Vulnerability Advisories - 2005

ADVISORY 12.22.05 : Linux Kernel Socket Buffer Memory Exhaustion DoS Vulnerability
ADVISORY 12.21.05 : Macromedia JRun 4 Web Server URL Parsing Buffer Overflow Vulnerability
ADVISORY 12.20.05 : McAfee Security Center MCINSCTL.DLL ActiveX Control File Overwrite Vulnerability
ADVISORY 12.20.05 : Qualcomm WorldMail IMAP Server String Literal Processing Overflow Vulnerability
ADVISORY 12.16.05 : Citrix Program Neighborhood Name Heap Corruption Vulnerability
ADVISORY 12.14.05 : Trend Micro PC-Cillin Internet Security Insecure File Permission Vulnerability
ADVISORY 12.14.05 : Trend Micro ServerProtect Crystal Reports ReportServer File Disclosure
ADVISORY 12.14.05 : Trend Micro ServerProtect isaNVWRequest.dll Chunked Overflow
ADVISORY 12.14.05 : Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability
ADVISORY 12.14.05 : Trend Micro ServerProtect EarthAgent Remote DoS Vulnerability
ADVISORY 12.12.05 : SCO Unixware Setuid 'uidadmin' Scheme Buffer Overflow Vulnerability
ADVISORY 12.09.05 : Ethereal OSPF Protocol Dissector Buffer Overflow Vulnerability
ADVISORY 12.07.05 : Dell TrueMobile 2300 Wireless Broadband Router Authentication Bypass Vulnerability
ADVISORY 12.06.05 : Ipswitch Collaboration Suite SMTP Format String Vulnerability
ADVISORY 12.06.05 : Ipswitch IMail IMAP List Command DoS Vulnerability
ADVISORY 12.05.05 : Multiple Vendor xpdf DCTStream Baseline Heap Overflow Vulnerability
ADVISORY 12.05.05 : Multiple Vendor xpdf DCTStream Progressive Heap Overflow
ADVISORY 12.05.05 : Multiple Vendor xpdf StreamPredictor Heap Overflow Vulnerability
ADVISORY 12.05.05 : Multiple Vendor xpdf JPX Stream Reader Heap Overflow Vulnerability
ADVISORY 11.17.05 : Qualcomm WorldMail IMAP Server Directory Traversal Vulnerability
ADVISORY 11.15.05 : Multiple Vendor GTK+ gdk-pixbuf XPM Loader Heap Overflow Vulnerability
ADVISORY 11.15.05 : Multiple Vendor Insecure Call to CreateProcess() Vulnerability
ADVISORY 11.11.05 : Multiple Vendor Lynx Command Injection Vulnerability
ADVISORY 11.10.05 : Tikiwiki tiki-user_preferences Command Injection Vulnerability
ADVISORY 11.10.05 : Stack Overflow in Veritas Netbackup Enterprise Server
ADVISORY 11.10.05 : Tikiwiki tiki-editpage Arbitrary File Exposure Vulnerability
ADVISORY 11.04.05 : Clam AntiVirus tnef_attachment() DoS Vulnerability
ADVISORY 11.04.05 : Clam AntiVirus Cabinet-file handling Denial of Service Vulnerability
ADVISORY 10.28.05 : Multiple Vendor chmlib CHM File Handling Buffer Overflow Vulnerability
ADVISORY 10.24.05 : SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability
ADVISORY 10.24.05 : SCO Openserver authsh 'Home' Buffer Overflow Vulnerability
ADVISORY 10.24.05 : SCO Openserver backupsh 'Home' Buffer Overflow Vulnerability
ADVISORY 10.20.05 : Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability
ADVISORY 10.20.05 : Symantec Norton AntiVirus LiveUpdate Local Privilege Escalation
ADVISORY 10.20.05 : Symantec Norton AntiVirus DiskMountNotify Local Privilege Escalation
ADVISORY 10.13.05 : Multiple Vendor XMail 'sendmail' Recipient Buffer Overflow Vulnerability
ADVISORY 10.13.05 : Multiple Vendor wget/curl NTLM Username Buffer Overflow Vulnerability
ADVISORY 10.11.05 : Microsoft Distributed Transaction Controller Packet Relay DoS Vulnerability
ADVISORY 10.11.05 : Microsoft Distributed Transaction Controller TIP DoS Vulnerability
ADVISORY 10.10.05 : SGI IRIX runpriv Design Error Vulnerability
ADVISORY 10.10.05 : Kaspersky Anti-Virus Engine CHM File Parser Buffer Overflow Vulnerability
ADVISORY 10.04.05 : UW-IMAP Netmailbox Name Parsing Buffer Overflow Vulnerability
ADVISORY 10.04.05 : Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability
ADVISORY 09.30.05 : RealNetworks RealPlayer/HelixPlayer RealPix Format String Vulnerability
ADVISORY 09.19.05 : Clam AntiVirus Win32-UPX Buffer Overflow Vulnerability
ADVISORY 09.19.05 : Clam AV Win32-FSG File Handling DoS Vulnerability
ADVISORY 09.13.05 : Linksys WRT54G Router Remote Administration Fixed Encryption Key Vulnerability
ADVISORY 09.13.05 : Linksys WRT54G Router Remote Administration apply.cgi Buffer Overflow Vulnerability
ADVISORY 09.13.05 : Linksys WRT54G 'restore.cgi' Configuration Modification Design Error Vulnerability
ADVISORY 09.13.05 : Linksys WRT54G 'upgrade.cgi' Firmware Upload Design Error Vulnerability
ADVISORY 09.13.05 : Linksys WRT54G Management Interface DoS Vulnerability
ADVISORY 09.09.05 : GNU Mailutils 0.6 imap4d 'search' Format String Vulnerability
ADVISORY 09.01.05 : 3Com Network Supervisor Directory Traversal Vulnerability
ADVISORY 09.01.05 : Novell NetMail IMAPD Command Continuation Request Heap Overflow
ADVISORY 08.29.05 : Adobe Version Cue VCNative Arbitrary File Overwrite Vulnerability
ADVISORY 08.29.05 : Adobe Version Cue VCNative Arbitrary Library Loading Vulnerability
ADVISORY 08.29.05 : Symantec AntiVirus 9 Corporate Edition Local Privilege Escalation Vulnerability
ADVISORY 08.09.05 : AWStats ShowInfoURL Remote Command Execution Vulnerability
ADVISORY 08.05.05 : EMC Navisphere Manager Directory Traversal Vulnerability
ADVISORY 08.05.05 : Multiple Vendor Ethereal AFP Protocol Dissector Format String Vulnerability
ADVISORY 08.02.05 : CA BrightStor ARCserve Backup Agent for MS SQL Server Buffer Overflow
ADVISORY 07.14.05 : Sophos Anti-Virus Zip File Handling DoS Vulnerability
ADVISORY 07.12.05 : Microsoft Word 2000 and Word 2002 Font Parsing Buffer Overflow Vulnerability
ADVISORY 07.05.05 : Adobe Acrobat Reader UnixAppOpenFilePerform() Buffer Overflow Vulnerability
ADVISORY 06.29.05 : Clam AntiVirus ClamAV Cabinet File Handling DoS Vulnerability
ADVISORY 06.29.05 : Clam AntiVirus ClamAV MS-Expand File Handling DoS Vulnerability
ADVISORY 06.23.05 : Veritas Backup Exec Server Remote Registry Access Vulnerability
ADVISORY 06.23.05 : Veritas Backup Exec Remote Agent NDMLSRVR.DLL DoS Vulnerability
ADVISORY 06.23.05 : Veritas Backup Exec Agent Error Status Remote DoS Vulnerability
ADVISORY 06.23.05 : Veritas Backup Exec Agent CONNECT_CLIENT_AUTH Buffer Overflow Vulnerability
ADVISORY 06.23.05 : RealNetworks RealPlayer RealText Parsing Heap Overflow Vulnerability
ADVISORY 06.22.05 : IpSwitch WhatsUp Professional 2005 (SP1) SQL Injection Vulnerability
ADVISORY 06.22.05 : Multiple Vendor Cacti Remote File Inclusion Vulnerability
ADVISORY 06.22.05 : Multiple Vendor Cacti config_settings.php Remote Code Execution Vulnerability
ADVISORY 06.22.05 : Multiple Vendor Cacti Multiple SQL Injection Vulnerabilities
ADVISORY 06.14.05 : Microsoft Outlook Web Access Cross-Site Scripting Vulnerability
ADVISORY 06.14.05 : Multiple Vendor Telnet Client Information Disclosure Vulnerability
ADVISORY 06.14.05 : Microsoft Windows Interactive Training Buffer Overflow Vulnerability
ADVISORY 06.14.05 : Microsoft Outlook Express NNTP Response Parsing Buffer Overflow Vulnerability
ADVISORY 05.25.05 : GNU Mailutils 0.6 imap4d Format String Vulnerability
ADVISORY 05.25.05 : GNU Mailutils 0.6 imap4d FETCH Commad Resource Consumption DoS Vulnerability
ADVISORY 05.25.05 : GNU Mailutils 0.6 imap4d fetch_io Heap overflow Vulnerability
ADVISORY 05.25.05 : GNU Mailutils 0.6 mail header_get_field_name() Buffer Overflow Vulnerability
ADVISORY 05.24.05 : Ipswitch IMail IMAP LOGIN Remote Buffer Overflow Vulnerabilities
ADVISORY 05.24.05 : Ipswitch IMail IMAP SELECT Command DoS Vulnerability
ADVISORY 05.24.05 : Ipswitch IMail Web Calendaring Arbitrary File Read Vulnerability
ADVISORY 05.24.05 : Ipswitch IMail IMAP STATUS Remote Buffer Overflow Vulnerability
ADVISORY 05.24.05 : Ipswitch IMail IMAP LSUB DoS Vulnerability
ADVISORY 05.04.05 : Apple Mac OS X vpnd Server_id Buffer Overflow Vulnerability
ADVISORY 05.03.05 : Apple Mac OS X Server NeST -target Buffer Overflow Vulnerability
ADVISORY 04.26.05 : MySQL MaxDB Webtool Remote 'If' Stack Overflow Vulnerability
ADVISORY 04.26.05 : Citrix Program Neighborhood Agent Arbitrary Shortcut Creation Vulnerability
ADVISORY 04.26.05 : Citrix Program Neighborhood Agent Buffer Overflow
ADVISORY 04.25.05 : MySQL MaxDB Webtool Remote Stack Overflow Vulnerability
ADVISORY 04.25.05 : MySQL MaxDB Webtool Remote Lock-Token Stack Overflow Vulnerability
ADVISORY 04.18.05 : McAfee Internet Security Suite 2005 Insecure File Permission Vulnerability
ADVISORY 04.12.05 : Microsoft Internet Explorer DHTML Engine Race Condition Vulnerability
ADVISORY 04.12.05 : Microsoft Windows Internet Explorer Long Hostname Heap Corruption Vulnerability
ADVISORY 04.12.05 : Microsoft Windows CSRSS.EXE Stack Overflow Vulnerability
ADVISORY 04.12.05 : Microsoft MSHTA Script Execution Vulnerability
ADVISORY 04.11.05 : Computer Associates BrightStor ARCserve Backup UniversalAgent Buffer Overflow
ADVISORY 04.08.05 : Microsoft Multiple E-Mail Client Address Spoofing Vulnerability
ADVISORY 04.07.05 : SGI IRIX gr_osview File Overwrite Vulnerability
ADVISORY 04.07.05 : SGI IRIX gr_osview Information Disclosure Vulnerability
ADVISORY 04.06.05 : IBM Lotus Domino Server Web Service DoS Vulnerability
ADVISORY 04.05.05 : Computer Associates eTrust Intrusion Detection System CPImportKey DoS Vulnerability
ADVISORY 03.31.05 : PHP getimagesize() Multiple Denial of Service Vulnerabilities
ADVISORY 03.28.05 : Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability
ADVISORY 03.28.05 : Multiple Telnet Client env_opt_add() Buffer Overflow Vulnerability
ADVISORY 03.21.05 : Mac OS X CF_CHARSET_PATH Buffer Overflow Vulnerability
ADVISORY 03.14.05 : MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities
ADVISORY 03.10.05 : Ipswitch Collaboration Suite IMAP EXAMINE Buffer Overflow Vulnerability
ADVISORY 03.02.05 : Computer Associates License Client and Server Invalid Command Buffer Overflow
ADVISORY 03.02.05 : Computer Associates License Client PUTOLF Buffer Overflow
ADVISORY 03.02.05 : Computer Associates License Client PUTOLF Directory Traversal
ADVISORY 03.02.05 : Computer Associates License Client/Server GETCONFIG Buffer Overflow
ADVISORY 03.02.05 : Computer Associates License Client/Server GCR Network Buffer Overflow
ADVISORY 03.02.05 : Computer Associates License Client/Server GCR Checksum Buffer Overflow
ADVISORY 03.01.05 : RealNetworks RealPlayer .smil Buffer Overflow Vulnerability
ADVISORY 02.28.05 : Mozilla Firefox and Mozilla Browser Out Of Memory Heap Corruption Design Error
ADVISORY 02.28.05 : KPPP Privileged File Descriptor Leak Vulnerability
ADVISORY 02.25.05 : WU-FTPD File Globbing Denial of Service Vulnerability
ADVISORY 02.23.05 : Sun Solaris kcms_configure Arbitrary File Corruption Vulnerability
ADVISORY 02.22.05 : phpBB Group phpBB Arbitrary File Disclosure Vulnerability
ADVISORY 02.22.05 : phpBB Group phpBB2 Arbitrary File Unlink Vulnerability
ADVISORY 02.21.05 : Multiple PuTTY SFTP Client Packet Parsing Integer Overflow Vulnerabilities
ADVISORY 02.21.05 : Multiple Unix/Linux Vendor cURL/libcURL NTLM Authentication Buffer Overflow
ADVISORY 02.21.05 : Multiple Unix/Linux Vendor cURL/libcURL Kerberos Authentication Buffer Overflow
ADVISORY 02.11.05 : ZoneAlarm 5.1 Invalid Pointer Dereference Vulnerability
ADVISORY 02.10.05 : IBM AIX lspath Local File Access Vulnerability
ADVISORY 02.10.05 : IBM AIX ipl_varyon Local Buffer Overflow Vulnerability
ADVISORY 02.10.05 : IBM AIX netpmon Local Buffer Overflow Vulnerability
ADVISORY 02.10.05 : Computer Associates BrightStor ARCserve Backup UniversalAgent Backdoor
ADVISORY 02.09.05 : CA BrightStor ARCserve Backup v11 Discovery Service Remote Buffer Overflow
ADVISORY 02.08.05 : IBM AIX auditselect Local Format String Vulnerability
ADVISORY 02.07.05 : SquirrelMail S/MIME Plugin Command Injection Vulnerability
ADVISORY 02.07.05 : IBM AIX chdev Local Format String Vulnerability
ADVISORY 01.26.05 : Openswan XAUTH/PAM Buffer Overflow Vulnerability
ADVISORY 01.24.05 : DataRescue Interactive Disassembler Pro Buffer Overflow Vulnerability
ADVISORY 01.20.05 : 3Com OfficeConnect Wireless 11g AP Information Disclosure Vulnerability
ADVISORY 01.19.05 : MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities
ADVISORY 01.18.05 : Multiple Unix/Linux Vendor Xpdf makeFileKey2 Stack Overflow
ADVISORY 01.17.05 : Multiple Vendor ImageMagick .psd Image File Decode Heap Overflow Vulnerability
ADVISORY 01.17.05 : AWStats Remote Command Execution Vulnerability
ADVISORY 01.14.05 : Exim dns_buld_reverse() Buffer Overflow Vulnerability
ADVISORY 01.13.05 : Apple iTunes Playlist Parsing Buffer Overflow Vulnerability
ADVISORY 01.13.05 : MySQL MaxDB WebAgent websql logon Buffer Overflow Vulnerability
ADVISORY 01.13.05 : SGI IRIX inpview Design Error Vulnerability
ADVISORY 01.07.05 : Exim auth_spa_server() Buffer Overflow Vulnerability
ADVISORY 01.07.05 : Exim host_aton() Buffer Overflow Vulnerability