenames is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The xloadimage utility displays images in an X...

Cross-site Scripting through global scope pollution — Mozilla

As you browse from site to site each new page should start with a clean slate. shutdown reports a technique that pollutes the global scope of a window in a way that persists from page to page. A malicious script could define a setter function for a variable known to be used by a popular site, and...

CVE-2005-0551

Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System CSRSS process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window information with a long...