CVE-2005-3424

Description

References

• lists.gnu.org/archive/html/gnump3d-users/2005-10/msg00013.html · Patch
• secunia.com/advisories/17351 · Patch
• debian.org/security/2005/dsa-877 · Patch
• gnu.org/software/gnump3d/ChangeLog
• novell.com/linux/security/advisories/2005_28_sr.html
• osvdb.org/20359 · Patch
• securityfocus.com/bid/15226
• vupen.com/english/advisories/2005/2242

Autres vulnérabilités de gnump3d

• CVE-2019-3697ÉLEVÉE 7.8UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of gnump3d in openSUSE Leap 15.1 allows local attackers to escalate fr…
• CVE-2007-6130MOYENNE 5.0gnump3d 2.9final does not apply password protection to its plugins, which might allow remote attackers to bypass intended access restriction…
• CVE-2005-3355MOYENNE 6.4Directory traversal vulnerability in GNU Gnump3d before 2.9.8 has unknown impact via "CGI parameters, and cookie values".
• CVE-2005-3349FAIBLE 1.9GNU Gnump3d before 2.9.8 allows local users to modify or delete arbitrary files via a symlink attack on the index.lok temporary file.
• CVE-2005-3425MOYENNE 4.3Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.6 allows remote attackers to inject arbitrary web script or HTML via unspecif…