PUBLIÉES EN

juin 2005

21 CVE, des plus récentes aux plus anciennes.

CVE-2005-2078BisonFTP Server V4R1 allows remote authenticated users to cause a denial of service via an invalid command with a long argument. 2.1 FAIBLE
CVE-2005-2076HP Version Control Repository Manager (VCRM) before 2.1.1.730 does not properly handle the "@" character in a proxy password, which could allow attackers with physical access to ob… 2.1 FAIBLE
CVE-2005-2073Unknown vulnerability in IBM DB2 8.1.4 through 8.1.9 and 8.2.0 through 8.2.2 allows local users with SELECT privileges to conduct unauthorized activities and insert, update or dele… 2.1 FAIBLE
CVE-2005-2056The Quantum archive decompressor in Clam AntiVirus (ClamAV) before 0.86.1 allows remote attackers to cause a denial of service (application crash) via a crafted Quantum archive. 2.6 FAIBLE
CVE-2005-0201D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another use… 2.1 FAIBLE
CVE-2005-1759Race condition in shtool 2.0.1 and earlier allows local users to modify or create arbitrary files via a symlink attack on temporary files after they have been created, a different … 1.2 FAIBLE
CVE-2005-1993Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack. 3.7 FAIBLE
CVE-2005-2032Unknown vulnerability in lpadmin on Sun Solaris 7, 8, and 9 allows local users to overwrite arbitrary files. 2.1 FAIBLE
CVE-2005-1720AFP Server for Mac OS X 10.4.1, when using an ACL enabled volume, does not properly remove an ACL when a file is copied to a directory that does not use ACLs, which will override t… 2.1 FAIBLE
CVE-2005-1265The mmap function in the Linux Kernel 2.6.10 can be used to create memory maps with a start address beyond the end address, which allows local users to cause a denial of service (k… 2.1 FAIBLE
CVE-2005-1937A regression error in Firefox 1.0.3 and Mozilla 1.7.7 allows remote attackers to inject arbitrary Javascript from one page into the frameset of another site, aka the frame injectio… 2.6 FAIBLE
CVE-2005-1944xmysqladmin 1.0 and earlier allows local users to delete arbitrary files via a symlink attack on a database backup file in /tmp. 2.1 FAIBLE
CVE-2005-1902Directory traversal vulnerability in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated users to read other users' mail and perform operations on arbitrary… 3.6 FAIBLE
CVE-2005-1878GIPTables Firewall 1.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the temp.ip.addresses temporary file. 1.2 FAIBLE
CVE-2005-1727Apple Mac OS X 10.4.x up to 10.4.1 sets insecure world- and group-writable permissions for the (1) system cache folder and (2) Dashboard system widgets, which allows local users to… 3.7 FAIBLE
CVE-2005-1725launchd 106 in Apple Mac OS X 10.4.x up to 10.4.1 allows local users to overwrite arbitrary files via a symlink attack on the socket file in an insecure temporary directory. 2.1 FAIBLE
CVE-2005-0756ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to cause a denial of service (kernel crash). 2.1 FAIBLE
CVE-2005-1858FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a short byte count to a read request, which may allow local use… 2.1 FAIBLE
CVE-2005-1903Buffer overflow in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated users to execute arbitrary code via a long CREATE command. 2.1 FAIBLE
CVE-2005-1793User32.DLL in Microsoft Windows 98SE, and possibly other operating systems, allows local and remote attackers to cause a denial of service (crash) via an icon (.ico) bitmap file wi… 2.6 FAIBLE
CVE-2005-1790Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via… 2.6 FAIBLE