Steven M. Christey

The issue is related to a cross-site scripting (XSS) vulnerability in the aberdeen breadcrumb function. This function is located in template.php in the Aberdeen theme for Drupal. When the theme is set to append the content title to the breadcrumb, remote attackers can inject arbitrary web script or HTML via the content title in a breadcrumb.

The issue is related to improper validation of the `start` parameter, which could allow remote attackers to conduct SQL injection attacks, obtain sensitive information, or cause a denial of service via a crafted value. This is related to the `cleanRequest` function in `QueryString.php` and the `constructPageIndex` function in `Subs.php`.

The issue arises from the PlushSearch2 function in Search.php, which incorrectly utilizes cached data when a temporary table has been created. This might allow remote attackers to obtain sensitive information via a search.

A cross-site scripting issue exists due to a vulnerability in the Flash component infrastructure. This allows remote attackers to inject arbitrary web script or HTML. The issue is related to vectors involving charts/assets/charts.swf.

The issue concerns the asyncore module in Python, which does not properly handle unsuccessful calls to the accept function. This lack of proper handling, combined with the absence of documentation on how daemon applications should manage such unsuccessful calls, facilitates denial of service attacks. These attacks can terminate daemon applications via network connections.

The issue allows remote attackers to read and write arbitrary files via a crafted `recipients` parameter, and possibly other parameters, in the Mail/sendmail.php file.

The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by providing a crafted input to either the `EmailField` (email address) or `URLField` (URL) that triggers excessive backtracking in a regular expression.

The issue is related to a buffer overflow in the `perf copy attr` function, which can be triggered by providing "big size data" to the `perf counter open` system call. This can cause a denial of service (crash) and potentially allow the execution of arbitrary code.

The issue concerns an unspecified vulnerability in the XML Digital Signature verification functionality. It has unknown impact and attack vectors, with a relation to "XML SECURITY PATCH."

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Information Services (IIS) versions 5.1 through 6.0 Description: The issue allows remote attackers to bypass protection mechanisms and access or modify files. This can be achieved by inserting a specific Unicode character at an arbitrary position in the URI. For example, inserting `%c0%af` into a `/protected/` initial pathname component can bypass password protection on the protected folder. Recommendations: For Microsoft Internet Information Services (IIS) versions 5.1 through 6.0, consider disabling the WebDAV extension until a patch is available to prevent bypassing of URI-based protection mechanisms. Restrict access to sensitive folders and files to minimize the risk of exploitation. Avoid using the WebDAV extension for sensitive operations until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: ImageMagick versions 6.5.2-8 GraphicsMagick (affected versions not specified) Description: The issue is related to an integer overflow in the XMakeImage function, which can be triggered by a crafted TIFF file. This can cause a denial of service (crash) and potentially allow the execution of arbitrary code due to a buffer overflow. Recommendations: For ImageMagick versions 6.5.2-8, update to a version that fixes the integer overflow in the XMakeImage function. For GraphicsMagick, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

A buffer overflow issue in the ARC2 module allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large ARC2 key length.

The issue allows remote attackers to execute arbitrary commands via a crafted filename containing shell metacharacters, which is not properly handled by the command-line indexer. Multiple vulnerabilities in the TYPO3 package may lead to a breach of confidentiality, integrity, and availability of protected information, and can be exploited remotely.

The issue allows local users to potentially hide processes, modify arbitrary files, or have unspecified other impact by utilizing a process name that contains non-printable characters, referred to as "crazy control strings."

The issue allows remote attackers to obtain sensitive information and have other impacts by predicting the cache pathname of a cached Java applet and then launching this applet from the cache. This leads to the applet being executed within the local-machine context.

The issue allows remote attackers to cause a denial of service, resulting in an application crash, or execute arbitrary code via a redirect that specifies a crafted URL.

The issue allows remote attackers to create arbitrary new feed subscriptions and read the contents of arbitrary feeds due to improper blocking of scripts during the preview of a news feed.

The issue allows remote attackers to trigger the display of an arbitrary address in a frame via unspecified use of web script, due to the improper restriction of the ability of a framed web page to change the address associated with a different frame.

The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site scripting (XSS) attacks.

The issue arises when Opera processes custom shortcut and menu commands, potentially producing argument strings that contain uninitialized memory. This could allow user-assisted remote attackers to execute arbitrary code or conduct other attacks via vectors related to the activation of a shortcut.