[CLOSE] OSVDB ID : 21583 - Disclosed: 2005-09-30

Description:

(Description Provided by CVE) : Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call.

[CLOSE] OSVDB ID : 19822 - Disclosed: 2005-09-30

Description:

(Description Provided by CVE) : The Python SVG import plugin (diasvg_import.py) for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a crafted SVG file.

[CLOSE] OSVDB ID : 19823 - Disclosed: 2005-09-30

Description:

(Description Provided by CVE) : Procom NetFORCE 800 4.02 M10 Build 20 and possibly other versions sends the NIS password map (passwd.nis) as a file attachment in diagnostic e-mail messages, which allows remote attackers to obtain the cleartext NIS password hashes.

[CLOSE] OSVDB ID : 19729 - Disclosed: 2005-09-30

Description:

(Description Provided by CVE) : Unspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to cause a denial of service (crash) via IMAP clients on Mac OS X 10.4 Mail 2.

[CLOSE] OSVDB ID : 19814 - Disclosed: 2005-09-30

Description:

(Description Provided by CVE) : Citrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changing the client device name (ClientName).

[CLOSE] OSVDB ID : 19815 - Disclosed: 2005-09-30

Description:

A remote overflow exists in Virtools Web Player. The application fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted file containing an overly long filename, a remote attacker can cause arbitrary code execution resulting in a loss of integrity.

[CLOSE] OSVDB ID : 19816 - Disclosed: 2005-09-30

Description:

(Description Provided by CVE) : Directory traversal vulnerability in Virtools Web Player 3.0.0.100 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a filename.

[CLOSE] OSVDB ID : 19821 - Disclosed: 2005-09-30

Description:

Apache Tomcat contains a flaw that may allow an attacker to gain access to privileged information. The issue occurs when a client specifies a Content-Length but disconnects before sending the request body. This is handled by the deprecated AJP connector by processing the request using the request body of the previous request. This may cause the server to return sensitive information.

[CLOSE] OSVDB ID : 21001 - Disclosed: 2005-09-30

Description:

(Description Provided by CVE) : Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a SVG file with long CSS style property values.

[CLOSE] OSVDB ID : 22502 - Disclosed: 2005-09-30

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 19811 - Disclosed: 2005-09-30

Description:

(Description Provided by CVE) : Bugzilla 2.18rc1 through 2.18.3, 2.19 through 2.20rc2, and 2.21 allows remote attackers to obtain sensitive information such as the list of installed products via the config.cgi file, which is accessible even when the requirelogin parameter is set.

[CLOSE] OSVDB ID : 19812 - Disclosed: 2005-09-30

Description:

(Description Provided by CVE) : Bugzilla 2.19.1 through 2.20rc2 and 2.21, with user matching turned on in substring mode, allows attackers to list all users whose names match an arbitrary substring, even when the usevisibilitygroups parameter is set.

[CLOSE] OSVDB ID : 20078 - Disclosed: 2005-09-30

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 20079 - Disclosed: 2005-09-30

Description:

(Description Provided by CVE) : Multiple unspecified vulnerabilities in the web utility function in Hitachi Cm2/Network Node Manager and JP1/Cm2/Network Node Manager before 20050930 allow attackers to execute arbitrary commands, disable services, and "exploit vulnerabilities."

[CLOSE] OSVDB ID : 20080 - Disclosed: 2005-09-30

Description:

(Description Provided by CVE) : Multiple SQL injection vulnerabilities in icerik.asp in TualBLOG 1.0 allow remote attackers to execute arbitrary SQL commands, as demonstrated by the icerikno parameter.

[CLOSE] OSVDB ID : 19983 - Disclosed: 2005-09-29

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 19885 - Disclosed: 2005-09-29

Description:

Lucid CMS contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the login form script not properly sanitizing user-supplied input to the 'login' field. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 19886 - Disclosed: 2005-09-29

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 19726 - Disclosed: 2005-09-29

Description:

A local overflow exists in Blender. The 'blenderplayer' command line fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted filename, a malicious user can cause arbitrary code execution resulting in a loss of integrity.

[CLOSE] OSVDB ID : 19746 - Disclosed: 2005-09-29

Description:

(Description Provided by CVE) : Buffer overflow in the ActiveX control for NateOn Messenger (NateonDownloadManager.ocx) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long third argument to the GotNate.Excute method.

[CLOSE] OSVDB ID : 19747 - Disclosed: 2005-09-29

Description:

(Description Provided by CVE) : The ActiveX control for NateOn Messenger (NateonDownloadManager.ocx) allows remote attackers to download and execute arbitrary programs by setting the arguments to the GotNate.Excute method.

[CLOSE] OSVDB ID : 19825 - Disclosed: 2005-09-29

Description:

IceWarp Web Mail contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'id' variable upon submission to the 'blank.html' page. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 19826 - Disclosed: 2005-09-29

Description:

IceWarp Web Mail contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'createdataCX' variable upon submission to the 'calendar_d.html' page. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 19827 - Disclosed: 2005-09-29

Description:

IceWarp Web Mail contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'createdataCX' variable upon submission to the 'calendar_m.html' page. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 19828 - Disclosed: 2005-09-29

Description:

IceWarp Web Mail contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'createdataCX' variable upon submission to the 'calendar_w.html' page. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 19829 - Disclosed: 2005-09-29

Description:

IceWarp Web Mail contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when a remote attacker makes a direct request to the 'bwlist_inc.html' page, which will disclose the software's installation path resulting in a loss of confidentiality. While such information is relatively low risk, it is often useful in carrying out additional, more focused attacks.

[CLOSE] OSVDB ID : 19830 - Disclosed: 2005-09-29

Description:

IceWarp Web Mail contains a flaw that allows a remote attacker to delete arbitrary files and directories. The issue is due to the 'logout.html' page not properly sanitizing user input supplied via the 'id' variable.

[CLOSE] OSVDB ID : 19831 - Disclosed: 2005-09-29

Description:

IceWarp Web Mail contains a flaw that allows a remote attacker to access arbitrary files outside of the web path. The issue is due to the 'help.html' page not properly sanitizing user input, specifically traversal style attacks (../../) supplied via the 'helpid' variable.

[CLOSE] OSVDB ID : 19749 - Disclosed: 2005-09-29

Description:

Multiple AntiVirus products contains a flaw that may allow a remote attacker to bypass antivirus protection. The problem is that these products do not scan filenames that contain extended ASCII characters, which may allow a remote attacker to execute arbitrary code resulting in a loss of integrity.

[CLOSE] OSVDB ID : 19730 - Disclosed: 2005-09-29

Description:

(Description Provided by CVE) : Cross-site request forgery (CSRF) vulnerability in Serendipity 0.8.4 and earlier allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag to serendipity_admin.php.

[CLOSE] OSVDB ID : 19727 - Disclosed: 2005-09-29

Description:

(Description Provided by CVE) : The "reset password" feature in Macromedia Breeze 5.0 stores passwords in plaintext in the database instead of the hash, which allows attackers with access to the database to obtain the passwords.

[CLOSE] OSVDB ID : 19728 - Disclosed: 2005-09-29

Description:

(Description Provided by CVE) : The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local users to modify arbitrary files via a symlink attack.

[CLOSE] OSVDB ID : 19717 - Disclosed: 2005-09-29

Description:

A local buffer overflow exists in Abiword. The RTF importer fails to properly bound check user-supplied data resulting in a stack buffer overflow. With a specially crafted RTF file, an attacker can execute arbitrary code resulting in a loss of confidentiality.

[CLOSE] OSVDB ID : 19716 - Disclosed: 2005-09-28

Description:

(Description Provided by CVE) : ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

[CLOSE] OSVDB ID : 19723 - Disclosed: 2005-09-28

Description:

(Description Provided by CVE) : Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag.

[CLOSE] OSVDB ID : 22995 - Disclosed: 2005-09-28

Description:

PAM-MySQL contains a flaw that may allow a malicious user to cause a double-free in the pam_get_item function. The issue is triggered when a malicious user sends crafted authentication credentials. It is possible that the flaw may cause the PAM-MySQL process to crash or allow arbitrary code execution resulting in a loss of integrity or availability.

[CLOSE] OSVDB ID : 22692 - Disclosed: 2005-09-28

Description:

OpenSSH contains a flaw that may allow an attacker to execute arbitrary commands. The flaw is due to the way OpenSSH's scp utility handles file names during local-to-local copies. During the file name expansion, the utility does not properly sanitize filenames allowing a crafted file name with shell meta-characters. This can be used to trick a user into executing arbitrary commands under with a different set of (potentially higher) privileges.

[CLOSE] OSVDB ID : 19745 - Disclosed: 2005-09-28

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 19742 - Disclosed: 2005-09-28

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 19718 - Disclosed: 2005-09-28

Description:

PHP-Fusion contains a flaw that may allow a remote attacker to carry out an SQL injection attack. The issue is due to the 'messages.php' script not properly sanitizing user-supplied input to the 'msg_send' variable. This may allow a remote attacker to inject or manipulate SQL queries in the back-end database.