Skip to content
OpenAdvisories

Archive

19 August 2005

Vulnerabilities first published on this day (UTC), newest first.

36 results · Feed

  • Unscored —

    The make_recovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the…

  • Unscored —

    HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the add_new_client command, causes the TFTP server to s…

  • Unscored —

    Safari in WebKit in Mac OS X 10.4 to 10.4.2 directly accesses URLs within PDF files without the normal security checks,…

  • Unscored —

    Unknown vulnerability in Mac OS X 10.4.2 and earlier, when using Kerberos authentication with LDAP, allows attackers to…

  • Unscored —

    Unknown vulnerability in HItoolbox for Mac OS X 10.4.2 allows VoiceOver services to read secure input fields.

  • Unscored —

    CUPS in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to cause a denial of service (CPU consumption) by sending a …

  • Unscored —

    Safari in Mac OS X 10.3.9 and 10.4.2, when rendering Rich Text Format (RTF) files, can directly access URLs without per…

  • Unscored —

    Buffer overflow in Directory Services in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code d…

  • Unscored —

    AppKit for Mac OS X 10.3.9 and 10.4.2 allows attackers with physical access to create local accounts by forcing a parti…

  • Unscored —

    Algorithmic complexity vulnerability in CoreFoundation in Mac OS X 10.3.9 and 10.4.2 allows attackers to cause a denial…

  • Unscored —
    CVE-2005-2508 Public exploit

    dsidentity in Directory Services in Mac OS X 10.4.2 allows local users to add or remove user accounts.

  • Unscored —

    Unspecified vulnerability in Kismet before 2005-08-R1 allows remote attackers to have an unknown impact via unprintable…

  • Unscored —

    The password assistant in Mac OS X 10.4 to 10.4.2, when used to create multiple accounts from the same process, does no…

  • Unscored —
    CVE-2005-2127 Public exploit EPSS 63%

    Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) a…

  • Unscored —

    CUPS in Mac OS X 10.3.9 and 10.4.2 does not properly close file descriptors when handling multiple simultaneous print j…

  • Unscored —

    ECW-Shop 6.0.2 allows remote attackers to reduce the total cost of their shopping cart by specifying a negative quantit…

  • Unscored —

    index.php in ECW-Shop 6.0.2 allows remote attackers to obtain sensitive information via the (1) min or (2) max paramete…

  • Unscored —

    Buffer overflow in servermgrd in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during au…

  • Unscored —

    Incomplete blacklist vulnerability in the checkBlacklist function in CPAINT allows remote attackers to execute arbitrar…

  • Unscored —

    Safari in Mac OS X 10.3.9 and 10.4.2 submits forms from an XSL formatted page to the next page that is browsed by the u…

  • Unscored —

    Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to execute arbitrary ASP code via the cpaint_argu…

  • Unscored —

    Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2, as used in applications such as TextEdit, allows external use…

  • Unscored —

    Buffer overflow in traceroute in Mac OS X 10.3.9 allows local users to execute arbitrary code via unknown vectors.

  • Unscored —

    The Server Admin tool in servermgr_ipfilter for Mac OS X 10.4 to 10.4.2, when using multiple subnets and Address Groups…

  • Unscored —

    Multiple integer underflows in Kismet before 2005-08-R1 allow remote attackers to execute arbitrary code via (1) kernel…

  • Unscored —

    Mail.app in Mac OS 10.4.2 and earlier, when printing or forwarding an HTML message, loads remote images even when the u…

  • Unscored —

    slpd in Directory Services in Mac OS X 10.3.9 creates insecure temporary files as root, which allows local users to gai…

  • Unscored —

    Buffer overflow in ping in Mac OS X 10.3.9 allows local users to execute arbitrary code.

  • Unscored —

    Buffer overflow in CoreFoundation in Mac OS X 10.3.9 allows attackers to execute arbitrary code via command line argume…

  • Unscored —

    Quartz Composer Screen Saver in Mac OS X 10.4.2 allows local users to access links from the RSS Visualizer even when a …

  • Unscored —
    CVE-2005-2523 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Weblog Server in Mac OS X 10.4 to 10.4.2 allow remote attackers …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in index.php in ECW-Shop 6.0.2 allows remote attackers to inject arbitrary web…

  • Unscored —

    Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2 allows external user-assisted attackers to execute arbitrary c…

  • Unscored —

    Unknown vulnerability in loginwindow in Mac OS X 10.4.2 and earlier, when Fast User Switching is enabled, allows attack…

  • Unscored —

    The System Profiler in Mac OS X 10.4.2 labels a Bluetooth device with "Requires Authentication: No" even when the user …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in index.php in ECW-Shop 5.5 allows remote attackers to inject arbitrary web s…