cpe:/o:linux:linux_kernel:2.2.7 cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.4.27 cpe:/o:linux:linux_kernel:2.4.28 cpe:/o:linux:linux_kernel:2.4.29 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.9:2.6.20 cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux:4.0::advanced_server cpe:/o:redhat:enterprise_linux:4.0::enterprise_server cpe:/o:redhat:enterprise_linux:4.0::workstation cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:enterprise_linux_desktop:4.0 cpe:/o:trustix:secure_linux:2 cpe:/o:trustix:secure_linux:2.1 cpe:/o:trustix:secure_linux:2.2

CVE-2005-0001

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:47.560-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONECTIVA CLA-2005:930 MISC http://isec.pl/vulnerabilities/isec-0022-pagefault.txt FULLDISC 20050112 Linux kernel i386 SMP page fault handler privilege escalation BUGTRAQ 20050112 Linux kernel i386 SMP page fault handler privilege escalation BUGTRAQ 20050114 [USN-60-0] Linux kernel vulnerabilities SECTRACK 1012862 DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 MANDRAKE MDKSA-2005:022 REDHAT RHSA-2005:016 REDHAT RHSA-2005:017 REDHAT RHSA-2005:043 REDHAT RHSA-2005:092 BID 12244 TRUSTIX 2005-0001 FEDORA FLSA:2336 XF linux-fault-handler-gain-privileges(18849) Race condition in the page fault handler (fault.c) for Linux kernel 2.2.x to 2.2.7, 2.4 to 2.4.29, and 2.6 to 2.6.10, when running on multiprocessor machines, allows local users to execute arbitrary code via concurrent threads that share the same virtual memory space and simultaneously request stack expansion.

cpe:/a:gentoo:poppassd_pam:1.0

CVE-2005-0002

2005-05-02T00:00:00.000-04:00

2008-09-10T15:34:43.210-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-05-13T14:05:00.000-04:00

ALLOWS_ADMIN_ACCESS

GENTOO GLSA-200501-22 SECTRACK 1012840 poppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password correctly, which allows remote attackers to change passwords for arbitrary users.

cpe:/a:avaya:intuity_audix:::lx cpe:/a:avaya:mn100 cpe:/a:avaya:network_routing cpe:/a:mandrakesoft:mandrake_multi_network_firewall:8.2 cpe:/h:avaya:converged_communications_server:2.0 cpe:/h:avaya:s8300:r2.0.0 cpe:/h:avaya:s8300:r2.0.1 cpe:/h:avaya:s8500:r2.0.0 cpe:/h:avaya:s8500:r2.0.1 cpe:/h:avaya:s8700:r2.0.0 cpe:/h:avaya:s8700:r2.0.1 cpe:/h:avaya:s8710:r2.0.0 cpe:/h:avaya:s8710:r2.0.1 cpe:/o:avaya:modular_messaging_message_storage_server:1.1 cpe:/o:avaya:modular_messaging_message_storage_server:2.0 cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.0:test1 cpe:/o:linux:linux_kernel:2.4.0:test10 cpe:/o:linux:linux_kernel:2.4.0:test11 cpe:/o:linux:linux_kernel:2.4.0:test12 cpe:/o:linux:linux_kernel:2.4.0:test2 cpe:/o:linux:linux_kernel:2.4.0:test3 cpe:/o:linux:linux_kernel:2.4.0:test4 cpe:/o:linux:linux_kernel:2.4.0:test5 cpe:/o:linux:linux_kernel:2.4.0:test6 cpe:/o:linux:linux_kernel:2.4.0:test7 cpe:/o:linux:linux_kernel:2.4.0:test8 cpe:/o:linux:linux_kernel:2.4.0:test9 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.18::x86 cpe:/o:linux:linux_kernel:2.4.18:pre1 cpe:/o:linux:linux_kernel:2.4.18:pre2 cpe:/o:linux:linux_kernel:2.4.18:pre3 cpe:/o:linux:linux_kernel:2.4.18:pre4 cpe:/o:linux:linux_kernel:2.4.18:pre5 cpe:/o:linux:linux_kernel:2.4.18:pre6 cpe:/o:linux:linux_kernel:2.4.18:pre7 cpe:/o:linux:linux_kernel:2.4.18:pre8 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.19:pre1 cpe:/o:linux:linux_kernel:2.4.19:pre2 cpe:/o:linux:linux_kernel:2.4.19:pre3 cpe:/o:linux:linux_kernel:2.4.19:pre4 cpe:/o:linux:linux_kernel:2.4.19:pre5 cpe:/o:linux:linux_kernel:2.4.19:pre6 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.21:pre1 cpe:/o:linux:linux_kernel:2.4.21:pre4 cpe:/o:linux:linux_kernel:2.4.21:pre7 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.23:pre9 cpe:/o:linux:linux_kernel:2.4.23_ow2 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.24_ow1 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.4.27 cpe:/o:linux:linux_kernel:2.4.27:pre1 cpe:/o:linux:linux_kernel:2.4.27:pre2 cpe:/o:linux:linux_kernel:2.4.27:pre3 cpe:/o:linux:linux_kernel:2.4.27:pre4 cpe:/o:linux:linux_kernel:2.4.27:pre5 cpe:/o:linux:linux_kernel:2.4.28 cpe:/o:linux:linux_kernel:2.4.29:rc1 cpe:/o:linux:linux_kernel:2.4.29:rc2 cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.1 cpe:/o:mandrakesoft:mandrake_linux:10.1::x86_64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1::x86_64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0 cpe:/o:redhat:enterprise_linux:3.0::advanced_servers cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation cpe:/o:redhat:enterprise_linux_desktop:3.0

CVE-2005-0003

2005-04-14T00:00:00.000-04:00

2017-10-10T21:29:47.653-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://linux.bkbits.net:8080/linux-2.4/cset@41c36fb6q1Z68WUzKQFjJR-40Ev3tw MISC http://linux.bkbits.net:8080/linux-2.6/cset@41a6721cce-LoPqkzKXudYby_3TUmg SECTRACK 1012885 DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 MANDRAKE MDKSA-2005:022 SUSE SUSE-SA:2005:018 REDHAT RHSA-2005:017 REDHAT RHSA-2005:043 BID 12261 TRUSTIX 2005-0001 XF linux-vma-gain-privileges(18886) The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbitrary code via a crafted ELF or a.out file.

cpe:/a:mysql:mysql:4.0.20 cpe:/a:mysql:mysql:4.0.21 cpe:/a:mysql:mysql:4.1.0:alpha cpe:/a:mysql:mysql:4.1.0.0 cpe:/a:mysql:mysql:4.1.2:alpha cpe:/a:mysql:mysql:4.1.3 cpe:/a:mysql:mysql:4.1.3:beta cpe:/a:mysql:mysql:4.1.4 cpe:/a:mysql:mysql:4.1.5 cpe:/a:oracle:mysql:4.0.0 cpe:/a:oracle:mysql:4.0.1 cpe:/a:oracle:mysql:4.0.2 cpe:/a:oracle:mysql:4.0.3 cpe:/a:oracle:mysql:4.0.4 cpe:/a:oracle:mysql:4.0.5 cpe:/a:oracle:mysql:4.0.5a cpe:/a:oracle:mysql:4.0.6 cpe:/a:oracle:mysql:4.0.7 cpe:/a:oracle:mysql:4.0.7:gamma cpe:/a:oracle:mysql:4.0.8 cpe:/a:oracle:mysql:4.0.8:gamma cpe:/a:oracle:mysql:4.0.9 cpe:/a:oracle:mysql:4.0.9:gamma cpe:/a:oracle:mysql:4.0.10 cpe:/a:oracle:mysql:4.0.11 cpe:/a:oracle:mysql:4.0.11:gamma cpe:/a:oracle:mysql:4.0.12 cpe:/a:oracle:mysql:4.0.13 cpe:/a:oracle:mysql:4.0.14 cpe:/a:oracle:mysql:4.0.15 cpe:/a:oracle:mysql:4.0.18 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc cpe:/o:gentoo:linux cpe:/o:redhat:fedora_core:core_1.0 cpe:/o:redhat:linux:7.3::i386 cpe:/o:redhat:linux:9.0::i386

CVE-2005-0004

2005-04-14T00:00:00.000-04:00

2019-10-07T12:42:32.200-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONECTIVA CLA-2005:947 CONFIRM http://lists.mysql.com/internals/20600 BUGTRAQ 20050118 [USN-63-1] MySQL client vulnerability CONFIRM http://mysql.osuosl.org/doc/mysql/en/News-4.1.10.html SUNALERT 101864 DEBIAN DSA-647 MANDRAKE MDKSA-2005:036 BID 12277 XF mysql-mysqlaccess-symlink(18922) The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files.

cpe:/a:graphicsmagick:graphicsmagick:1.0 cpe:/a:graphicsmagick:graphicsmagick:1.0.6 cpe:/a:graphicsmagick:graphicsmagick:1.1 cpe:/a:graphicsmagick:graphicsmagick:1.1.3 cpe:/a:graphicsmagick:graphicsmagick:1.1.4 cpe:/a:imagemagick:imagemagick:5.3.3 cpe:/a:imagemagick:imagemagick:5.4.3 cpe:/a:imagemagick:imagemagick:5.4.7 cpe:/a:imagemagick:imagemagick:6.0 cpe:/a:imagemagick:imagemagick:6.0.1 cpe:/a:imagemagick:imagemagick:6.0.2 cpe:/a:imagemagick:imagemagick:6.0.2.5 cpe:/a:imagemagick:imagemagick:6.0.3 cpe:/a:imagemagick:imagemagick:6.0.4 cpe:/a:imagemagick:imagemagick:6.0.5 cpe:/a:imagemagick:imagemagick:6.0.6 cpe:/a:imagemagick:imagemagick:6.0.7 cpe:/a:imagemagick:imagemagick:6.0.8 cpe:/a:imagemagick:imagemagick:6.1 cpe:/a:imagemagick:imagemagick:6.1.1.6 cpe:/a:imagemagick:imagemagick:6.1.2 cpe:/a:imagemagick:imagemagick:6.1.3 cpe:/a:imagemagick:imagemagick:6.1.4 cpe:/a:imagemagick:imagemagick:6.1.5 cpe:/a:imagemagick:imagemagick:6.1.6 cpe:/a:imagemagick:imagemagick:6.1.7 cpe:/a:imagemagick:imagemagick:6.2 cpe:/a:imagemagick:imagemagick:6.2.0.4 cpe:/a:imagemagick:imagemagick:6.2.0.7 cpe:/a:sgi:propack:3.0 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc cpe:/o:gentoo:linux:0.5 cpe:/o:gentoo:linux:0.7 cpe:/o:gentoo:linux:1.1a cpe:/o:gentoo:linux:1.2 cpe:/o:gentoo:linux:1.4 cpe:/o:gentoo:linux:1.4:rc1 cpe:/o:gentoo:linux:1.4:rc2 cpe:/o:gentoo:linux:1.4:rc3 cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.0::i386 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2

CVE-2005-0005

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:47.733-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050118 [USN-62-1] imagemagick vulnerability DEBIAN DSA-646 GENTOO GLSA-200501-37 IDEFENSE 20050117 Multiple Vendor ImageMagick .psd Image File Decode Heap Overflow Vulnerability REDHAT RHSA-2005:070 REDHAT RHSA-2005:071 Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a large number of layers.

cpe:/a:ethereal_group:ethereal:0.10.6 cpe:/a:ethereal_group:ethereal:0.10.7 cpe:/a:ethereal_group:ethereal:0.10.8

CVE-2005-0006

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:47.810-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CIAC P-106 CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00017.html GENTOO GLSA-200501-27 MANDRAKE MDKSA-2005:013 FEDORA FLSA-2006:152922 REDHAT RHSA-2005:011 REDHAT RHSA-2005:037 BID 12326 XF ethereal-cops-dos(18999) The COPS dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (infinite loop).

cpe:/a:ethereal_group:ethereal:0.10.6 cpe:/a:ethereal_group:ethereal:0.10.7 cpe:/a:ethereal_group:ethereal:0.10.8

CVE-2005-0007

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:47.887-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CIAC P-106 CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00017.html GENTOO GLSA-200501-27 MANDRAKE MDKSA-2005:013 FEDORA FLSA-2006:152922 REDHAT RHSA-2005:011 REDHAT RHSA-2005:037 BID 12326 XF ethereal-dlsw-dos(19000) Unknown vulnerability in the DLSw dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (application crash from assertion).

cpe:/a:ethereal_group:ethereal:0.10.5 cpe:/a:ethereal_group:ethereal:0.10.6 cpe:/a:ethereal_group:ethereal:0.10.7 cpe:/a:ethereal_group:ethereal:0.10.8

CVE-2005-0008

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:47.967-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CIAC P-106 CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00017.html GENTOO GLSA-200501-27 MANDRAKE MDKSA-2005:013 FEDORA FLSA-2006:152922 REDHAT RHSA-2005:011 REDHAT RHSA-2005:037 BID 12326 XF ethereal-dnp-memory-corruption(19001) Unknown vulnerability in the DNP dissector in Ethereal 0.10.5 through 0.10.8 allows remote attackers to cause "memory corruption."

cpe:/a:ethereal_group:ethereal:0.10.6 cpe:/a:ethereal_group:ethereal:0.10.7 cpe:/a:ethereal_group:ethereal:0.10.8

CVE-2005-0009

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:48.310-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CIAC P-106 CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00017.html GENTOO GLSA-200501-27 MANDRAKE MDKSA-2005:013 FEDORA FLSA-2006:152922 REDHAT RHSA-2005:011 REDHAT RHSA-2005:037 BID 12326 XF ethereal-gnutella-dos(19002) Unknown vulnerability in the Gnutella dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (application crash).

cpe:/a:ethereal_group:ethereal:0.10.4 cpe:/a:ethereal_group:ethereal:0.10.5 cpe:/a:ethereal_group:ethereal:0.10.6 cpe:/a:ethereal_group:ethereal:0.10.7 cpe:/a:ethereal_group:ethereal:0.10.8

CVE-2005-0010

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:48.403-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CIAC P-106 CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00017.html GENTOO GLSA-200501-27 MANDRAKE MDKSA-2005:013 FEDORA FLSA-2006:152922 REDHAT RHSA-2005:011 REDHAT RHSA-2005:037 BID 12326 XF ethereal-mmse-free-memory(19003) Unknown vulnerability in the MMSE dissector in Ethereal 0.10.4 through 0.10.8 allows remote attackers to cause a denial of service by triggering a free of statically allocated memory.

cpe:/o:kde:kde:3.3 cpe:/o:kde:kde:3.3.1 cpe:/o:kde:kde:3.3.2

CVE-2005-0011

2005-05-02T00:00:00.000-04:00

2008-09-05T16:45:05.077-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-05-13T14:24:00.000-04:00

ALLOWS_ADMIN_ACCESS

GENTOO GLSA-200502-23 CONFIRM http://www.kde.org/info/security/advisory-20050215-1.txt FEDORA FEDORA-2005-148 Multiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars support for Instrument Neutral Distributed Interface (INDI) in KDE 3.3 to 3.3.2, allow local users and remote attackers to execute arbitrary code via stack-based buffer overflows.

cpe:/a:dillo:dillo_web_browser:0.2 cpe:/a:dillo:dillo_web_browser:0.2.1 cpe:/a:dillo:dillo_web_browser:0.2.2 cpe:/a:dillo:dillo_web_browser:0.2.3 cpe:/a:dillo:dillo_web_browser:0.2.4 cpe:/a:dillo:dillo_web_browser:0.3 cpe:/a:dillo:dillo_web_browser:0.3.1 cpe:/a:dillo:dillo_web_browser:0.4 cpe:/a:dillo:dillo_web_browser:0.5.1 cpe:/a:dillo:dillo_web_browser:0.6 cpe:/a:dillo:dillo_web_browser:0.6.1 cpe:/a:dillo:dillo_web_browser:0.6.2 cpe:/a:dillo:dillo_web_browser:0.6.3 cpe:/a:dillo:dillo_web_browser:0.6.4 cpe:/a:dillo:dillo_web_browser:0.6.5 cpe:/a:dillo:dillo_web_browser:0.6.6 cpe:/a:dillo:dillo_web_browser:0.7 cpe:/a:dillo:dillo_web_browser:0.7.1 cpe:/a:dillo:dillo_web_browser:0.7.1.2 cpe:/a:dillo:dillo_web_browser:0.7.2 cpe:/a:dillo:dillo_web_browser:0.7.3 cpe:/a:dillo:dillo_web_browser:0.8 cpe:/a:dillo:dillo_web_browser:0.8.1 cpe:/a:dillo:dillo_web_browser:0.8.2 cpe:/a:dillo:dillo_web_browser:0.8.3

CVE-2005-0012

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:03.657-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

GENTOO GLSA-200501-11 BID 12203 XF dillo-capi-format-string(18807) Format string vulnerability in the a_Interface_msg function in Dillo before 0.8.3-r4 allows remote attackers to execute arbitrary code via format string specifiers in a web page.

cpe:/a:ncpfs:ncpfs:2.2.1 cpe:/a:ncpfs:ncpfs:2.2.2 cpe:/a:ncpfs:ncpfs:2.2.3 cpe:/a:ncpfs:ncpfs:2.2.4 cpe:/a:ncpfs:ncpfs:2.2.5

CVE-2005-0013

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:02.167-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM ftp://platan.vc.cvut.cz/pub/linux/ncpfs/Changes-2.2.6 SECTRACK 1013019 DEBIAN DSA-665 GENTOO GLSA-200501-44 MANDRAKE MDKSA-2005:028 REDHAT RHSA-2005:371 FEDORA FLSA:152904 BID 12400 nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges.

cpe:/a:ncpfs:ncpfs:2.2.1 cpe:/a:ncpfs:ncpfs:2.2.2 cpe:/a:ncpfs:ncpfs:2.2.3 cpe:/a:ncpfs:ncpfs:2.2.4 cpe:/a:ncpfs:ncpfs:2.2.5

CVE-2005-0014

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:04.010-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM ftp://platan.vc.cvut.cz/pub/linux/ncpfs/Changes-2.2.6 SECTRACK 1013019 GENTOO GLSA-200501-44 MANDRAKE MDKSA-2005:028 FEDORA FLSA:152904 BID 12400 Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client.

cpe:/a:crosswire_bible_society:sword:1.5.7a

CVE-2005-0015

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:03.717-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1012955 DEBIAN DSA-650 BID 12320 XF sword-diatheke-command-execution(18997) diatheke.pl in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

cpe:/a:gatos:gatos:0.0.5

CVE-2005-0016

2005-04-14T00:00:00.000-04:00

2017-07-10T21:32:03.763-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

DEBIAN DSA-640 XF gatos-xatitv-bo(18930) Buffer overflow in the exported_display function in xatitv in gatos before 0.0.5 allows local users to execute arbitrary code.

CVE-2005-0017

2005-05-02T00:00:00.000-04:00

2008-09-05T16:45:06.107-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-13T14:41:00.000-04:00

SECTRACK 1013028 DEBIAN DSA-661 GENTOO GLSA-200501-43 BID 12380 The f2c translator in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files.

cpe:/a:f2c_open_source_project:f2c_translator:3.1

CVE-2005-0018

2005-05-02T00:00:00.000-04:00

2008-09-05T16:45:06.263-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-13T14:50:00.000-04:00

SECTRACK 1013028 DEBIAN DSA-661 BID 12380 The f2 shell script in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files.

cpe:/a:yongguang_zhang:hztty:2.0

CVE-2005-0019

2005-04-27T00:00:00.000-04:00

2017-07-10T21:32:03.827-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1013154 DEBIAN DSA-675 BID 12518 XF hztty-command-execution(19297) Unknown vulnerability in hztty 2.0 and earlier allows local users to execute arbitrary commands.

cpe:/a:playmidi:playmidi:2.3.1 cpe:/a:playmidi:playmidi:2.3.2 cpe:/a:playmidi:playmidi:2.3.3 cpe:/a:playmidi:playmidi:2.3.4 cpe:/a:playmidi:playmidi:2.3.5 cpe:/a:playmidi:playmidi:2.3.6 cpe:/a:playmidi:playmidi:2.3.7 cpe:/a:playmidi:playmidi:2.3.8 cpe:/a:playmidi:playmidi:2.3.9 cpe:/a:playmidi:playmidi:2.3.10 cpe:/a:playmidi:playmidi:2.3.11 cpe:/a:playmidi:playmidi:2.3.12 cpe:/a:playmidi:playmidi:2.3.13 cpe:/a:playmidi:playmidi:2.3.14 cpe:/a:playmidi:playmidi:2.3.15 cpe:/a:playmidi:playmidi:2.3.16 cpe:/a:playmidi:playmidi:2.3.17 cpe:/a:playmidi:playmidi:2.3.18 cpe:/a:playmidi:playmidi:2.3.19 cpe:/a:playmidi:playmidi:2.3.20 cpe:/a:playmidi:playmidi:2.3.21 cpe:/a:playmidi:playmidi:2.3.22 cpe:/a:playmidi:playmidi:2.3.23 cpe:/a:playmidi:playmidi:2.3.24 cpe:/a:playmidi:playmidi:2.3.25 cpe:/a:playmidi:playmidi:2.3.25.1 cpe:/a:playmidi:playmidi:2.3.26 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.1 cpe:/o:mandrakesoft:mandrake_linux:10.1::x86_64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0

CVE-2005-0020

2005-04-14T00:00:00.000-04:00

2017-07-10T21:32:03.890-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1012957 DEBIAN DSA-641 MANDRAKE MDKSA-2005:010 BID 12274 XF playmidi-bo(18933) Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code.

cpe:/a:university_of_cambridge:exim:4.40 cpe:/a:university_of_cambridge:exim:4.41 cpe:/a:university_of_cambridge:exim:4.42

CVE-2005-0021

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:48.467-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://ftp6.us.freebsd.org/pub/mail/exim/ChangeLogs/ChangeLog-4.44 GENTOO GLSA-200501-23 DEBIAN DSA-635 DEBIAN DSA-637 MLIST [exim] 20050104 2 smallish security issues IDEFENSE 20050107 Exim host_aton() Buffer Overflow Vulnerability IDEFENSE 20050114 Exim dns_buld_reverse() Buffer Overflow Vulnerability CERT-VN VU#132992 REDHAT RHSA-2005:025 Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the host_aton function, or (2) the -bh command line option or dnsdb PTR lookup, which triggers an overflow in the dns_build_reverse function.

cpe:/a:university_of_cambridge:exim:4.40 cpe:/a:university_of_cambridge:exim:4.41 cpe:/a:university_of_cambridge:exim:4.42

CVE-2005-0022

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:48.530-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://ftp6.us.freebsd.org/pub/mail/exim/ChangeLogs/ChangeLog-4.44 BUGTRAQ 20050212 exim auth_spa_server() PoC exploit GENTOO GLSA-200501-23 MLIST [exim] 20050104 2 smallish security issues IDEFENSE 20050107 Exim auth_spa_server() Buffer Overflow Vulnerability REDHAT RHSA-2005:025 BID 12188 Buffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained from Samba code, and as called by the auth_spa_client function, may allow attackers to execute arbitrary code during SPA authentication.

cpe:/a:gnome:libvte4 cpe:/a:gnome:libzvt2:1.4.2.19

CVE-2005-0023

2005-10-05T17:02:00.000-04:00

2017-07-10T21:32:03.953-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330907 MISC http://bugzilla.gnome.org/show_bug.cgi?id=317312 BUGTRAQ 20051007 gnome-pty-helper writes arbitrary utmp records BID 15004 VUPEN ADV-2005-1931 XF libzvt-gnomeptyhelper-spoof(22496) gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NOTE: the severity of this issue has been disputed.

cpe:/a:isc:bind:8.4.4 cpe:/a:isc:bind:8.4.5

CVE-2005-0033

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:04.013-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2006.1 SECTRACK 1012996 CONFIRM http://www.isc.org/index.pl?/sw/bind/bind8.php CONFIRM http://www.isc.org/index.pl?/sw/bind/bind-security.php CERT-VN VU#327633 BID 12364 MISC http://www.uniras.gov.uk/niscc/docs/al-20050125-00059.html XF bind-qusedns-bo(19063) Buffer overflow in the code for recursion and glue fetching in BIND 8.4.4 and 8.4.5 allows remote attackers to cause a denial of service (crash) via queries that trigger the overflow in the q_usedns array that tracks nameservers and addresses.

cpe:/a:isc:bind:9.3.0

CVE-2005-0034

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:04.060-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1012995 CONFIRM http://www.isc.org/index.pl?/sw/bind/bind9.php CONFIRM http://www.isc.org/index.pl?/sw/bind/bind-security.php CERT-VN VU#938617 BID 12365 TRUSTIX 2005-0003 MISC http://www.uniras.gov.uk/niscc/docs/al-20050125-00060.html XF bind-named-dns-dos(19062) An "incorrect assumption" in the authvalidated validator function in BIND 9.3.0, when DNSSEC is enabled, allows remote attackers to cause a denial of service (named server exit) via crafted DNS packets that cause an internal consistency test (self-check) to fail.

cpe:/a:adobe:acrobat_reader:4.5 cpe:/a:adobe:acrobat_reader:5.0 cpe:/a:adobe:acrobat_reader:5.0.5 cpe:/a:adobe:acrobat_reader:5.1 cpe:/a:adobe:acrobat_reader:6.0 cpe:/a:adobe:acrobat_reader:6.0.1 cpe:/a:adobe:acrobat_reader:6.0.2 cpe:/a:adobe:acrobat_reader:6.0.3 cpe:/a:adobe:acrobat_reader:7.0

CVE-2005-0035

2005-05-02T00:00:00.000-04:00

2011-03-07T21:19:27.673-05:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://www.adobe.com/support/techdocs/331465.html MISC http://www.hyperdose.com/advisories/H2005-06.txt MISC http://www.niscc.gov.uk/niscc/docs/re-20050401-00264.pdf BID 12989 VUPEN ADV-2005-0310 The Acrobat web control in Adobe Acrobat and Acrobat Reader 7.0 and earlier, when used with Internet Explorer, allows remote attackers to determine the existence of arbitrary files via the LoadFile ActiveX method.

cpe:/a:delegate:delegate:5.9.3 cpe:/a:delegate:delegate:7.7.0 cpe:/a:delegate:delegate:7.7.1 cpe:/a:delegate:delegate:7.8.0 cpe:/a:delegate:delegate:7.8.1 cpe:/a:delegate:delegate:7.8.2 cpe:/a:delegate:delegate:7.9.11 cpe:/a:delegate:delegate:8.3.3 cpe:/a:delegate:delegate:8.3.4 cpe:/a:delegate:delegate:8.4.0 cpe:/a:delegate:delegate:8.5.0 cpe:/a:delegate:delegate:8.9 cpe:/a:delegate:delegate:8.9.1 cpe:/a:delegate:delegate:8.9.2 cpe:/a:delegate:delegate:8.9.3 cpe:/a:delegate:delegate:8.9.4 cpe:/a:delegate:delegate:8.9.5 cpe:/a:delegate:delegate:8.9.6 cpe:/a:delegate:delegate:8.10 cpe:/a:delegate:delegate:8.10.1 cpe:/a:delegate:delegate:8.10.2 cpe:/a:etl:delegate:5.9 cpe:/a:etl:delegate:6.0

CVE-2005-0036

2005-12-31T00:00:00.000-05:00

2008-09-05T16:45:07.777-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2006-04-28T13:39:00.000-04:00

MISC http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html MISC http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en BID 13729 The DNS implementation in DeleGate 8.10.2 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop.

cpe:/a:dnrd:dnrd:1.0 cpe:/a:dnrd:dnrd:1.1 cpe:/a:dnrd:dnrd:1.2 cpe:/a:dnrd:dnrd:1.3 cpe:/a:dnrd:dnrd:1.4 cpe:/a:dnrd:dnrd:2.0 cpe:/a:dnrd:dnrd:2.1 cpe:/a:dnrd:dnrd:2.2 cpe:/a:dnrd:dnrd:2.3 cpe:/a:dnrd:dnrd:2.4 cpe:/a:dnrd:dnrd:2.5 cpe:/a:dnrd:dnrd:2.6 cpe:/a:dnrd:dnrd:2.7 cpe:/a:dnrd:dnrd:2.8 cpe:/a:dnrd:dnrd:2.9

CVE-2005-0037

2005-12-31T00:00:00.000-05:00

2008-09-05T16:45:08.060-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2006-04-28T13:43:00.000-04:00

MISC http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html MISC http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en BID 13729 The DNS implementation of DNRD before 2.10 allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop.

cpe:/a:powerdns:powerdns:2.0_rc1 cpe:/a:powerdns:powerdns:2.8 cpe:/a:powerdns:powerdns:2.9.0 cpe:/a:powerdns:powerdns:2.9.1 cpe:/a:powerdns:powerdns:2.9.2 cpe:/a:powerdns:powerdns:2.9.3a cpe:/a:powerdns:powerdns:2.9.4 cpe:/a:powerdns:powerdns:2.9.5 cpe:/a:powerdns:powerdns:2.9.6 cpe:/a:powerdns:powerdns:2.9.7 cpe:/a:powerdns:powerdns:2.9.8 cpe:/a:powerdns:powerdns:2.9.10 cpe:/a:powerdns:powerdns:2.9.11 cpe:/a:powerdns:powerdns:2.9.12 cpe:/a:powerdns:powerdns:2.9.13 cpe:/a:powerdns:powerdns:2.9.14 cpe:/a:powerdns:powerdns:2.9.15 cpe:/a:powerdns:powerdns:2.9.16

CVE-2005-0038

2005-12-31T00:00:00.000-05:00

2008-09-05T16:45:08.247-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2006-04-28T13:46:00.000-04:00

MISC http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html MISC http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en BID 13729 The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop.

cpe:/a:nissc:ipsec:1.0

CVE-2005-0039

2005-05-10T00:00:00.000-04:00

2016-10-17T23:07:30.807-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050509 NISCC Vulnerability Advisory IPSEC - 004033 SECTRACK 1015320 CERT-VN VU#302220 MISC http://www.niscc.gov.uk/niscc/docs/al-20050509-00386.html?lang=en HP SSRT5957 BID 13562 VUPEN ADV-2005-0507 VUPEN ADV-2005-2806 Certain configurations of IPsec, when using Encapsulating Security Payload (ESP) in tunnel mode, integrity protection at a higher layer, or Authentication Header (AH), allow remote attackers to decrypt IPSec communications by modifying the outer packet in ways that cause plaintext data from the inner packet to be returned in ICMP messages, as demonstrated using bit-flipping attacks and (1) Destination Address Rewriting, (2) a modified header length that causes portions of the packet to be interpreted as IP Options, or (3) a modified protocol field and source address.

cpe:/a:dotnetnuke:dotnetnuke:3.0.11

CVE-2005-0040

2005-05-19T00:00:00.000-04:00

2016-10-17T23:07:32.103-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050516 DotNetNuke (Multiple XSS) BID 13644 BID 13646 BID 13647 MISC http://www.woany.co.uk/advisories/dotnetnukexss.txt Multiple cross-site scripting (XSS) vulnerabilities in DotNetNuke before 3.0.12 allow remote attackers to inject arbitrary web script or HTML via the (1) register a new user page, (2) User-Agent, or (3) Username, which is not properly quoted before sending to the error log.

cpe:/a:apple:itunes:4.7

CVE-2005-0043

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:04.123-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

APPLE APPLE-SA-2005-01-11 SECTRACK 1012839 IDEFENSE 20050113 Apple iTunes Playlist Parsing Buffer Overflow Vulnerability CERT-VN VU#377368 BID 12238 XF itunes-m3u-pls-bo(18851) Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files.

cpe:/a:microsoft:exchange_server:5.0 cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2000::sp1 cpe:/o:microsoft:windows_2000::sp2 cpe:/o:microsoft:windows_2000::sp3 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server:enterprise::64-bit cpe:/o:microsoft:windows_2003_server:enterprise_64-bit cpe:/o:microsoft:windows_2003_server:r2::64-bit cpe:/o:microsoft:windows_2003_server:r2::datacenter_64-bit cpe:/o:microsoft:windows_2003_server:standard::64-bit cpe:/o:microsoft:windows_2003_server:web cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_98se cpe:/o:microsoft:windows_me cpe:/o:microsoft:windows_xp:::64-bit cpe:/o:microsoft:windows_xp:::home cpe:/o:microsoft:windows_xp:::media_center cpe:/o:microsoft:windows_xp::gold:professional cpe:/o:microsoft:windows_xp::sp1:64-bit cpe:/o:microsoft:windows_xp::sp1:home cpe:/o:microsoft:windows_xp::sp1:media_center cpe:/o:microsoft:windows_xp::sp2:home cpe:/o:microsoft:windows_xp::sp2:media_center cpe:/o:microsoft:windows_xp::sp2:tablet_pc

CVE-2005-0044

2005-05-02T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CERT-VN VU#927889 CERT TA05-039A MS MS05-012 XF win-ole-code-execution(19109) The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE data, which allows remote attackers to execute arbitrary code, aka the "Input Validation Vulnerability."

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2000::sp1 cpe:/o:microsoft:windows_2000::sp2 cpe:/o:microsoft:windows_2000::sp3 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server:enterprise::64-bit cpe:/o:microsoft:windows_2003_server:enterprise_64-bit cpe:/o:microsoft:windows_2003_server:r2::64-bit cpe:/o:microsoft:windows_2003_server:r2::datacenter_64-bit cpe:/o:microsoft:windows_2003_server:standard::64-bit cpe:/o:microsoft:windows_2003_server:web cpe:/o:microsoft:windows_nt:4.0::enterprise_server cpe:/o:microsoft:windows_nt:4.0::server cpe:/o:microsoft:windows_nt:4.0::terminal_server cpe:/o:microsoft:windows_nt:4.0::workstation cpe:/o:microsoft:windows_nt:4.0:sp1:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp1:server cpe:/o:microsoft:windows_nt:4.0:sp1:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp1:workstation cpe:/o:microsoft:windows_nt:4.0:sp2:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp2:server cpe:/o:microsoft:windows_nt:4.0:sp2:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp2:workstation cpe:/o:microsoft:windows_nt:4.0:sp3:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp3:server cpe:/o:microsoft:windows_nt:4.0:sp3:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp3:workstation cpe:/o:microsoft:windows_nt:4.0:sp4:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp4:server cpe:/o:microsoft:windows_nt:4.0:sp4:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp4:workstation cpe:/o:microsoft:windows_nt:4.0:sp5:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp5:server cpe:/o:microsoft:windows_nt:4.0:sp5:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp5:workstation cpe:/o:microsoft:windows_nt:4.0:sp6a:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp6a:server cpe:/o:microsoft:windows_nt:4.0:sp6a:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp6a:workstation cpe:/o:microsoft:windows_xp:::64-bit cpe:/o:microsoft:windows_xp:::home cpe:/o:microsoft:windows_xp:::media_center cpe:/o:microsoft:windows_xp::gold:professional cpe:/o:microsoft:windows_xp::sp1:64-bit cpe:/o:microsoft:windows_xp::sp1:home cpe:/o:microsoft:windows_xp::sp1:media_center cpe:/o:microsoft:windows_xp::sp2:home cpe:/o:microsoft:windows_xp::sp2:media_center cpe:/o:microsoft:windows_xp::sp2:tablet_pc

CVE-2005-0045

2005-05-02T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050209 EEYE: Windows SMB Client Transaction Response Handling Vulnerability BUGTRAQ 20050309 Update: MS05-011 EEYE: Windows SMB Client Transaction Response Handling Vulnerability NTBUGTRAQ 20050209 EEYE: Windows SMB Client Transaction Response Handling Vulnerability CERT-VN VU#652537 BID 12484 CERT TA05-039A MS MS05-011 XF win-smb-code-execution(19089) The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing (1) Trans or (2) Trans2 commands, aka the "Server Message Block Vulnerability," and as demonstrated using Trans2 FIND_FIRST2 responses with large file name length fields.

CVE-2005-0047

2005-05-02T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20050530 [Argeniss] MS05-012 Exploit MISC http://www.argeniss.com/research/SSExploit.c CERT-VN VU#597889 CERT TA05-039A MS MS05-012 XF win-com-gain-privileges(19105) Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage files, which allows attackers to execute arbitrary code, aka the "COM Structured Storage Vulnerability."

CVE-2005-0048

2005-05-02T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CERT-VN VU#233754 CERT TA05-102A ISS 20050412 Windows IP Options Remote Compromise MS MS05-019 Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP packets with malformed options, aka the "IP Validation Vulnerability."

cpe:/a:microsoft:sharepoint_portal_server:2003 cpe:/a:microsoft:sharepoint_portal_server:2003:sp1 cpe:/a:microsoft:sharepoint_team_services

CVE-2005-0049

2005-05-02T00:00:00.000-04:00

2018-10-12T17:35:56.157-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CERT-VN VU#340409 CERT TA05-039A MS MS05-006 XF win-sharepoint-services-xss(19091) Windows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP redirection query, which allows remote attackers to inject arbitrary HTML and web script via a cross-site scripting (XSS) attack, or to spoof the web cache.

CVE-2005-0050

2005-05-02T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CERT-VN VU#130433 CERT TA05-039A MS MS05-010 XF win-license-code-execution(19101) The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads to an "unchecked buffer" and allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, aka the "License Logging Service Vulnerability."

cpe:/o:microsoft:windows_xp::sp1:64-bit cpe:/o:microsoft:windows_xp::sp1:tablet_pc cpe:/o:microsoft:windows_xp::sp2:tablet_pc

CVE-2005-0051

2005-05-02T00:00:00.000-04:00

2018-10-12T17:35:57.703-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1013112 CERT-VN VU#939074 BID 12486 CERT TA05-039A MS MS05-007 XF win-named-pipe-information-disclosure(19093) The Server service (srvsvc.dll) in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information (users who are accessing resources) via an anonymous logon using a named pipe, which is not properly authenticated, aka the "Named Pipe Vulnerability."

cpe:/a:microsoft:ie:5.0.1 cpe:/a:microsoft:ie:5.0.1:sp1 cpe:/a:microsoft:ie:5.0.1:sp2 cpe:/a:microsoft:ie:5.0.1:sp3 cpe:/a:microsoft:ie:5.0.1:sp4 cpe:/a:microsoft:ie:5.5 cpe:/a:microsoft:ie:5.5:sp1 cpe:/a:microsoft:ie:5.5:sp2 cpe:/a:microsoft:ie:6.0 cpe:/a:microsoft:ie:6.0:sp1 cpe:/a:microsoft:ie:6.0:sp2 cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2000::sp1 cpe:/o:microsoft:windows_2000::sp2 cpe:/o:microsoft:windows_2000::sp3 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server:enterprise::64-bit cpe:/o:microsoft:windows_2003_server:enterprise_64-bit cpe:/o:microsoft:windows_2003_server:r2::64-bit cpe:/o:microsoft:windows_2003_server:r2::datacenter_64-bit cpe:/o:microsoft:windows_2003_server:standard::64-bit cpe:/o:microsoft:windows_2003_server:web cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_98se cpe:/o:microsoft:windows_me cpe:/o:microsoft:windows_xp:::64-bit cpe:/o:microsoft:windows_xp:::home cpe:/o:microsoft:windows_xp:::media_center cpe:/o:microsoft:windows_xp::gold:professional cpe:/o:microsoft:windows_xp::sp1:64-bit cpe:/o:microsoft:windows_xp::sp1:home cpe:/o:microsoft:windows_xp::sp1:media_center cpe:/o:microsoft:windows_xp::sp2:home cpe:/o:microsoft:windows_xp::sp2:media_center cpe:/o:microsoft:windows_xp::sp2:tablet_pc

CVE-2005-0053

2005-05-02T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CERT-VN VU#698835 BID 11466 CERT TA05-039A MS MS05-008 MS MS05-014 XF ie-dragdrop-gain-privileges(19117) Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability."

cpe:/a:microsoft:ie:5.01 cpe:/a:microsoft:ie:5.5 cpe:/a:microsoft:ie:6:windows_server_2003_sp1

CVE-2005-0054

2005-05-02T00:00:00.000-04:00

2018-10-12T17:36:00.860-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050209 Internet Explorer zone spoofing with encoded URLs CERT-VN VU#580299 CERT TA05-039A MS MS05-014 XF ie-file-url-encode(19214) Internet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security zone and execute arbitrary code via an HTML page containing URLs that contain hostnames that have been double hex encoded, which are decoded twice to generate a malicious hostname, aka the "URL Decoding Zone Spoofing Vulnerability."

CVE-2005-0055

2005-05-02T00:00:00.000-04:00

2018-10-12T17:36:02.390-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1013125 CERT-VN VU#843771 CERT TA05-039A MS MS05-014 XF ie-cdf-execute-code(19137) Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote attackers to execute arbitrary code, aka the "DHTML Method Heap Memory Corruption Vulnerability."

cpe:/a:microsoft:ie:5.01 cpe:/a:microsoft:ie:5.5 cpe:/a:microsoft:ie:6:windows_server_2003_sp1

CVE-2005-0056

2005-05-02T00:00:00.000-04:00

2018-10-12T17:36:03.890-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1013126 CERT-VN VU#823971 BID 12427 CERT TA05-039A MS MS05-014 XF ie-cdf-execute-code(19137) Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote attackers to obtain sensitive information or execute arbitrary code, aka the "Channel Definition Format (CDF) Cross Domain Vulnerability."

CVE-2005-0057

2005-05-02T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1013119 CERT-VN VU#820427 BID 12479 CERT TA05-039A MS MS05-015 XF win-hyperlink-code-execution(19110) The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link that triggers an "unchecked buffer" in the library, possibly due to a buffer overflow.

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_98se cpe:/o:microsoft:windows_me cpe:/o:microsoft:windows_xp::gold

CVE-2005-0058

2005-08-10T00:00:00.000-04:00

2018-10-12T17:36:06.720-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1014639 BID 14518 MS MS05-040 Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to elevate privileges or execute arbitrary code via a crafted message.

CVE-2005-0059

2005-05-02T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MS MS05-017 Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary code via a crafted message.

CVE-2005-0060

2005-05-02T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20050413 Windows kernel overflow fixed MISC http://www.ngssoftware.com/advisories/ms-01.txt MS MS05-018 Buffer overflow in the font processing component of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application.

CVE-2005-0061

2005-05-02T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MS MS05-018 The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via certain access requests.

CVE-2005-0063

2005-05-02T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050529 Spam exploiting MS05-016 IDEFENSE 20050412 Microsoft MSHTA Script Execution Vulnerability MISC http://www.securiteam.com/exploits/5YP0T0AFFW.html BID 13132 VUPEN ADV-2005-0335 MS MS05-016 The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as demonstrated using a Microsoft Word document.

cpe:/a:xpdf:xpdf:0.2 cpe:/a:xpdf:xpdf:0.3 cpe:/a:xpdf:xpdf:0.4 cpe:/a:xpdf:xpdf:0.5 cpe:/a:xpdf:xpdf:0.5a cpe:/a:xpdf:xpdf:0.6 cpe:/a:xpdf:xpdf:0.7 cpe:/a:xpdf:xpdf:0.7a cpe:/a:xpdf:xpdf:0.80 cpe:/a:xpdf:xpdf:0.90 cpe:/a:xpdf:xpdf:0.91 cpe:/a:xpdf:xpdf:0.91a cpe:/a:xpdf:xpdf:0.91b cpe:/a:xpdf:xpdf:0.91c cpe:/a:xpdf:xpdf:0.92 cpe:/a:xpdf:xpdf:0.92a cpe:/a:xpdf:xpdf:0.92b cpe:/a:xpdf:xpdf:0.92c cpe:/a:xpdf:xpdf:0.92d cpe:/a:xpdf:xpdf:0.92e cpe:/a:xpdf:xpdf:0.93 cpe:/a:xpdf:xpdf:0.93a cpe:/a:xpdf:xpdf:0.93b cpe:/a:xpdf:xpdf:0.93c cpe:/a:xpdf:xpdf:1.0 cpe:/a:xpdf:xpdf:1.0a cpe:/a:xpdf:xpdf:1.1 cpe:/a:xpdf:xpdf:2.0 cpe:/a:xpdf:xpdf:2.1 cpe:/a:xpdf:xpdf:2.2 cpe:/a:xpdf:xpdf:2.3 cpe:/a:xpdf:xpdf:3.0

CVE-2005-0064

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:49.827-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.00pl3.patch SCO SCOSA-2005.42 CONECTIVA CLA-2005:921 BUGTRAQ 20050119 [USN-64-1] xpdf, CUPS vulnerabilities DEBIAN DSA-645 DEBIAN DSA-648 IDEFENSE 20050118 Multiple Unix/Linux Vendor Xpdf makeFileKey2 Stack Overflow MANDRAKE MDKSA-2005:016 MANDRAKE MDKSA-2005:017 MANDRAKE MDKSA-2005:018 MANDRAKE MDKSA-2005:019 MANDRAKE MDKSA-2005:020 MANDRAKE MDKSA-2005:021 REDHAT RHSA-2005:026 REDHAT RHSA-2005:034 REDHAT RHSA-2005:053 REDHAT RHSA-2005:057 REDHAT RHSA-2005:059 REDHAT RHSA-2005:066 TRUSTIX 2005-0003 FEDORA FLSA:2352 FEDORA FLSA:2353 GENTOO GLSA-200501-28 GENTOO GLSA-200502-10 Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value.

cpe:/a:tcp:tcp

CVE-2005-0065

2005-05-02T00:00:00.000-04:00

2008-09-05T16:45:12.967-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-06-02T14:23:00.000-04:00

MISC http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html BID 13124 The original design of TCP does not check that the TCP sequence number in an ICMP error message is within the range of sequence numbers for data that has been sent but not acknowledged (aka "TCP sequence number checking"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged "Destination Unreachable" messages, (2) blind throughput-reduction attacks with forged "Source Quench" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced. NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.

cpe:/a:tcp:tcp

CVE-2005-0066

2004-12-22T00:00:00.000-05:00

2008-09-05T16:45:13.120-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-02T14:35:00.000-04:00

MISC http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html BID 13124 The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an intermediate router is within the range of possible values for data that has already been acknowledged (aka "TCP acknowledgement number checking"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged "Destination Unreachable" messages, (2) blind throughput-reduction attacks with forged "Source Quench" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced. NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.

cpe:/a:tcp:tcp

CVE-2005-0067

2004-12-22T00:00:00.000-05:00

2008-09-05T16:45:13.277-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-02T14:40:00.000-04:00

MISC http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html BID 13124 The original design of TCP does not require that port numbers be assigned randomly (aka "Port randomization"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged "Destination Unreachable" messages, (2) blind throughput-reduction attacks with forged "Source Quench" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced. NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.

cpe:/a:tcp:tcp

CVE-2005-0068

2004-12-22T00:00:00.000-05:00

2008-09-05T16:45:13.417-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-02T14:44:00.000-04:00

MISC http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html BID 13124 The original design of ICMP does not require authentication for host-generated ICMP error messages, which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged "Destination Unreachable" messages, (2) blind throughput-reduction attacks with forged "Source Quench" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced. NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.

cpe:/a:vim_development_group:vim:6.3.011 cpe:/a:vim_development_group:vim:6.3.025 cpe:/a:vim_development_group:vim:6.3.030 cpe:/a:vim_development_group:vim:6.3.044

CVE-2005-0069

2005-01-13T00:00:00.000-05:00

2017-10-10T21:29:49.903-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050118 [USN-61-1] vim vulnerabilities SECTRACK 1012938 REDHAT RHSA-2005:036 REDHAT RHSA-2005:122 FEDORA FLSA:2343 XF vim-symlink(18870) The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files.

cpe:/a:synaesthesia:synaesthesia:2.1

CVE-2005-0070

2005-05-02T00:00:00.000-04:00

2008-09-05T16:45:13.747-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-06-02T14:56:00.000-04:00

ALLOWS_ADMIN_ACCESS

SECTRACK 1013206 DEBIAN DSA-681 BID 12546 Synaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not drop privileges before processing configuration and mixer files, which allows local users to read arbitrary files.

cpe:/a:vdr:vdr:1.0.0 cpe:/a:vdr:vdr:1.0.4 cpe:/a:vdr:vdr:1.2.0 cpe:/a:vdr:vdr:1.2.1 cpe:/a:vdr:vdr:1.2.2 cpe:/a:vdr:vdr:1.2.5

CVE-2005-0071

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:04.953-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov DEBIAN DSA-656 GENTOO GLSA-200501-42 BID 12356 XF vdr-dvdapi-file-overwrite(19066) vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files.

cpe:/a:ejoy_and_hu_yong:zhcon:0.2

CVE-2005-0072

2005-01-24T00:00:00.000-05:00

2017-07-10T21:32:05.000-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1012977 DEBIAN DSA-655 MANDRAKE MDKSA-2005:012 BID 12343 XF zhcon-information-disclosure(19045) zhcon before 0.2 does not drop privileges before reading a user configuration file, which allows local users to read arbitrary files.

cpe:/a:debian:sympa:3.3.3

CVE-2005-0073

2005-05-02T00:00:00.000-04:00

2008-09-05T16:45:14.247-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-02T15:06:00.000-04:00

ALLOWS_USER_ACCESS

SECTRACK 1013163 DEBIAN DSA-677 Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local users to execute arbitrary code.

cpe:/a:xpcd:xpcd:2.08

CVE-2005-0074

2005-02-11T00:00:00.000-05:00

2008-09-05T16:45:14.403-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-06-02T16:50:00.000-04:00

ALLOWS_ADMIN_ACCESS

SECTRACK 1013162 DEBIAN DSA-676 BID 12523 Buffer overflow in pcdsvgaview in xpcd 2.08 allows local users to execute arbitrary code.

cpe:/a:squirrelmail:squirrelmail:1.0.4 cpe:/a:squirrelmail:squirrelmail:1.0.5 cpe:/a:squirrelmail:squirrelmail:1.2.0 cpe:/a:squirrelmail:squirrelmail:1.2.1 cpe:/a:squirrelmail:squirrelmail:1.2.2 cpe:/a:squirrelmail:squirrelmail:1.2.3 cpe:/a:squirrelmail:squirrelmail:1.2.4 cpe:/a:squirrelmail:squirrelmail:1.2.5 cpe:/a:squirrelmail:squirrelmail:1.2.6 cpe:/a:squirrelmail:squirrelmail:1.2.7 cpe:/a:squirrelmail:squirrelmail:1.2.8 cpe:/a:squirrelmail:squirrelmail:1.2.9 cpe:/a:squirrelmail:squirrelmail:1.2.10 cpe:/a:squirrelmail:squirrelmail:1.2.11 cpe:/a:squirrelmail:squirrelmail:1.4 cpe:/a:squirrelmail:squirrelmail:1.4.0 cpe:/a:squirrelmail:squirrelmail:1.4.1 cpe:/a:squirrelmail:squirrelmail:1.4.2 cpe:/a:squirrelmail:squirrelmail:1.4.3 cpe:/a:squirrelmail:squirrelmail:1.4.3a

CVE-2005-0075

2005-01-29T00:00:00.000-05:00

2017-10-10T21:29:49.967-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2005-03-21 BUGTRAQ 20050129 SquirrelMail Security Advisory GENTOO GLSA-200501-39 REDHAT RHSA-2005:099 REDHAT RHSA-2005:135 CONFIRM http://www.squirrelmail.org/security/issue/2005-01-14 prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers.

cpe:/o:debian:debian_linux:3.0

CVE-2005-0076

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:05.047-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

DEBIAN DSA-672 XF xview-xvparseone-bo(19271) Multiple buffer overflows in the XView library 3.2 may allow local users to execute arbitrary code via setuid applications that use the library.

cpe:/o:debian:debian_linux:3.0::woody cpe:/o:gentoo:linux cpe:/o:redhat:enterprise_linux:4.0::advanced_server cpe:/o:redhat:enterprise_linux:4.0::enterprise_server cpe:/o:redhat:enterprise_linux:4.0::workstation cpe:/o:redhat:enterprise_linux_desktop:4.0 cpe:/o:ubuntu:ubuntu_linux:4.10

CVE-2005-0077

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:05.153-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050125 [USN-70-1] Perl DBI module vulnerability SECTRACK 1013007 DEBIAN DSA-658 GENTOO GLSA-200501-38 MANDRAKE MDKSA-2005:030 REDHAT RHSA-2005:072 FEDORA FLSA-2006:178989 BID 12360 XF dbi-library-file-overwrite(19068) The DBI library (libdbi-perl) for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file.

cpe:/o:debian:debian_linux:3.0::woody cpe:/o:kde:kde:1.0 cpe:/o:kde:kde:1.1 cpe:/o:kde:kde:1.1.1 cpe:/o:kde:kde:1.1.2 cpe:/o:kde:kde:2.0 cpe:/o:kde:kde:2.0.1 cpe:/o:kde:kde:2.1 cpe:/o:kde:kde:2.1_beta1 cpe:/o:kde:kde:2.1_beta2 cpe:/o:kde:kde:2.2 cpe:/o:kde:kde:2.2.1 cpe:/o:kde:kde:2.2_beta1 cpe:/o:kde:kde:3.0 cpe:/o:kde:kde:3.0.1 cpe:/o:kde:kde:3.0.2 cpe:/o:kde:kde:3.0.3 cpe:/o:kde:kde:3.0.4 cpe:/o:kde:kde:3.0_beta_1 cpe:/o:kde:kde:3.0_beta_2 cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:3.0::advanced_servers cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:linux_advanced_workstation:2.1

CVE-2005-0078

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:50.123-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

DEBIAN DSA-660 REDHAT RHSA-2005:009 XF kdebase-screensaver-security-bypass(19084) The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with physical access to cause a crash and access the desktop session.

cpe:/a:xtrlock:xtrlock:2.0

CVE-2005-0079

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:05.217-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

DEBIAN DSA-649 BID 12316 XF xtrlock-screen-lock-bypass(18991) Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service (application crash) and hijack the desktop session.

cpe:/a:gnu:mailman:2.1.5 cpe:/o:ubuntu:ubuntu_linux:4.10

CVE-2005-0080

2005-05-02T00:00:00.000-04:00

2016-10-17T23:07:44.513-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=285839 BUGTRAQ 20050110 [USN-59-1] mailman vulnerabilities MISC http://qa.debian.org/bts-security.html The 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error message depending on whether the e-mail address is subscribed to a private list, which allows remote attackers to determine the list membership for a given e-mail address.

cpe:/a:mysql:maxdb:7.5.00 cpe:/a:mysql:maxdb:7.5.00.08 cpe:/a:mysql:maxdb:7.5.00.11 cpe:/a:mysql:maxdb:7.5.00.12 cpe:/a:mysql:maxdb:7.5.00.14 cpe:/a:mysql:maxdb:7.5.00.15 cpe:/a:mysql:maxdb:7.5.00.16 cpe:/a:mysql:maxdb:7.5.00.18 cpe:/a:mysql:maxdb:7.5.00.19

CVE-2005-0081

2005-04-14T00:00:00.000-04:00

2011-03-07T21:19:30.657-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

IDEFENSE 20050119 MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via an HTTP request with invalid headers.

CVE-2005-0082

2005-04-14T00:00:00.000-04:00

2011-03-07T21:19:30.750-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

IDEFENSE 20050119 MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities The sapdbwa_GetUserData function in MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via invalid parameters to the WebDAV handler code, which triggers a null dereference that causes the SAP DB Web Agent to crash.

cpe:/a:mysql:maxdb:7.5.00

CVE-2005-0083

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:05.263-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov IDEFENSE 20050314 MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities XF maxdb-null-pointer-dos(19687) MySQL MaxDB 7.5.00 for Windows, and possibly earlier versions and other platforms, allows remote attackers to cause a denial of service (application crash) via invalid parameters to the (1) DBMCli_String::ReallocString, (2) DBMCli_String::operator, (3) DBMCli_Buffer::ForceResize, (4) DBMCli_Wizard::InstallDatabase, (5) DBMCli_Devspaces::Complete, (6) DBMWeb_TemplateWizard::askForWriteCountStep5, or (7) DBMWeb_DBMWeb::wizardDB functions, which triggers a null dereference.

cpe:/a:ethereal_group:ethereal:0.8 cpe:/a:ethereal_group:ethereal:0.8.13 cpe:/a:ethereal_group:ethereal:0.8.14 cpe:/a:ethereal_group:ethereal:0.8.15 cpe:/a:ethereal_group:ethereal:0.8.16 cpe:/a:ethereal_group:ethereal:0.8.17a cpe:/a:ethereal_group:ethereal:0.8.18 cpe:/a:ethereal_group:ethereal:0.8.19 cpe:/a:ethereal_group:ethereal:0.8.20 cpe:/a:ethereal_group:ethereal:0.9 cpe:/a:ethereal_group:ethereal:0.9.0 cpe:/a:ethereal_group:ethereal:0.9.1 cpe:/a:ethereal_group:ethereal:0.9.2 cpe:/a:ethereal_group:ethereal:0.9.3 cpe:/a:ethereal_group:ethereal:0.9.4 cpe:/a:ethereal_group:ethereal:0.9.5 cpe:/a:ethereal_group:ethereal:0.9.6 cpe:/a:ethereal_group:ethereal:0.9.7 cpe:/a:ethereal_group:ethereal:0.9.8 cpe:/a:ethereal_group:ethereal:0.9.9 cpe:/a:ethereal_group:ethereal:0.9.10 cpe:/a:ethereal_group:ethereal:0.9.11 cpe:/a:ethereal_group:ethereal:0.9.12 cpe:/a:ethereal_group:ethereal:0.9.13 cpe:/a:ethereal_group:ethereal:0.9.14 cpe:/a:ethereal_group:ethereal:0.9.15 cpe:/a:ethereal_group:ethereal:0.9.16 cpe:/a:ethereal_group:ethereal:0.10 cpe:/a:ethereal_group:ethereal:0.10.0 cpe:/a:ethereal_group:ethereal:0.10.0a cpe:/a:ethereal_group:ethereal:0.10.1 cpe:/a:ethereal_group:ethereal:0.10.2 cpe:/a:ethereal_group:ethereal:0.10.3 cpe:/a:ethereal_group:ethereal:0.10.4 cpe:/a:ethereal_group:ethereal:0.10.5 cpe:/a:ethereal_group:ethereal:0.10.6 cpe:/a:ethereal_group:ethereal:0.10.7 cpe:/a:ethereal_group:ethereal:0.10.8

CVE-2005-0084

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:50.187-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CIAC P-106 DEBIAN DSA-653 CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00017.html GENTOO GLSA-200501-27 MANDRAKE MDKSA-2005:013 FEDORA FLSA-2006:152922 REDHAT RHSA-2005:037 BID 12326 XF ethereal-x11-bo(19004) Buffer overflow in the X11 dissector in Ethereal 0.8.10 through 0.10.8 allows remote attackers to execute arbitrary code via a crafted packet.

cpe:/a:htdig:htdig:3.1.5 cpe:/a:htdig:htdig:3.1.5_7 cpe:/a:htdig:htdig:3.1.5_8 cpe:/a:htdig:htdig:3.1.6 cpe:/a:htdig:htdig:3.2.0 cpe:/a:htdig:htdig:3.2.0b2 cpe:/a:htdig:htdig:3.2.0b3 cpe:/a:htdig:htdig:3.2.0b4 cpe:/a:htdig:htdig:3.2.0b5 cpe:/a:htdig:htdig:3.2.0b6 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.1 cpe:/o:mandrakesoft:mandrake_linux:10.1::x86_64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1::x86_64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0::x86_64 cpe:/o:redhat:fedora_core:core_3.0 cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.0::i386 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2

CVE-2005-0085

2005-04-27T00:00:00.000-04:00

2017-10-10T21:29:50.263-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SCO SCOSA-2005.46 SECTRACK 1013078 DEBIAN DSA-680 GENTOO GLSA-200502-16 MANDRAKE MDKSA-2005:063 FEDORA FLSA-2006:152907 REDHAT RHSA-2005:073 REDHAT RHSA-2005:090 BID 12442 XF htdig-config-xss(19223) Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.

cpe:/o:redhat:enterprise_linux:3.0::advanced_servers cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation cpe:/o:redhat:enterprise_linux_desktop:3.0

CVE-2005-0086

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:50.310-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

REDHAT RHSA-2005:068 FEDORA FLSA:2404 CONFIRM https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=145527 XF less-file-bo(19131) Heap-based buffer overflow in less in Red Hat Enterprise Linux 3 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted file, as demonstrated using the UTF-8 locale.

cpe:/o:alsa:alsa-lib:1.0.6 cpe:/o:redhat:enterprise_linux:4.0::advanced_server cpe:/o:redhat:enterprise_linux:4.0::desktop cpe:/o:redhat:enterprise_linux:4.0::enterprise_server cpe:/o:redhat:enterprise_linux:4.0::workstation

CVE-2005-0087

2005-04-27T00:00:00.000-04:00

2017-10-10T21:29:50.373-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

REDHAT RHSA-2005:033 The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code if there are other vulnerabilities in the library.

cpe:/a:apache:mod_python:1.9a cpe:/a:apache:mod_python:2.0 cpe:/a:apache:mod_python:2.1 cpe:/a:apache:mod_python:2.2 cpe:/a:apache:mod_python:2.3 cpe:/a:apache:mod_python:2.4 cpe:/a:apache:mod_python:2.4.1 cpe:/a:apache:mod_python:2.5 cpe:/a:apache:mod_python:2.6 cpe:/a:apache:mod_python:2.6.1 cpe:/a:apache:mod_python:2.6.2 cpe:/a:apache:mod_python:2.6.3 cpe:/a:apache:mod_python:2.6.4 cpe:/a:apache:mod_python:2.7 cpe:/a:apache:mod_python:2.7.1 cpe:/a:apache:mod_python:2.7.2 cpe:/a:apache:mod_python:2.7.3 cpe:/a:apache:mod_python:2.7.4 cpe:/a:apache:mod_python:2.7.5 cpe:/a:apache:mod_python:2.7.6 cpe:/a:apache:mod_python:2.7.7 cpe:/a:apache:mod_python:2.7.8

CVE-2005-0088

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:05.840-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2005:926 BUGTRAQ 20050211 [USN-80-1] mod_python vulnerability GENTOO GLSA-200502-14 SECTRACK 1013156 DEBIAN DSA-689 CERT-VN VU#356409 REDHAT RHSA-2005:100 REDHAT RHSA-2005:104 FEDORA FLSA:152896 BID 12519 TRUSTIX 2005-0003 The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL.

cpe:/a:python_software_foundation:python:2.2 cpe:/a:python_software_foundation:python:2.3 cpe:/a:python_software_foundation:python:2.3.1 cpe:/a:python_software_foundation:python:2.3.2 cpe:/a:python_software_foundation:python:2.3.3 cpe:/a:python_software_foundation:python:2.3.4 cpe:/a:python_software_foundation:python:2.4

CVE-2005-0089

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:50.543-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050203 Python Security Advisory PSF-2005-001 - SimpleXMLRPCServer.py CONFIRM http://python.org/security/PSF-2005-001/patch-2.2.txt SECTRACK 1013083 DEBIAN DSA-666 MANDRAKE MDKSA-2005:035 CONFIRM http://www.python.org/security/PSF-2005-001/ REDHAT RHSA-2005:108 BID 12437 TRUSTIX 2005-0003 XF python-simplexmlrpcserver-bypass(19217) The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.

cpe:/o:redhat:enterprise_linux:4.0::advanced_server cpe:/o:redhat:enterprise_linux:4.0::enterprise_server cpe:/o:redhat:enterprise_linux:4.0::workstation cpe:/o:redhat:enterprise_linux_desktop:4.0

CVE-2005-0090

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:50.607-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov REDHAT RHSA-2005:092 BID 12599 XF red-hat-regression-dos(20618) A regression error in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch omits an "access check," which allows local users to cause a denial of service (crash).

cpe:/o:redhat:enterprise_linux:4.0::advanced_server cpe:/o:redhat:enterprise_linux:4.0::enterprise_server cpe:/o:redhat:enterprise_linux:4.0::workstation cpe:/o:redhat:enterprise_linux_desktop:4.0

CVE-2005-0091

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:50.670-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

REDHAT RHSA-2005:092 BID 12599 XF red-hat-patch-gain-privileges(20619) Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when using the hugemem kernel, allows local users to read and write to arbitrary kernel memory and gain privileges via certain syscalls.

cpe:/o:redhat:enterprise_linux:4.0::advanced_server cpe:/o:redhat:enterprise_linux:4.0::enterprise_server cpe:/o:redhat:enterprise_linux:4.0::workstation cpe:/o:redhat:enterprise_linux_desktop:4.0

CVE-2005-0092

2005-02-19T00:00:00.000-05:00

2017-10-10T21:29:50.717-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov REDHAT RHSA-2005:092 BID 12599 XF red-hat-patch-dos(20620) Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when running on x86 with the hugemem kernel, allows local users to cause a denial of service (crash).

CVE-2005-0093

2005-05-02T00:00:00.000-04:00

2008-09-10T15:34:55.353-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

cpe:/a:squid:squid:2.0_patch2 cpe:/a:squid:squid:2.1_patch2 cpe:/a:squid:squid:2.3_.stable4 cpe:/a:squid:squid:2.3_.stable5 cpe:/a:squid:squid:2.3_stable5 cpe:/a:squid:squid:2.4 cpe:/a:squid:squid:2.4_.stable2 cpe:/a:squid:squid:2.4_.stable6 cpe:/a:squid:squid:2.4_.stable7 cpe:/a:squid:squid:2.4_stable7 cpe:/a:squid:squid:2.5.6 cpe:/a:squid:squid:2.5.stable1 cpe:/a:squid:squid:2.5.stable2 cpe:/a:squid:squid:2.5.stable3 cpe:/a:squid:squid:2.5.stable4 cpe:/a:squid:squid:2.5.stable5 cpe:/a:squid:squid:2.5.stable6 cpe:/a:squid:squid:2.5.stable7 cpe:/a:squid:squid:2.5_.stable1 cpe:/a:squid:squid:2.5_.stable3 cpe:/a:squid:squid:2.5_.stable4 cpe:/a:squid:squid:2.5_.stable5 cpe:/a:squid:squid:2.5_.stable6 cpe:/a:squid:squid:2.5_stable3 cpe:/a:squid:squid:2.5_stable4 cpe:/a:squid:squid:2.5_stable9 cpe:/a:squid:squid:2.6.stable1

CVE-2005-0094

2005-01-15T00:00:00.000-05:00

2017-10-10T21:29:50.780-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2005:923 FEDORA FLSA-2006:152809 GENTOO GLSA-200501-25 DEBIAN DSA-651 MANDRAKE MDKSA-2005:014 SUSE SUSE-SA:2005:006 REDHAT RHSA-2005:060 REDHAT RHSA-2005:061 BID 12276 CONFIRM http://www.squid-cache.org/Advisories/SQUID-2005_1.txt CONFIRM http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-gopher_html_parsing.patch TRUSTIX 2005-0003 Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses.

CVE-2005-0095

2005-01-15T00:00:00.000-05:00

2017-10-10T21:29:50.840-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2005:923 FEDORA FLSA-2006:152809 GENTOO GLSA-200501-25 SECTRACK 1012882 DEBIAN DSA-651 MANDRAKE MDKSA-2005:014 SUSE SUSE-SA:2005:006 REDHAT RHSA-2005:060 REDHAT RHSA-2005:061 BID 12275 CONFIRM http://www.squid-cache.org/Advisories/SQUID-2005_2.txt CONFIRM http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-wccp_denial_of_service.patch TRUSTIX 2005-0003 The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU cache numbers.

CVE-2005-0096

2005-01-25T00:00:00.000-05:00

2017-10-10T21:29:50.903-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2005:923 FEDORA FLSA-2006:152809 GENTOO GLSA-200501-25 SECTRACK 1012818 SUSE SUSE-SA:2005:006 REDHAT RHSA-2005:060 REDHAT RHSA-2005:061 BID 12324 CONFIRM http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-fakeauth_auth TRUSTIX 2005-0003 Memory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (memory consumption).

CVE-2005-0097

2005-01-11T00:00:00.000-05:00

2017-10-10T21:29:50.967-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FEDORA FLSA-2006:152809 GENTOO GLSA-200501-25 SECTRACK 1012818 SUSE SUSE-SA:2005:006 REDHAT RHSA-2005:060 REDHAT RHSA-2005:061 BID 12220 CONFIRM http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-fakeauth_auth TRUSTIX 2005-0003 The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a malformed NTLM type 3 message that triggers a NULL dereference.

cpe:/a:abuse:abuse-sdl:2.0

CVE-2005-0098

2005-03-08T00:00:00.000-05:00

2008-09-05T16:45:18.823-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-03T01:25:00.000-04:00

DEBIAN DSA-691 Multiple buffer overflows in the SDL port of abuse (abuse-SDL) before 2.00 allow local users to execute arbitrary code via the command line.

cpe:/a:abuse:abuse-sdl:2.0

CVE-2005-0099

2005-03-08T00:00:00.000-05:00

2008-09-05T16:45:18.980-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-03T01:32:00.000-04:00

DEBIAN DSA-691 The SDL port of abuse (abuse-SDL) before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files.

cpe:/a:gnu:emacs:20.0 cpe:/a:gnu:emacs:21.3 cpe:/a:gnu:xemacs:21.4

CVE-2005-0100

2005-02-07T00:00:00.000-05:00

2018-10-19T11:31:06.463-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050207 [USN-76-1] Emacs vulnerability DEBIAN DSA-670 DEBIAN DSA-671 DEBIAN DSA-685 MANDRAKE MDKSA-2005:038 REDHAT RHSA-2005:110 REDHAT RHSA-2005:112 REDHAT RHSA-2005:133 FEDORA FLSA-2006:152898 BID 12462 XF xemacs-movemail-format-string(19246) Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.

cpe:/a:newspost:newspost:2.1.1

CVE-2005-0101

2005-02-01T00:00:00.000-05:00

2017-07-10T21:32:05.763-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050202 RE: SECURITEY.NNOV.RU NewsPost buffer overflow [EXPLOIT] MISC http://people.freebsd.org/~niels/issues/newspost-20050114.txt GENTOO GLSA-200502-05 SECTRACK 1013056 BID 12418 CONFIRM http://www.vuxml.org/freebsd/7f13607b-6948-11d9-8937-00065be4b5b6.html XF newspost-socketgetline-bo(19178) Buffer overflow in the socket_getline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to execute arbitrary code via a long string without a newline character.

cpe:/a:ximian:evolution:1.2.2 cpe:/a:ximian:evolution:1.2.3 cpe:/a:ximian:evolution:1.2.4 cpe:/a:ximian:evolution:1.3.2_beta

CVE-2005-0102

2005-01-24T00:00:00.000-05:00

2018-10-03T17:29:31.683-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONECTIVA CLA-2005:925 GENTOO GLSA-200501-35 SECTRACK 1012981 DEBIAN DSA-673 MANDRAKE MDKSA-2005:024 REDHAT RHSA-2005:238 REDHAT RHSA-2005:397 BID 12354 XF evolution-camellockhelper-bo(19031) UBUNTU USN-69-1 Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte memory allocation and a buffer overflow.

CVE-2005-0103

2005-01-24T00:00:00.000-05:00

2017-10-10T21:29:51.137-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

APPLE APPLE-SA-2005-03-21 BUGTRAQ 20050129 SquirrelMail Security Advisory GENTOO GLSA-200501-39 REDHAT RHSA-2005:099 REDHAT RHSA-2005:135 CONFIRM http://www.squirrelmail.org/security/issue/2005-01-19?PHPSESSID=8af117822fb1ca3aa966a64248b5d223 XF squirrelmail-frame-file-include(19037) PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to execute arbitrary PHP code by modifying a URL parameter to reference a URL on a remote web server that contains the code.

CVE-2005-0104

2005-01-29T00:00:00.000-05:00

2017-10-10T21:29:51.217-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2005-03-21 BUGTRAQ 20050129 SquirrelMail Security Advisory DEBIAN DSA-662 GENTOO GLSA-200501-39 REDHAT RHSA-2005:099 REDHAT RHSA-2005:135 CONFIRM http://www.squirrelmail.org/security/issue/2005-01-20 XF squirrelmail-webmailphp-xss(19036) Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via certain integer variables.

cpe:/a:typespeed:typespeed:0.4.1

CVE-2005-0105

2005-02-16T00:00:00.000-05:00

2008-09-05T16:45:20.010-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-03T03:11:00.000-04:00

ALLOWS_OTHER_ACCESS

DEBIAN DSA-684 Unknown vulnerability in typespeed 0.4.1 and earlier allows local users to gain privileges.

cpe:/o:ubuntu:ubuntu_linux:5.04

CVE-2005-0106

2005-05-03T00:00:00.000-04:00

2018-10-03T17:29:32.887-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov MANDRIVA MDKSA-2006:023 BID 13471 UBUNTU USN-113-1 SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGD_PATH variable, which allows local users to reduce the cryptographic strength of certain operations by modifying the file.

cpe:/a:debian:bsmtpd:2.3

CVE-2005-0107

2005-02-25T00:00:00.000-05:00

2008-09-05T16:45:20.323-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-03T03:24:00.000-04:00

ALLOWS_USER_ACCESS

DEBIAN DSA-690 bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execute arbitrary commands.

cpe:/a:apache:mod_auth_radius:1.5.4

CVE-2005-0108

2005-01-11T00:00:00.000-05:00

2017-07-10T21:32:06.013-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050111 Apache mod_auth_radius remote integer overflow MISC http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-02 SECTRACK 1012829 DEBIAN DSA-659 BID 12217 XF modauthradius-dos(18841) Apache mod_auth_radius 1.5.4 and libpam-radius-auth allow remote malicious RADIUS servers to cause a denial of service (crash) via a RADIUS_REPLY_MESSAGE with a RADIUS attribute length of 1, which leads to a memcpy operation with a -1 length argument.

cpe:/o:freebsd:freebsd:1.1.5.1 cpe:/o:freebsd:freebsd:2.0 cpe:/o:freebsd:freebsd:2.0.5 cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:freebsd:freebsd:2.1.5 cpe:/o:freebsd:freebsd:2.1.6 cpe:/o:freebsd:freebsd:2.1.6.1 cpe:/o:freebsd:freebsd:2.1.7.1 cpe:/o:freebsd:freebsd:2.2 cpe:/o:freebsd:freebsd:2.2.2 cpe:/o:freebsd:freebsd:2.2.3 cpe:/o:freebsd:freebsd:2.2.4 cpe:/o:freebsd:freebsd:2.2.5 cpe:/o:freebsd:freebsd:2.2.6 cpe:/o:freebsd:freebsd:2.2.8 cpe:/o:freebsd:freebsd:3.0 cpe:/o:freebsd:freebsd:3.0:releng cpe:/o:freebsd:freebsd:3.1 cpe:/o:freebsd:freebsd:3.2 cpe:/o:freebsd:freebsd:3.3 cpe:/o:freebsd:freebsd:3.4 cpe:/o:freebsd:freebsd:3.5 cpe:/o:freebsd:freebsd:3.5:stable cpe:/o:freebsd:freebsd:3.5.1 cpe:/o:freebsd:freebsd:3.5.1:release cpe:/o:freebsd:freebsd:3.5.1:stable cpe:/o:freebsd:freebsd:4.0 cpe:/o:freebsd:freebsd:4.0:alpha cpe:/o:freebsd:freebsd:4.0:releng cpe:/o:freebsd:freebsd:4.1 cpe:/o:freebsd:freebsd:4.1.1 cpe:/o:freebsd:freebsd:4.1.1:release cpe:/o:freebsd:freebsd:4.1.1:stable cpe:/o:freebsd:freebsd:4.2 cpe:/o:freebsd:freebsd:4.2:stable cpe:/o:freebsd:freebsd:4.3 cpe:/o:freebsd:freebsd:4.3:release cpe:/o:freebsd:freebsd:4.3:release_p38 cpe:/o:freebsd:freebsd:4.3:releng cpe:/o:freebsd:freebsd:4.3:stable cpe:/o:freebsd:freebsd:4.4 cpe:/o:freebsd:freebsd:4.4:release_p42 cpe:/o:freebsd:freebsd:4.4:releng cpe:/o:freebsd:freebsd:4.4:stable cpe:/o:freebsd:freebsd:4.5 cpe:/o:freebsd:freebsd:4.5:release cpe:/o:freebsd:freebsd:4.5:release_p32 cpe:/o:freebsd:freebsd:4.5:releng cpe:/o:freebsd:freebsd:4.5:stable cpe:/o:freebsd:freebsd:4.6 cpe:/o:freebsd:freebsd:4.6:release cpe:/o:freebsd:freebsd:4.6:release_p20 cpe:/o:freebsd:freebsd:4.6:releng cpe:/o:freebsd:freebsd:4.6:stable cpe:/o:freebsd:freebsd:4.6.2 cpe:/o:freebsd:freebsd:4.7 cpe:/o:freebsd:freebsd:4.7:release cpe:/o:freebsd:freebsd:4.7:release_p17 cpe:/o:freebsd:freebsd:4.7:releng cpe:/o:freebsd:freebsd:4.7:stable cpe:/o:freebsd:freebsd:4.8 cpe:/o:freebsd:freebsd:4.8:pre-release cpe:/o:freebsd:freebsd:4.8:release_p6 cpe:/o:freebsd:freebsd:4.8:releng cpe:/o:freebsd:freebsd:4.9 cpe:/o:freebsd:freebsd:4.9:pre-release cpe:/o:freebsd:freebsd:4.9:releng cpe:/o:freebsd:freebsd:4.10 cpe:/o:freebsd:freebsd:4.10:release cpe:/o:freebsd:freebsd:4.10:release_p8 cpe:/o:freebsd:freebsd:4.10:releng cpe:/o:freebsd:freebsd:4.11:release_p3 cpe:/o:freebsd:freebsd:4.11:releng cpe:/o:freebsd:freebsd:4.11:stable cpe:/o:freebsd:freebsd:5.0 cpe:/o:freebsd:freebsd:5.0:alpha cpe:/o:freebsd:freebsd:5.0:release_p14 cpe:/o:freebsd:freebsd:5.0:releng cpe:/o:freebsd:freebsd:5.1 cpe:/o:freebsd:freebsd:5.1:alpha cpe:/o:freebsd:freebsd:5.1:release cpe:/o:freebsd:freebsd:5.1:release_p5 cpe:/o:freebsd:freebsd:5.1:releng cpe:/o:freebsd:freebsd:5.2 cpe:/o:freebsd:freebsd:5.2.1:release cpe:/o:freebsd:freebsd:5.2.1:releng cpe:/o:freebsd:freebsd:5.3 cpe:/o:freebsd:freebsd:5.3:release cpe:/o:freebsd:freebsd:5.3:releng cpe:/o:freebsd:freebsd:5.3:stable cpe:/o:freebsd:freebsd:5.4:pre-release cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux:4.0::advanced_server cpe:/o:redhat:enterprise_linux:4.0::enterprise_server cpe:/o:redhat:enterprise_linux:4.0::workstation cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:enterprise_linux_desktop:4.0 cpe:/o:redhat:fedora_core:core_3.0 cpe:/o:sco:openserver:5.0.7 cpe:/o:sco:unixware:7.1.3 cpe:/o:sco:unixware:7.1.3_up cpe:/o:sco:unixware:7.1.4 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:solaris:8.0::x86 cpe:/o:sun:solaris:9.0::x86 cpe:/o:sun:solaris:9.0:x86_update_2 cpe:/o:sun:solaris:10.0::sparc cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc cpe:/o:ubuntu:ubuntu_linux:5.04::amd64 cpe:/o:ubuntu:ubuntu_linux:5.04::i386 cpe:/o:ubuntu:ubuntu_linux:5.04::powerpc

CVE-2005-0109

2005-03-05T00:00:00.000-05:00

2018-10-16T08:06:26.827-04:00

4.7

LOCAL

MEDIUM

NONE

COMPLETE

NONE

http://nvd.nist.gov

2018-10-16T07:41:09.973-04:00

SCO SCOSA-2005.24 MLIST [freebsd-hackers] 20050304 Re: FW:FreeBSD hiding security stuff MLIST [freebsd-security] 20050304 [Fwd: Re: FW:FreeBSD hiding security stuff] MLIST [openbsd-misc] 20050304 Re: FreeBSD hiding security stuff SECTRACK 1013967 SUNALERT 101739 MISC http://www.daemonology.net/hyperthreading-considered-harmful/ MISC http://www.daemonology.net/papers/htt.pdf CERT-VN VU#911878 REDHAT RHSA-2005:476 REDHAT RHSA-2005:800 BID 12724 VUPEN ADV-2005-0540 VUPEN ADV-2005-3002 MISC http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754 Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic keys, via a timing attack on memory cache misses.

cpe:/a:microsoft:ie:6.0:sp2

CVE-2005-0110

2005-01-14T00:00:00.000-05:00

2016-10-17T23:07:56.607-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20050114 Internet Explorer (SP2) - Remote File Download Internet Explorer 6 on Windows XP SP2 allows remote attackers to bypass the file download warning dialog and possibly trick an unknowledgeable user into executing arbitrary code via a web page with a body element containing an onclick tag, as demonstrated using the createElement function.

cpe:/a:mysql:maxdb:7.5.00

CVE-2005-0111

2005-01-13T00:00:00.000-05:00

2011-03-07T21:19:33.097-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-03T04:28:00.000-04:00

ALLOWS_USER_ACCESS

SECTRACK 1012893 IDEFENSE 20050113 MySQL MaxDB WebAgent websql logon Buffer Overflow Vulnerability BID 12265 Stack-based buffer overflow in the websql CGI program in MySQL MaxDB 7.5.00 allows remote attackers to execute arbitrary code via a long password parameter.

cpe:/h:3com:3crwe454g72:1.0.2 cpe:/h:3com:3crwe454g72:1.0.2.11 cpe:/h:3com:3crwe454g72:1.0.3.5

CVE-2005-0112

2005-04-14T00:00:00.000-04:00

2017-07-10T21:32:06.060-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1012958 IDEFENSE 20050120 3Com OfficeConnect Wireless 11g AP Information Disclosure Vulnerability BID 12322 XF 3com-officeconnect-information-disclosure(18994) The web-based administrative interface for 3Com OfficeConnect Wireless 11g Access Point (AP) 1.00.08, and possibly earlier versions before 1.03.07A, allows remote attackers to bypass authentication and obtain sensitive information by directly accessing the (1) config.bin (2) profile.wlp?PN=ggg or (3) event.logs URLs.

cpe:/o:sgi:irix:6.5

CVE-2005-0113

2005-01-14T00:00:00.000-05:00

2017-07-10T21:32:06.107-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1012894 IDEFENSE 20050113 SGI IRIX inpview Design Error Vulnerability BID 12259 XF irix-inpview-gain-privileges(18894) inpview in SGI IRIX allows local users to execute arbitrary commands via the SUN_TTSESSION_CMD environment variable, which is executed by inpview without dropping privileges.

cpe:/a:checkpoint:check_point_integrity_client:4.5.122.000 cpe:/a:checkpoint:check_point_integrity_client:5.1.556.166 cpe:/a:zonelabs:zonealarm:5.5.062.011 cpe:/a:zonelabs:zonealarm_wireless_security:5.5.080.000

CVE-2005-0114

2005-02-11T00:00:00.000-05:00

2008-09-05T16:45:21.747-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-03T05:03:00.000-04:00

CONFIRM http://download.zonelabs.com/bin/free/securityAlert/19.html IDEFENSE 20050211 ZoneAlarm 5.1 Invalid Pointer Dereference Vulnerability BID 12531 vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Client 4.x before 4.5.122.000 and 5.x before 5.1.556.166 do not properly verify that the ServerPortName argument to the NtConnectPort function is a valid memory address, which allows local users to cause a denial of service (system crash) when ZoneAlarm attempts to dereference an invalid pointer.

cpe:/a:datarescue:ida:4.7

CVE-2005-0115

2005-01-24T00:00:00.000-05:00

2017-07-10T21:32:06.170-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1012975 CONFIRM http://www.datarescue.com/ubb/ultimatebb.php?/topic/2/146.html IDEFENSE 20050124 DataRescue Interactive Disassembler Pro Buffer Overflow Vulnerability BID 12353 XF database-ida-portable-executable-bo(19042) Stack-based buffer overflow in DataRescue Interactive Disassembler (IDA) Pro 4.7 allows attackers to execute arbitrary code via a PE file with an Import Address Table containing a long import library name.

cpe:/a:awstats:awstats:6.3

CVE-2005-0116

2005-01-18T00:00:00.000-05:00

2008-09-05T16:45:22.057-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-03T05:41:00.000-04:00

ALLOWS_USER_ACCESS

CONFIRM http://awstats.sourceforge.net/docs/awstats_changelog.txt MISC http://packetstormsecurity.org/0501-exploits/AWStatsVulnAnalysis.pdf IDEFENSE 20050117 AWStats Remote Command Execution Vulnerability CERT-VN VU#272296 BID 12298 AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir parameter to aswtats.pl.

cpe:/a:xshisen:xshisen:1.36

CVE-2005-0117

2005-01-11T00:00:00.000-05:00

2008-09-05T16:45:22.213-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-03T05:56:00.000-04:00

MISC http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=289784 CONFIRM http://www.vuxml.org/freebsd/56971fa6-641c-11d9-a097-000854d03344.html Buffer overflow in XShisen before 1.36 allows local users to execute arbitrary code via a long GECOS field.

cpe:/a:helvis:helvis:1.8h2_1

CVE-2005-0118

2005-05-02T00:00:00.000-04:00

2008-09-05T16:45:22.370-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-03T10:13:00.000-04:00

CONFIRM http://www.vuxml.org/freebsd/bb99f803-5fde-11d9-b721-00065be4b5b6.html helvis 1.8h2_1 and earlier stores recovery files in world readable directories with world readable permissions, which allows local users to read the recovered files of other users.

cpe:/a:helvis:helvis:1.8h2_1

CVE-2005-0119

2005-05-02T00:00:00.000-04:00

2008-09-05T16:45:22.527-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-03T10:14:00.000-04:00

CONFIRM http://www.vuxml.org/freebsd/bb99f803-5fde-11d9-b721-00065be4b5b6.html helvis 1.8h2_1 and earlier allows local users to recover and read the files of other users via the elvrec setuid program.

CVE-2005-0120

2005-05-02T00:00:00.000-04:00

2008-09-05T16:45:22.683-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-03T10:16:00.000-04:00

MISC http://people.freebsd.org/~niels/ports/korean/helvis/issues.txt helvis 1.8h2_1 and earlier allows local users to delete arbitrary files via the elvprsv setuid program.

cpe:/a:alexander_siegel:golddig:2.0

CVE-2005-0121

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:06.217-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://www.vuxml.org/freebsd/949c470e-528f-11d9-ac20-00065be4b5b6.html XF golddig-long-mapname-bo(19039) XF golddig-long-username-bo(19040) Multiple buffer overflows in golddig 2.0 and earlier allow local users to execute arbitrary code via (1) a long map name command line argument or (2) a long username as recorded in the USER environment variable.

CVE-2005-0122

2005-04-14T00:00:00.000-04:00

2008-09-10T15:34:59.617-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0975. Reason: This candidate is a duplicate of CVE-2005-0975. Notes: All CVE users should reference CVE-2005-0975 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVE-2005-0123

2017-05-11T10:29:02.073-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none.

CVE-2005-0124

2005-04-14T00:00:00.000-04:00

2018-10-19T11:31:07.057-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov MLIST [linux-kernel] 20041216 [Coverity] Untrusted user data in kernel MLIST [linux-kernel] 20050105 Re: [Coverity] Untrusted user data in kernel MLIST [linux-kernel] 20050107 [PATCH 2.4.29-pre3-bk4] fs/coda Re: [Coverity] Untrusted user data in kernel MLIST [linux-kernel] 20050107 [PATCH 2.6.10-mm2] fs/coda Re: [Coverity] Untrusted user data in kernel SECTRACK 1013018 DEBIAN DSA-1017 DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 REDHAT RHSA-2005:663 REDHAT RHSA-2006:0191 FEDORA FLSA:157459-1 BID 14967 VUPEN ADV-2005-1878 The coda_pioctl function in the coda functionality (pioctl.c) for Linux kernel 2.6.9 and 2.4.x before 2.4.29 may allow local users to cause a denial of service (crash) or execute arbitrary code via negative vi.in_size or vi.out_size values, which may trigger a buffer overflow.

cpe:/o:apple:mac_os_x:10.3.4 cpe:/o:apple:mac_os_x:10.3.7 cpe:/o:apple:mac_os_x_server:10.3.7

CVE-2005-0125

2005-05-02T00:00:00.000-04:00

2018-08-13T17:47:21.103-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2005-01-25 BUGTRAQ 20050127 DMA[2005-0127a] - 'Apple OSX batch family poor use of setuid' CERT-VN VU#678150 XF macos-at-gain-privileges(18981) The "at" commands on Mac OS X 10.3.7 and earlier do not properly drop privileges, which allows local users to (1) delete arbitrary files via atrm, (2) execute arbitrary programs via the -f argument to batch, or (3) read arbitrary files via the -f argument to batch, which generates a job file that is readable by the local user.

cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3.7 cpe:/o:apple:mac_os_x:10.3.8 cpe:/o:apple:mac_os_x_server:10.2.8 cpe:/o:apple:mac_os_x_server:10.3.7

CVE-2005-0126

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:06.327-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

APPLE APPLE-SA-2005-01-25 SECTRACK 1013000 CERT-VN VU#980078 BID 12367 XF macos-icc-profile-bo(19083) ColorSync on Mac OS X 10.3.7 and 10.3.8 allows attackers to execute arbitrary code via malformed ICC color profiles that modify the heap.

cpe:/o:apple:mac_os_x:10.3.7 cpe:/o:apple:mac_os_x_server:10.3.7

CVE-2005-0127

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:06.373-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2005-01-25 SECTRACK 1013001 CERT-VN VU#464662 XF macos-ethernet-address-disclosure(19085) Mail in Mac OS X 10.3.7, when generating a Message-ID header, generates a GUUID that includes information that identifies the Ethernet hardware being used, which allows remote attackers to link mail messages to a particular machine.

CVE-2005-0128

2017-05-11T10:29:02.087-04:00

2017-05-11T10:29:02.103-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none.

cpe:/a:berlios:konversation:0.15

CVE-2005-0129

2005-04-14T00:00:00.000-04:00

2017-07-10T21:32:06.437-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20050119 Multiple vulnerabilities in Konversation BUGTRAQ 20050119 Multiple vulnerabilities in Konversation SECTRACK 1012972 GENTOO GLSA-200501-34 CONFIRM http://www.kde.org/info/security/advisory-20050121-1.txt BID 12312 XF konversation-expansion-execute-code(19025) The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing "%" variables, which are recursively expanded by the Server::parseWildcards function when the Part Button is selected.

cpe:/a:berlios:konversation:0.15

CVE-2005-0130

2005-04-14T00:00:00.000-04:00

2017-07-11T21:29:01.253-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20050119 Multiple vulnerabilities in Konversation BUGTRAQ 20050119 Multiple vulnerabilities in Konversation SECTRACK 1012972 GENTOO GLSA-200501-34 CONFIRM http://www.kde.org/info/security/advisory-20050121-1.txt BID 12312 XF konversation-perlscript-execute-code(19008) Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in (1) channel names or (2) song names that are not properly quoted when the user runs IRC scripts.

cpe:/a:berlios:konversation:0.15

CVE-2005-0131

2005-04-14T00:00:00.000-04:00

2017-07-10T21:32:06.547-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20050119 Multiple vulnerabilities in Konversation BUGTRAQ 20050119 Multiple vulnerabilities in Konversation SECTRACK 1012972 GENTOO GLSA-200501-34 CONFIRM http://www.kde.org/info/security/advisory-20050121-1.txt BID 12312 XF konversation-nick-password-information-disclosure(19038) The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users.

cpe:/a:clam_anti-virus:clamav:0.51 cpe:/a:clam_anti-virus:clamav:0.52 cpe:/a:clam_anti-virus:clamav:0.53 cpe:/a:clam_anti-virus:clamav:0.54 cpe:/a:clam_anti-virus:clamav:0.60 cpe:/a:clam_anti-virus:clamav:0.65 cpe:/a:clam_anti-virus:clamav:0.67 cpe:/a:clam_anti-virus:clamav:0.68 cpe:/a:clam_anti-virus:clamav:0.68.1 cpe:/a:clam_anti-virus:clamav:0.80

CVE-2005-0133

2005-05-02T00:00:00.000-04:00

2008-09-10T15:35:00.180-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-03T11:10:00.000-04:00

CONECTIVA CLA-2005:928 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=300116 GENTOO GLSA-200501-46 MANDRAKE MDKSA-2005:025 TRUSTIX 2005-0003 ClamAV 0.80 and earlier allows remote attackers to cause a denial of service (clamd daemon crash) via a ZIP file with malformed headers.

cpe:/o:sco:unixware:7.1.1 cpe:/o:sco:unixware:7.1.3 cpe:/o:sco:unixware:7.1.4

CVE-2005-0134

2005-05-18T00:00:00.000-04:00

2011-03-07T21:19:34.687-05:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SCO SCOSA-2005.8 VUPEN ADV-2005-0077 The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could allow attackers to hijack local sockets.

cpe:/o:linux:linux_kernel:2.6.0

CVE-2005-0135

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:51.373-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://linux.bkbits.net:8080/linux-2.6/cset@41f2beablXVnAs_6fznhhITh1j5hZg DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 REDHAT RHSA-2005:284 REDHAT RHSA-2005:293 REDHAT RHSA-2005:366 BID 13266 CONFIRM https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=148868 The unw_unwind_to_user function in unwind.c on Itanium (ia64) architectures in Linux kernel 2.6 allows local users to cause a denial of service (system crash).

cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8:rc1 cpe:/o:linux:linux_kernel:2.6.8:rc2 cpe:/o:linux:linux_kernel:2.6.8:rc3 cpe:/o:linux:linux_kernel:2.6.8:rc4 cpe:/o:linux:linux_kernel:2.6.8.1 cpe:/o:linux:linux_kernel:2.6.8.1.5 cpe:/o:linux:linux_kernel:2.6.8.1.5::386 cpe:/o:linux:linux_kernel:2.6.8.1.5::686 cpe:/o:linux:linux_kernel:2.6.8.1.5::686_smp cpe:/o:linux:linux_kernel:2.6.8.1.5::amd64 cpe:/o:linux:linux_kernel:2.6.8.1.5::amd64_k8 cpe:/o:linux:linux_kernel:2.6.8.1.5::amd64_k8_smp cpe:/o:linux:linux_kernel:2.6.8.1.5::amd64_xeon cpe:/o:linux:linux_kernel:2.6.8.1.5::k7 cpe:/o:linux:linux_kernel:2.6.8.1.5::k7_smp cpe:/o:linux:linux_kernel:2.6.8.1.5::power3 cpe:/o:linux:linux_kernel:2.6.8.1.5::power3_smp cpe:/o:linux:linux_kernel:2.6.8.1.5::power4 cpe:/o:linux:linux_kernel:2.6.8.1.5::power4_smp cpe:/o:linux:linux_kernel:2.6.8.1.5::powerpc cpe:/o:linux:linux_kernel:2.6.8.1.5::powerpc_smp cpe:/o:linux:linux_kernel:2.6.9 cpe:/o:linux:linux_kernel:2.6.9:2.6.20 cpe:/o:linux:linux_kernel:2.6.9:rc1 cpe:/o:linux:linux_kernel:2.6.9:rc2 cpe:/o:linux:linux_kernel:2.6.9:rc3 cpe:/o:linux:linux_kernel:2.6.9:rc4 cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.10:rc1 cpe:/o:linux:linux_kernel:2.6.10:rc2 cpe:/o:linux:linux_kernel:2.6.10:rc3

CVE-2005-0136

2005-12-31T00:00:00.000-05:00

2018-10-30T12:26:20.390-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov MLIST [kernel-svn-changes] 20050816 r3920 - in branches/dist/sarge-security: . kernel kernel/i386 kernel/source kernel/source/kernel-source-2.6.8-2.6.8/debian MISC http://openvz.org/news/updates/kernel-022stab045.1-released MLIST [linux-ia64] 20040916 Re: [Patch] Per CPU MCA/INIT data save areas CONFIRM http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11 REDHAT RHSA-2005:420 REDHAT RHSA-2005:663 VUPEN ADV-2005-1878 MISC https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=148862 MISC https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=155283 The Linux kernel before 2.6.11 on the Itanium IA64 platform has certain "ptrace corner cases" that allow local users to cause a denial of service (crash) via crafted syscalls, possibly related to MCA/INIT, a different vulnerability than CVE-2005-1761.

cpe:/o:linux:linux_kernel:2.6.0

CVE-2005-0137

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:51.497-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov REDHAT RHSA-2005:284 REDHAT RHSA-2005:293 Linux kernel 2.6 on Itanium (ia64) architectures allows local users to cause a denial of service via a "missing Itanium syscall table entry."

cpe:/o:sgi:irix:6.5.25 cpe:/o:sgi:irix:6.5.26 cpe:/o:sgi:irix:6.5.27

CVE-2005-0138

2005-09-21T16:03:00.000-04:00

2016-05-09T11:32:48.233-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2016-05-09T11:18:15.027-04:00

CIAC P-214 VUPEN ADV-2005-0702 rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not correctly allow access to anonymous clients that connect from a system whose hostname can not be determined. NOTE: while this issue occurs in a security mechanism, there is no apparent attacker role and probably does not satisfy the CVE definition of a vulnerability.

cpe:/o:sgi:irix:6.5.25 cpe:/o:sgi:irix:6.5.26 cpe:/o:sgi:irix:6.5.27

CVE-2005-0139

2005-09-21T16:03:00.000-04:00

2016-05-09T12:49:42.510-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2016-05-09T11:19:27.847-04:00

CIAC P-214 VUPEN ADV-2005-0702 Unknown vulnerability in rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not sufficiently restrict access rights for read-mostly exports, which allows attackers to conduct unauthorized activities.

cpe:/a:peid:peid:0.92

CVE-2005-0140

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:06.607-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

IDEFENSE 20050124 DataRescue Interactive Disassembler Pro Buffer Overflow Vulnerability BID 12355 XF database-ida-portable-executable-bo(19042) Buffer overflow in PeID allows attackers to execute arbitrary code via a PE file with an Import Address Table containing a long import library name.

cpe:/a:mozilla:firefox:0.8 cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:firefox:0.9.1 cpe:/a:mozilla:firefox:0.9.2 cpe:/a:mozilla:firefox:0.9.3 cpe:/a:mozilla:mozilla:1.7 cpe:/a:mozilla:mozilla:1.7:rc3 cpe:/a:mozilla:mozilla:1.7.1 cpe:/a:mozilla:mozilla:1.7.2 cpe:/a:mozilla:mozilla:1.7.3

CVE-2005-0141

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:51.560-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.mozilla.org/security/announce/mfsa2005-01.html REDHAT RHSA-2005:323 REDHAT RHSA-2005:335 BID 12407 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=249332 XF mozilla-firefox-file-upload(19168) Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to load local files via links "with a custom getter and toString method" that are middle-clicked by the user to be opened in a new tab.

cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:mozilla:1.7 cpe:/a:mozilla:mozilla:1.7:rc3 cpe:/a:mozilla:mozilla:1.7.1 cpe:/a:mozilla:mozilla:1.7.2 cpe:/a:mozilla:mozilla:1.7.3 cpe:/a:mozilla:thunderbird:0.6 cpe:/a:mozilla:thunderbird:0.7 cpe:/a:mozilla:thunderbird:0.8

CVE-2005-0142

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:51.623-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.mozilla.org/security/announce/mfsa2005-02.html SUSE SUSE-SA:2006:004 REDHAT RHSA-2005:335 REDHAT RHSA-2005:384 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=251297 XF mozilla-world-readable(17832) Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permissions, which allows local users to read certain web content or attachments that belong to other users, e.g. content that is managed by helper applications such as PDF.

cpe:/a:mozilla:firefox:0.8 cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:firefox:0.9:rc cpe:/a:mozilla:firefox:0.9.1 cpe:/a:mozilla:firefox:0.9.2 cpe:/a:mozilla:firefox:0.9.3 cpe:/a:mozilla:firefox:0.10 cpe:/a:mozilla:firefox:0.10.1 cpe:/a:mozilla:firefox:1.0 cpe:/a:mozilla:mozilla cpe:/a:mozilla:mozilla:0.8 cpe:/a:mozilla:mozilla:0.9.2 cpe:/a:mozilla:mozilla:0.9.2.1 cpe:/a:mozilla:mozilla:0.9.3 cpe:/a:mozilla:mozilla:0.9.4 cpe:/a:mozilla:mozilla:0.9.4.1 cpe:/a:mozilla:mozilla:0.9.5 cpe:/a:mozilla:mozilla:0.9.6 cpe:/a:mozilla:mozilla:0.9.7 cpe:/a:mozilla:mozilla:0.9.8 cpe:/a:mozilla:mozilla:0.9.9 cpe:/a:mozilla:mozilla:0.9.35 cpe:/a:mozilla:mozilla:0.9.48 cpe:/a:mozilla:mozilla:1.0 cpe:/a:mozilla:mozilla:1.0:rc1 cpe:/a:mozilla:mozilla:1.0:rc2 cpe:/a:mozilla:mozilla:1.0.1 cpe:/a:mozilla:mozilla:1.0.2 cpe:/a:mozilla:mozilla:1.1 cpe:/a:mozilla:mozilla:1.1:alpha cpe:/a:mozilla:mozilla:1.1:beta cpe:/a:mozilla:mozilla:1.2 cpe:/a:mozilla:mozilla:1.2:alpha cpe:/a:mozilla:mozilla:1.2:beta cpe:/a:mozilla:mozilla:1.2.1 cpe:/a:mozilla:mozilla:1.3 cpe:/a:mozilla:mozilla:1.3.1 cpe:/a:mozilla:mozilla:1.4 cpe:/a:mozilla:mozilla:1.4:alpha cpe:/a:mozilla:mozilla:1.4:beta cpe:/a:mozilla:mozilla:1.4.1 cpe:/a:mozilla:mozilla:1.4.2 cpe:/a:mozilla:mozilla:1.4.4 cpe:/a:mozilla:mozilla:1.5 cpe:/a:mozilla:mozilla:1.5:alpha cpe:/a:mozilla:mozilla:1.5:rc1 cpe:/a:mozilla:mozilla:1.5:rc2 cpe:/a:mozilla:mozilla:1.5.1 cpe:/a:mozilla:mozilla:1.6 cpe:/a:mozilla:mozilla:1.6:alpha cpe:/a:mozilla:mozilla:1.6:beta cpe:/a:mozilla:mozilla:1.7 cpe:/a:mozilla:mozilla:1.7:alpha cpe:/a:mozilla:mozilla:1.7:beta cpe:/a:mozilla:mozilla:1.7:rc1 cpe:/a:mozilla:mozilla:1.7:rc2 cpe:/a:mozilla:mozilla:1.7:rc3 cpe:/a:mozilla:mozilla:1.7.1 cpe:/a:mozilla:mozilla:1.7.2 cpe:/a:mozilla:mozilla:1.7.3 cpe:/a:mozilla:mozilla:1.7.5 cpe:/a:mozilla:mozilla:1.8:alpha2

CVE-2005-0143

2005-03-23T00:00:00.000-05:00

2017-10-10T21:29:51.700-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.mozilla.org/security/announce/mfsa2005-03.html REDHAT RHSA-2005:335 REDHAT RHSA-2005:384 BID 12407 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=257308 XF mozilla-ssl-spoofing(19166) Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a trusted site, which could facilitate phishing attacks.

CVE-2005-0144

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:51.780-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.mozilla.org/security/announce/mfsa2005-04.html REDHAT RHSA-2005:323 REDHAT RHSA-2005:335 BID 12407 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=262689 XF mozilla-ssl-view-source-spoofing(19169) Firefox before 1.0 and Mozilla before 1.7.5 display the secure site lock icon when a view-source: URL references a secure SSL site while an insecure page is being loaded, which could facilitate phishing attacks.

CVE-2005-0145

2005-01-24T00:00:00.000-05:00

2017-10-10T21:29:51.840-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.mozilla.org/security/announce/mfsa2005-07.html BID 12407 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=265176 XF mozilla-script-click-event-bypass(19170) Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Javascript to bypass the file download prompt when the user uses the Alt-click feature.

CVE-2005-0146

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:51.903-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.mozilla.org/security/announce/mfsa2005-08.html REDHAT RHSA-2005:335 REDHAT RHSA-2005:384 BID 12407 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=265728 XF mozilla-middle-click-information-disclosure(19171) Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from the clipboard via Javascript that generates a middle-click event on systems for which a middle-click performs a paste operation.

CVE-2005-0147

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:51.967-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://www.mozilla.org/security/announce/mfsa2005-09.html REDHAT RHSA-2005:323 BID 12407 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=267263 XF mozilla-407-proxy-obtain-information(19174) Firefox before 1.0 and Mozilla before 1.7.5, when configured to use a proxy, respond to 407 proxy auth requests from arbitrary servers, which allows remote attackers to steal NTLM or SPNEGO credentials.

cpe:/a:mozilla:thunderbird:0.6 cpe:/a:mozilla:thunderbird:0.7 cpe:/a:mozilla:thunderbird:0.8

CVE-2005-0148

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:52.030-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.mozilla.org/security/announce/mfsa2005-10.html BID 12407 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=263546 XF thunderbird-javascript-handler-launch(19173) Thunderbird before 0.9, when running on Windows systems, uses the default handler when processing javascript: links, which invokes Internet Explorer and may expose the Thunderbird user to vulnerabilities in the version of Internet Explorer that is installed on the user's system. NOTE: since the invocation between multiple products is a common practice, and the vulnerabilities inherent in multi-product interactions are not easily enumerable, this issue might be REJECTED in the future.

cpe:/a:mozilla:mozilla:1.7 cpe:/a:mozilla:mozilla:1.7:alpha cpe:/a:mozilla:mozilla:1.7:beta cpe:/a:mozilla:mozilla:1.7:rc1 cpe:/a:mozilla:mozilla:1.7:rc2 cpe:/a:mozilla:mozilla:1.7:rc3 cpe:/a:mozilla:mozilla:1.7.1 cpe:/a:mozilla:mozilla:1.7.2 cpe:/a:mozilla:mozilla:1.7.3 cpe:/a:mozilla:thunderbird:0.6 cpe:/a:mozilla:thunderbird:0.7 cpe:/a:mozilla:thunderbird:0.7.1 cpe:/a:mozilla:thunderbird:0.7.2 cpe:/a:mozilla:thunderbird:0.7.3 cpe:/a:mozilla:thunderbird:0.9

CVE-2005-0149

2005-02-15T00:00:00.000-05:00

2017-10-10T21:29:52.107-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.mozilla.org/security/announce/mfsa2005-11.html SUSE SUSE-SA:2006:004 REDHAT RHSA-2005:094 REDHAT RHSA-2005:323 REDHAT RHSA-2005:335 BID 12407 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=268107 XF mozilla-cookie-policy-bypass(19172) Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages.

CVE-2005-0150

2005-05-26T00:00:00.000-04:00

2017-10-10T21:29:52.170-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.mozilla.org/security/announce/mfsa2005-12.html BID 12407 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=265668 XF mozilla-firefox-livefeed-xss(19187) Firefox before 1.0 allows the user to store a (1) javascript: or (2) data: URLs as a Livefeed bookmark, then executes it in the security context of the currently loaded page when the user later accesses the bookmark, which could allow remote attackers to execute arbitrary code.

cpe:/a:adobe:creative_suite:1.0 cpe:/a:adobe:photoshop:8.0 cpe:/a:adobe:premiere:1.5::pro

CVE-2005-0151

2005-06-13T00:00:00.000-04:00

2008-09-05T16:45:27.607-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-13T09:49:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1014168 SECTRACK 1014169 SECTRACK 1014170 CONFIRM http://www.adobe.com/support/techdocs/331688.html Unknown vulnerability in the installation of Adobe License Management Service, as used in Adobe Photoshop CS, Adobe Creative Suite 1.0, and Adobe Premiere Pro 1.5, allows attackers to gain administrator privileges.

cpe:/a:squirrelmail:squirrelmail:1.2.6

CVE-2005-0152

2005-02-02T00:00:00.000-05:00

2008-09-05T16:45:27.760-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-03T12:50:00.000-04:00

ALLOWS_OTHER_ACCESS

DEBIAN DSA-662 CERT-VN VU#203214 PHP remote file inclusion vulnerability in Squirrelmail 1.2.6 allows remote attackers to execute arbitrary code via "URL manipulation."

cpe:/a:larry_wall:perl:5.8.0

CVE-2005-0155

2005-05-02T00:00:00.000-04:00

2018-08-13T17:47:21.243-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLSA-2006:1056 FEDORA FLSA-2006:152845 BUGTRAQ 20050202 [USN-72-1] Perl vulnerabilities FULLDISC 20050207 DMA[2005-0131a] - 'Setuid Perl PERLIO_DEBUG root owned file creation' CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2006-163.htm GENTOO GLSA-200502-13 MANDRAKE MDKSA-2005:031 REDHAT RHSA-2005:103 REDHAT RHSA-2005:105 BID 12426 TRUSTIX 2005-0003 XF perl-perliodebug-file-overwrite(19207) The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to create arbitrary files via the PERLIO_DEBUG variable.

cpe:/a:larry_wall:perl:5.8.0 cpe:/a:larry_wall:perl:5.8.1 cpe:/a:larry_wall:perl:5.8.3 cpe:/a:larry_wall:perl:5.8.4 cpe:/a:larry_wall:perl:5.8.4.1 cpe:/a:larry_wall:perl:5.8.4.2 cpe:/a:larry_wall:perl:5.8.4.2.3 cpe:/a:larry_wall:perl:5.8.4.3 cpe:/a:larry_wall:perl:5.8.4.4 cpe:/a:larry_wall:perl:5.8.4.5 cpe:/a:sgi:propack:3.0 cpe:/o:ibm:aix:5.2 cpe:/o:ibm:aix:5.3 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:fedora_core:core_3.0 cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.0::i386 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2 cpe:/o:trustix:secure_linux:1.5 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1 cpe:/o:trustix:secure_linux:2.2 cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc

CVE-2005-0156

2005-02-07T00:00:00.000-05:00

2018-08-13T17:47:21.367-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONECTIVA CLSA-2006:1056 FEDORA FLSA-2006:152845 BUGTRAQ 20050202 [USN-72-1] Perl vulnerabilities FULLDISC 20050207 DMA[2005-0131b] - 'Setuid Perl PERLIO_DEBUG GENTOO GLSA-200502-13 MANDRAKE MDKSA-2005:031 REDHAT RHSA-2005:103 REDHAT RHSA-2005:105 BID 12426 TRUSTIX 2005-0003 XF perl-perliodebug-bo(19208) Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree.

cpe:/a:smartlist:smartlist:3.15

CVE-2005-0157

2005-05-03T00:00:00.000-04:00

2008-09-10T15:35:03.460-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-12T15:53:00.000-04:00

ALLOWS_OTHER_ACCESS

DEBIAN DSA-720 The confirm add-on in SmartList 3.15 and earlier allows attackers to subscribe arbitrary e-mail addresses by using a valid cookie that specifies an address other than the address for which the cookie was assigned.

cpe:/a:bidwatcher:bidwatcher:1.0.5 cpe:/a:bidwatcher:bidwatcher:1.1.2 cpe:/a:bidwatcher:bidwatcher:1.1.7 cpe:/a:bidwatcher:bidwatcher:1.1.8 cpe:/a:bidwatcher:bidwatcher:1.1.9 cpe:/a:bidwatcher:bidwatcher:1.1.9.1 cpe:/a:bidwatcher:bidwatcher:1.1.9.2 cpe:/a:bidwatcher:bidwatcher:1.2.0 cpe:/a:bidwatcher:bidwatcher:1.3.0_beta cpe:/a:bidwatcher:bidwatcher:1.3.1 cpe:/a:bidwatcher:bidwatcher:1.3.2 cpe:/a:bidwatcher:bidwatcher:1.3.3 cpe:/a:bidwatcher:bidwatcher:1.3.4 cpe:/a:bidwatcher:bidwatcher:1.3.5 cpe:/a:bidwatcher:bidwatcher:1.3.6 cpe:/a:bidwatcher:bidwatcher:1.3.7 cpe:/a:bidwatcher:bidwatcher:1.3.8 cpe:/a:bidwatcher:bidwatcher:1.3.9 cpe:/a:bidwatcher:bidwatcher:1.3.10 cpe:/a:bidwatcher:bidwatcher:1.3.11 cpe:/a:bidwatcher:bidwatcher:1.3.12 cpe:/a:bidwatcher:bidwatcher:1.3.13 cpe:/a:bidwatcher:bidwatcher:1.3.14 cpe:/a:bidwatcher:bidwatcher:1.3.15 cpe:/a:bidwatcher:bidwatcher:1.3.16

CVE-2005-0158

2005-05-02T00:00:00.000-04:00

2008-09-05T16:45:28.527-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-03T13:29:00.000-04:00

DEBIAN DSA-687 GENTOO GLSA-200503-06 Format string vulnerability in bidwatcher before 1.3.17 allows remote malicious web servers from eBay, or a spoofed eBay server, to cause a denial of service and possibly execute arbitrary code via certain responses.

cpe:/a:debian:toolchain-source:3.0.3-1 cpe:/a:debian:toolchain-source:3.0.3-2 cpe:/a:debian:toolchain-source:3.0.3-3 cpe:/a:debian:toolchain-source:3.0.4 cpe:/o:debian:debian_linux:3.0 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc

CVE-2005-0159

2005-04-27T00:00:00.000-04:00

2017-07-10T21:32:07.453-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

DEBIAN DSA-679 BID 12540 XF toolchain-source-symlink(19317) The tpkg-* scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files.

cpe:/a:e-merge:unace:1.2b

CVE-2005-0160

2005-02-22T00:00:00.000-05:00

2008-09-05T16:45:28.947-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

2005-06-03T13:08:00.000-04:00

ALLOWS_USER_ACCESS

FULLDISC 20050222 unace-1.2b multiple buffer overflows and directory traversal bugs CERT-VN VU#215006 SUSE SUSE-SR:2005:016 BID 12630 Multiple buffer overflows in unace 1.2b allow attackers to execute arbitrary code via (1) 2 overflows in ACE archives, (2) a long command line argument, or (3) certain "Ready for next volume" messages.

cpe:/a:e-merge:unace:1.2b

CVE-2005-0161

2005-02-22T00:00:00.000-05:00

2008-09-05T16:45:29.103-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-03T13:10:00.000-04:00

FULLDISC 20050222 unace-1.2b multiple buffer overflows and directory traversal bugs SUSE SUSE-SR:2005:016 BID 12628 Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archive containing (1) ../ sequences or (2) absolute pathnames.

cpe:/a:openswan:openswan:1.0.9 cpe:/a:xelerance:openswan:2.3.0

CVE-2005-0162

2005-01-26T00:00:00.000-05:00

2019-07-29T09:23:54.030-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1013014 IDEFENSE 20050126 Openswan XAUTH/PAM Buffer Overflow Vulnerability CONFIRM http://www.openswan.org/support/vuln/IDEF0785/ FEDORA FEDORA-2005-082 BID 12377 XF openswan-xauth-pam-bo(19078) Stack-based buffer overflow in the get_internal_addresses function in the pluto application for Openswan 1.x before 1.0.9, and Openswan 2.x before 2.3.0, when compiled with XAUTH and PAM enabled, allows remote authenticated attackers to execute arbitrary code.

CVE-2005-0165

2017-05-11T10:29:02.120-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none.

CVE-2005-0166

2017-05-11T10:29:02.137-04:00

2017-05-11T10:29:02.150-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none.

CVE-2005-0167

2017-05-11T10:29:02.167-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none.

CVE-2005-0168

2017-05-11T10:29:02.183-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none.

CVE-2005-0169

2017-05-11T10:29:02.213-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none.

CVE-2005-0170

2017-05-11T10:29:02.230-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none.

CVE-2005-0171

2017-05-11T10:29:02.243-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none.

CVE-2005-0172

2017-05-11T10:29:02.277-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none.

cpe:/a:squid:squid:2.0.patch1 cpe:/a:squid:squid:2.0.patch2 cpe:/a:squid:squid:2.0.pre1 cpe:/a:squid:squid:2.0.release cpe:/a:squid:squid:2.1.patch1 cpe:/a:squid:squid:2.1.patch2 cpe:/a:squid:squid:2.1.pre1 cpe:/a:squid:squid:2.1.pre3 cpe:/a:squid:squid:2.1.pre4 cpe:/a:squid:squid:2.1.release cpe:/a:squid:squid:2.2.devel3 cpe:/a:squid:squid:2.2.devel4 cpe:/a:squid:squid:2.2.pre1 cpe:/a:squid:squid:2.2.pre2 cpe:/a:squid:squid:2.2.stable1 cpe:/a:squid:squid:2.2.stable2 cpe:/a:squid:squid:2.2.stable3 cpe:/a:squid:squid:2.2.stable4 cpe:/a:squid:squid:2.2.stable5 cpe:/a:squid:squid:2.3.devel2 cpe:/a:squid:squid:2.3.devel3 cpe:/a:squid:squid:2.3.stable1 cpe:/a:squid:squid:2.3.stable2 cpe:/a:squid:squid:2.3.stable3 cpe:/a:squid:squid:2.3.stable4 cpe:/a:squid:squid:2.3.stable5 cpe:/a:squid:squid:2.4.stable1 cpe:/a:squid:squid:2.4.stable2 cpe:/a:squid:squid:2.4.stable3 cpe:/a:squid:squid:2.4.stable4 cpe:/a:squid:squid:2.4.stable6 cpe:/a:squid:squid:2.4.stable7 cpe:/a:squid:squid:2.5.stable1 cpe:/a:squid:squid:2.5.stable2 cpe:/a:squid:squid:2.5.stable3 cpe:/a:squid:squid:2.5.stable4 cpe:/a:squid:squid:2.5.stable5 cpe:/a:squid:squid:2.5.stable6

CVE-2005-0173

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:52.403-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2005:923 FEDORA FLSA-2006:152809 BUGTRAQ 20050207 [USN-77-1] Squid vulnerabilities DEBIAN DSA-667 CERT-VN VU#924198 MANDRAKE MDKSA-2005:034 SUSE SUSE-SA:2005:006 REDHAT RHSA-2005:060 REDHAT RHSA-2005:061 BID 12431 CONFIRM http://www.squid-cache.org/bugs/show_bug.cgi?id=1187 CONFIRM http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-ldap_spaces CONFIRM http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-ldap_spaces.patch squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server.

cpe:/a:squid:squid:2.5.6 cpe:/a:squid:squid:2.5.stable1 cpe:/a:squid:squid:2.5.stable2 cpe:/a:squid:squid:2.5.stable3 cpe:/a:squid:squid:2.5.stable4 cpe:/a:squid:squid:2.5.stable5 cpe:/a:squid:squid:2.5.stable6 cpe:/a:squid:squid:2.5.stable7 cpe:/a:squid:squid:2.5_.stable1 cpe:/a:squid:squid:2.5_.stable3 cpe:/a:squid:squid:2.5_.stable4 cpe:/a:squid:squid:2.5_.stable5 cpe:/a:squid:squid:2.5_.stable6 cpe:/a:squid:squid:2.5_stable3 cpe:/a:squid:squid:2.5_stable4 cpe:/a:squid:squid:2.5_stable9

CVE-2005-0174

2005-02-07T00:00:00.000-05:00

2017-10-10T21:29:52.467-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONECTIVA CLA-2005:931 FEDORA FLSA-2006:152809 BUGTRAQ 20050207 [USN-77-1] Squid vulnerabilities CERT-VN VU#768702 MANDRAKE MDKSA-2005:034 SUSE SUSE-SA:2005:006 FEDORA FEDORA-2005-373 REDHAT RHSA-2005:060 REDHAT RHSA-2005:061 BID 12412 CONFIRM http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-header_parsing Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters.

CVE-2005-0175

2005-02-07T00:00:00.000-05:00

2017-10-10T21:29:52.530-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONECTIVA CLA-2005:931 FEDORA FLSA-2006:152809 BUGTRAQ 20050207 [USN-77-1] Squid vulnerabilities DEBIAN DSA-667 CERT-VN VU#625878 MANDRAKE MDKSA-2005:034 SUSE SUSE-SA:2005:006 FEDORA FEDORA-2005-373 REDHAT RHSA-2005:060 REDHAT RHSA-2005:061 BID 12433 CONFIRM http://www.squid-cache.org/Advisories/SQUID-2005_5.txt CONFIRM http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-response_splitting Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.

cpe:/o:linux:linux_kernel:2.6.9:2.6.20

CVE-2005-0176

2005-02-15T00:00:00.000-05:00

2017-10-10T21:29:52.607-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SGI 20060402-01-U CONECTIVA CLA-2005:930 BUGTRAQ 20050215 [USN-82-1] Linux kernel vulnerabilities REDHAT RHSA-2005:092 REDHAT RHSA-2005:472 BID 12598 The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released.

cpe:/o:linux:linux_kernel:2.6.8.1

CVE-2005-0177

2005-03-07T00:00:00.000-05:00

2017-10-10T21:29:52.670-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONECTIVA CLA-2005:930 CONFIRM http://linux.bkbits.net:8080/linux-2.6/cset@41e2bfbeOiXFga62XrBhzm7Kv9QDmQ BUGTRAQ 20050215 [USN-82-1] Linux kernel vulnerabilities REDHAT RHSA-2005:092 BID 12598 nls_ascii.c in Linux before 2.6.8.1 uses an incorrect table size, which allows attackers to cause a denial of service (kernel crash) via a buffer overflow.

cpe:/a:netkit:linux_netkit:0.17 cpe:/a:netkit:linux_netkit:0.17.17 cpe:/a:vserver:linux-vserver:1.20 cpe:/a:vserver:linux-vserver:1.21 cpe:/a:vserver:linux-vserver:1.22 cpe:/a:vserver:linux-vserver:1.23 cpe:/a:vserver:linux-vserver:1.24 cpe:/o:linux:linux_kernel:2.0 cpe:/o:linux:linux_kernel:2.0.1 cpe:/o:linux:linux_kernel:2.0.2 cpe:/o:linux:linux_kernel:2.0.3 cpe:/o:linux:linux_kernel:2.0.4 cpe:/o:linux:linux_kernel:2.0.5 cpe:/o:linux:linux_kernel:2.0.6 cpe:/o:linux:linux_kernel:2.0.7 cpe:/o:linux:linux_kernel:2.0.8 cpe:/o:linux:linux_kernel:2.0.9 cpe:/o:linux:linux_kernel:2.0.9.9 cpe:/o:linux:linux_kernel:2.0.10 cpe:/o:linux:linux_kernel:2.0.11 cpe:/o:linux:linux_kernel:2.0.12 cpe:/o:linux:linux_kernel:2.0.13 cpe:/o:linux:linux_kernel:2.0.14 cpe:/o:linux:linux_kernel:2.0.15 cpe:/o:linux:linux_kernel:2.0.16 cpe:/o:linux:linux_kernel:2.0.17 cpe:/o:linux:linux_kernel:2.0.18 cpe:/o:linux:linux_kernel:2.0.19 cpe:/o:linux:linux_kernel:2.0.20 cpe:/o:linux:linux_kernel:2.0.21 cpe:/o:linux:linux_kernel:2.0.22 cpe:/o:linux:linux_kernel:2.0.23 cpe:/o:linux:linux_kernel:2.0.24 cpe:/o:linux:linux_kernel:2.0.25 cpe:/o:linux:linux_kernel:2.0.26 cpe:/o:linux:linux_kernel:2.0.27 cpe:/o:linux:linux_kernel:2.0.28 cpe:/o:linux:linux_kernel:2.0.29 cpe:/o:linux:linux_kernel:2.0.30 cpe:/o:linux:linux_kernel:2.0.31 cpe:/o:linux:linux_kernel:2.0.32 cpe:/o:linux:linux_kernel:2.0.33 cpe:/o:linux:linux_kernel:2.0.34 cpe:/o:linux:linux_kernel:2.0.35 cpe:/o:linux:linux_kernel:2.0.36 cpe:/o:linux:linux_kernel:2.0.37 cpe:/o:linux:linux_kernel:2.0.38 cpe:/o:linux:linux_kernel:2.0.39 cpe:/o:linux:linux_kernel:2.1 cpe:/o:linux:linux_kernel:2.1.89 cpe:/o:linux:linux_kernel:2.2.0 cpe:/o:linux:linux_kernel:2.2.1 cpe:/o:linux:linux_kernel:2.2.2 cpe:/o:linux:linux_kernel:2.2.3 cpe:/o:linux:linux_kernel:2.2.4 cpe:/o:linux:linux_kernel:2.2.5 cpe:/o:linux:linux_kernel:2.2.6 cpe:/o:linux:linux_kernel:2.2.7 cpe:/o:linux:linux_kernel:2.2.8 cpe:/o:linux:linux_kernel:2.2.9 cpe:/o:linux:linux_kernel:2.2.10 cpe:/o:linux:linux_kernel:2.2.11 cpe:/o:linux:linux_kernel:2.2.12 cpe:/o:linux:linux_kernel:2.2.13 cpe:/o:linux:linux_kernel:2.2.14 cpe:/o:linux:linux_kernel:2.2.15 cpe:/o:linux:linux_kernel:2.2.15:pre16 cpe:/o:linux:linux_kernel:2.2.15_pre20 cpe:/o:linux:linux_kernel:2.2.16 cpe:/o:linux:linux_kernel:2.2.16:pre6 cpe:/o:linux:linux_kernel:2.2.17 cpe:/o:linux:linux_kernel:2.2.18 cpe:/o:linux:linux_kernel:2.2.19 cpe:/o:linux:linux_kernel:2.2.20 cpe:/o:linux:linux_kernel:2.2.21 cpe:/o:linux:linux_kernel:2.2.22 cpe:/o:linux:linux_kernel:2.2.23 cpe:/o:linux:linux_kernel:2.2.24 cpe:/o:linux:linux_kernel:2.2.25 cpe:/o:linux:linux_kernel:2.2.27:rc2 cpe:/o:linux:linux_kernel:2.3.0 cpe:/o:linux:linux_kernel:2.3.99 cpe:/o:linux:linux_kernel:2.3.99:pre1 cpe:/o:linux:linux_kernel:2.3.99:pre2 cpe:/o:linux:linux_kernel:2.3.99:pre3 cpe:/o:linux:linux_kernel:2.3.99:pre4 cpe:/o:linux:linux_kernel:2.3.99:pre5 cpe:/o:linux:linux_kernel:2.3.99:pre6 cpe:/o:linux:linux_kernel:2.3.99:pre7 cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.0:test1 cpe:/o:linux:linux_kernel:2.4.0:test10 cpe:/o:linux:linux_kernel:2.4.0:test11 cpe:/o:linux:linux_kernel:2.4.0:test12 cpe:/o:linux:linux_kernel:2.4.0:test2 cpe:/o:linux:linux_kernel:2.4.0:test3 cpe:/o:linux:linux_kernel:2.4.0:test4 cpe:/o:linux:linux_kernel:2.4.0:test5 cpe:/o:linux:linux_kernel:2.4.0:test6 cpe:/o:linux:linux_kernel:2.4.0:test7 cpe:/o:linux:linux_kernel:2.4.0:test8 cpe:/o:linux:linux_kernel:2.4.0:test9 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.3:pre3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.18::x86 cpe:/o:linux:linux_kernel:2.4.18:pre1 cpe:/o:linux:linux_kernel:2.4.18:pre2 cpe:/o:linux:linux_kernel:2.4.18:pre3 cpe:/o:linux:linux_kernel:2.4.18:pre4 cpe:/o:linux:linux_kernel:2.4.18:pre5 cpe:/o:linux:linux_kernel:2.4.18:pre6 cpe:/o:linux:linux_kernel:2.4.18:pre7 cpe:/o:linux:linux_kernel:2.4.18:pre8 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.19:pre1 cpe:/o:linux:linux_kernel:2.4.19:pre2 cpe:/o:linux:linux_kernel:2.4.19:pre3 cpe:/o:linux:linux_kernel:2.4.19:pre4 cpe:/o:linux:linux_kernel:2.4.19:pre5 cpe:/o:linux:linux_kernel:2.4.19:pre6 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.21:pre1 cpe:/o:linux:linux_kernel:2.4.21:pre4 cpe:/o:linux:linux_kernel:2.4.21:pre7 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.22:pre10 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.23:pre9 cpe:/o:linux:linux_kernel:2.4.23_ow2 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.24_ow1 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.4.27 cpe:/o:linux:linux_kernel:2.4.27:pre1 cpe:/o:linux:linux_kernel:2.4.27:pre2 cpe:/o:linux:linux_kernel:2.4.27:pre3 cpe:/o:linux:linux_kernel:2.4.27:pre4 cpe:/o:linux:linux_kernel:2.4.27:pre5 cpe:/o:linux:linux_kernel:2.4.28 cpe:/o:linux:linux_kernel:2.4.29 cpe:/o:linux:linux_kernel:2.4.29:rc1 cpe:/o:linux:linux_kernel:2.4.29:rc2 cpe:/o:linux:linux_kernel:2.4.30 cpe:/o:linux:linux_kernel:2.4.30:rc2 cpe:/o:linux:linux_kernel:2.4.30:rc3 cpe:/o:linux:linux_kernel:2.4.31:pre1 cpe:/o:linux:linux_kernel:2.5.0 cpe:/o:linux:linux_kernel:2.5.1 cpe:/o:linux:linux_kernel:2.5.2 cpe:/o:linux:linux_kernel:2.5.3 cpe:/o:linux:linux_kernel:2.5.4 cpe:/o:linux:linux_kernel:2.5.5 cpe:/o:linux:linux_kernel:2.5.6 cpe:/o:linux:linux_kernel:2.5.7 cpe:/o:linux:linux_kernel:2.5.8 cpe:/o:linux:linux_kernel:2.5.9 cpe:/o:linux:linux_kernel:2.5.10 cpe:/o:linux:linux_kernel:2.5.11 cpe:/o:linux:linux_kernel:2.5.12 cpe:/o:linux:linux_kernel:2.5.13 cpe:/o:linux:linux_kernel:2.5.14 cpe:/o:linux:linux_kernel:2.5.15 cpe:/o:linux:linux_kernel:2.5.16 cpe:/o:linux:linux_kernel:2.5.17 cpe:/o:linux:linux_kernel:2.5.18 cpe:/o:linux:linux_kernel:2.5.19 cpe:/o:linux:linux_kernel:2.5.20 cpe:/o:linux:linux_kernel:2.5.21 cpe:/o:linux:linux_kernel:2.5.22 cpe:/o:linux:linux_kernel:2.5.23 cpe:/o:linux:linux_kernel:2.5.24 cpe:/o:linux:linux_kernel:2.5.25 cpe:/o:linux:linux_kernel:2.5.26 cpe:/o:linux:linux_kernel:2.5.27 cpe:/o:linux:linux_kernel:2.5.28 cpe:/o:linux:linux_kernel:2.5.29 cpe:/o:linux:linux_kernel:2.5.30 cpe:/o:linux:linux_kernel:2.5.31 cpe:/o:linux:linux_kernel:2.5.32 cpe:/o:linux:linux_kernel:2.5.33 cpe:/o:linux:linux_kernel:2.5.34 cpe:/o:linux:linux_kernel:2.5.35 cpe:/o:linux:linux_kernel:2.5.36 cpe:/o:linux:linux_kernel:2.5.37 cpe:/o:linux:linux_kernel:2.5.38 cpe:/o:linux:linux_kernel:2.5.39 cpe:/o:linux:linux_kernel:2.5.40 cpe:/o:linux:linux_kernel:2.5.41 cpe:/o:linux:linux_kernel:2.5.42 cpe:/o:linux:linux_kernel:2.5.43 cpe:/o:linux:linux_kernel:2.5.44 cpe:/o:linux:linux_kernel:2.5.45 cpe:/o:linux:linux_kernel:2.5.46 cpe:/o:linux:linux_kernel:2.5.47 cpe:/o:linux:linux_kernel:2.5.48 cpe:/o:linux:linux_kernel:2.5.49 cpe:/o:linux:linux_kernel:2.5.50 cpe:/o:linux:linux_kernel:2.5.51 cpe:/o:linux:linux_kernel:2.5.52 cpe:/o:linux:linux_kernel:2.5.53 cpe:/o:linux:linux_kernel:2.5.54 cpe:/o:linux:linux_kernel:2.5.55 cpe:/o:linux:linux_kernel:2.5.56 cpe:/o:linux:linux_kernel:2.5.57 cpe:/o:linux:linux_kernel:2.5.58 cpe:/o:linux:linux_kernel:2.5.59 cpe:/o:linux:linux_kernel:2.5.60 cpe:/o:linux:linux_kernel:2.5.61 cpe:/o:linux:linux_kernel:2.5.62 cpe:/o:linux:linux_kernel:2.5.63 cpe:/o:linux:linux_kernel:2.5.64 cpe:/o:linux:linux_kernel:2.5.65 cpe:/o:linux:linux_kernel:2.5.66 cpe:/o:linux:linux_kernel:2.5.67 cpe:/o:linux:linux_kernel:2.5.68 cpe:/o:linux:linux_kernel:2.5.69 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.6:rc1 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.7:rc1 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8:rc1 cpe:/o:linux:linux_kernel:2.6.8:rc2 cpe:/o:linux:linux_kernel:2.6.8:rc3 cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.10:rc2 cpe:/o:linux:linux_kernel:2.6.11 cpe:/o:linux:linux_kernel:2.6.11:rc2 cpe:/o:linux:linux_kernel:2.6.11:rc3 cpe:/o:linux:linux_kernel:2.6.11:rc4 cpe:/o:linux:linux_kernel:2.6.11.1 cpe:/o:linux:linux_kernel:2.6.11.2 cpe:/o:linux:linux_kernel:2.6.11.3 cpe:/o:linux:linux_kernel:2.6.11.4 cpe:/o:linux:linux_kernel:2.6.11.5 cpe:/o:linux:linux_kernel:2.6.11.6 cpe:/o:linux:linux_kernel:2.6.11.7 cpe:/o:linux:linux_kernel:2.6.11.8 cpe:/o:linux:linux_kernel:2.6.12:rc1 cpe:/o:linux:linux_kernel:2.6.12:rc4 cpe:/o:linux:linux_kernel:2.6.20.1 cpe:/o:linux:linux_kernel:2.6_test9_cvs

CVE-2005-0178

2005-03-07T00:00:00.000-05:00

2017-10-10T21:29:52.763-04:00

6.2

LOCAL

HIGH

NONE

COMPLETE

http://nvd.nist.gov CONECTIVA CLA-2005:930 CONFIRM http://linux.bkbits.net:8080/linux-2.6/cset@41ddda70CWJb5nNL71T4MOlG2sMG8A BUGTRAQ 20050215 [USN-82-1] Linux kernel vulnerabilities REDHAT RHSA-2005:092 BID 12598 Race condition in the setsid function in Linux before 2.6.8.1 allows local users to cause a denial of service (crash) and possibly access portions of kernel memory, related to TTY changes, locking, and semaphores.

cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.0:test1 cpe:/o:linux:linux_kernel:2.4.0:test10 cpe:/o:linux:linux_kernel:2.4.0:test11 cpe:/o:linux:linux_kernel:2.4.0:test12 cpe:/o:linux:linux_kernel:2.4.0:test2 cpe:/o:linux:linux_kernel:2.4.0:test3 cpe:/o:linux:linux_kernel:2.4.0:test4 cpe:/o:linux:linux_kernel:2.4.0:test5 cpe:/o:linux:linux_kernel:2.4.0:test6 cpe:/o:linux:linux_kernel:2.4.0:test7 cpe:/o:linux:linux_kernel:2.4.0:test8 cpe:/o:linux:linux_kernel:2.4.0:test9 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.3:pre3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.18::x86 cpe:/o:linux:linux_kernel:2.4.18:pre1 cpe:/o:linux:linux_kernel:2.4.18:pre2 cpe:/o:linux:linux_kernel:2.4.18:pre3 cpe:/o:linux:linux_kernel:2.4.18:pre4 cpe:/o:linux:linux_kernel:2.4.18:pre5 cpe:/o:linux:linux_kernel:2.4.18:pre6 cpe:/o:linux:linux_kernel:2.4.18:pre7 cpe:/o:linux:linux_kernel:2.4.18:pre8 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.19:pre1 cpe:/o:linux:linux_kernel:2.4.19:pre2 cpe:/o:linux:linux_kernel:2.4.19:pre3 cpe:/o:linux:linux_kernel:2.4.19:pre4 cpe:/o:linux:linux_kernel:2.4.19:pre5 cpe:/o:linux:linux_kernel:2.4.19:pre6 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.21:pre1 cpe:/o:linux:linux_kernel:2.4.21:pre4 cpe:/o:linux:linux_kernel:2.4.21:pre7 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.22:pre10 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.23:pre9 cpe:/o:linux:linux_kernel:2.4.23_ow2 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.24_ow1 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.4.27 cpe:/o:linux:linux_kernel:2.4.27:pre1 cpe:/o:linux:linux_kernel:2.4.27:pre2 cpe:/o:linux:linux_kernel:2.4.27:pre3 cpe:/o:linux:linux_kernel:2.4.27:pre4 cpe:/o:linux:linux_kernel:2.4.27:pre5 cpe:/o:linux:linux_kernel:2.4.28 cpe:/o:linux:linux_kernel:2.4.29 cpe:/o:linux:linux_kernel:2.4.29:rc1 cpe:/o:linux:linux_kernel:2.4.29:rc2 cpe:/o:linux:linux_kernel:2.4.30 cpe:/o:linux:linux_kernel:2.4.30:rc2 cpe:/o:linux:linux_kernel:2.4.30:rc3 cpe:/o:linux:linux_kernel:2.4.31:pre1 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.6:rc1 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.7:rc1 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8:rc1 cpe:/o:linux:linux_kernel:2.6.8:rc2 cpe:/o:linux:linux_kernel:2.6.8:rc3 cpe:/o:linux:linux_kernel:2.6.8.1 cpe:/o:linux:linux_kernel:2.6.9:2.6.20 cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.10:rc2 cpe:/o:linux:linux_kernel:2.6.11 cpe:/o:linux:linux_kernel:2.6.11:rc2 cpe:/o:linux:linux_kernel:2.6.11:rc3 cpe:/o:linux:linux_kernel:2.6.11:rc4 cpe:/o:linux:linux_kernel:2.6.11.1 cpe:/o:linux:linux_kernel:2.6.11.2 cpe:/o:linux:linux_kernel:2.6.11.3 cpe:/o:linux:linux_kernel:2.6.11.4 cpe:/o:linux:linux_kernel:2.6.11.5 cpe:/o:linux:linux_kernel:2.6.11.6 cpe:/o:linux:linux_kernel:2.6.11.7 cpe:/o:linux:linux_kernel:2.6.11.8 cpe:/o:linux:linux_kernel:2.6.12:rc1 cpe:/o:linux:linux_kernel:2.6.12:rc4 cpe:/o:linux:linux_kernel:2.6_test9_cvs

CVE-2005-0179

2005-03-07T00:00:00.000-05:00

2017-10-10T21:29:52.857-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2005:930 FULLDISC 20050107 grsecurity 2.1.0 release / 5 Linux kernel advisories REDHAT RHSA-2005:092 REDHAT RHSA-2005:663 VUPEN ADV-2005-1878 Linux kernel 2.4.x and 2.6.x allows local users to cause a denial of service (CPU and memory consumption) and bypass RLIM_MEMLOCK limits via the mlockall call.

cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.6:rc1 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.7:rc1 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8:rc1 cpe:/o:linux:linux_kernel:2.6.8:rc2 cpe:/o:linux:linux_kernel:2.6.8:rc3 cpe:/o:linux:linux_kernel:2.6.8.1 cpe:/o:linux:linux_kernel:2.6.9:2.6.20 cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.10:rc2 cpe:/o:linux:linux_kernel:2.6.11 cpe:/o:linux:linux_kernel:2.6.11:rc2 cpe:/o:linux:linux_kernel:2.6.11:rc3 cpe:/o:linux:linux_kernel:2.6.11:rc4 cpe:/o:linux:linux_kernel:2.6.11.1 cpe:/o:linux:linux_kernel:2.6.11.2 cpe:/o:linux:linux_kernel:2.6.11.3 cpe:/o:linux:linux_kernel:2.6.11.4 cpe:/o:linux:linux_kernel:2.6.11.5 cpe:/o:linux:linux_kernel:2.6.11.6 cpe:/o:linux:linux_kernel:2.6.11.7 cpe:/o:linux:linux_kernel:2.6.11.8 cpe:/o:linux:linux_kernel:2.6.12:rc1 cpe:/o:linux:linux_kernel:2.6.12:rc4 cpe:/o:linux:linux_kernel:2.6_test9_cvs

CVE-2005-0180

2005-03-07T00:00:00.000-05:00

2017-10-10T21:29:52.967-04:00

3.6

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONECTIVA CLA-2005:930 FULLDISC 20050107 grsecurity 2.1.0 release / 5 Linux kernel advisories MANDRAKE MDKSA-2005:218 MANDRAKE MDKSA-2005:219 REDHAT RHSA-2005:092 BUGTRAQ 20050107 grsecurity 2.1.0 release / 5 Linux kernel advisories BID 12198 Multiple integer signedness errors in the sg_scsi_ioctl function in scsi_ioctl.c for Linux 2.6.x allow local users to read or modify kernel memory via negative integers in arguments to the scsi ioctl, which bypass a maximum length check before calling the copy_from_user and copy_to_user functions.

cpe:/a:mod_dosevasive:mod_dosevasive:1.8 cpe:/a:mod_dosevasive:mod_dosevasive:1.9

CVE-2005-0182

2005-01-06T00:00:00.000-05:00

2017-07-10T21:32:07.577-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050111 Mod_dosevasive symlink and race vulnerability MISC http://security.lss.hr/index.php?page=details&ID=LSS-2005-01-01 BID 12181 XF moddosevasive-symlink(18765) The mod_dosevasive module 1.9 and earlier for Apache creates temporary files with predictable filenames, which could allow remote attackers to overwrite arbitrary files via a symlink attack.

cpe:/a:squirrelmail:vacation_plugin:0.15

CVE-2005-0183

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:07.623-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20050111 Squirrelmail vacation v0.15 local root exploit MISC http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-03 SECTRACK 1012866 BID 12222 CONFIRM http://www.squirrelmail.org/plugin_view.php?id=51 XF vacation-ftpfile-command-execution(18855) ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to execute arbitrary commands via shell metacharacters in a command line argument.

CVE-2005-0184

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:07.687-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050111 Squirrelmail vacation v0.15 local root exploit MISC http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-03 SECTRACK 1012866 BID 12222 CONFIRM http://www.squirrelmail.org/plugin_view.php?id=51 XF vacation-ftpfile-directory-traversal(18856) Directory traversal vulnerability in ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to read arbitrary files via a .. (dot dot) in a get request.

cpe:/a:mnet_soft_factory:nodemanager_professional:2.00

CVE-2005-0185

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:07.733-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050117 [SIG^2 G-TEC] NodeManager Professional V2.00 Buffer Overflow Vulnerability SECTRACK 1012915 MISC http://www.security.org.sg/vuln/nodemanager200.html BID 12283 XF nodemanager-linkdown-bo(18937) Stack-based buffer overflow in NodeManager Professional 2.00 allows remote attackers to execute arbitrary commands via a LinkDown-Trap packet that contains a long OCTET-STRING in the Trap variable-bindings field.

cpe:/o:cisco:ios:12.1yd cpe:/o:cisco:ios:12.2t cpe:/o:cisco:ios:12.3 cpe:/o:cisco:ios:12.3t

CVE-2005-0186

2005-01-19T00:00:00.000-05:00

2017-10-10T21:29:53.013-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1012945 CISCO 20050119 Vulnerability in Cisco IOS Embedded Call Processing Solutions XF cisco-ios-sccp-dos(18956) Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service (ITS), CallManager Express (CME) or Survivable Remote Site Telephony (SRST), allows remote attackers to cause a denial of service (device reboot) via a malformed packet to the SCCP port.

cpe:/a:athoc:athoc_toolbar

CVE-2005-0187

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:07.843-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20041006 Patch available for high risk flaws in the AtHoc Toolbar BUGTRAQ 20050119 Multiple vulnerabilities in the AtHoc Toolbar (#NISR19012005c) MISC http://www.ngssoftware.com/advisories/athoc-01full.txt BID 11341 XF athoc-toolbar-bo(17627) Stack-based buffer overflow in the SetSkin function in AtHoc toolbar allows remote attackers to execute arbitrary code via a long skin name.

cpe:/a:athoc:athoc_toolbar

CVE-2005-0188

2004-10-06T00:00:00.000-04:00

2017-07-10T21:32:07.890-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20041006 Patch available for high risk flaws in the AtHoc Toolbar BUGTRAQ 20050119 Multiple vulnerabilities in the AtHoc Toolbar (#NISR19012005c) MISC http://www.ngssoftware.com/advisories/athoc-01full.txt BID 11341 XF athoc-toolbar-format-string(17628) Format string vulnerability in the SetBaseURL function in AtHoc toolbar allows remote attackers to execute arbitrary code via format string specifiers in an invalid URL that is recorded in the debug log.

cpe:/a:realnetworks:realone_player:1.0 cpe:/a:realnetworks:realone_player:2.0 cpe:/a:realnetworks:realplayer:10.0:::en cpe:/a:realnetworks:realplayer:10.0:::ja cpe:/a:realnetworks:realplayer:10.0::de cpe:/a:realnetworks:realplayer:10.0_6.0.12.690 cpe:/a:realnetworks:realplayer:10.0_beta cpe:/a:realnetworks:realplayer:10.5 cpe:/a:realnetworks:realplayer:10.5_6.0.12.1016_beta cpe:/a:realnetworks:realplayer:10.5_6.0.12.1040

CVE-2005-0189

2004-10-06T00:00:00.000-04:00

2017-11-16T13:30:58.497-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2017-11-16T10:53:08.953-05:00

ALLOWS_USER_ACCESS

NTBUGTRAQ 20050119 RealPlayer 'ShowPreferences' Buffer Overflow Vulnerability (#NISR19012005e) BUGTRAQ 20041006 Patch available for multiple high risk vulnerabilities in RealPlayer BUGTRAQ 20050119 RealPlayer 'ShowPreferences' Buffer Overflow Vulnerability (#NISR19012005e) MISC http://service.real.com/help/faq/security/040928_player/EN/ CERT-VN VU#698390 BID 12311 Stack-based buffer overflow in the HandleAction function in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to execute arbitrary code via a long ShowPreferences argument.

CVE-2005-0190

2004-09-29T00:00:00.000-04:00

2017-11-16T13:30:19.587-05:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-11-16T11:07:37.373-05:00

BUGTRAQ 20041006 Patch available for multiple high risk vulnerabilities in RealPlayer BUGTRAQ 20050119 RealPlayer Arbitrary File Deletion Vulnerability (#NISR19012005f) CONFIRM http://service.real.com/help/faq/security/040928_player/EN/ MISC http://www.ngssoftware.com/advisories/real-02full.txt BID 11308 XF realplayer-media-file-deletion(17551) Directory traversal vulnerability in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to delete arbitrary files via a Real Metadata Packages (RMP) file with a FILENAME tag containing .. (dot dot) sequences in a filename that ends with a ? (question mark) and an allowed file extension (e.g. .mp3), which bypasses the check for the file extension.

CVE-2005-0191

2005-01-19T00:00:00.000-05:00

2017-11-16T13:30:09.760-05:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

2017-11-16T11:09:29.213-05:00

ALLOWS_USER_ACCESS

BUGTRAQ 20041006 Patch available for multiple high risk vulnerabilities in RealPlayer BUGTRAQ 20050119 RealPlayer Miscellaneous Vulnerabilities (#NISR19012005g) CONFIRM http://service.real.com/help/faq/security/040928_player/EN/ MISC http://www.ngssoftware.com/advisories/real-03full.txt XF realplayer-long-filename-offbyone-bo(18982) Off-by-one buffer overflow in the processing of tags in Real Metadata Package (RMP) files in RealPlayer 10.5 (6.0.12.1040) and earlier could allow remote attackers to execute arbitrary code via a long tag.

cpe:/a:realnetworks:realone_player:1.0 cpe:/a:realnetworks:realone_player:2.0 cpe:/a:realnetworks:realplayer:10.0:::de cpe:/a:realnetworks:realplayer:10.0:::en cpe:/a:realnetworks:realplayer:10.0:::ja cpe:/a:realnetworks:realplayer:10.0:beta cpe:/a:realnetworks:realplayer:10.5

CVE-2005-0192

2004-10-06T00:00:00.000-04:00

2017-12-12T12:17:54.530-05:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-12-12T11:35:31.017-05:00

BUGTRAQ 20041006 Patch available for multiple high risk vulnerabilities in RealPlayer BUGTRAQ 20050119 RealPlayer Miscellaneous Vulnerabilities (#NISR19012005g) MISC http://service.real.com/help/faq/security/040928_player/EN/ MISC http://www.ngssoftware.com/advisories/real-03full.txt XF realplayer-rjs-filenane-directory-traversal(18984) Directory traversal vulnerability in the parsing of Skin file names in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an RJS filename.

cpe:/a:isync:mrouter:1.5

CVE-2005-0193

2005-01-22T00:00:00.000-05:00

2017-07-10T21:32:08.140-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2005-04-19 BUGTRAQ 20050122 Mac OS X 10.3 iSync Privilege Escalation SECTRACK 1012974 BID 12334 XF isync-mrouter-bo(19011) Buffer overflow in the (1) -v and (2) -a switches in mRouter in iSync 1.5 in Mac OS X 10.3.7 and earlier allows local users to execute arbitrary code.

CVE-2005-0194

2005-05-02T00:00:00.000-04:00

2016-10-17T23:08:26.550-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONECTIVA CLA-2005:923 FEDORA FLSA-2006:152809 BUGTRAQ 20050221 [USN-84-1] Squid vulnerabilities DEBIAN DSA-667 CERT-VN VU#260421 CONFIRM http://www.squid-cache.org/bugs/show_bug.cgi?id=1166 CONFIRM http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-empty_acls CONFIRM http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-empty_acls.patch Squid 2.5, when processing the configuration file, parses empty Access Control Lists (ACLs), including proxy_auth ACLs without defined auth schemes, in a way that effectively removes arguments, which could allow remote attackers to bypass intended ACLs if the administrator ignores the parser warnings.

cpe:/o:cisco:ios:12.0s cpe:/o:cisco:ios:12.0sx cpe:/o:cisco:ios:12.0sz cpe:/o:cisco:ios:12.2b cpe:/o:cisco:ios:12.2bc cpe:/o:cisco:ios:12.2bx cpe:/o:cisco:ios:12.2bz cpe:/o:cisco:ios:12.2cx cpe:/o:cisco:ios:12.2cz cpe:/o:cisco:ios:12.2ew cpe:/o:cisco:ios:12.2ewa cpe:/o:cisco:ios:12.2jk cpe:/o:cisco:ios:12.2mc cpe:/o:cisco:ios:12.2s cpe:/o:cisco:ios:12.2se cpe:/o:cisco:ios:12.2su cpe:/o:cisco:ios:12.2sv cpe:/o:cisco:ios:12.2sw cpe:/o:cisco:ios:12.2sx cpe:/o:cisco:ios:12.2sxa cpe:/o:cisco:ios:12.2sxb cpe:/o:cisco:ios:12.2sxd cpe:/o:cisco:ios:12.2sy cpe:/o:cisco:ios:12.2sz cpe:/o:cisco:ios:12.2t cpe:/o:cisco:ios:12.2yt cpe:/o:cisco:ios:12.2yu cpe:/o:cisco:ios:12.2yv cpe:/o:cisco:ios:12.2yz cpe:/o:cisco:ios:12.2zc cpe:/o:cisco:ios:12.2zd cpe:/o:cisco:ios:12.2ze cpe:/o:cisco:ios:12.2zf cpe:/o:cisco:ios:12.2zg cpe:/o:cisco:ios:12.2zh cpe:/o:cisco:ios:12.2zi cpe:/o:cisco:ios:12.2zj cpe:/o:cisco:ios:12.2zl cpe:/o:cisco:ios:12.2zn cpe:/o:cisco:ios:12.2zo cpe:/o:cisco:ios:12.2zp cpe:/o:cisco:ios:12.3 cpe:/o:cisco:ios:12.3b cpe:/o:cisco:ios:12.3bc cpe:/o:cisco:ios:12.3bw cpe:/o:cisco:ios:12.3j cpe:/o:cisco:ios:12.3ja cpe:/o:cisco:ios:12.3t cpe:/o:cisco:ios:12.3xa cpe:/o:cisco:ios:12.3xb cpe:/o:cisco:ios:12.3xc cpe:/o:cisco:ios:12.3xd cpe:/o:cisco:ios:12.3xe cpe:/o:cisco:ios:12.3xf cpe:/o:cisco:ios:12.3xg cpe:/o:cisco:ios:12.3xh cpe:/o:cisco:ios:12.3xi cpe:/o:cisco:ios:12.3xk cpe:/o:cisco:ios:12.3xl cpe:/o:cisco:ios:12.3xm cpe:/o:cisco:ios:12.3xn cpe:/o:cisco:ios:12.3xq cpe:/o:cisco:ios:12.3xr cpe:/o:cisco:ios:12.3xs cpe:/o:cisco:ios:12.3xt cpe:/o:cisco:ios:12.3xu cpe:/o:cisco:ios:12.3xw cpe:/o:cisco:ios:12.3xx cpe:/o:cisco:ios:12.3xy cpe:/o:cisco:ios:12.3xz cpe:/o:cisco:ios:12.3ya cpe:/o:cisco:ios:12.3yd cpe:/o:cisco:ios:12.3ye cpe:/o:cisco:ios:12.3yf cpe:/o:cisco:ios:12.3yg cpe:/o:cisco:ios:12.3yh

CVE-2005-0195

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:53.090-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CISCO 20050126 Multiple Crafted IPv6 Packets Cause Reload CERT-VN VU#472582 CERT TA05-026A XF cisco-ios-ipv6-dos(19072) Cisco IOS 12.0S through 12.3YH allows remote attackers to cause a denial of service (device restart) via a crafted IPv6 packet.

cpe:/o:cisco:ios:12.0 cpe:/o:cisco:ios:12.0da cpe:/o:cisco:ios:12.0db cpe:/o:cisco:ios:12.0dc cpe:/o:cisco:ios:12.0s cpe:/o:cisco:ios:12.0sc cpe:/o:cisco:ios:12.0sp cpe:/o:cisco:ios:12.0st cpe:/o:cisco:ios:12.0sx cpe:/o:cisco:ios:12.0sy cpe:/o:cisco:ios:12.0sz cpe:/o:cisco:ios:12.0w5 cpe:/o:cisco:ios:12.0wc cpe:/o:cisco:ios:12.0wt cpe:/o:cisco:ios:12.0wx cpe:/o:cisco:ios:12.0xa cpe:/o:cisco:ios:12.0xb cpe:/o:cisco:ios:12.0xc cpe:/o:cisco:ios:12.0xd cpe:/o:cisco:ios:12.0xe cpe:/o:cisco:ios:12.0xf cpe:/o:cisco:ios:12.0xg cpe:/o:cisco:ios:12.0xh cpe:/o:cisco:ios:12.0xi cpe:/o:cisco:ios:12.0xj cpe:/o:cisco:ios:12.0xk cpe:/o:cisco:ios:12.0xl cpe:/o:cisco:ios:12.0xm cpe:/o:cisco:ios:12.0xn cpe:/o:cisco:ios:12.0xp cpe:/o:cisco:ios:12.0xq cpe:/o:cisco:ios:12.0xr cpe:/o:cisco:ios:12.0xs cpe:/o:cisco:ios:12.0xt cpe:/o:cisco:ios:12.0xu cpe:/o:cisco:ios:12.0xv cpe:/o:cisco:ios:12.1 cpe:/o:cisco:ios:12.1aa cpe:/o:cisco:ios:12.1ax cpe:/o:cisco:ios:12.1ay cpe:/o:cisco:ios:12.1az cpe:/o:cisco:ios:12.1da cpe:/o:cisco:ios:12.1db cpe:/o:cisco:ios:12.1dc cpe:/o:cisco:ios:12.1e cpe:/o:cisco:ios:12.1ea cpe:/o:cisco:ios:12.1ec cpe:/o:cisco:ios:12.1eo cpe:/o:cisco:ios:12.1ev cpe:/o:cisco:ios:12.1ew cpe:/o:cisco:ios:12.1ex cpe:/o:cisco:ios:12.1ey cpe:/o:cisco:ios:12.1t cpe:/o:cisco:ios:12.1xa cpe:/o:cisco:ios:12.1xb cpe:/o:cisco:ios:12.1xc cpe:/o:cisco:ios:12.1xd cpe:/o:cisco:ios:12.1xe cpe:/o:cisco:ios:12.1xf cpe:/o:cisco:ios:12.1xg cpe:/o:cisco:ios:12.1xh cpe:/o:cisco:ios:12.1xi cpe:/o:cisco:ios:12.1xj cpe:/o:cisco:ios:12.1xl cpe:/o:cisco:ios:12.1xm cpe:/o:cisco:ios:12.1xp cpe:/o:cisco:ios:12.1xq cpe:/o:cisco:ios:12.1xr cpe:/o:cisco:ios:12.1xt cpe:/o:cisco:ios:12.1xu cpe:/o:cisco:ios:12.1xv cpe:/o:cisco:ios:12.1ya cpe:/o:cisco:ios:12.1yb cpe:/o:cisco:ios:12.1yf cpe:/o:cisco:ios:12.1yh cpe:/o:cisco:ios:12.1yi cpe:/o:cisco:ios:12.1yj cpe:/o:cisco:ios:12.2 cpe:/o:cisco:ios:12.2b cpe:/o:cisco:ios:12.2bc cpe:/o:cisco:ios:12.2bw cpe:/o:cisco:ios:12.2bx cpe:/o:cisco:ios:12.2by cpe:/o:cisco:ios:12.2bz cpe:/o:cisco:ios:12.2cz cpe:/o:cisco:ios:12.2da cpe:/o:cisco:ios:12.2dd cpe:/o:cisco:ios:12.2dx cpe:/o:cisco:ios:12.2ew cpe:/o:cisco:ios:12.2jk cpe:/o:cisco:ios:12.2mb cpe:/o:cisco:ios:12.2mc cpe:/o:cisco:ios:12.2mx cpe:/o:cisco:ios:12.2s cpe:/o:cisco:ios:12.2se cpe:/o:cisco:ios:12.2su cpe:/o:cisco:ios:12.2sw cpe:/o:cisco:ios:12.2sx cpe:/o:cisco:ios:12.2sxa cpe:/o:cisco:ios:12.2sxb cpe:/o:cisco:ios:12.2sxd cpe:/o:cisco:ios:12.2sy cpe:/o:cisco:ios:12.2sz cpe:/o:cisco:ios:12.2t cpe:/o:cisco:ios:12.2x cpe:/o:cisco:ios:12.2xa cpe:/o:cisco:ios:12.2xb cpe:/o:cisco:ios:12.2xc cpe:/o:cisco:ios:12.2xd cpe:/o:cisco:ios:12.2xe cpe:/o:cisco:ios:12.2xf cpe:/o:cisco:ios:12.2xg cpe:/o:cisco:ios:12.2xh cpe:/o:cisco:ios:12.2xi cpe:/o:cisco:ios:12.2xj cpe:/o:cisco:ios:12.2xk cpe:/o:cisco:ios:12.2xl cpe:/o:cisco:ios:12.2xm cpe:/o:cisco:ios:12.2xn cpe:/o:cisco:ios:12.2xq cpe:/o:cisco:ios:12.2xs cpe:/o:cisco:ios:12.2xt cpe:/o:cisco:ios:12.2xu cpe:/o:cisco:ios:12.2xw cpe:/o:cisco:ios:12.2xz cpe:/o:cisco:ios:12.2ya cpe:/o:cisco:ios:12.2yb cpe:/o:cisco:ios:12.2yc cpe:/o:cisco:ios:12.2ye cpe:/o:cisco:ios:12.2yf cpe:/o:cisco:ios:12.2yg cpe:/o:cisco:ios:12.2yh cpe:/o:cisco:ios:12.2yj cpe:/o:cisco:ios:12.2yk cpe:/o:cisco:ios:12.2yl cpe:/o:cisco:ios:12.2ym cpe:/o:cisco:ios:12.2yn cpe:/o:cisco:ios:12.2yo cpe:/o:cisco:ios:12.2yp cpe:/o:cisco:ios:12.2yq cpe:/o:cisco:ios:12.2yr cpe:/o:cisco:ios:12.2ys cpe:/o:cisco:ios:12.2yt cpe:/o:cisco:ios:12.2yu cpe:/o:cisco:ios:12.2yv cpe:/o:cisco:ios:12.2yw cpe:/o:cisco:ios:12.2yx cpe:/o:cisco:ios:12.2yy cpe:/o:cisco:ios:12.2yz cpe:/o:cisco:ios:12.2za cpe:/o:cisco:ios:12.2zb cpe:/o:cisco:ios:12.2zc cpe:/o:cisco:ios:12.2zd cpe:/o:cisco:ios:12.2ze cpe:/o:cisco:ios:12.2zf cpe:/o:cisco:ios:12.2zg cpe:/o:cisco:ios:12.2zh cpe:/o:cisco:ios:12.2zi cpe:/o:cisco:ios:12.2zj cpe:/o:cisco:ios:12.2zk cpe:/o:cisco:ios:12.2zl cpe:/o:cisco:ios:12.2zm cpe:/o:cisco:ios:12.2zn cpe:/o:cisco:ios:12.2zo cpe:/o:cisco:ios:12.2zp cpe:/o:cisco:ios:12.3 cpe:/o:cisco:ios:12.3b cpe:/o:cisco:ios:12.3bw cpe:/o:cisco:ios:12.3t cpe:/o:cisco:ios:12.3xa cpe:/o:cisco:ios:12.3xb cpe:/o:cisco:ios:12.3xc cpe:/o:cisco:ios:12.3xd cpe:/o:cisco:ios:12.3xe cpe:/o:cisco:ios:12.3xf cpe:/o:cisco:ios:12.3xg cpe:/o:cisco:ios:12.3xh cpe:/o:cisco:ios:12.3xi cpe:/o:cisco:ios:12.3xj cpe:/o:cisco:ios:12.3xk cpe:/o:cisco:ios:12.3xl cpe:/o:cisco:ios:12.3xn cpe:/o:cisco:ios:12.3xq cpe:/o:cisco:ios:12.3xr cpe:/o:cisco:ios:12.3xs cpe:/o:cisco:ios:12.3xu cpe:/o:cisco:ios:12.3xv cpe:/o:cisco:ios:12.3xx cpe:/o:cisco:ios:12.3ya cpe:/o:cisco:ios:12.3yc cpe:/o:cisco:ios:12.3yd cpe:/o:cisco:ios:12.3ye cpe:/o:cisco:ios:12.3yf cpe:/o:cisco:ios:12.3yh cpe:/o:cisco:ios:12.3yj cpe:/o:cisco:ios:12.3yl

CVE-2005-0196

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:53.170-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1013013 CISCO 20050126 Cisco IOS Misformed BGP Packet Causes Reload CERT-VN VU#689326 CERT TA05-026A XF cisco-ios-bgp-packetdos(19074) Cisco IOS 12.0 through 12.3YL, with BGP enabled and running the bgp log-neighbor-changes command, allows remote attackers to cause a denial of service (device reload) via a malformed BGP packet.

cpe:/o:cisco:ios:12.1t cpe:/o:cisco:ios:12.2 cpe:/o:cisco:ios:12.2t cpe:/o:cisco:ios:12.3 cpe:/o:cisco:ios:12.3t

CVE-2005-0197

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:53.247-04:00

6.1

ADJACENT_NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1013015 CISCO 20050126 Crafted Packet Causes Reload on Cisco Routers CERT-VN VU#583638 BID 12369 CERT TA05-026A XF cisco-ios-mpls-dos(19071) Cisco IOS 12.1T, 12.2, 12.2T, 12.3 and 12.3T, with Multi Protocol Label Switching (MPLS) installed but disabled, allows remote attackers to cause a denial of service (device reload) via a crafted packet sent to the disabled interface.

cpe:/a:university_of_washington:uw-imap

CVE-2005-0198

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:53.310-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1013037 GENTOO GLSA-200502-02 CERT-VN VU#702777 CONFIRM http://www.kb.cert.org/vuls/id/CRDY-68QSL5 MANDRAKE MDKSA-2005:026 REDHAT RHSA-2005:128 BID 12391 A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5) is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticate as arbitrary users.

cpe:/a:ngircd:ngircd:0.6 cpe:/a:ngircd:ngircd:0.6.1 cpe:/a:ngircd:ngircd:0.7 cpe:/a:ngircd:ngircd:0.7.1 cpe:/a:ngircd:ngircd:0.7.5 cpe:/a:ngircd:ngircd:0.7.6 cpe:/a:ngircd:ngircd:0.7.7 cpe:/a:ngircd:ngircd:0.8 cpe:/a:ngircd:ngircd:0.8.1

CVE-2005-0199

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:08.407-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MLIST [ngIRCd-ML] 20050126 ngIRCd 0.8.2 CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=79705 SECTRACK 1013047 GENTOO GLSA-200501-40 BID 12397 XF ngircd-listmakemask-bo(19143) Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long MODE line that causes an incorrect length calculation, which leads to a buffer overflow.

cpe:/a:tiki:tikiwiki_cms%2fgroupware:1.6.1

CVE-2005-0200

2005-05-02T00:00:00.000-04:00

2012-10-24T00:00:00.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-06T08:44:00.000-04:00

CONFIRM http://tikiwiki.org/art102 GENTOO GLSA-200501-41 TikiWiki before 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2004-1386.

cpe:/a:d-bus:d-bus:0.22

CVE-2005-0201

2005-06-29T00:00:00.000-04:00

2018-10-03T17:29:33.230-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013075 AUSCERT ESB-2005.0435 MANDRAKE MDKSA-2005:105 REDHAT RHSA-2005:102 BID 12435 UBUNTU USN-144-1 D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket.

cpe:/a:gnu:mailman:2.1 cpe:/a:gnu:mailman:2.1.1 cpe:/a:gnu:mailman:2.1.2 cpe:/a:gnu:mailman:2.1.3 cpe:/a:gnu:mailman:2.1.4 cpe:/a:gnu:mailman:2.1.5 cpe:/a:gnu:mailman:2.1b1

CVE-2005-0202

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:53.420-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2005-03-21 FULLDISC 20050209 Administrivia: List Compromised due to Mailman Vulnerability BUGTRAQ 20050209 [USN-78-1] Mailman vulnerability SECTRACK 1013145 DEBIAN DSA-674 GENTOO GLSA-200502-11 MANDRAKE MDKSA-2005:037 SUSE SUSE-SA:2005:007 REDHAT RHSA-2005:136 REDHAT RHSA-2005:137 Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences.

CVE-2005-0203

2005-06-09T00:00:00.000-04:00

2008-09-10T15:35:06.837-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate has been revoked by its Candidate Numbering Authority (CNA) because it was initially assigned to a problem that was not a security issue. Notes: none.

cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8.1

CVE-2005-0204

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:53.497-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov REDHAT RHSA-2005:092 REDHAT RHSA-2005:293 BID 12598 TRUSTIX 2006-0006 Linux kernel before 2.6.9, when running on the AMD64 and Intel EM64T architectures, allows local users to write to privileged IO ports via the OUTS instruction.

cpe:/o:bernd_wuebben:kppp:2.1.2 cpe:/o:kde:kde:3.1 cpe:/o:kde:kde:3.1.1 cpe:/o:kde:kde:3.1.2 cpe:/o:kde:kde:3.1.3 cpe:/o:kde:kde:3.1.4 cpe:/o:kde:kde:3.1.5

CVE-2005-0205

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:53.560-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2005:934 DEBIAN DSA-692 IDEFENSE 20050228 KPPP Privileged File Descriptor Leak Vulnerability CONFIRM http://www.kde.org/info/security/advisory-20050228-1.txt REDHAT RHSA-2005:175 KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of file descriptors before executing kppp.

cpe:/a:ascii:ptex:3.1.4 cpe:/a:cstex:cstetex:2.0.2 cpe:/a:easy_software_products:cups:1.0.4 cpe:/a:easy_software_products:cups:1.0.4_8 cpe:/a:easy_software_products:cups:1.1.1 cpe:/a:easy_software_products:cups:1.1.4 cpe:/a:easy_software_products:cups:1.1.4_2 cpe:/a:easy_software_products:cups:1.1.4_3 cpe:/a:easy_software_products:cups:1.1.4_5 cpe:/a:easy_software_products:cups:1.1.6 cpe:/a:easy_software_products:cups:1.1.7 cpe:/a:easy_software_products:cups:1.1.10 cpe:/a:easy_software_products:cups:1.1.12 cpe:/a:easy_software_products:cups:1.1.13 cpe:/a:easy_software_products:cups:1.1.14 cpe:/a:easy_software_products:cups:1.1.15 cpe:/a:easy_software_products:cups:1.1.16 cpe:/a:easy_software_products:cups:1.1.17 cpe:/a:easy_software_products:cups:1.1.18 cpe:/a:easy_software_products:cups:1.1.19 cpe:/a:easy_software_products:cups:1.1.19_rc5 cpe:/a:easy_software_products:cups:1.1.20 cpe:/a:gnome:gpdf:0.110 cpe:/a:gnome:gpdf:0.112 cpe:/a:gnome:gpdf:0.131 cpe:/a:kde:koffice:1.3 cpe:/a:kde:koffice:1.3.1 cpe:/a:kde:koffice:1.3.2 cpe:/a:kde:koffice:1.3.3 cpe:/a:kde:koffice:1.3_beta1 cpe:/a:kde:koffice:1.3_beta2 cpe:/a:kde:koffice:1.3_beta3 cpe:/a:kde:kpdf:3.2 cpe:/a:pdftohtml:pdftohtml:0.32a cpe:/a:pdftohtml:pdftohtml:0.32b cpe:/a:pdftohtml:pdftohtml:0.33 cpe:/a:pdftohtml:pdftohtml:0.33a cpe:/a:pdftohtml:pdftohtml:0.34 cpe:/a:pdftohtml:pdftohtml:0.35 cpe:/a:pdftohtml:pdftohtml:0.36 cpe:/a:sgi:propack:3.0 cpe:/a:tetex:tetex:1.0.6 cpe:/a:tetex:tetex:1.0.7 cpe:/a:tetex:tetex:2.0 cpe:/a:tetex:tetex:2.0.1 cpe:/a:tetex:tetex:2.0.2 cpe:/a:xpdf:xpdf:0.90 cpe:/a:xpdf:xpdf:0.91 cpe:/a:xpdf:xpdf:0.92 cpe:/a:xpdf:xpdf:0.93 cpe:/a:xpdf:xpdf:1.0 cpe:/a:xpdf:xpdf:1.0a cpe:/a:xpdf:xpdf:1.1 cpe:/a:xpdf:xpdf:2.0 cpe:/a:xpdf:xpdf:2.1 cpe:/a:xpdf:xpdf:2.3 cpe:/a:xpdf:xpdf:3.0 cpe:/o:debian:debian_linux:3.0 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc cpe:/o:gentoo:linux cpe:/o:kde:kde:3.2 cpe:/o:kde:kde:3.2.1 cpe:/o:kde:kde:3.2.2 cpe:/o:kde:kde:3.2.3 cpe:/o:kde:kde:3.3 cpe:/o:kde:kde:3.3.1 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0::x86_64 cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:enterprise_linux:3.0::advanced_servers cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:fedora_core:core_1.0 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:redhat:fedora_core:core_3.0 cpe:/o:redhat:linux:9.0::i386 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor cpe:/o:sgi:advanced_linux_environment:3.0 cpe:/o:suse:suse_linux:1.0 cpe:/o:suse:suse_linux:2.0 cpe:/o:suse:suse_linux:3.0 cpe:/o:suse:suse_linux:4.0 cpe:/o:suse:suse_linux:4.2 cpe:/o:suse:suse_linux:4.3 cpe:/o:suse:suse_linux:4.4 cpe:/o:suse:suse_linux:4.4.1 cpe:/o:suse:suse_linux:5.0 cpe:/o:suse:suse_linux:5.1 cpe:/o:suse:suse_linux:5.2 cpe:/o:suse:suse_linux:5.3 cpe:/o:suse:suse_linux:6.0 cpe:/o:suse:suse_linux:6.1 cpe:/o:suse:suse_linux:6.1:alpha cpe:/o:suse:suse_linux:6.2 cpe:/o:suse:suse_linux:6.3 cpe:/o:suse:suse_linux:6.3::ppc cpe:/o:suse:suse_linux:6.3:alpha cpe:/o:suse:suse_linux:6.4 cpe:/o:suse:suse_linux:6.4::i386 cpe:/o:suse:suse_linux:6.4::ppc cpe:/o:suse:suse_linux:6.4:alpha cpe:/o:suse:suse_linux:7.0 cpe:/o:suse:suse_linux:7.0::i386 cpe:/o:suse:suse_linux:7.0::ppc cpe:/o:suse:suse_linux:7.0::sparc cpe:/o:suse:suse_linux:7.0:alpha cpe:/o:suse:suse_linux:7.1 cpe:/o:suse:suse_linux:7.1::spa cpe:/o:suse:suse_linux:7.1::sparc cpe:/o:suse:suse_linux:7.1::x86 cpe:/o:suse:suse_linux:7.1:alpha cpe:/o:suse:suse_linux:7.2 cpe:/o:suse:suse_linux:7.2::i386 cpe:/o:suse:suse_linux:7.3 cpe:/o:suse:suse_linux:7.3::i386 cpe:/o:suse:suse_linux:7.3::ppc cpe:/o:suse:suse_linux:7.3::sparc cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.0::i386 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.1::x86_64 cpe:/o:suse:suse_linux:9.2 cpe:/o:suse:suse_linux:9.2::x86_64 cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc

CVE-2005-0206

2005-04-27T00:00:00.000-04:00

2017-10-10T21:29:53.653-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MANDRAKE MDKSA-2005:041 MANDRAKE MDKSA-2005:042 MANDRAKE MDKSA-2005:043 MANDRAKE MDKSA-2005:044 MANDRAKE MDKSA-2005:052 MANDRAKE MDKSA-2005:056 REDHAT RHSA-2005:034 REDHAT RHSA-2005:053 REDHAT RHSA-2005:057 REDHAT RHSA-2005:132 REDHAT RHSA-2005:213 BID 11501 XF xpdf-pdf-bo(17818) The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.

cpe:/o:conectiva:linux:10.0 cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.0:test1 cpe:/o:linux:linux_kernel:2.4.0:test10 cpe:/o:linux:linux_kernel:2.4.0:test11 cpe:/o:linux:linux_kernel:2.4.0:test12 cpe:/o:linux:linux_kernel:2.4.0:test2 cpe:/o:linux:linux_kernel:2.4.0:test3 cpe:/o:linux:linux_kernel:2.4.0:test4 cpe:/o:linux:linux_kernel:2.4.0:test5 cpe:/o:linux:linux_kernel:2.4.0:test6 cpe:/o:linux:linux_kernel:2.4.0:test7 cpe:/o:linux:linux_kernel:2.4.0:test8 cpe:/o:linux:linux_kernel:2.4.0:test9 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.18::x86 cpe:/o:linux:linux_kernel:2.4.18:pre1 cpe:/o:linux:linux_kernel:2.4.18:pre2 cpe:/o:linux:linux_kernel:2.4.18:pre3 cpe:/o:linux:linux_kernel:2.4.18:pre4 cpe:/o:linux:linux_kernel:2.4.18:pre5 cpe:/o:linux:linux_kernel:2.4.18:pre6 cpe:/o:linux:linux_kernel:2.4.18:pre7 cpe:/o:linux:linux_kernel:2.4.18:pre8 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.19:pre1 cpe:/o:linux:linux_kernel:2.4.19:pre2 cpe:/o:linux:linux_kernel:2.4.19:pre3 cpe:/o:linux:linux_kernel:2.4.19:pre4 cpe:/o:linux:linux_kernel:2.4.19:pre5 cpe:/o:linux:linux_kernel:2.4.19:pre6 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.21:pre1 cpe:/o:linux:linux_kernel:2.4.21:pre4 cpe:/o:linux:linux_kernel:2.4.21:pre7 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.23:pre9 cpe:/o:linux:linux_kernel:2.4.23_ow2 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.24_ow1 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.4.27 cpe:/o:linux:linux_kernel:2.4.27:pre1 cpe:/o:linux:linux_kernel:2.4.27:pre2 cpe:/o:linux:linux_kernel:2.4.27:pre3 cpe:/o:linux:linux_kernel:2.4.27:pre4 cpe:/o:linux:linux_kernel:2.4.27:pre5 cpe:/o:linux:linux_kernel:2.4.28 cpe:/o:linux:linux_kernel:2.4.29:rc1 cpe:/o:linux:linux_kernel:2.4.29:rc2 cpe:/o:linux:linux_kernel:2.5.0 cpe:/o:linux:linux_kernel:2.5.1 cpe:/o:linux:linux_kernel:2.5.2 cpe:/o:linux:linux_kernel:2.5.3 cpe:/o:linux:linux_kernel:2.5.4 cpe:/o:linux:linux_kernel:2.5.5 cpe:/o:linux:linux_kernel:2.5.6 cpe:/o:linux:linux_kernel:2.5.7 cpe:/o:linux:linux_kernel:2.5.8 cpe:/o:linux:linux_kernel:2.5.9 cpe:/o:linux:linux_kernel:2.5.10 cpe:/o:linux:linux_kernel:2.5.11 cpe:/o:linux:linux_kernel:2.5.12 cpe:/o:linux:linux_kernel:2.5.13 cpe:/o:linux:linux_kernel:2.5.14 cpe:/o:linux:linux_kernel:2.5.15 cpe:/o:linux:linux_kernel:2.5.16 cpe:/o:linux:linux_kernel:2.5.17 cpe:/o:linux:linux_kernel:2.5.18 cpe:/o:linux:linux_kernel:2.5.19 cpe:/o:linux:linux_kernel:2.5.20 cpe:/o:linux:linux_kernel:2.5.21 cpe:/o:linux:linux_kernel:2.5.22 cpe:/o:linux:linux_kernel:2.5.23 cpe:/o:linux:linux_kernel:2.5.24 cpe:/o:linux:linux_kernel:2.5.25 cpe:/o:linux:linux_kernel:2.5.26 cpe:/o:linux:linux_kernel:2.5.27 cpe:/o:linux:linux_kernel:2.5.28 cpe:/o:linux:linux_kernel:2.5.29 cpe:/o:linux:linux_kernel:2.5.30 cpe:/o:linux:linux_kernel:2.5.31 cpe:/o:linux:linux_kernel:2.5.32 cpe:/o:linux:linux_kernel:2.5.33 cpe:/o:linux:linux_kernel:2.5.34 cpe:/o:linux:linux_kernel:2.5.35 cpe:/o:linux:linux_kernel:2.5.36 cpe:/o:linux:linux_kernel:2.5.37 cpe:/o:linux:linux_kernel:2.5.38 cpe:/o:linux:linux_kernel:2.5.39 cpe:/o:linux:linux_kernel:2.5.40 cpe:/o:linux:linux_kernel:2.5.41 cpe:/o:linux:linux_kernel:2.5.42 cpe:/o:linux:linux_kernel:2.5.43 cpe:/o:linux:linux_kernel:2.5.44 cpe:/o:linux:linux_kernel:2.5.45 cpe:/o:linux:linux_kernel:2.5.46 cpe:/o:linux:linux_kernel:2.5.47 cpe:/o:linux:linux_kernel:2.5.48 cpe:/o:linux:linux_kernel:2.5.49 cpe:/o:linux:linux_kernel:2.5.50 cpe:/o:linux:linux_kernel:2.5.51 cpe:/o:linux:linux_kernel:2.5.52 cpe:/o:linux:linux_kernel:2.5.53 cpe:/o:linux:linux_kernel:2.5.54 cpe:/o:linux:linux_kernel:2.5.55 cpe:/o:linux:linux_kernel:2.5.56 cpe:/o:linux:linux_kernel:2.5.57 cpe:/o:linux:linux_kernel:2.5.58 cpe:/o:linux:linux_kernel:2.5.59 cpe:/o:linux:linux_kernel:2.5.60 cpe:/o:linux:linux_kernel:2.5.61 cpe:/o:linux:linux_kernel:2.5.62 cpe:/o:linux:linux_kernel:2.5.63 cpe:/o:linux:linux_kernel:2.5.64 cpe:/o:linux:linux_kernel:2.5.65 cpe:/o:linux:linux_kernel:2.5.66 cpe:/o:linux:linux_kernel:2.5.67 cpe:/o:linux:linux_kernel:2.5.68 cpe:/o:linux:linux_kernel:2.5.69 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.6:rc1 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.7:rc1 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8:rc1 cpe:/o:linux:linux_kernel:2.6.8:rc2 cpe:/o:linux:linux_kernel:2.6.8:rc3 cpe:/o:linux:linux_kernel:2.6.9:2.6.20 cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.10:rc2 cpe:/o:linux:linux_kernel:2.6_test9_cvs cpe:/o:redhat:enterprise_linux:4.0::advanced_server cpe:/o:redhat:enterprise_linux:4.0::enterprise_server cpe:/o:redhat:enterprise_linux:4.0::workstation cpe:/o:redhat:enterprise_linux_desktop:4.0 cpe:/o:suse:suse_linux:1.0::desktop cpe:/o:suse:suse_linux:8::enterprise_server cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::enterprise_server cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2

CVE-2005-0207

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:53.733-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2005:930 REDHAT RHSA-2005:366 SUSE SUSE-SA:2005:003 BID 12330 Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via O_DIRECT.

cpe:/a:rob_flynn:gaim:1.1.0 cpe:/a:rob_flynn:gaim:1.1.1 cpe:/a:rob_flynn:gaim:1.1.2 cpe:/a:rob_flynn:gaim:1.1.3

CVE-2005-0208

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:09.183-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2005:933 CONFIRM http://gaim.sourceforge.net/security/?id=12 BUGTRAQ 20050225 [USN-85-1] Gaim vulnerabilities GENTOO GLSA-200503-03 CERT-VN VU#795812 MANDRAKE MDKSA-2005:049 SUSE SUSE-SA:2005:036 REDHAT RHSA-2005:215 FEDORA FLSA:158543 BID 12660 The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0473.

cpe:/o:linux:linux_kernel:2.6.8.1

CVE-2005-0209

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:53.873-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONECTIVA CLA-2005:945 BUGTRAQ 20050315 [USN-95-1] Linux kernel vulnerabilities SUSE SUSE-SA:2005:018 REDHAT RHSA-2005:366 REDHAT RHSA-2005:420 BID 12598 Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via crafted IP packet fragments.

cpe:/o:linux:linux_kernel:2.6.8.1

CVE-2005-0210

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:53.967-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov CONECTIVA CLA-2005:945 BUGTRAQ 20050315 [USN-95-1] Linux kernel vulnerabilities REDHAT RHSA-2005:366 REDHAT RHSA-2005:663 MANDRAKE MDKSA-2005:218 MANDRAKE MDKSA-2005:219 SUSE SUSE-SA:2005:018 BID 12816 VUPEN ADV-2005-1878 Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service (memory consumption) via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice.

cpe:/a:squid-cache:squid:2.5.stable1 cpe:/a:squid-cache:squid:2.5.stable2 cpe:/a:squid-cache:squid:2.5.stable3 cpe:/a:squid-cache:squid:2.5.stable4 cpe:/a:squid-cache:squid:2.5.stable5 cpe:/a:squid-cache:squid:2.5.stable6 cpe:/o:debian:debian_linux:3.0

CVE-2005-0211

2005-05-02T00:00:00.000-04:00

2018-10-12T14:28:29.927-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2018-10-10T09:03:49.177-04:00

ALLOWS_USER_ACCESS

BUGTRAQ 20050207 [USN-77-1] Squid vulnerabilities SECTRACK 1013045 DEBIAN DSA-667 CERT-VN VU#886006 BID 12432 CONFIRM http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-wccp_buffer_overflow CONFIRM http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-wccp_buffer_overflow.patch Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.

cpe:/a:amp:amp_ii_3d_game_engine

CVE-2005-0212

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:08.530-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/amp2zero-adv.txt BUGTRAQ 20050106 Socket unreacheable in Amp II engine BID 12192 XF amp-3d-socket-dos(18789) The Amp II engine as used by Gore: Ultimate Soldier 1.50 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero byte UDP packet.

cpe:/a:webtoolmaster_software:winhki:1.4d

CVE-2005-0213

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:08.593-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050106 WinAc AND WinHKI ZIP File Directory Transversal SECTRACK 1012798 BID 12176 XF winhki-zip-directory-traversal(18798) Directory traversal vulnerability in WinHKI 1.4d allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a zip file.

cpe:/a:alexander_palmo:simple_php_blog:0.3.7c

CVE-2005-0214

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:08.640-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20050107 Simple PHP Blog directory traversal vulnerability BUGTRAQ 20050107 Simple PHP Blog directory traversal vulnerability BID 12193 XF sphp-dotdot-directory-traversal(18802) Directory traversal vulnerability in Simple PHP Blog (SPHPBlog) 0.3.7c allows remote attackers to read or create arbitrary files via a .. (dot dot) in the entry parameter.

cpe:/a:mozilla:mozilla:1.6

CVE-2005-0215

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:08.717-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050107 Mozilla XBM Image Vulnerability XF mozilla-xbm-dos(18803) Mozilla 1.6 and possibly other versions allows remote attackers to cause a denial of service (application crash) via a XBM (X BitMap) file with a large (1) height or (2) width value.

CVE-2005-0216

2005-05-02T00:00:00.000-04:00

2017-07-11T21:29:01.393-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050108 Security Advisory: Woltlab Burning Board Lite formmail.php XSS BID 12199 XF wbb-formmail-userid-xss(18814) Cross-site scripting (XSS) vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly other versions, allows remote attackers to inject arbitrary web script and HTML via the userid parameter.

cpe:/a:invision_power_services:invision_community_blog:1.0

CVE-2005-0217

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:08.827-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050109 SQL Injection Vulnerability in Invision Community Blog SECTRACK 1012831 BID 12205 XF icb-sql-injection(18815) SQL injection vulnerability in index.php in Invision Community Blog allows remote attackers to execute arbitrary SQL commands via the eid parameter.

CVE-2005-0218

2005-05-02T00:00:00.000-04:00

2008-09-10T15:35:07.947-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-06T10:23:00.000-04:00

CONFIRM http://sourceforge.net/project/shownotes.php?release_id=300116 GENTOO GLSA-200501-46 MANDRAKE MDKSA-2005:025 ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: (RFC 2397) URL.

cpe:/a:gallery_project:gallery:1.3.4_pl1

CVE-2005-0219

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:08.873-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov VULNWATCH 20050117 Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability CONFIRM http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147 BUGTRAQ 20050117 Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability XF gallery-multiple-xss(18938) XF gallery-multiple-scripts-xss(43473) Multiple cross-site scripting (XSS) vulnerabilities in Gallery 1.3.4-pl1 allow remote attackers to inject arbitrary web script or HTML via (1) the index field in add_comment.php, (2) set_albumName, (3) slide_index, (4) slide_full, (5) slide_loop, (6) slide_pause, (7) slide_dir fields in slideshow_low.php, or (8) username field in search.php.

cpe:/a:gallery_project:gallery:1.4.4_pl2

CVE-2005-0220

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:08.937-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147 BUGTRAQ 20050117 Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability GENTOO GLSA-200501-45 XF gallery-multiple-xss(18938) Cross-site scripting vulnerability in login.php in Gallery 1.4.4-pl2 allows remote attackers to inject arbitrary web script or HTML via the username field.

cpe:/a:gallery_project:gallery:2.0_alpha

CVE-2005-0221

2005-01-17T00:00:00.000-05:00

2017-07-10T21:32:09.000-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov VULNWATCH 20050117 [VulnWatch] Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability CONFIRM http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147 BUGTRAQ 20050117 Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability MISC http://theinsider.deep-ice.com/texts/advisory69.txt XF gallery-multiple-xss(18938) XF gallery-g2formsubject-xss(43472) Cross-site scripting (XSS) vulnerability in login.php in Gallery 2.0 Alpha allows remote attackers to inject arbitrary web script or HTML via the g2_form[subject] field.

cpe:/a:gallery_project:gallery:2.0_alpha

CVE-2005-0222

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:09.047-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov VULNWATCH 20050117 [VulnWatch] Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability CONFIRM http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147 BUGTRAQ 20050117 Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability MISC http://theinsider.deep-ice.com/texts/advisory69.txt XF gallery-mainphp-obtain-information(18940) main.php in Gallery 2.0 Alpha allows remote attackers to gain sensitive information by changing the value of g2_subView parameter, which reveals the path in an error message.

cpe:/a:sun:rte:1.4.1 cpe:/a:sun:rte:1.4.2 cpe:/a:sun:sdk:1.4.1 cpe:/a:sun:sdk:1.4.2 cpe:/o:compaq:tru64

CVE-2005-0223

2005-05-02T00:00:00.000-04:00

2016-10-17T23:08:46.460-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov HP SSRT4875 The Software Development Kit (SDK) and Run Time Environment (RTE) 1.4.1 and 1.4.2 for Tru64 UNIX allows remote attackers to cause a denial of service (Java Virtual Machine hang) via object deserialization.

cpe:/a:hp:virtualvault:4.5 cpe:/a:hp:virtualvault:4.6 cpe:/a:hp:virtualvault:4.7

CVE-2005-0224

2005-01-31T00:00:00.000-05:00

2016-10-17T23:08:47.477-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov HP SSRT5900 Unknown vulnerability in HP-UX B.11.04 running Virtualvault 4.5 through 4.7, when running the TGA daemon, allows remote attackers to cause a denial of service via certain network traffic.

cpe:/a:firehol:firehol:1.1 cpe:/a:firehol:firehol:1.1.1.1 cpe:/a:firehol:firehol:1.2 cpe:/a:firehol:firehol:1.3 cpe:/a:firehol:firehol:1.4 cpe:/a:firehol:firehol:1.5 cpe:/a:firehol:firehol:1.6 cpe:/a:firehol:firehol:1.7 cpe:/a:firehol:firehol:1.8 cpe:/a:firehol:firehol:1.9 cpe:/a:firehol:firehol:1.10 cpe:/a:firehol:firehol:1.11 cpe:/a:firehol:firehol:1.12 cpe:/a:firehol:firehol:1.13 cpe:/a:firehol:firehol:1.14 cpe:/a:firehol:firehol:1.15 cpe:/a:firehol:firehol:1.16 cpe:/a:firehol:firehol:1.17 cpe:/a:firehol:firehol:1.18 cpe:/a:firehol:firehol:1.19 cpe:/a:firehol:firehol:1.20 cpe:/a:firehol:firehol:1.21 cpe:/a:firehol:firehol:1.22 cpe:/a:firehol:firehol:1.23 cpe:/a:firehol:firehol:1.24 cpe:/a:firehol:firehol:1.25 cpe:/a:firehol:firehol:1.26 cpe:/a:firehol:firehol:1.27 cpe:/a:firehol:firehol:1.28 cpe:/a:firehol:firehol:1.29 cpe:/a:firehol:firehol:1.30 cpe:/a:firehol:firehol:1.31 cpe:/a:firehol:firehol:1.32 cpe:/a:firehol:firehol:1.33 cpe:/a:firehol:firehol:1.34 cpe:/a:firehol:firehol:1.35 cpe:/a:firehol:firehol:1.36 cpe:/a:firehol:firehol:1.37 cpe:/a:firehol:firehol:1.38 cpe:/a:firehol:firehol:1.39 cpe:/a:firehol:firehol:1.40 cpe:/a:firehol:firehol:1.41 cpe:/a:firehol:firehol:1.42 cpe:/a:firehol:firehol:1.43 cpe:/a:firehol:firehol:1.44 cpe:/a:firehol:firehol:1.45 cpe:/a:firehol:firehol:1.46 cpe:/a:firehol:firehol:1.47 cpe:/a:firehol:firehol:1.48 cpe:/a:firehol:firehol:1.49 cpe:/a:firehol:firehol:1.50 cpe:/a:firehol:firehol:1.51 cpe:/a:firehol:firehol:1.52 cpe:/a:firehol:firehol:1.53 cpe:/a:firehol:firehol:1.54 cpe:/a:firehol:firehol:1.55 cpe:/a:firehol:firehol:1.56 cpe:/a:firehol:firehol:1.57 cpe:/a:firehol:firehol:1.58 cpe:/a:firehol:firehol:1.59 cpe:/a:firehol:firehol:1.60 cpe:/a:firehol:firehol:1.61 cpe:/a:firehol:firehol:1.62 cpe:/a:firehol:firehol:1.63 cpe:/a:firehol:firehol:1.64 cpe:/a:firehol:firehol:1.65 cpe:/a:firehol:firehol:1.66 cpe:/a:firehol:firehol:1.67 cpe:/a:firehol:firehol:1.68 cpe:/a:firehol:firehol:1.69 cpe:/a:firehol:firehol:1.70 cpe:/a:firehol:firehol:1.71 cpe:/a:firehol:firehol:1.72 cpe:/a:firehol:firehol:1.73 cpe:/a:firehol:firehol:1.74 cpe:/a:firehol:firehol:1.75 cpe:/a:firehol:firehol:1.76 cpe:/a:firehol:firehol:1.77 cpe:/a:firehol:firehol:1.78 cpe:/a:firehol:firehol:1.79 cpe:/a:firehol:firehol:1.80 cpe:/a:firehol:firehol:1.81 cpe:/a:firehol:firehol:1.82 cpe:/a:firehol:firehol:1.83 cpe:/a:firehol:firehol:1.84 cpe:/a:firehol:firehol:1.85 cpe:/a:firehol:firehol:1.86 cpe:/a:firehol:firehol:1.87 cpe:/a:firehol:firehol:1.88 cpe:/a:firehol:firehol:1.89 cpe:/a:firehol:firehol:1.90 cpe:/a:firehol:firehol:1.91 cpe:/a:firehol:firehol:1.92 cpe:/a:firehol:firehol:1.93 cpe:/a:firehol:firehol:1.94 cpe:/a:firehol:firehol:1.95 cpe:/a:firehol:firehol:1.96 cpe:/a:firehol:firehol:1.97 cpe:/a:firehol:firehol:1.98 cpe:/a:firehol:firehol:1.99 cpe:/a:firehol:firehol:1.100 cpe:/a:firehol:firehol:1.101 cpe:/a:firehol:firehol:1.102 cpe:/a:firehol:firehol:1.103 cpe:/a:firehol:firehol:1.104 cpe:/a:firehol:firehol:1.105 cpe:/a:firehol:firehol:1.106 cpe:/a:firehol:firehol:1.107 cpe:/a:firehol:firehol:1.108 cpe:/a:firehol:firehol:1.109 cpe:/a:firehol:firehol:1.110 cpe:/a:firehol:firehol:1.111 cpe:/a:firehol:firehol:1.112 cpe:/a:firehol:firehol:1.113 cpe:/a:firehol:firehol:1.114 cpe:/a:firehol:firehol:1.115 cpe:/a:firehol:firehol:1.116 cpe:/a:firehol:firehol:1.117 cpe:/a:firehol:firehol:1.118 cpe:/a:firehol:firehol:1.119 cpe:/a:firehol:firehol:1.120 cpe:/a:firehol:firehol:1.121 cpe:/a:firehol:firehol:1.122 cpe:/a:firehol:firehol:1.123 cpe:/a:firehol:firehol:1.124 cpe:/a:firehol:firehol:1.125 cpe:/a:firehol:firehol:1.126 cpe:/a:firehol:firehol:1.127 cpe:/a:firehol:firehol:1.128 cpe:/a:firehol:firehol:1.129 cpe:/a:firehol:firehol:1.130 cpe:/a:firehol:firehol:1.131 cpe:/a:firehol:firehol:1.132 cpe:/a:firehol:firehol:1.133 cpe:/a:firehol:firehol:1.134 cpe:/a:firehol:firehol:1.135 cpe:/a:firehol:firehol:1.136 cpe:/a:firehol:firehol:1.137 cpe:/a:firehol:firehol:1.138 cpe:/a:firehol:firehol:1.139 cpe:/a:firehol:firehol:1.140 cpe:/a:firehol:firehol:1.141 cpe:/a:firehol:firehol:1.142 cpe:/a:firehol:firehol:1.143 cpe:/a:firehol:firehol:1.144 cpe:/a:firehol:firehol:1.145 cpe:/a:firehol:firehol:1.146 cpe:/a:firehol:firehol:1.147 cpe:/a:firehol:firehol:1.148 cpe:/a:firehol:firehol:1.149 cpe:/a:firehol:firehol:1.150 cpe:/a:firehol:firehol:1.151 cpe:/a:firehol:firehol:1.152 cpe:/a:firehol:firehol:1.153 cpe:/a:firehol:firehol:1.154 cpe:/a:firehol:firehol:1.155 cpe:/a:firehol:firehol:1.156 cpe:/a:firehol:firehol:1.157 cpe:/a:firehol:firehol:1.158 cpe:/a:firehol:firehol:1.159 cpe:/a:firehol:firehol:1.160 cpe:/a:firehol:firehol:1.161 cpe:/a:firehol:firehol:1.162 cpe:/a:firehol:firehol:1.163 cpe:/a:firehol:firehol:1.164 cpe:/a:firehol:firehol:1.165 cpe:/a:firehol:firehol:1.166 cpe:/a:firehol:firehol:1.167 cpe:/a:firehol:firehol:1.168 cpe:/a:firehol:firehol:1.169 cpe:/a:firehol:firehol:1.170 cpe:/a:firehol:firehol:1.171 cpe:/a:firehol:firehol:1.172 cpe:/a:firehol:firehol:1.173 cpe:/a:firehol:firehol:1.174 cpe:/a:firehol:firehol:1.175 cpe:/a:firehol:firehol:1.176 cpe:/a:firehol:firehol:1.177 cpe:/a:firehol:firehol:1.178 cpe:/a:firehol:firehol:1.179 cpe:/a:firehol:firehol:1.180 cpe:/a:firehol:firehol:1.181 cpe:/a:firehol:firehol:1.182 cpe:/a:firehol:firehol:1.183 cpe:/a:firehol:firehol:1.184 cpe:/a:firehol:firehol:1.185 cpe:/a:firehol:firehol:1.186 cpe:/a:firehol:firehol:1.187 cpe:/a:firehol:firehol:1.188 cpe:/a:firehol:firehol:1.189 cpe:/a:firehol:firehol:1.190 cpe:/a:firehol:firehol:1.191 cpe:/a:firehol:firehol:1.192 cpe:/a:firehol:firehol:1.193 cpe:/a:firehol:firehol:1.194 cpe:/a:firehol:firehol:1.195 cpe:/a:firehol:firehol:1.196 cpe:/a:firehol:firehol:1.197 cpe:/a:firehol:firehol:1.198 cpe:/a:firehol:firehol:1.199 cpe:/a:firehol:firehol:1.200 cpe:/a:firehol:firehol:1.201 cpe:/a:firehol:firehol:1.202 cpe:/a:firehol:firehol:1.203 cpe:/a:firehol:firehol:1.204 cpe:/a:firehol:firehol:1.205 cpe:/a:firehol:firehol:1.206 cpe:/a:firehol:firehol:1.207 cpe:/a:firehol:firehol:1.208 cpe:/a:firehol:firehol:1.209 cpe:/a:firehol:firehol:1.210 cpe:/a:firehol:firehol:1.211 cpe:/a:firehol:firehol:1.212 cpe:/a:firehol:firehol:1.213 cpe:/a:firehol:firehol:1.214 cpe:/a:firehol:firehol:1.215 cpe:/a:firehol:firehol:1.216 cpe:/a:firehol:firehol:1.217 cpe:/a:firehol:firehol:1.218 cpe:/a:firehol:firehol:1.219 cpe:/a:firehol:firehol:1.220 cpe:/a:firehol:firehol:1.221 cpe:/a:firehol:firehol:1.222 cpe:/a:firehol:firehol:1.223 cpe:/a:firehol:firehol:1.224

CVE-2005-0225

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:09.123-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://cvs.sourceforge.net/viewcvs.py/firehol/firehol/firehol.sh SECTRACK 1012969 GENTOO GLSA-200502-01 BID 12336 XF firehol-symlink(19032) firehol.sh in FireHOL before 1.224 creates temporary files with predictable file names, which could allow local users to overwrite arbitrary files via a symlink attack.

cpe:/a:ngircd:ngircd:0.8.2

CVE-2005-0226

2005-02-03T00:00:00.000-05:00

2016-10-17T23:08:48.493-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050203 ngIRCd <= v0.8.2 Format String Vulnerability MISC http://www.nosystem.com.ar/advisories/advisory-11.txt BID 12434 Format string vulnerability in the Log_Resolver function in log.c for ngIRCd 0.8.2 and earlier, when compiled with IDENT, logging to SYSLOG, and with DEBUG enabled, allows remote attackers to execute arbitrary code.

CVE-2005-0227

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:54.123-04:00

4.3

LOCAL

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov MLIST [pgsql-announce] 20050201 PostgreSQL Security Release MLIST [pgsql-bugs] 20050121 Privilege escalation via LOAD BUGTRAQ 20050201 [USN-71-1] PostgreSQL vulnerability GENTOO 200502-08 DEBIAN DSA-668 MANDRAKE MDKSA-2005:040 SUSE SUSE-SA:2005:036 REDHAT RHSA-2005:138 REDHAT RHSA-2005:150 BID 12411 TRUSTIX 2005-0003 PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows local users to load arbitrary shared libraries and execute code via the LOAD extension.

CVE-2005-0228

2005-05-02T00:00:00.000-04:00

2008-09-10T15:35:09.007-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-1388. Reason: This candidate is a duplicate of CVE-2004-1388. Notes: All CVE users should reference CVE-2004-1388 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:citrusdb:citrusdb_customer_database:0.1.2 cpe:/a:citrusdb:citrusdb_customer_database:0.2 cpe:/a:citrusdb:citrusdb_customer_database:0.2.1 cpe:/a:citrusdb:citrusdb_customer_database:0.3 cpe:/a:citrusdb:citrusdb_customer_database:0.3.1 cpe:/a:citrusdb:citrusdb_customer_database:0.3.5

CVE-2005-0229

2005-04-27T00:00:00.000-04:00

2017-07-10T21:32:09.217-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20050212 Credit Card data disclosure in CitrusDB SECTRACK 1013040 CONFIRM http://www.citrusdb.org/forums/viewtopic.php?t=49 MISC http://www.redteam-pentesting.de/advisories/rt-sa-2005-001.txt BID 12402 XF citrus-information-disclosure(19145) CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers to steal credit card information via a direct request to newfile.txt.

cpe:/a:mozilla:firefox:1.0

CVE-2005-0230

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:54.200-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050207 Firedragging [Firefox 1.0] GENTOO GLSA-200503-10 GENTOO GLSA-200503-30 MISC http://www.mikx.de/firedragging/ CONFIRM http://www.mozilla.org/security/announce/mfsa2005-25.html SUSE SUSE-SA:2006:004 BID 12468 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=279945 Firefox 1.0 does not prevent the user from dragging an executable file to the desktop when it has an image/gif content type but has a dangerous extension such as .bat or .exe, which allows remote attackers to bypass the intended restriction and execute arbitrary commands via malformed GIF files that can still be parsed by the Windows batch file parser, aka "firedragging."

cpe:/a:mozilla:firefox:1.0

CVE-2005-0231

2005-02-07T00:00:00.000-05:00

2017-10-10T21:29:54.280-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050207 Firetabbing [Firefox 1.0] GENTOO GLSA-200503-10 GENTOO GLSA-200503-30 MISC http://www.mikx.de/firetabbing/ CONFIRM http://www.mozilla.org/security/announce/mfsa2005-26.html SUSE SUSE-SA:2005:016 REDHAT RHSA-2005:176 REDHAT RHSA-2005:384 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=280056 XF mozilla-firefox-tab-gain-access(19264) Firefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or data: URL to a tab, which allows remote attackers to bypass the security model, aka "firetabbing."

cpe:/a:mozilla:firefox:1.0

CVE-2005-0232

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:54.340-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050207 Fireflashing [Firefox 1.0] GENTOO GLSA-200503-10 GENTOO GLSA-200503-30 MISC http://www.mikx.de/fireflashing/ CONFIRM http://www.mozilla.org/security/announce/mfsa2005-27.html SUSE SUSE-SA:2005:016 REDHAT RHSA-2005:176 REDHAT RHSA-2005:323 REDHAT RHSA-2005:384 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=280664 XF mozilla-firefox-aboutconfig-modify(19266) Firefox 1.0 allows remote attackers to modify Boolean configuration parameters for the about:config site by using a plugin such as Flash, and the -moz-opacity filter, to display the about:config site then cause the user to double-click at a certain screen position, aka "Fireflashing."

cpe:/a:mozilla:camino:0.8.5 cpe:/a:mozilla:firefox:1.0 cpe:/a:mozilla:mozilla:0.8 cpe:/a:mozilla:mozilla:0.9.2 cpe:/a:mozilla:mozilla:0.9.2.1 cpe:/a:mozilla:mozilla:0.9.3 cpe:/a:mozilla:mozilla:0.9.4 cpe:/a:mozilla:mozilla:0.9.4.1 cpe:/a:mozilla:mozilla:0.9.5 cpe:/a:mozilla:mozilla:0.9.6 cpe:/a:mozilla:mozilla:0.9.7 cpe:/a:mozilla:mozilla:0.9.8 cpe:/a:mozilla:mozilla:0.9.9 cpe:/a:mozilla:mozilla:0.9.35 cpe:/a:mozilla:mozilla:0.9.48 cpe:/a:mozilla:mozilla:1.0 cpe:/a:mozilla:mozilla:1.0:rc1 cpe:/a:mozilla:mozilla:1.0:rc2 cpe:/a:mozilla:mozilla:1.0.1 cpe:/a:mozilla:mozilla:1.0.2 cpe:/a:mozilla:mozilla:1.1 cpe:/a:mozilla:mozilla:1.1:alpha cpe:/a:mozilla:mozilla:1.1:beta cpe:/a:mozilla:mozilla:1.2 cpe:/a:mozilla:mozilla:1.2:alpha cpe:/a:mozilla:mozilla:1.2:beta cpe:/a:mozilla:mozilla:1.2.1 cpe:/a:mozilla:mozilla:1.3 cpe:/a:mozilla:mozilla:1.3.1 cpe:/a:mozilla:mozilla:1.4 cpe:/a:mozilla:mozilla:1.4:alpha cpe:/a:mozilla:mozilla:1.4:beta cpe:/a:mozilla:mozilla:1.4.1 cpe:/a:mozilla:mozilla:1.4.2 cpe:/a:mozilla:mozilla:1.4.4 cpe:/a:mozilla:mozilla:1.5 cpe:/a:mozilla:mozilla:1.5.1 cpe:/a:mozilla:mozilla:1.6 cpe:/a:omnigroup:omniweb:5 cpe:/a:opera_software:opera_web_browser:7.54

CVE-2005-0233

2005-02-08T00:00:00.000-05:00

2017-10-10T21:29:54.437-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20050206 state of homograph attacks BUGTRAQ 20050208 International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. GENTOO GLSA-200503-10 GENTOO GLSA-200503-30 CONFIRM http://www.mozilla.org/security/announce/mfsa2005-29.html SUSE SUSE-SA:2005:016 REDHAT RHSA-2005:176 REDHAT RHSA-2005:384 BID 12461 MISC http://www.shmoo.com/idn MISC http://www.shmoo.com/idn/homograph.txt XF multiple-browsers-idn-spoof(19236) The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

cpe:/a:apple:safari:1.2.5

CVE-2005-0234

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:09.467-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2005-03-21 FULLDISC 20050206 state of homograph attacks BUGTRAQ 20050208 International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. BID 12461 MISC http://www.shmoo.com/idn MISC http://www.shmoo.com/idn/homograph.txt XF multiple-browsers-idn-spoof(19236) The International Domain Name (IDN) support in Safari 1.2.5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

cpe:/a:opera_software:opera_web_browser:7.54

CVE-2005-0235

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:09.530-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20050206 state of homograph attacks BUGTRAQ 20050208 International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. SUSE SUSE-SA:2005:031 BID 12461 MISC http://www.shmoo.com/idn MISC http://www.shmoo.com/idn/homograph.txt XF multiple-browsers-idn-spoof(19236) The International Domain Name (IDN) support in Opera 7.54 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

cpe:/a:omnigroup:omniweb:5

CVE-2005-0236

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:09.593-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20050206 state of homograph attacks BUGTRAQ 20050208 International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. BID 12461 MISC http://www.shmoo.com/idn MISC http://www.shmoo.com/idn/homograph.txt XF multiple-browsers-idn-spoof(19236) The International Domain Name (IDN) support in Omniweb 5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

cpe:/a:kde:konqueror:3.2.1 cpe:/o:kde:kde:3.2.1

CVE-2005-0237

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:09.997-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20050206 state of homograph attacks FULLDISC 20050206 Re: state of homograph attacks CONFIRM http://www.kde.org/info/security/advisory-20050316-2.txt MANDRAKE MDKSA-2005:058 REDHAT RHSA-2005:325 FEDORA FLSA:178606 BID 12461 MISC http://www.shmoo.com/idn MISC http://www.shmoo.com/idn/homograph.txt XF multiple-browsers-idn-spoof(19236) The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

cpe:/a:gnome:epiphany cpe:/a:mozilla:camino:0.8.5 cpe:/a:mozilla:firefox:1.0 cpe:/a:mozilla:mozilla:0.8 cpe:/a:mozilla:mozilla:0.9.2 cpe:/a:mozilla:mozilla:0.9.2.1 cpe:/a:mozilla:mozilla:0.9.3 cpe:/a:mozilla:mozilla:0.9.4 cpe:/a:mozilla:mozilla:0.9.4.1 cpe:/a:mozilla:mozilla:0.9.5 cpe:/a:mozilla:mozilla:0.9.6 cpe:/a:mozilla:mozilla:0.9.7 cpe:/a:mozilla:mozilla:0.9.8 cpe:/a:mozilla:mozilla:0.9.9 cpe:/a:mozilla:mozilla:0.9.35 cpe:/a:mozilla:mozilla:0.9.48 cpe:/a:mozilla:mozilla:1.0 cpe:/a:mozilla:mozilla:1.0:rc1 cpe:/a:mozilla:mozilla:1.0:rc2 cpe:/a:mozilla:mozilla:1.0.1 cpe:/a:mozilla:mozilla:1.0.2 cpe:/a:mozilla:mozilla:1.1 cpe:/a:mozilla:mozilla:1.1:alpha cpe:/a:mozilla:mozilla:1.1:beta cpe:/a:mozilla:mozilla:1.2 cpe:/a:mozilla:mozilla:1.2:alpha cpe:/a:mozilla:mozilla:1.2:beta cpe:/a:mozilla:mozilla:1.2.1 cpe:/a:mozilla:mozilla:1.3 cpe:/a:mozilla:mozilla:1.3.1 cpe:/a:mozilla:mozilla:1.4 cpe:/a:mozilla:mozilla:1.4:alpha cpe:/a:mozilla:mozilla:1.4:beta cpe:/a:mozilla:mozilla:1.4.1 cpe:/a:mozilla:mozilla:1.4.2 cpe:/a:mozilla:mozilla:1.4.4 cpe:/a:mozilla:mozilla:1.5 cpe:/a:mozilla:mozilla:1.5.1 cpe:/a:mozilla:mozilla:1.6 cpe:/a:omnigroup:omniweb:5 cpe:/a:opera_software:opera_web_browser:7.54

CVE-2005-0238

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:09.703-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20050206 state of homograph attacks BID 12461 MISC http://www.shmoo.com/idn MISC http://www.shmoo.com/idn/homograph.txt CONFIRM https://bugzilla.redhat.com/beta/show_bug.cgi?id=147399 XF multiple-browsers-idn-spoof(19236) The International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

cpe:/a:squirrelmail:s_mime_plugin:0.4 cpe:/a:squirrelmail:s_mime_plugin:0.5

CVE-2005-0239

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:09.750-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

IDEFENSE 20050207 SquirrelMail S/MIME Plugin Command Injection Vulnerability CERT-VN VU#502328 CONFIRM http://www.squirrelmail.org/plugin_view.php?id=54 XF squirrelmail-smime-command-execution(19242) viewcert.php in the S/MIME plugin 0.4 and 0.5 for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the cert parameter.

cpe:/o:ibm:aix:5.2

CVE-2005-0240

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:09.810-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20050207 IBM AIX chdev Local Format String Vulnerability AIXAPAR IY67455 AIXAPAR IY67654 XF aix-chdev-format-string(19244) Format string vulnerability in chdev on IBM AIX 5.2 allows local users to execute arbitrary code via format string specifiers in a command line argument, which is not properly handled when printing an error message.

cpe:/a:squid:squid:2.5.stable1 cpe:/a:squid:squid:2.5.stable2 cpe:/a:squid:squid:2.5.stable3 cpe:/a:squid:squid:2.5.stable4 cpe:/a:squid:squid:2.5.stable5 cpe:/a:squid:squid:2.5.stable6 cpe:/a:squid:squid:2.5.stable7

CVE-2005-0241

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:54.560-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONECTIVA CLA-2005:931 FEDORA FLSA-2006:152809 CERT-VN VU#823350 SUSE SUSE-SA:2005:006 REDHAT RHSA-2005:060 REDHAT RHSA-2005:061 BID 12412 CONFIRM http://www.squid-cache.org/bugs/show_bug.cgi?id=1216 CONFIRM http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-oversize_reply_headers CONFIRM http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-oversize_reply_headers.patch XF squid-http-cache-poisoning(19060) The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote attackers to poison the cache or bypass access controls based on header size.

cpe:/a:yahoo:messenger:5.5 cpe:/a:yahoo:messenger:5.6 cpe:/a:yahoo:messenger:5.6.0.1351 cpe:/a:yahoo:messenger:6.0 cpe:/a:yahoo:messenger:6.0.0.1750

CVE-2005-0242

2005-02-18T00:00:00.000-05:00

2008-09-05T16:45:44.103-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-06T12:09:00.000-04:00

ALLOWS_USER_ACCESS

The Audio Setup Wizard (asw.dll) in Yahoo! Messenger 6.0.0.1750, and possibly other versions, allows attackers to arbitrary code by placing a malicious ping.exe program into the Messenger program directory, which is installed with weak default permissions.

cpe:/a:yahoo:messenger:5.5 cpe:/a:yahoo:messenger:5.6 cpe:/a:yahoo:messenger:5.6.0.1351 cpe:/a:yahoo:messenger:6.0 cpe:/a:yahoo:messenger:6.0.0.1750

CVE-2005-0243

2005-02-17T00:00:00.000-05:00

2008-09-05T16:45:44.277-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-06T12:22:00.000-04:00

Yahoo! Messenger 6.0.0.1750, and possibly other versions before 6.0.0.1921, does not properly display long filenames in file dialog boxes, which could allow remote attackers to trick users into downloading and executing programs via file names containing a large number of spaces and multiple file extensions.

cpe:/a:postgresql:postgresql:7.2 cpe:/a:postgresql:postgresql:7.2.1 cpe:/a:postgresql:postgresql:7.2.2 cpe:/a:postgresql:postgresql:7.2.3 cpe:/a:postgresql:postgresql:7.2.4 cpe:/a:postgresql:postgresql:7.2.5 cpe:/a:postgresql:postgresql:7.2.6 cpe:/a:postgresql:postgresql:7.2.7 cpe:/a:postgresql:postgresql:7.3 cpe:/a:postgresql:postgresql:7.3.1 cpe:/a:postgresql:postgresql:7.3.2 cpe:/a:postgresql:postgresql:7.3.3 cpe:/a:postgresql:postgresql:7.3.4 cpe:/a:postgresql:postgresql:7.3.5 cpe:/a:postgresql:postgresql:7.3.6 cpe:/a:postgresql:postgresql:7.3.7 cpe:/a:postgresql:postgresql:7.3.8 cpe:/a:postgresql:postgresql:7.3.9 cpe:/a:postgresql:postgresql:7.4 cpe:/a:postgresql:postgresql:7.4.1 cpe:/a:postgresql:postgresql:7.4.2 cpe:/a:postgresql:postgresql:7.4.3 cpe:/a:postgresql:postgresql:7.4.4 cpe:/a:postgresql:postgresql:7.4.5 cpe:/a:postgresql:postgresql:7.4.6 cpe:/a:postgresql:postgresql:7.4.7 cpe:/a:postgresql:postgresql:8.0.0

CVE-2005-0244

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:54.623-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MLIST [pgsql-hackers] 20050127 Permissions on aggregate component functions BUGTRAQ 20050210 [USN-79-1] PostgreSQL vulnerabilities MANDRAKE MDKSA-2005:040 SUSE SUSE-SA:2005:036 REDHAT RHSA-2005:138 BID 12417 XF postgresql-security-bypass(19184) PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command.

CVE-2005-0245

2005-02-01T00:00:00.000-05:00

2017-10-10T21:29:54.700-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MLIST [pgsql-committers] 20050121 pgsql: Prevent overrunning a heap-allocated buffer is more than 1024 MLIST [pgsql-committers] 20050207 pgsql: Prevent 4 more buffer overruns in the PL/PgSQL parser. MLIST [pgsql-patches] 20050120 Re: WIP: pl/pgsql cleanup BUGTRAQ 20050210 [USN-79-1] PostgreSQL vulnerabilities DEBIAN DSA-683 MANDRAKE MDKSA-2005:040 SUSE SUSE-SA:2005:036 REDHAT RHSA-2005:138 REDHAT RHSA-2005:150 BID 12417 XF postgresql-cursor-bo(19188) Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.

CVE-2005-0246

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:54.780-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MLIST [pgsql-committers] 20050127 pgsql: Fix security and 64-bit issues in contrib/intagg. BUGTRAQ 20050210 [USN-79-1] PostgreSQL vulnerabilities MANDRAKE MDKSA-2005:040 SUSE SUSE-SA:2005:036 REDHAT RHSA-2005:138 BID 12417 XF postgresql-contribintagg-dos(19185) The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service (crash) via crafted arrays.

CVE-2005-0247

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:54.857-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MLIST [pgsql-committers] 20050207 pgsql: Prevent 4 more buffer overruns in the PL/PgSQL parser. BUGTRAQ 20050210 [USN-79-1] PostgreSQL vulnerabilities DEBIAN DSA-683 GENTOO GLSA-200502-19 MANDRAKE MDKSA-2005:040 SUSE SUSE-SA:2005:027 SUSE SUSE-SA:2005:036 REDHAT RHSA-2005:138 REDHAT RHSA-2005:150 BID 12417 XF postgresql-readsqlconstruct-bo(19375) XF postgresql-makeselectstmt-input-bo(19376) XF postgresql-makeselectstmt-arbitrary-bo(19377) XF postgresql-fetch-makefetchstmt-bo(19378) Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql_construct function, (2) a large number of INTO variables in a SELECT statement being handled by the make_select_stmt function, (3) a large number of arbitrary variables in a SELECT statement being handled by the make_select_stmt function, and (4) a large number of INTO variables in a FETCH statement being handled by the make_fetch_stmt function, a different set of vulnerabilities than CVE-2005-0245.

cpe:/o:sun:solaris:8.0::x86 cpe:/o:sun:solaris:9.0::sparc cpe:/o:sun:solaris:9.0::x86 cpe:/o:sun:sunos:5.8

CVE-2005-0248

2005-05-02T00:00:00.000-04:00

2018-10-30T12:25:37.090-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1012860 SUNALERT 57717 CIAC P-096 BID 12260 XF solaris-smc-blank-password(18868) The Solaris Management Console (SMC) GUI for Solaris 8 and 9, when creating user accounts that are configured for password aging, creates the accounts with a blank password, which allows remote or local attackers to break into those accounts.

cpe:/a:symantec:antivirus_scan_engine:- cpe:/a:symantec:antivirus_scan_engine:4.0 cpe:/a:symantec:antivirus_scan_engine:4.1 cpe:/a:symantec:antivirus_scan_engine:4.1.8 cpe:/a:symantec:antivirus_scan_engine:4.1.9 cpe:/a:symantec:antivirus_scan_engine:4.3 cpe:/a:symantec:brightmail_antispam:4.0 cpe:/a:symantec:brightmail_antispam:5.5 cpe:/a:symantec:client_security:1.0.1_build_8.01.434:mr3 cpe:/a:symantec:client_security:1.0.1_build_8.01.437 cpe:/a:symantec:client_security:1.0.1_build_8.01.446:mr4 cpe:/a:symantec:client_security:1.0.1_build_8.01.457:mr5 cpe:/a:symantec:client_security:1.0.1_build_8.01.460:mr6 cpe:/a:symantec:client_security:1.0.1_build_8.01.464:mr7 cpe:/a:symantec:client_security:1.0.1_build_8.01.471:mr8 cpe:/a:symantec:client_security:1.1.1_mr1_build_8.1.1.314a cpe:/a:symantec:client_security:1.1.1_mr2_build_8.1.1.319 cpe:/a:symantec:client_security:1.1.1_mr3_build_8.1.1.323 cpe:/a:symantec:client_security:1.1.1_mr4_build_8.1.1.329 cpe:/a:symantec:client_security:1.1.1_mr5_build_8.1.1.336 cpe:/a:symantec:gateway_security:1.0 cpe:/a:symantec:gateway_security:2.0 cpe:/a:symantec:gateway_security:2.0.1 cpe:/a:symantec:mail_security:4.0::domino cpe:/a:symantec:mail_security:4.1:build_458:exchange cpe:/a:symantec:mail_security:4.1:build_459:exchange cpe:/a:symantec:mail_security:4.1:build_461:exchange cpe:/a:symantec:mail_security:4.5_build_719::exchange cpe:/a:symantec:norton_antivirus:2.18_build_83::exchange cpe:/a:symantec:norton_antivirus:8.1.1.319::corporate cpe:/a:symantec:norton_antivirus:8.1.1.323::corporate cpe:/a:symantec:norton_antivirus:8.1.1.329::corporate cpe:/a:symantec:norton_antivirus:8.1.1_build8.1.1.314a::corporate cpe:/a:symantec:norton_antivirus:8.01.434::corporate cpe:/a:symantec:norton_antivirus:8.01.437::corporate cpe:/a:symantec:norton_antivirus:8.01.446::corporate cpe:/a:symantec:norton_antivirus:8.01.457::corporate cpe:/a:symantec:norton_antivirus:8.01.460::corporate cpe:/a:symantec:norton_antivirus:8.01.464::corporate cpe:/a:symantec:norton_antivirus:8.01.471::corporate cpe:/a:symantec:norton_antivirus:9.0::macintosh_corporate cpe:/a:symantec:norton_antivirus:2004::windows cpe:/a:symantec:norton_internet_security:2004::professional cpe:/a:symantec:norton_system_works:2004::windows cpe:/a:symantec:sav_filter_domino_nt_ports:build3.0.5::aix cpe:/a:symantec:sav_filter_domino_nt_ports:build3.0.5::os_400 cpe:/a:symantec:sav_filter_for_domino_nt:3.1.1 cpe:/a:symantec:web_security:3.01.59 cpe:/a:symantec:web_security:3.01.60 cpe:/a:symantec:web_security:3.01.61 cpe:/a:symantec:web_security:3.01.62 cpe:/a:symantec:web_security:3.01.63 cpe:/a:symantec:web_security:3.01.67 cpe:/a:symantec:web_security:3.01.68

CVE-2005-0249

2005-02-08T00:00:00.000-05:00

2019-09-20T09:24:20.587-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2019-09-19T17:21:41.037-04:00

ALLOWS_USER_ACCESS

SECTRACK 1013133 CERT-VN VU#107822 CONFIRM http://www.symantec.com/avcenter/security/Content/2005.02.08.html ISS 20050208 Symantec AntiVirus Library Heap Overflow XF upx-engine-gain-control(18869) Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.

cpe:/o:ibm:aix:5.1 cpe:/o:ibm:aix:5.2 cpe:/o:ibm:aix:5.3

CVE-2005-0250

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:10.327-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1013103 IDEFENSE 20050208 IBM AIX auditselect Local Format String Vulnerability CERT-VN VU#896729 BID 12496 AIXAPAR IY67472 AIXAPAR IY67519 AIXAPAR IY67802 XF aix-auditselect-format-string(19255) Format string vulnerability in auditselect on IBM AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via format string specifiers in a command line argument.

cpe:/a:biborb:biborb:1.3.2

CVE-2005-0251

2005-05-02T00:00:00.000-04:00

2016-10-17T23:09:06.683-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050217 Advisory: Multiple Vulnerabilities in BibORB FULLDISC 20050217 Advisory: Multiple Vulnerabilities in BibORB BID 12583 Cross-site scripting (XSS) vulnerability in bibindex.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to inject arbitrary HTML and web script via the search parameter.

cpe:/a:biborb:biborb:1.3.2

CVE-2005-0252

2005-05-02T00:00:00.000-04:00

2016-10-17T23:09:07.917-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050217 Advisory: Multiple Vulnerabilities in BibORB FULLDISC 20050217 Advisory: Multiple Vulnerabilities in BibORB BID 12583 SQL injection vulnerability in BibORB 1.3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password.

cpe:/a:biborb:biborb:1.3.2

CVE-2005-0253

2005-05-02T00:00:00.000-04:00

2016-10-17T23:09:09.230-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050217 Advisory: Multiple Vulnerabilities in BibORB FULLDISC 20050217 Advisory: Multiple Vulnerabilities in BibORB BID 12583 Directory traversal vulnerability in index.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to delete arbitrary files via a Delete action and .. (dot dot) sequences in the database_name parameter.

cpe:/a:biborb:biborb:1.3.2

CVE-2005-0254

2005-05-02T00:00:00.000-04:00

2016-10-17T23:09:10.510-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050217 Advisory: Multiple Vulnerabilities in BibORB FULLDISC 20050217 Advisory: Multiple Vulnerabilities in BibORB BID 12583 BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files that are presented to other users with PDF or PS icons, which may trick some users into downloading and executing those files.

cpe:/a:mozilla:firefox:1.0 cpe:/a:mozilla:mozilla:1.7.3 cpe:/a:mozilla:thunderbird:0.1 cpe:/a:mozilla:thunderbird:0.2 cpe:/a:mozilla:thunderbird:0.3 cpe:/a:mozilla:thunderbird:0.4 cpe:/a:mozilla:thunderbird:0.5 cpe:/a:mozilla:thunderbird:0.6 cpe:/a:mozilla:thunderbird:0.7 cpe:/a:mozilla:thunderbird:0.8 cpe:/a:mozilla:thunderbird:0.9 cpe:/a:mozilla:thunderbird:1.0

CVE-2005-0255

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:54.920-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov GENTOO GLSA-200503-10 GENTOO GLSA-200503-30 IDEFENSE 20050228 Mozilla Firefox and Mozilla Browser Out Of Memory Heap Corruption Design Error CONFIRM http://www.mozilla.org/security/announce/mfsa2005-18.html SUSE SUSE-SA:2005:016 SUSE SUSE-SA:2006:004 REDHAT RHSA-2005:176 REDHAT RHSA-2005:277 REDHAT RHSA-2005:337 BID 12659 String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstring_CharT::Replace function, do not properly check the return values of other functions that resize the string, which allows remote attackers to cause a denial of service and possibly execute arbitrary code by forcing an out-of-memory state that causes a reallocation to fail and return a pointer to a fixed address, which leads to heap corruption.

cpe:/a:washington_university:wu-ftpd:2.6.1 cpe:/a:washington_university:wu-ftpd:2.6.2

CVE-2005-0256

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:55.013-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2005.63 HP SSRT061110 SUNALERT 101699 SUNALERT 57795 DEBIAN DSA-705 IDEFENSE 20050225 WU-FTPD File Globbing Denial of Service Vulnerability VUPEN ADV-2005-0588 VUPEN ADV-2006-1271 The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service (CPU exhaustion by recursion) via a glob pattern with a large number of * (wildcard) characters, as demonstrated using the dir command.

cpe:/a:phpbb_group:phpbb:2.0.0 cpe:/a:phpbb_group:phpbb:2.0.1 cpe:/a:phpbb_group:phpbb:2.0.2 cpe:/a:phpbb_group:phpbb:2.0.3 cpe:/a:phpbb_group:phpbb:2.0.4 cpe:/a:phpbb_group:phpbb:2.0.5 cpe:/a:phpbb_group:phpbb:2.0.6 cpe:/a:phpbb_group:phpbb:2.0.6c cpe:/a:phpbb_group:phpbb:2.0.6d cpe:/a:phpbb_group:phpbb:2.0.7 cpe:/a:phpbb_group:phpbb:2.0.7a cpe:/a:phpbb_group:phpbb:2.0.8 cpe:/a:phpbb_group:phpbb:2.0.8a cpe:/a:phpbb_group:phpbb:2.0.9 cpe:/a:phpbb_group:phpbb:2.0.10 cpe:/a:phpbb_group:phpbb:2.0.11 cpe:/a:phpbb_group:phpbb:2.0_beta1 cpe:/a:phpbb_group:phpbb:2.0_rc1 cpe:/a:phpbb_group:phpbb:2.0_rc2 cpe:/a:phpbb_group:phpbb:2.0_rc3 cpe:/a:phpbb_group:phpbb:2.0_rc4

CVE-2005-0258

2005-03-14T00:00:00.000-05:00

2008-09-10T15:35:13.227-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

GENTOO GLSA-200503-02 IDEFENSE 20050222 phpBB Group phpBB2 Arbitrary File Unlink Vulnerability CONFIRM http://www.phpbb.com/support/documents.php?mode=changelog Directory traversal vulnerability in (1) usercp_register.php and (2) usercp_avatar.php for phpBB 2.0.11, and possibly other versions, with gallery avatars enabled, allows remote attackers to delete (unlink) arbitrary files via "/../" sequences in the avatarselect parameter.

CVE-2005-0259

2005-03-14T00:00:00.000-05:00

2008-09-10T15:35:13.307-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

GENTOO GLSA-200503-02 IDEFENSE 20050222 phpBB Group phpBB Arbitrary File Disclosure Vulnerability CERT-VN VU#774686 CONFIRM http://www.phpbb.com/support/documents.php?mode=changelog phpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled, allows local users to read arbitrary files by providing both a local and remote location for an avatar, then modifying the "Upload Avatar from a URL:" field to reference the target file.

cpe:/a:ca:brightstor_arcserve_backup:11.1

CVE-2005-0260

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:10.390-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1013138 CONFIRM http://supportconnectw.ca.com/public/enews/BrightStor/brigcurrent.asp#news1 IDEFENSE 20050209 Computer Associates BrightStor ARCserve Backup v11 Discovery Service Remote Buffer Overflow Vulnerability XF brightstor-discovery-bo(19251) Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote attackers to execute arbitrary code via a long packet to UDP port 41524, which is not properly handled in a recvfrom call.

cpe:/o:ibm:aix:5.2 cpe:/o:ibm:aix:5.3

CVE-2005-0261

2005-02-10T00:00:00.000-05:00

2017-07-10T21:32:10.453-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov IDEFENSE 20050210 IBM AIX lspath Local File Access Vulnerability BID 12513 AIXAPAR IY67457 AIXAPAR IY67655 XF ibm-aix-ispath-information-disclosure(19281) lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which allows local users to read one line of arbitrary files.

cpe:/o:ibm:aix:5.1 cpe:/o:ibm:aix:5.2 cpe:/o:ibm:aix:5.3

CVE-2005-0262

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:10.517-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20050210 IBM AIX ipl_varyon Local Buffer Overflow Vulnerability BID 12516 AIXAPAR IY66933 AIXAPAR IY67750 AIXAPAR IY67812 XF ibm-aix-iplvaryon-bo(19282) Buffer overflow in ipl_varyon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -d argument.

cpe:/o:ibm:aix:5.1 cpe:/o:ibm:aix:5.2 cpe:/o:ibm:aix:5.3

CVE-2005-0263

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:10.577-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20050210 IBM AIX netpmon Local Buffer Overflow Vulnerability BID 12517 AIXAPAR IY67124 AIXAPAR IY67136 AIXAPAR IY67807 XF ibm-aix-netpmon-bo(19278) Buffer overflow in netpmon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -O argument.

cpe:/a:owl:owl_intranet_engine:0.6 cpe:/a:owl:owl_intranet_engine:0.7 cpe:/a:owl:owl_intranet_engine:0.71 cpe:/a:owl:owl_intranet_engine:0.72 cpe:/a:owl:owl_intranet_engine:0.73

CVE-2005-0264

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:10.623-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050101 Various Vulnerabilities in OWL Intranet Engine BID 12114 XF owl-intranet-engine-xss(18705) Multiple cross-site scripting (XSS) vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) expand or (2) order parameter.

cpe:/a:owl:owl_intranet_engine:0.7 cpe:/a:owl:owl_intranet_engine:0.8

CVE-2005-0265

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:10.670-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050101 Various Vulnerabilities in OWL Intranet Engine BID 12114 XF owl-intranet-engine-sql-injection(18704) Multiple SQL injection vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to execute arbitrary SQL commands via the (1) parent or (2) sortposted parameter.

cpe:/a:sugarcrm:sugarcrm:1.0 cpe:/a:sugarcrm:sugarcrm:1.0f cpe:/a:sugarcrm:sugarcrm:1.0g cpe:/a:sugarcrm:sugarcrm:1.1 cpe:/a:sugarcrm:sugarcrm:1.1a cpe:/a:sugarcrm:sugarcrm:1.1b cpe:/a:sugarcrm:sugarcrm:1.1c cpe:/a:sugarcrm:sugarcrm:1.1d cpe:/a:sugarcrm:sugarcrm:1.1e cpe:/a:sugarcrm:sugarcrm:1.1f cpe:/a:sugarcrm:sugarcrm:1.5d cpe:/a:sugarcrm:sugarcrm:2.0.1 cpe:/a:sugarcrm:sugarcrm:2.0.1a

CVE-2005-0266

2005-01-01T00:00:00.000-05:00

2017-07-10T21:32:10.733-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050101 Cross Site Scripting Vulnerabilities and Possible Code Execution BID 12113 XF sugar-sales-index-xss(18719) Cross-site scripting (XSS) vulnerability in index.php in SugarCRM 1.X allows remote attackers to inject arbitrary web script or HTML via the (1) return_module, (2) return_action, (3) name, (4) module, or (5) record parameter.

cpe:/a:flatnuke:flatnuke:2.5.1

CVE-2005-0267

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:10.780-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050102 Multiple Vulnerabilities in FlatNuke BID 12150 XF flatnuke-indexphp-gain-access(18741) index.php in FlatNuke 2.5.1 allows remote attackers to create an administrator account via carriage returns and #10 in the url_avatar field, which is interpreted as a sensitive directive.

cpe:/a:flatnuke:flatnuke:2.5.1

CVE-2005-0268

2005-01-03T00:00:00.000-05:00

2017-07-10T21:32:10.843-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050102 Multiple Vulnerabilities in FlatNuke BID 12150 XF flatnuke-indexphp-xss(18746) Direct code injection vulnerability in FlatNuke 2.5.1 allows remote attackers to execute arbitrary PHP code by placing the code into the url_avatar field.

cpe:/a:sir:gnuboard:3.30 cpe:/a:sir:gnuboard:3.31 cpe:/a:sir:gnuboard:3.32 cpe:/a:sir:gnuboard:3.33 cpe:/a:sir:gnuboard:3.34 cpe:/a:sir:gnuboard:3.35 cpe:/a:sir:gnuboard:3.36 cpe:/a:sir:gnuboard:3.37 cpe:/a:sir:gnuboard:3.38 cpe:/a:sir:gnuboard:3.39 cpe:/a:sir:gnuboard:3.40

CVE-2005-0269

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:10.890-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050103 STG Security Advisory: [SSA-20041224-21] File extensions BID 12149 XF gnuboard-gbupdate-file-upload(18729) The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, which allows remote attackers to upload arbitrary files via file extensions that include uppercase letters.

cpe:/a:photopost:reviewpost_php_pro:1.0.2 cpe:/a:photopost:reviewpost_php_pro:2.5 cpe:/a:photopost:reviewpost_php_pro:2.5.1 cpe:/a:photopost:reviewpost_php_pro:2.84

CVE-2005-0270

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:10.953-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050103 Serious Vulnerabilities In PhotoPost ReviewPost MISC http://www.gulftech.org/?node=research&article_id=00062-01022005 XF reviewpost-php-xss(18731) Multiple cross-site scripting (XSS) vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to inject arbitrary web script or HTML via the (1) si parameter to showcat.php, (2) cat or (3) page parameter to showproduct.php, or (4) report parameter to reportproduct.php.

cpe:/a:photopost:reviewpost_php_pro:1.0.2 cpe:/a:photopost:reviewpost_php_pro:2.5 cpe:/a:photopost:reviewpost_php_pro:2.5.1

CVE-2005-0271

2005-01-03T00:00:00.000-05:00

2017-07-10T21:32:11.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050103 Serious Vulnerabilities In PhotoPost ReviewPost MISC http://www.gulftech.org/?node=research&article_id=00062-01022005 XF reviewpost-php-sql-injection(18732) Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showcat.php or (2) product parameter to addfav.php.

cpe:/a:photopost:reviewpost_php_pro:1.0.2 cpe:/a:photopost:reviewpost_php_pro:2.5 cpe:/a:photopost:reviewpost_php_pro:2.5.1

CVE-2005-0272

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:11.063-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050103 Serious Vulnerabilities In PhotoPost ReviewPost XF reviewpost-php-file-upload(18735) ReviewPost PHP Pro before 2.84 allows remote attackers to upload and execute arbitrary PHP files by posting a review file with multiple extensions, which bypasses the intended restrictions.

cpe:/a:photopost:photopost_php_pro:4.85

CVE-2005-0273

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:11.123-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050103 Multiple PhotoPost Pro Vulnerabilities MISC http://www.gulftech.org/?node=research&article_id=00063-01032005 BID 12156 XF photopost-php-showgallery-xss(18744) Multiple SQL injection vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) ppuser parameter.

cpe:/a:photopost:photopost_php_pro:4.85

CVE-2005-0274

2005-01-03T00:00:00.000-05:00

2017-07-10T21:32:11.170-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050103 Multiple PhotoPost Pro Vulnerabilities MISC http://www.gulftech.org/?node=research&article_id=00063-01032005 BID 12156 XF photopost-php-showgallery-xss(18744) Multiple cross-site scripting (XSS) vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) si, (3) page, or (4) ppuser parameters.

cpe:/a:3com:3cdaemon:2.0:revision_10

CVE-2005-0275

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:11.217-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050104 3Com 3CDaemon Multiple Vulnerabilities XF 3cdaemon-reserved-name-dos(18750) TFTP in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) via a GET request containing an MS-DOS device name.

cpe:/a:3com:3cdaemon:2.0:revision_10

CVE-2005-0276

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:11.280-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050104 3Com 3CDaemon Multiple Vulnerabilities BID 12155 XF 3cdaemon-login-dos(18751) Multiple format string vulnerabilities in the FTP service in 3Com 3CDaemon 2.0 revision 10 allow remote attackers to cause a denial of service (application crash) via format string specifiers in (1) the username, (2) cd, (3) delete, (4) rename, (5) rmdir, (6) literal, (7) stat, or (8) CWD commands.

cpe:/a:3com:3cdaemon:2.0:revision_10

CVE-2005-0277

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:11.327-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050104 3Com 3CDaemon Multiple Vulnerabilities BUGTRAQ 20050218 3com 3CDaemon FTP Unauthorized "USER" Remote BOverflow BID 12155 XF 3cdaemon-long-command-dos(18754) Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via (1) a long username in the USER command or (2) an FTP command that contains a long argument, such as cd, send, or ls.

cpe:/a:3com:3cdaemon:2.0:revision_10

CVE-2005-0278

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:11.373-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050104 3Com 3CDaemon Multiple Vulnerabilities BID 12155 XF 3cdaemon-command-obtain-information(18756) The FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to gain sensitive information via a cd command that contains an MS-DOS device name, which reveals the installation path in an error message.

cpe:/a:jowood_productions:soldner_secret_wars:30830

CVE-2005-0279

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:11.437-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050104 Socket termination, format string and XSS in Soldner Secret Wars BID 12162 XF soldner-secret-wars-dos(18749) Soldner Secret Wars 30830 and earlier does not properly handle the "message too long" socket error, which allows remote attackers to cause a denial of service (socket termination) via a long UDP packet.

cpe:/a:jowood_productions:soldner_secret_wars:30830

CVE-2005-0280

2005-01-04T00:00:00.000-05:00

2017-07-10T21:32:11.500-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050104 Socket termination, format string and XSS in Soldner Secret Wars BID 12162 XF soldner-secret-wars-format-string(18752) Format string vulnerability in Soldner Secret Wars 30830 and earlier allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in a message.

cpe:/a:jowood_productions:soldner_secret_wars:30830

CVE-2005-0281

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:11.547-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050104 Socket termination, format string and XSS in Soldner Secret Wars BID 12162 XF soldner-secret-wars-xss(18753) Cross-site scripting (XSS) vulnerability in the web interface in Soldner Secret Wars 30830 allows remote attackers to inject arbitrary web script or HTML via a user message, which is not filtered or quoted when the administrator views the server logs.

cpe:/a:mybulletinboard:mybulletinboard:1.0_rc4

CVE-2005-0282

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:11.593-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050104 MyBB SQL Injection BID 12161 XF mybb-member-sql-injection(18755) SQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the uid parameter.

cpe:/a:david_barrett:qwikiwiki:1.4.1

CVE-2005-0283

2005-01-04T00:00:00.000-05:00

2017-07-10T21:32:11.657-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050104 QWikiwiki directory traversal vulnerability CONFIRM http://www.qwikiwiki.com/index.php?page=QwikiVulnerability BID 12163 XF qwikiwiki-directory-traversal(18748) Directory traversal vulnerability in index.php in QwikiWiki allows remote attackers to read arbitrary files via a .. (dot dot) and a %00 at the end of the filename in the page parameter.

cpe:/a:woltlab:burning_book:1.0_gold cpe:/a:woltlab:burning_book:1.1.1e

CVE-2005-0284

2005-01-10T00:00:00.000-05:00

2017-07-10T21:32:11.703-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050110 Woltlab Burning Book addentry.php SQL Injection XF woltlab-book-addentry-sql-injection(18859) SQL injection vulnerability in addentry.php in Woltlab Burning Book 1.0 Gold, 1.1.1e, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the user-agent parameter.

cpe:/a:bottomline:webseries_payment_application:4.0

CVE-2005-0285

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:11.750-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050110 Portcullis Security Advisory 05-001 SECTRACK 1012854 BID 12216 XF webseries-pa-url-security-bypass(18848) Webseries Payment Application does not properly restrict privileged operations, which allows remote authenticated users to gain privileges by directly accessing certain URLs.

cpe:/a:emotion:mediapartner_web_server:5.0 cpe:/a:emotion:mediapartner_web_server:5.1

CVE-2005-0286

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:11.813-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050110 Portcullis Security Advisory 05-004 SECTRACK 1012855 BID 12236 XF mediapartner-bhtml-source-disclosure(18861) eMotion MediaPartner Web Server 5.0 and 5.1 allows remote attackers to obtain sensitive information via an HTTP request for a .bhtml file that contains a (1) . (dot) or (2) + (plus sign) at the end, which returns the source code for that file.

cpe:/a:bottomline:webseries_payment_application:4.0

CVE-2005-0287

2005-01-10T00:00:00.000-05:00

2017-07-10T21:32:11.857-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050110 Portcullis Security Advisory 05-009 SECTRACK 1012854 XF webseries-report-execution(18862) Bottomline Webseries Payment Application allows remote attackers to read arbitrary files on the network via a report template with modified ReportPath or ReportName values.

cpe:/a:bottomline:webseries_payment_application:4.0

CVE-2005-0288

2005-01-11T00:00:00.000-05:00

2017-07-10T21:32:11.907-04:00

3.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050110 Portcullis Security Advisory 05-008 SECTRACK 1012854 BID 12231 XF webseries-pa-password-gain-access(18860) The change password functionality in Bottomline Webseries Payment Application does not require the old password when users enter a new password, which could allow remote authenticated users to change other users' passwords.

cpe:/h:apple:airport_express:6.1 cpe:/h:apple:airport_extreme:5.5

CVE-2005-0289

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:11.953-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050115 Apple Airport WDS DoS BID 12152 XF apple-airport-dos(18865) Apple AirPort Express prior to 6.1.1 and Extreme prior to 5.5.1, configured as a Wireless Data Service (WDS), allows remote attackers to cause a denial of service (device freeze) by connecting to UDP port 161 and before link-state change occurs.

cpe:/h:netgear:fvs318:2.4

CVE-2005-0290

2005-01-17T00:00:00.000-05:00

2017-07-10T21:32:12.017-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20050117 Multiple Vulnerabilities in Netgear FVS318 Router BUGTRAQ 20050117 Multiple Vulnerabilities in Netgear FVS318 Router SECTRACK 1012913 BID 12278 XF netgear-fvs318-filter-bypass(18920) NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to bypass the filters using hex encoded URLs, as demonstrated using a hex encoded file extension.

cpe:/h:netgear:fvs318:2.4

CVE-2005-0291

2005-01-17T00:00:00.000-05:00

2017-07-10T21:32:12.063-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20050117 Multiple Vulnerabilities in Netgear FVS318 Router BUGTRAQ 20050117 Multiple Vulnerabilities in Netgear FVS318 Router SECTRACK 1012913 BID 12278 XF netgear-fvs318-log-xss(18921) Cross-site scripting (XSS) vulnerability in the log viewer in NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via a blocked URL phrase.

cpe:/a:php_gift_registry:phpgiftreg:1.4

CVE-2005-0292

2005-01-17T00:00:00.000-05:00

2017-07-10T21:32:12.123-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20050116 phpGiftReq SQL Injection BUGTRAQ 20050116 phpGiftReq SQL Injection SECTRACK 1012910 BUGTRAQ 20050307 Re: phpGiftReq SQL Injection BID 12289 XF phpgiftregistry-sql-injection(18925) Multiple SQL injection vulnerabilities in index.php in PHP Gift Registry (phpGiftReg) 1.4.0, and possibly other versions before 1.5.0b1, allow remote attackers to execute arbitrary SQL commands via the (1) messageid, (2) shopper, (3) shopfor, or (4) itemid parameters.

cpe:/a:minis:minis:0.2.1

CVE-2005-0293

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:12.170-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050116 Minis directory traversal vulnerability SECTRACK 1012911 BID 12279 XF minis-month-directory-traversal(18928) Directory traversal vulnerability in minis.php in Minis 0.2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the month parameter.

cpe:/a:minis:minis:0.2.1

CVE-2005-0294

2005-01-16T00:00:00.000-05:00

2017-07-10T21:32:12.217-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20050116 Minis directory traversal vulnerability BUGTRAQ 20050116 Minis directory traversal vulnerability SECTRACK 1012911 XF minis-month-dos(18929) minis.php in Minis 0.2.1 allows remote attackers to cause a denial of service (infinite loop) via an HTTP request for a file that the web server does not have permission to read, as demonstrated using the month parameter.

cpe:/a:inca:nprotect_gameguard

CVE-2005-0295

2005-01-17T00:00:00.000-05:00

2017-07-10T21:32:12.267-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050116 Unrestricted I/O access vulnerability in INCA Gameguard BID 12280 XF nprotect-npptnt2-gain-access(18952) npptnt2.sys in nProtect Gameguard provides unrestricted I/O to any process that calls it, which allows local users to gain privileges.

cpe:/a:novell:groupwise:6.0 cpe:/a:novell:groupwise:6.0:sp1 cpe:/a:novell:groupwise:6.0:sp2 cpe:/a:novell:groupwise:6.0:sp3 cpe:/a:novell:groupwise:6.0:sp4 cpe:/a:novell:groupwise:6.5 cpe:/a:novell:groupwise:6.5:sp1 cpe:/a:novell:groupwise:6.5:sp2 cpe:/a:novell:groupwise_webaccess:6.0:sp4 cpe:/a:novell:groupwise_webaccess:6.5 cpe:/a:novell:groupwise_webaccess:6.5:sp1 cpe:/a:novell:groupwise_webaccess:6.5:sp2

CVE-2005-0296

2005-01-17T00:00:00.000-05:00

2017-07-10T21:32:12.313-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050117 Novell GroupWise WebAccess error modules loading MISC http://support.novell.com/servlet/tidfinder/10096251 FULLDISC 20050121 NOVL-2005-10096251 GroupWise WebAccess error handling modules (report) BUGTRAQ 20050127 NOVL-2005-10096251 GroupWise WebAccess error handling modules (report) BID 12285 XF groupwise-error-auth-bypass(18954) ** DISPUTED ** NOTE: this issue has been disputed by the vendor. The error module in Novell GroupWise WebAccess allows remote attackers who have not authenticated to read potentially sensitive information, such as the version, via an incorrect login and a modified (1) error or (2) modify parameter that returns template files or the "about" information page. NOTE: the vendor has disputed this issue.

cpe:/a:oracle:database_server cpe:/a:oracle:database_server:10.2.1:r2

CVE-2005-0297

2005-01-18T00:00:00.000-05:00

2016-10-17T23:09:52.690-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050118 Multiple high risk vulnerabilities in Oracle RDBMS 10g/9i SQL injection vulnerability in Oracle Database 9i and 10g allows remote attackers to execute arbitrary SQL commands and gain privileges.

cpe:/a:oracle:database_server:8.0.6 cpe:/a:oracle:database_server:8.0.6.3 cpe:/a:oracle:database_server:8.1.7.4 cpe:/a:oracle:database_server:9.0.1.4 cpe:/a:oracle:database_server:9.0.1.5 cpe:/a:oracle:database_server:9.0.4 cpe:/a:oracle:database_server:9.2.0.4 cpe:/a:oracle:database_server:9.2.0.5 cpe:/a:oracle:database_server:9.2.0.6 cpe:/a:oracle:database_server:10.1.0.2 cpe:/a:oracle:database_server:10.1.0.3 cpe:/a:oracle:database_server:10.1.0.3.1

CVE-2005-0298

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:12.373-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050118 PeteFinnigan.com - Oracle security advisory MISC http://www.oracle.com/technology/deploy/security/pdf/cpu-jan-2005_advisory.pdf MISC http://www.petefinnigan.com/directory_traversal.pdf XF oracle-directory-lob-obtain-info(18947) The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, which allows users with read privileges to a DIRECTORY object to obtain sensitive information.

cpe:/a:gforge:gforge:3.1 cpe:/a:gforge:gforge:3.2 cpe:/a:gforge:gforge:3.3 cpe:/a:gforge:gforge:3.21

CVE-2005-0299

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:12.437-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050120 STG Security Advisory: [SSA-20050120-24] GForge 3.x directory SECTRACK 1012950 BID 12318 XF gforge-dir-dirname-directory-traversal(18988) Directory traversal vulnerability in GForge 3.3 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the (1) dir parameter to controller.php or (2) dir_name parameter to controlleroo.php.

cpe:/a:jsboard:jsboard:2.0.7 cpe:/a:jsboard:jsboard:2.0.8 cpe:/a:jsboard:jsboard:2.0.9

CVE-2005-0300

2005-01-20T00:00:00.000-05:00

2017-07-10T21:32:12.483-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050120 STG Security Advisory: [SSA-20050120-22] JSBoard file disclosure SECTRACK 1012949 BID 12319 XF jsboard-session-file-include(18990) Directory traversal vulnerability in session.php in JSBoard 2.0.9 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the table parameter.

cpe:/a:comersus_open_technologies:comersus_backoffice_lite:6.0 cpe:/a:comersus_open_technologies:comersus_backoffice_lite:6.1

CVE-2005-0301

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:12.547-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050121 bug report comersus Back Office Lite 6.0 and 6.0.1 CONFIRM http://www.comersus.org/forum/displayMessage.asp?mid=32753 MISC http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html XF backoffice-lite-administrative-bypass(19010) comersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and gain privileges via a direct request to the program.

cpe:/a:comersus_open_technologies:comersus_backoffice_lite:6.0 cpe:/a:comersus_open_technologies:comersus_backoffice_lite:6.1

CVE-2005-0302

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:12.593-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050121 bug report comersus Back Office Lite 6.0 and 6.0.1 MISC http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html XF backoffice-lite-sql-injection(19013) SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header.

cpe:/a:comersus_open_technologies:comersus_backoffice_lite:6.0 cpe:/a:comersus_open_technologies:comersus_backoffice_lite:6.1

CVE-2005-0303

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:12.640-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050121 bug report comersus Back Office Lite 6.0 and 6.0.1 MISC http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html XF backoffice-lite-xss(19014) Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_supportError.asp or (2) comersus_backofficelite_supportError.asp in BackOffice Lite 6.0 and 6.01 allow remote attackers to inject arbitrary web script or HTML via the error parameter.

cpe:/a:divx:divx_player:2.6

CVE-2005-0304

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:12.750-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/divxplayer-adv.txt BUGTRAQ 20050121 Arbitrary files overwriting through skins in DivX Player 2.6 BID 12332 XF divx-player-directory-traversal(19030) Directory traversal vulnerability in DivX Player 2.6 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a filename in a ZIP file for a skin.

cpe:/a:siteman:siteman:1.1.9 cpe:/a:siteman:siteman:1.1.10

CVE-2005-0305

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:12.797-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050120 God Admin Injection Vulnerability in Siteman 1.0.x, BUGTRAQ 20050122 Siteman User Database Line Insertion Vulnerability SECTRACK 1012951 BID 12304 XF siteman-gain-access(18998) CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users and gain privileges via the line parameter in a docreate operation.

cpe:/a:mercuryboard:mercuryboard:1.1 cpe:/a:mercuryboard:mercuryboard:1.1.1

CVE-2005-0306

2005-01-25T00:00:00.000-05:00

2017-07-10T21:32:12.860-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050124 Multiple vulnerabilities in MercuryBoard 1.1.1 BID 12359 XF mercuryboard-multiple-script-path-disclosure(19048) MercuryBoard 1.1.1 allows remote attackers to gain sensitive information via an HTTP request with the n parameter set to 0, which causes a divide-by-zero error and reveals the path in the resulting error message.

cpe:/a:mercuryboard:mercuryboard:1.1 cpe:/a:mercuryboard:mercuryboard:1.1.1

CVE-2005-0307

2005-01-25T00:00:00.000-05:00

2017-07-10T21:32:12.907-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050124 Multiple vulnerabilities in MercuryBoard 1.1.1 BID 12359 XF mercuryboard-multiple-scripts-xss(19050) Multiple cross-site scripting (XSS) vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) s, (2) l, (3) a, (4) t, (5) to, or (6) re parameters.

cpe:/a:ursoftware:w32dasm:8.94

CVE-2005-0308

2005-01-24T00:00:00.000-05:00

2017-07-10T21:32:12.953-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050124 Local buffer-overflow in W32Dasm 8.93 SECTRACK 1012997 BID 12352 XF w32dasm-wsprintf-bo(19044) Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to execute arbitrary code via a large import or export function name.

cpe:/a:exponent:exponent:0.95

CVE-2005-0309

2005-01-25T00:00:00.000-05:00

2017-07-10T21:32:13.047-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050125 Vulnerabilities in eXponent 0.95 BID 12358 XF exponent-module-xss(19061) Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) mod.php in Exponent 0.95 allow remote attackers to inject arbitrary web script or HTML via the module parameter.

cpe:/a:exponent:exponent:0.95

CVE-2005-0310

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:13.093-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050125 Vulnerabilities in eXponent 0.95 XF exponent-pathoscoreversion-path-disclosure(19064) Exponent 0.95 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) search.info.php, (2) permissions.info.php, (3) security.info.php, (4) formcontrol.php, or (5) file_modules.php, which reveals the path in an error message because the pathos_core_version variable is undefined.

cpe:/h:ingate:ingate_firewall:3.2 cpe:/h:ingate:ingate_firewall:3.2.1 cpe:/h:ingate:ingate_firewall:3.3.1 cpe:/h:ingate:ingate_firewall:4.1.3

CVE-2005-0311

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:13.140-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050127 Ingate Firewall: Removed PPTP tunnels not deactivated SECTRACK 1013022 CONFIRM http://www.ingate.com/relnote-422.php BID 12383 XF ingate-firewall-unath-access(19123) Ingate Firewall 4.1.3 and earlier does not terminate the PPTP session for an active user when the administrator disables that user from a resource, which could allow remote authenticated users to retain unauthorized access to resources.

cpe:/a:war_ftp_daemon:war_ftp_daemon:1.8 cpe:/a:war_ftp_daemon:war_ftp_daemon:1.82_rc9

CVE-2005-0312

2005-01-27T00:00:00.000-05:00

2017-07-10T21:32:13.203-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050127 WarFTPD 1.82 RC9 DoS CONFIRM http://support.jgaa.com/index.php?cmd=ShowReport&ID=02643 BID 12384 XF warftpd-cwd-dos(19129) WarFTPD 1.82 RC9, when running as an NT service, allows remote authenticated users to cause a denial of service (access violation) via a CWD command with a crafted pathname, as demonstrated using a large string of "%s" sequences, possibly indicating a format string vulnerability.

cpe:/a:amax_information_technologies:magic_winmail_server:4.0

CVE-2005-0313

2005-01-27T00:00:00.000-05:00

2017-07-10T21:32:13.267-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050127 [SIG^2 G-TEC] Magic Winmail Server v4.0 Multiple Vulnerabilities SECTRACK 1013017 BID 12388 XF magicwinmail-uploadphp-file-upload(19108) XF magic-winmail-command-directory-traversal(19114) Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to (1) upload arbitrary files via certain parameters to upload.php or (2) read arbitrary files via certain parameters to download.php, and remote authenticated users to read, create, or delete arbitrary directories and files via the IMAP commands (3) CREATE, (4) EXAMINE, (5) SELECT, or (6) DELETE.

CVE-2005-0314

2005-01-27T00:00:00.000-05:00

2017-07-10T21:32:13.327-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050127 [SIG^2 G-TEC] Magic Winmail Server v4.0 Multiple Vulnerabilities SECTRACK 1013017 BID 12388 XF magic-winmail-userphp-xss(19113) Cross-site scripting (XSS) vulnerability in user.php in Magic Winmail Server 4.0 Build 1112 allows remote attackers to inject arbitrary web script or HTML via the personal information fields.

cpe:/a:amax_information_technologies:magic_winmail_server:4.0

CVE-2005-0315

2005-01-27T00:00:00.000-05:00

2017-07-10T21:32:13.390-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050127 [SIG^2 G-TEC] Magic Winmail Server v4.0 Multiple Vulnerabilities SECTRACK 1013017 BID 12388 XF magicwinmail-ftp-obtain-information(19115) The FTP service in Magic Winmail Server 4.0 Build 1112 does not verify that the IP address in a PORT command is the same as the IP address of the user of the FTP session, which allows remote authenticated users to use the server as an intermediary for port scanning.

cpe:/a:webwasher:webwasher_classic:2.2.1 cpe:/a:webwasher:webwasher_classic:3.3

CVE-2005-0316

2005-01-28T00:00:00.000-05:00

2017-07-10T21:32:13.453-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050128 WebWasher Classic - HTTP CONNECT weakness SECTRACK 1013036 MISC http://www.oliverkarow.de/research/WebWasherCONNECT.txt BID 12394 XF webwasher-classic-connect-gain-access(19144) WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions.

cpe:/a:alt-n:webadmin:3.0.2

CVE-2005-0317

2005-01-28T00:00:00.000-05:00

2017-07-10T21:32:13.517-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050128 Multiple vulnerabilities in Alt-N WebAdmin <= 3.0.2 SECTRACK 1013038 BID 12395 XF webadmin-usereditaccountwdm-xss(19161) Cross-site scripting (XSS) vulnerability in useredit_account.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the user parameter.

cpe:/a:alt-n:webadmin:3.0.2

CVE-2005-0318

2005-01-28T00:00:00.000-05:00

2016-10-17T23:10:19.727-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050128 Multiple vulnerabilities in Alt-N WebAdmin <= 3.0.2 SECTRACK 1013038 BID 12395 useredit_account.wdm in Alt-N WebAdmin 3.0.4 does not properly validate account edits by the logged in user, which allows remote authenticated users to edit other users' account information via a modified user parameter.

cpe:/a:alt-n:webadmin:3.0.3

CVE-2005-0319

2005-01-28T00:00:00.000-05:00

2017-07-10T21:32:13.577-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050128 Multiple vulnerabilities in Alt-N WebAdmin <= 3.0.2 BID 12395 XF webadmin-html-injection(19162) Direct remote injection vulnerability in modalfram.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to load external webpages that appear to come from the WebAdmin server, which allows remote attackers to inject arbitrary HTML or web script to facilitate cross-site scripting (XSS) and phishing attacks.

cpe:/a:icewarp:web_mail:5.3

CVE-2005-0320

2005-01-28T00:00:00.000-05:00

2017-07-10T21:32:13.623-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050128 Multiple vulnerabilities in Icewarp Web Mail 5.3.0: New holes BID 12396 XF merak-icewarp-multiple-xss(19147) Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to login.html, (2) accountid parameter to accountsettings_add.html, or the (3) note, (4) title, and (5) location fields to calendar.html.

cpe:/a:icewarp:web_mail:5.3.0 cpe:/a:merak:mail_server:7.6.0

CVE-2005-0321

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:13.670-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050128 Multiple vulnerabilities in Icewarp Web Mail 5.3.0: New holes XF merak-icewarp-user-path-disclosure(19152) MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via an HTTP request to (1) calendar_d.html, (2) calendar_m.html, (3) calendar_w.html, or (4) calendar_y.html, which reveal the installation path.

cpe:/a:icewarp:web_mail:5.3.0 cpe:/a:icewarp:web_mail:5.3.2 cpe:/a:merak:mail_server:7.6.0 cpe:/a:merak:mail_server:7.6.4r

CVE-2005-0322

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:13.733-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov BUGTRAQ 20050128 Multiple vulnerabilities in Icewarp Web Mail 5.3.0: New holes XF merak-icewarp-weak-password-encryption(19153) MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the (1) users.cfg, (2) settings.cfg, (3) users.dat or (4) user.dat files, which allows local users to extract the passwords.

cpe:/a:captaris:infinite_mobile_delivery_webmail:2.6

CVE-2005-0323

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:13.797-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050129 XSS in Infinite Mobile Delivery v2.6 Webmail SECTRACK 1013044 MISC http://www.lovebug.org/imd_advisory.txt BID 12399 XF infinite-mobile-delivery-xss(19151) Cross-site scripting (XSS) vulnerability in Infinite Mobile Delivery Webmail 2.6 allows remote attackers to inject arbitrary web script or HTML via the URL.

cpe:/a:captaris:infinite_mobile_delivery_webmail:2.6

CVE-2005-0324

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:13.843-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050129 XSS in Infinite Mobile Delivery v2.6 Webmail SECTRACK 1013044 MISC http://www.lovebug.org/imd_advisory.txt BID 12399 XF infinite-mobile-delivery-path-disclosure(19154) Infinite Mobile Delivery Webmail 2.6 allows remote attackers to gain sensitive information via an HTTP request that contains invalid characters for a Windows foldername, which reveals the path in an error message.

cpe:/a:techland:xpand_rally:1.0

CVE-2005-0325

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:13.890-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/xprallyboom-adv.txt FULLDISC 20050130 Broadcast crash in Xpand Rally 1.0.0.0 BUGTRAQ 20050130 Broadcast crash in Xpand Rally 1.0.0.0 SECTRACK 1013043 BID 12409 XF xpand-rally-memory-dos(19150) Xpand Rally 1.0.0.0 allows remote attackers or remote malicious game servers to cause a denial of service (application crash) via a packet with large values that are not properly handled in certain malloc or memcpy operations.

cpe:/a:php_arena:pafiledb:3.1

CVE-2005-0326

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:13.937-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050131 [PersianHacker.net] Full Path Disclosure and PHP Injection In Pafiledb 3.1 Final XF pafiledb-login-path-disclosure(19175) pafiledb.php in PaFileDB 3.1 allows remote attackers to gain sensitive information via an invalid or missing action parameter, which reveals the path in an error message when it cannot include a login.php script.

cpe:/a:php_arena:pafiledb:3.1

CVE-2005-0327

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:13.983-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050131 [PersianHacker.net] Full Path Disclosure and PHP Injection In Pafiledb 3.1 Final XF pafiledb-login-file-include(19176) pafiledb.php in Pafiledb 3.1 may allow remote attackers to execute arbitrary PHP code via a modified action parameter that is used in an include statement for login.php.

cpe:/h:netgear:rt311 cpe:/h:netgear:rt314 cpe:/h:zyxel:prestige:310 cpe:/h:zyxel:prestige:314 cpe:/h:zyxel:prestige:324

CVE-2005-0328

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:14.047-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050131 Zyxel / Netgear and probably other routers leaking information. XF zyxel-netgear-ping-information-disclosure(20609) Zyxel P310, P314, P324 and Netgear RT311, RT314 running the latest firmware, allows remote attackers on the WAN to obtain the IP address of the LAN side interface by pinging a valid LAN IP address, which generates an ARP reply from the WAN address side that maps the LAN IP address to the WAN's MAC address.

cpe:/a:zipgenius:zipgenius:standard_5.5 cpe:/a:zipgenius:zipgenius:suite_5.5

CVE-2005-0329

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:14.093-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050202 7a69Adv#19 - ZipGenius unpack path disclosure SECTRACK 1013542 BID 12419 XF zipgenius-path-disclosure(19203) Directory traversal vulnerability in ZipGenius 5.5 and earlier allows remote attackers to create and possibly modify arbitrary files via a ZIP file with a file whose name includes .. (dot dot) sequences.

cpe:/a:people_can_fly:painkiller:1.3.1 cpe:/a:people_can_fly:painkiller:1.3.5

CVE-2005-0330

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:14.140-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050202 Limited buffer-overflow in Painkiller 1.35 SECTRACK 1013066 BID 12423 XF painkiller-long-cdkey-bo(19205) Buffer overflow in Painkiller 1.35 and earlier, and possibly other versions before 1.61, allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a long cd-key hash.

cpe:/a:rarlab:winrar:3.0.0 cpe:/a:rarlab:winrar:3.10 cpe:/a:rarlab:winrar:3.10_beta3 cpe:/a:rarlab:winrar:3.10_beta5 cpe:/a:rarlab:winrar:3.11 cpe:/a:rarlab:winrar:3.20 cpe:/a:rarlab:winrar:3.40 cpe:/a:rarlab:winrar:3.41 cpe:/a:rarlab:winrar:3.42

CVE-2005-0331

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:14.187-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050202 7a69Adv#21 - WinRAR unpack one-folder path disclosure BID 12422 XF winrar-dotdotdotdirectory-traversal(20585) Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP file to extract it, allows remote attackers to create arbitrary files via a ... (triple dot) in the filename of the ZIP file.

cpe:/a:ventia:desknow_mail_and_collaboration_server:2.5.12 cpe:/a:ventia:desknow_mail_and_collaboration_server:2.5.13

CVE-2005-0332

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:14.250-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050202 [SIG^2 G-TEC] DeskNow Mail and Collaboration Server Directory Traversal Vulnerabilities SECTRACK 1013060 MISC http://www.security.org.sg/vuln/desknow2512.html BID 12421 XF desknow-attachmentkey-file-upload(19206) XF desknow-jsp-gain-access(19211) XF desknow-filedo-file-deletion(19212) Directory traversal vulnerability in DeskNow Mail and Collaboration Server 2.5.12 allows remote attackers to (1) upload and possibly execute files outside the directory via the AttachmentsKey parameter to attachment.do, as demonstrated using JSP pages, or (2) delete arbitrary files via the select_file parameter to file.do.

cpe:/a:lanchat_pro_revival:lanchat_pro_revival:1.666c

CVE-2005-0333

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:14.313-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050203 DoS in LANChat Pro Revival 1.666c MISC http://www.autistici.org/fdonato/advisory/LANChatRevival1.666c-adv.txt BID 12439 XF lanchatpro-udp-packet-dos(19213) LANChat Pro Revival 1.666c allows remote attackers to cause a denial of service (application crash) via a malformed UDP packet.

cpe:/h:linksys:psus4_printserver:6032

CVE-2005-0334

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:14.373-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050203 [ RSTACK Public Security Advisory ] Remote DOS against Linksys PSUS4 BID 12443 XF linksys-psus4-dos(19222) Linksys PSUS4 running firmware 6032 allows remote attackers to cause a denial of service (device crash) via an HTTP POST request containing an unknown parameter without a value.

cpe:/a:emotion:mediapartner_web_server:5.0

CVE-2005-0335

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:14.420-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050110 Portcullis Security Advisory 05-010 SECTRACK 1012838 BID 12236 XF mediapartner-dotdot-directory-traversal(18842) Directory traversal vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.

cpe:/a:emotion:mediapartner_web_server:5.0

CVE-2005-0336

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:14.467-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050110 Portcullis Security Advisory 05-010 SECTRACK 1012838 BID 12236 XF mediapartner-url-xss(18845) Cross-site scripting (XSS) vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbitrary HTML or web script, as demonstrated using a URL containing .. sequences and HTML, which results in a directory browsing page that does not properly filter the HTML.

cpe:/a:wietse_venema:postfix:2.1.3 cpe:/o:redhat:enterprise_linux:4.0::advanced_server cpe:/o:redhat:enterprise_linux:4.0::enterprise_server cpe:/o:redhat:enterprise_linux:4.0::workstation cpe:/o:redhat:enterprise_linux_desktop:4.0 cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.0::i386 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2

CVE-2005-0337

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:55.077-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=267837 BUGTRAQ 20050204 [USN-74-1] Postfix vulnerability REDHAT RHSA-2005:152 BID 12445 XF postfix-ipv6-security-bypass(19218) Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname.

cpe:/a:savant:savant_webserver:3.1

CVE-2005-0338

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:14.593-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050204 Exploit For Savant Web Server 3.1 (tested on win2003) FULLDISC 20050201 Remotely exploitable buffer overflow vulnerability in Savant Web Server 3.1 FULLDISC 20050201 Remotely exploitable buffer overflow vulnerability in Savant Web Server 3.1 BID 12429 XF savant-bo(19177) Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP request.

cpe:/a:foxmail:foxmail_email_server:2.0

CVE-2005-0339

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:14.640-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20050205 Foxmail Server Remote Buffer Overflow Vulnerability BID 12454 XF foxmail-mailfrom-bo(19229) Buffer overflow in Foxmail 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long MAIL FROM command.

cpe:/a:apple:afp_server

CVE-2005-0340

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:14.687-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2005-03-21 BUGTRAQ 20050208 AppleFileServer Denial of Service. BID 12478 XF Applefileserver-fploginext-dos(19263) Integer signedness error in Apple File Service (AFP Server) allows remote attackers to cause a denial of service (application crash) via a negative UAM string length in a FPLoginExt packet.

cpe:/a:apple:safari:1.2.4

CVE-2005-0341

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:14.733-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050204 Input Validation Vulnerability in Apple Safari version 1.2.4 v125.12 SECTRACK 1013087 MISC http://tigger.uic.edu/~jrockw2/safari_20050204.txt XF safari-contenttype-xss(19227) Apple Safari 1.2.4 does not obey the Content-type field in the HTTP header and renders text as HTML, which allows remote attackers to inject arbitrary web script or HTML and perform cross-site scripting (XSS) attacks.

cpe:/o:apple:mac_os_x:10.0 cpe:/o:apple:mac_os_x:10.0.1 cpe:/o:apple:mac_os_x:10.0.2 cpe:/o:apple:mac_os_x:10.0.3 cpe:/o:apple:mac_os_x:10.0.4 cpe:/o:apple:mac_os_x:10.1 cpe:/o:apple:mac_os_x:10.1.1 cpe:/o:apple:mac_os_x:10.1.2 cpe:/o:apple:mac_os_x:10.1.3 cpe:/o:apple:mac_os_x:10.1.4 cpe:/o:apple:mac_os_x:10.1.5 cpe:/o:apple:mac_os_x:10.2 cpe:/o:apple:mac_os_x:10.2.1 cpe:/o:apple:mac_os_x:10.2.2 cpe:/o:apple:mac_os_x:10.2.3 cpe:/o:apple:mac_os_x:10.2.4 cpe:/o:apple:mac_os_x:10.2.5 cpe:/o:apple:mac_os_x:10.2.6 cpe:/o:apple:mac_os_x:10.2.7 cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3 cpe:/o:apple:mac_os_x:10.3.1 cpe:/o:apple:mac_os_x:10.3.2 cpe:/o:apple:mac_os_x:10.3.3 cpe:/o:apple:mac_os_x:10.3.4 cpe:/o:apple:mac_os_x:10.3.5 cpe:/o:apple:mac_os_x:10.3.6 cpe:/o:apple:mac_os_x:10.3.7 cpe:/o:apple:mac_os_x_server:10.0 cpe:/o:apple:mac_os_x_server:10.1 cpe:/o:apple:mac_os_x_server:10.1.1 cpe:/o:apple:mac_os_x_server:10.1.2 cpe:/o:apple:mac_os_x_server:10.1.3 cpe:/o:apple:mac_os_x_server:10.1.4 cpe:/o:apple:mac_os_x_server:10.1.5 cpe:/o:apple:mac_os_x_server:10.2 cpe:/o:apple:mac_os_x_server:10.2.1 cpe:/o:apple:mac_os_x_server:10.2.2 cpe:/o:apple:mac_os_x_server:10.2.3 cpe:/o:apple:mac_os_x_server:10.2.4 cpe:/o:apple:mac_os_x_server:10.2.5 cpe:/o:apple:mac_os_x_server:10.2.6 cpe:/o:apple:mac_os_x_server:10.2.7 cpe:/o:apple:mac_os_x_server:10.2.8 cpe:/o:apple:mac_os_x_server:10.3 cpe:/o:apple:mac_os_x_server:10.3.1 cpe:/o:apple:mac_os_x_server:10.3.2 cpe:/o:apple:mac_os_x_server:10.3.3 cpe:/o:apple:mac_os_x_server:10.3.4 cpe:/o:apple:mac_os_x_server:10.3.5 cpe:/o:apple:mac_os_x_server:10.3.6 cpe:/o:apple:mac_os_x_server:10.3.7

CVE-2005-0342

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:14.797-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2005-05-03 BUGTRAQ 20050207 [OSX Finder] DS_Store arbitrary file overwrite vulnerability. BID 12458 XF finder-dsstore-file-overwrite(19253) The Finder in Mac OS X and earlier allows local users to overwrite arbitrary files and gain privileges by creating a hard link from the .DS_Store file to an arbitrary file.

cpe:/a:logicnow:perldesk:1.0

CVE-2005-0343

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:14.843-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050207 [SePro Bugtraq] SQL-Injection in PerlDesk 1.x BID 12471 MISC http://www.security-project.org/projects/board/showthread.php?p=5172#post5172 XF perldesk-view-sql-injection(19245) SQL injection vulnerability in PerlDesk 1.x allows remote attackers to inject arbitrary SQL commands via the view parameter.

cpe:/a:software602:602lan_suite:2004.0.04.1221

CVE-2005-0344

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:14.890-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050208 [SIG^2 G-TEC] 602LAN SUITE Web Mail Vulnerability Allows File Upload to Arbitrary Directories SECTRACK 1013106 MISC http://www.security.org.sg/vuln/602lansuite1221.html XF 602lansuite-webmail-directory-traversal(19258) Directory traversal vulnerability in 602LAN SUITE 2004.0.04.1221 allows remote authenticated users to upload and execute arbitrary files via a .. (dot dot) in the filename parameter.

cpe:/a:php_fusion:php_fusion:4.0

CVE-2005-0345

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:14.953-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050208 php-fusion 4.x vuln BID 12482 XF phpfusion-viewthread-obtain-information(19257) viewthread.php in php-fusion 4.x does not check the (1) forum_id or (2) forum_cat parameters, which allows remote attackers to view protected forums via the thread_id parameter.

cpe:/a:safenet:softremote_vpn_client

CVE-2005-0346

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:15.000-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050208 SafeNet SoftRemote VPN Client Issue: Clear-text password SECTRACK 1013134 MISC http://www.nta-monitor.com/news/vpn-flaws/safenet/index.htm XF softremote-vpn-password-disclosure(19256) SafeNet SoftRemote VPN Client stores the VPN password (pre-shared key) in cleartext in memory of the IreIKE.exe process, which allows local users to gain sensitive information if they have access to that process.

CVE-2005-0347

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:15.047-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050208 Integer overflow and arbitrary files deletion in RealArcade SECTRACK 1013128 XF realarcade-rgs-bo(19259) Integer overflow in RealArcade 1.2.0.994 and earlier allows remote attackers to execute arbitrary code via an RGS file with an invalid size string for the GUID and game name, which leads to a buffer overflow.

cpe:/a:realnetworks:realarcade:1.2.0.994

CVE-2005-0348

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:15.110-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050208 Integer overflow and arbitrary files deletion in RealArcade SECTRACK 1013128 BID 12494 XF realarcade-rgp-file-deletion(19260) Directory traversal vulnerability in RealArcade 1.2.0.994 allows remote attackers to delete arbitrary files via an RGP file with a .. (dot dot) in the FILENAME tag.

cpe:/a:ca:brightstor_arcserve_backup:11.1

CVE-2005-0349

2005-05-02T00:00:00.000-04:00

2011-03-07T21:19:51.517-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1013144 CONFIRM http://supportconnect.ca.com/sc/solcenter/sol_detail.jsp?aparno=QO63672&os=UNIX&returninput=0 IDEFENSE 20050210 Computer Associates BrightStor ARCserve Backup UniversalAgent Backdoor Vulnerability BID 12522 VUPEN ADV-2005-0145 The production release of the UniversalAgent for UNIX in BrightStor ARCserve Backup 11.1 contains hard-coded credentials, which allows remote attackers to access the file system and possibly execute arbitrary commands.

cpe:/a:f-secure:f-secure_anti-virus:4.52::linux_workstations cpe:/a:f-secure:f-secure_anti-virus:4.60::samba_servers cpe:/a:f-secure:f-secure_anti-virus:4.61::linux_gateways cpe:/a:f-secure:f-secure_anti-virus:4.61::linux_servers cpe:/a:f-secure:f-secure_anti-virus:5.01::linux_client_security cpe:/a:f-secure:f-secure_anti-virus:5.01::linux_server_security cpe:/a:f-secure:f-secure_anti-virus:5.5::citrix_servers cpe:/a:f-secure:f-secure_anti-virus:5.5::windows_servers cpe:/a:f-secure:f-secure_anti-virus:5.43::workstations cpe:/a:f-secure:f-secure_anti-virus:5.51::mimesweeper cpe:/a:f-secure:f-secure_anti-virus:5.55::client_security cpe:/a:f-secure:f-secure_anti-virus:6.2::firewalls cpe:/a:f-secure:f-secure_anti-virus:6.31::ms_exchange cpe:/a:f-secure:f-secure_anti-virus:2004 cpe:/a:f-secure:f-secure_anti-virus:2005 cpe:/a:f-secure:f-secure_internet_security:2004 cpe:/a:f-secure:f-secure_internet_security:2005 cpe:/a:f-secure:f-secure_personal_express:5.10 cpe:/a:f-secure:internet_gatekeeper:2.06::linux cpe:/a:f-secure:internet_gatekeeper:6.41

CVE-2005-0350

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:02.133-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-07T10:06:00.000-04:00

ALLOWS_USER_ACCESS

CONFIRM http://www.f-secure.com/security/fsc-2005-1.shtml ISS 20050210 F-Secure AntiVirus Library Heap Overflow Heap-based buffer overflow in multiple F-Secure Anti-Virus and Internet Security products allows remote attackers to execute arbitrary code via a crafted ARJ archive.

cpe:/o:sco:openserver:5.0.6 cpe:/o:sco:openserver:5.0.7

CVE-2005-0351

2005-04-07T00:00:00.000-04:00

2008-09-05T16:46:02.337-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-07T10:07:00.000-04:00

ALLOWS_USER_ACCESS

SCO SCOSA-2005.15 BID 13062 Buffer overflow in (1) termsh, (2) atcronsh, and (3) auditsh in SCO OpenServer 5.0.6 and 5.0.7 might allow local users to execute arbitrary code via a long HOME environment variable.

cpe:/a:woodstone:servers_alive:4.1 cpe:/a:woodstone:servers_alive:5.0

CVE-2005-0352

2005-03-16T00:00:00.000-05:00

2017-07-10T21:32:15.157-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20050316 Servers Alive: Local Privilege Escalation BID 12822 XF serversalive-gain-privileges(19715) Servers Alive 4.1 and 5.0, when running as a service, does not drop SYSTEM privileges before loading local manual under the help menu, which allows local users to gain privileges.

cpe:/a:safenet:sentinel_license_manager:7.2_.0.2

CVE-2005-0353

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:15.217-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20050307 CIRT.DK Advisory - SafeNet Inc Sentinel License Manager 7.2.0.2 Buffer Overflow FULLDISC 20050313 [HAT-SQUAD] SafeNet Sentinel LM, UDP License Manager Exploit MISC http://www.cirt.dk/advisories/cirt-30-advisory.pdf CERT-VN VU#108790 BID 12742 XF sentinel-license-manager-bo(19621) Buffer overflow in the Sentinel LM (Lservnt) service in the Sentinel License Manager 7.2.0.2 allows remote attackers to execute arbitrary code by sending a large amount of data to UDP port 5093.

cpe:/a:cisco:agent_desktop cpe:/a:cisco:ciscoworks_access_control_list_manager:1.5 cpe:/a:cisco:ciscoworks_access_control_list_manager:1.6 cpe:/a:cisco:ciscoworks_common_management_foundation:2.0 cpe:/a:cisco:ciscoworks_common_management_foundation:2.1 cpe:/a:cisco:ciscoworks_common_management_foundation:2.2 cpe:/a:cisco:ciscoworks_common_services:2.2 cpe:/a:cisco:ciscoworks_lms:1.3 cpe:/a:cisco:ciscoworks_vpn_security_management_solution cpe:/a:cisco:ciscoworks_windows cpe:/a:cisco:e-mail_manager cpe:/a:cisco:emergency_responder:1.1 cpe:/a:cisco:intelligent_contact_manager:5.0 cpe:/a:cisco:interactive_voice_response cpe:/a:cisco:ip_contact_center_enterprise cpe:/a:cisco:ip_contact_center_express cpe:/a:cisco:meetingplace cpe:/a:cisco:personal_assistant:1.3%281%29 cpe:/a:cisco:personal_assistant:1.3%282%29 cpe:/a:cisco:personal_assistant:1.3%283%29 cpe:/a:cisco:personal_assistant:1.3%284%29 cpe:/a:cisco:personal_assistant:1.4%281%29 cpe:/a:cisco:personal_assistant:1.4%282%29 cpe:/a:cisco:remote_monitoring_suite_option cpe:/a:cisco:secure_access_control_server:2.0::unix cpe:/a:cisco:secure_access_control_server:2.1::windows_nt cpe:/a:cisco:secure_access_control_server:2.3::unix cpe:/a:cisco:secure_access_control_server:2.3::windows_nt cpe:/a:cisco:secure_access_control_server:2.3.5.1::unix cpe:/a:cisco:secure_access_control_server:2.3.6.1::unix cpe:/a:cisco:secure_access_control_server:2.4::windows_nt cpe:/a:cisco:secure_access_control_server:2.5::windows_nt cpe:/a:cisco:secure_access_control_server:2.6::windows_nt cpe:/a:cisco:secure_access_control_server:2.6.2::windows_nt cpe:/a:cisco:secure_access_control_server:2.6.3::windows_nt cpe:/a:cisco:secure_access_control_server:2.6.4::windows_nt cpe:/a:cisco:secure_access_control_server:2.42::windows_nt cpe:/a:cisco:secure_access_control_server:3.0 cpe:/a:cisco:secure_access_control_server:3.0::windows_nt cpe:/a:cisco:secure_access_control_server:3.0.1::windows_nt cpe:/a:cisco:secure_access_control_server:3.0.3::windows_nt cpe:/a:cisco:secure_access_control_server:3.1 cpe:/a:cisco:secure_access_control_server:3.1.1::windows_nt cpe:/a:cisco:secure_access_control_server:3.2 cpe:/a:cisco:secure_access_control_server:3.2::windows_server cpe:/a:cisco:secure_access_control_server:3.2%281%29 cpe:/a:cisco:secure_access_control_server:3.2%281.20%29 cpe:/a:cisco:secure_access_control_server:3.2%282%29 cpe:/a:cisco:secure_access_control_server:3.2%283%29 cpe:/a:cisco:secure_access_control_server:3.2.1 cpe:/a:cisco:secure_access_control_server:3.2.2 cpe:/a:cisco:secure_access_control_server:3.3 cpe:/a:cisco:secure_access_control_server:3.3%281%29 cpe:/a:cisco:secure_access_control_server:3.3.1 cpe:/a:cisco:secure_access_control_server:3.3.2 cpe:/a:cisco:support_tools cpe:/a:cisco:web_collaboration_option cpe:/a:cisco:webns:7.10_%2805.07%29s cpe:/a:cisco:webns:7.20_%2803.09%29s cpe:/a:cisco:webns:7.20_%2803.10%29s cpe:/a:cisco:webns:7.30_%2800.08%29s cpe:/a:cisco:webns:7.30_%2800.09%29s cpe:/a:hitachi:alaxala:ax cpe:/a:nortel:business_communications_manager:200 cpe:/a:nortel:business_communications_manager:400 cpe:/a:nortel:business_communications_manager:1000 cpe:/a:nortel:callpilot:200i cpe:/a:nortel:callpilot:201i cpe:/a:nortel:callpilot:702t cpe:/a:nortel:callpilot:703t cpe:/a:nortel:contact_center cpe:/h:alaxala:alaxala_networks:ax5400s cpe:/h:alaxala:alaxala_networks:ax7800r cpe:/h:alaxala:alaxala_networks:ax7800s cpe:/h:cisco:aironet_ap1200 cpe:/h:cisco:aironet_ap350 cpe:/h:cisco:call_manager:1.0 cpe:/h:cisco:call_manager:2.0 cpe:/h:cisco:call_manager:3.0 cpe:/h:cisco:call_manager:3.1 cpe:/h:cisco:call_manager:3.1%282%29 cpe:/h:cisco:call_manager:3.1%283a%29 cpe:/h:cisco:call_manager:3.2 cpe:/h:cisco:call_manager:3.3 cpe:/h:cisco:call_manager:3.3%283%29 cpe:/h:cisco:call_manager:4.0 cpe:/h:cisco:content_services_switch_11000 cpe:/h:cisco:content_services_switch_11050 cpe:/h:cisco:content_services_switch_11150 cpe:/h:cisco:content_services_switch_11500 cpe:/h:cisco:content_services_switch_11501 cpe:/h:cisco:content_services_switch_11503 cpe:/h:cisco:content_services_switch_11506 cpe:/h:cisco:content_services_switch_11800 cpe:/h:cisco:sn_5420_storage_router cpe:/h:cisco:unity_server:2.0 cpe:/h:cisco:unity_server:2.1 cpe:/h:cisco:unity_server:2.2 cpe:/h:cisco:unity_server:2.3 cpe:/h:cisco:unity_server:2.4 cpe:/h:cisco:unity_server:2.46 cpe:/h:cisco:unity_server:3.0 cpe:/h:cisco:unity_server:3.1 cpe:/h:cisco:unity_server:3.2 cpe:/h:cisco:unity_server:3.3 cpe:/h:cisco:unity_server:4.0 cpe:/h:hitachi:gr3000 cpe:/h:hitachi:gr4000 cpe:/h:hitachi:gs4000 cpe:/h:nortel:7220_wlan_access_point cpe:/h:nortel:7250_wlan_access_point cpe:/h:nortel:ethernet_routing_switch_1612 cpe:/h:nortel:ethernet_routing_switch_1624 cpe:/h:nortel:ethernet_routing_switch_1648 cpe:/h:nortel:optical_metro_5000 cpe:/h:nortel:optical_metro_5100 cpe:/h:nortel:optical_metro_5200 cpe:/h:nortel:succession_communication_server_1000 cpe:/h:nortel:survivable_remote_gateway:1.0 cpe:/h:nortel:universal_signaling_point:5200 cpe:/h:nortel:universal_signaling_point:compact_lite cpe:/h:yamaha:rt105 cpe:/h:yamaha:rt250i cpe:/h:yamaha:rt300i cpe:/h:yamaha:rt57i cpe:/h:yamaha:rtv700 cpe:/h:yamaha:rtx1000 cpe:/h:yamaha:rtx1100 cpe:/h:yamaha:rtx1500 cpe:/h:yamaha:rtx2000 cpe:/o:cisco:ciscoworks_1105_hosting_solution_engine cpe:/o:cisco:ciscoworks_1105_wireless_lan_solution_engine cpe:/o:cisco:ciscoworks_cd1:1st cpe:/o:cisco:ciscoworks_cd1:2nd cpe:/o:cisco:ciscoworks_cd1:3rd cpe:/o:cisco:ciscoworks_cd1:4th cpe:/o:cisco:ciscoworks_cd1:5th cpe:/o:cisco:ciscoworks_windows_wug cpe:/o:cisco:conference_connection:1.1%281%29 cpe:/o:cisco:conference_connection:1.2 cpe:/o:cisco:mgx_8230:1.2.10 cpe:/o:cisco:mgx_8230:1.2.11 cpe:/o:cisco:mgx_8250:1.2.10 cpe:/o:cisco:mgx_8250:1.2.11 cpe:/o:cisco:sn_5420_storage_router_firmware:1.1%282%29 cpe:/o:cisco:sn_5420_storage_router_firmware:1.1%283%29 cpe:/o:cisco:sn_5420_storage_router_firmware:1.1%284%29 cpe:/o:cisco:sn_5420_storage_router_firmware:1.1%285%29 cpe:/o:cisco:sn_5420_storage_router_firmware:1.1%287%29 cpe:/o:cisco:sn_5420_storage_router_firmware:1.1.3 cpe:/o:cisco:sn_5428_storage_router:2-3.3.1-k9 cpe:/o:cisco:sn_5428_storage_router:2-3.3.2-k9 cpe:/o:cisco:sn_5428_storage_router:2.5.1-k9 cpe:/o:cisco:sn_5428_storage_router:3.2.1-k9 cpe:/o:cisco:sn_5428_storage_router:3.2.2-k9 cpe:/o:cisco:sn_5428_storage_router:3.3.1-k9 cpe:/o:cisco:sn_5428_storage_router:3.3.2-k9 cpe:/o:f5:tmos:4.0 cpe:/o:f5:tmos:4.2 cpe:/o:f5:tmos:4.3 cpe:/o:f5:tmos:4.4 cpe:/o:f5:tmos:4.5 cpe:/o:f5:tmos:4.5.6 cpe:/o:f5:tmos:4.5.9 cpe:/o:f5:tmos:4.5.10 cpe:/o:f5:tmos:4.5.11 cpe:/o:f5:tmos:4.5.12 cpe:/o:f5:tmos:4.6 cpe:/o:f5:tmos:4.6.2 cpe:/o:f5:tmos:9.0 cpe:/o:f5:tmos:9.0.1 cpe:/o:f5:tmos:9.0.2 cpe:/o:f5:tmos:9.0.3 cpe:/o:f5:tmos:9.0.4 cpe:/o:f5:tmos:9.0.5 cpe:/o:freebsd:freebsd:1.1.5.1 cpe:/o:freebsd:freebsd:2.0 cpe:/o:freebsd:freebsd:2.0.5 cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:freebsd:freebsd:2.1.5 cpe:/o:freebsd:freebsd:2.1.6 cpe:/o:freebsd:freebsd:2.1.6.1 cpe:/o:freebsd:freebsd:2.1.7.1 cpe:/o:freebsd:freebsd:2.2 cpe:/o:freebsd:freebsd:2.2.2 cpe:/o:freebsd:freebsd:2.2.3 cpe:/o:freebsd:freebsd:2.2.4 cpe:/o:freebsd:freebsd:2.2.5 cpe:/o:freebsd:freebsd:2.2.6 cpe:/o:freebsd:freebsd:2.2.8 cpe:/o:freebsd:freebsd:3.0 cpe:/o:freebsd:freebsd:3.0:releng cpe:/o:freebsd:freebsd:3.1 cpe:/o:freebsd:freebsd:3.2 cpe:/o:freebsd:freebsd:3.3 cpe:/o:freebsd:freebsd:3.4 cpe:/o:freebsd:freebsd:3.5 cpe:/o:freebsd:freebsd:3.5:stable cpe:/o:freebsd:freebsd:3.5.1 cpe:/o:freebsd:freebsd:3.5.1:release cpe:/o:freebsd:freebsd:3.5.1:stable cpe:/o:freebsd:freebsd:4.0 cpe:/o:freebsd:freebsd:4.0:alpha cpe:/o:freebsd:freebsd:4.0:releng cpe:/o:freebsd:freebsd:4.1 cpe:/o:freebsd:freebsd:4.1.1 cpe:/o:freebsd:freebsd:4.1.1:release cpe:/o:freebsd:freebsd:4.1.1:stable cpe:/o:freebsd:freebsd:4.2 cpe:/o:freebsd:freebsd:4.2:stable cpe:/o:freebsd:freebsd:4.3 cpe:/o:freebsd:freebsd:4.3:release cpe:/o:freebsd:freebsd:4.3:release_p38 cpe:/o:freebsd:freebsd:4.3:releng cpe:/o:freebsd:freebsd:4.3:stable cpe:/o:freebsd:freebsd:4.4 cpe:/o:freebsd:freebsd:4.4:release_p42 cpe:/o:freebsd:freebsd:4.4:releng cpe:/o:freebsd:freebsd:4.4:stable cpe:/o:freebsd:freebsd:4.5 cpe:/o:freebsd:freebsd:4.5:release cpe:/o:freebsd:freebsd:4.5:release_p32 cpe:/o:freebsd:freebsd:4.5:releng cpe:/o:freebsd:freebsd:4.5:stable cpe:/o:freebsd:freebsd:4.6 cpe:/o:freebsd:freebsd:4.6:release cpe:/o:freebsd:freebsd:4.6:release_p20 cpe:/o:freebsd:freebsd:4.6:releng cpe:/o:freebsd:freebsd:4.6:stable cpe:/o:freebsd:freebsd:4.6.2 cpe:/o:freebsd:freebsd:4.7 cpe:/o:freebsd:freebsd:4.7:release cpe:/o:freebsd:freebsd:4.7:release_p17 cpe:/o:freebsd:freebsd:4.7:releng cpe:/o:freebsd:freebsd:4.7:stable cpe:/o:freebsd:freebsd:4.8 cpe:/o:freebsd:freebsd:4.8:pre-release cpe:/o:freebsd:freebsd:4.8:release_p6 cpe:/o:freebsd:freebsd:4.8:releng cpe:/o:freebsd:freebsd:4.9 cpe:/o:freebsd:freebsd:4.9:pre-release cpe:/o:freebsd:freebsd:4.9:releng cpe:/o:freebsd:freebsd:4.10 cpe:/o:freebsd:freebsd:4.10:release cpe:/o:freebsd:freebsd:4.10:release_p8 cpe:/o:freebsd:freebsd:4.10:releng cpe:/o:freebsd:freebsd:4.11:release_p3 cpe:/o:freebsd:freebsd:4.11:releng cpe:/o:freebsd:freebsd:4.11:stable cpe:/o:freebsd:freebsd:5.0 cpe:/o:freebsd:freebsd:5.0:alpha cpe:/o:freebsd:freebsd:5.0:release_p14 cpe:/o:freebsd:freebsd:5.0:releng cpe:/o:freebsd:freebsd:5.1 cpe:/o:freebsd:freebsd:5.1:alpha cpe:/o:freebsd:freebsd:5.1:release cpe:/o:freebsd:freebsd:5.1:release_p5 cpe:/o:freebsd:freebsd:5.1:releng cpe:/o:freebsd:freebsd:5.2 cpe:/o:freebsd:freebsd:5.2.1:release cpe:/o:freebsd:freebsd:5.2.1:releng cpe:/o:freebsd:freebsd:5.3 cpe:/o:freebsd:freebsd:5.3:release cpe:/o:freebsd:freebsd:5.3:releng cpe:/o:freebsd:freebsd:5.3:stable cpe:/o:freebsd:freebsd:5.4:pre-release cpe:/o:freebsd:freebsd:5.4:release cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2000::sp1 cpe:/o:microsoft:windows_2000::sp2 cpe:/o:microsoft:windows_2000::sp3 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server:enterprise::64-bit cpe:/o:microsoft:windows_2003_server:enterprise_64-bit cpe:/o:microsoft:windows_2003_server:r2::64-bit cpe:/o:microsoft:windows_2003_server:r2::datacenter_64-bit cpe:/o:microsoft:windows_2003_server:standard::64-bit cpe:/o:microsoft:windows_2003_server:standard_64-bit cpe:/o:microsoft:windows_2003_server:web cpe:/o:microsoft:windows_xp:::64-bit cpe:/o:microsoft:windows_xp:::embedded cpe:/o:microsoft:windows_xp:::home cpe:/o:microsoft:windows_xp:::media_center cpe:/o:microsoft:windows_xp::gold:professional cpe:/o:microsoft:windows_xp::sp1:64-bit cpe:/o:microsoft:windows_xp::sp1:embedded cpe:/o:microsoft:windows_xp::sp1:home cpe:/o:microsoft:windows_xp::sp1:media_center cpe:/o:microsoft:windows_xp::sp2:tablet_pc cpe:/o:openbsd:openbsd:3.0 cpe:/o:openbsd:openbsd:3.1 cpe:/o:openbsd:openbsd:3.2 cpe:/o:openbsd:openbsd:3.3 cpe:/o:openbsd:openbsd:3.4 cpe:/o:openbsd:openbsd:3.5 cpe:/o:openbsd:openbsd:3.6

CVE-2005-0356

2005-05-31T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FREEBSD FreeBSD-SA-05:15 SCO SCOSA-2005.64 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2006-032.htm CISCO 20050518 Vulnerability in a Variant of the TCP Timestamps Option CERT-VN VU#637934 BID 13676 XF tcp-ip-timestamp-dos(20635) Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.

cpe:/a:emc:legato_networker:4.2.2 cpe:/a:emc:legato_networker:6.0 cpe:/a:emc:legato_networker:6.1 cpe:/a:emc:legato_networker:7.2 cpe:/a:emc:legato_networker:7.13 cpe:/a:sun:solstice_backup:6.0 cpe:/a:sun:solstice_backup:6.1 cpe:/a:sun:storedge_enterprise_backup_software:7.0 cpe:/a:sun:storedge_enterprise_backup_software:7.1 cpe:/a:sun:storedge_enterprise_backup_software:7.2

CVE-2005-0357

2005-08-23T00:00:00.000-04:00

2017-07-10T21:32:15.390-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1014713 SUNALERT 101886 CERT-VN VU#606857 CONFIRM http://www.legato.com/support/websupport/product_alerts/081605_NW_authentication.htm BID 14582 XF legato-authunix-bypass-authentication(21887) EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.

CVE-2005-0358

2005-08-23T00:00:00.000-04:00

2017-07-10T21:32:15.437-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1014713 SUNALERT 101886 CERT-VN VU#407641 CONFIRM http://www.legato.com/support/websupport/product_alerts/081605_NW_token_authentication.htm BID 14582 XF legato-token-gain-privileges(21892) EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by modifying an authentication token.

CVE-2005-0359

2005-08-23T00:00:00.000-04:00

2017-07-10T21:32:15.500-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1014713 SUNALERT 101886 CERT-VN VU#801089 CONFIRM http://www.legato.com/support/websupport/product_alerts/081605_NW_port_mapper.htm BID 14582 XF legato-portmapper-obtain-information(21893) The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and pmap_unset commands, which allows remote attackers to (1) cause a denial of service by using pmap_unset to un-register a NetWorker service, or (2) obtain sensitive information from NetWorker services by using pmap_set to register a new service.

cpe:/a:microsoft:log_sink_class_activex_control

CVE-2005-0360

2005-07-05T00:00:00.000-04:00

2008-09-05T16:46:04.463-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-07-05T11:48:00.000-04:00

CERT-VN VU#165022 The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as "safe for scripting" for Internet Explorer, which allows remote attackers to create or append to arbitrary files.

cpe:/a:awstats:awstats:4.0 cpe:/a:awstats:awstats:5.0 cpe:/a:awstats:awstats:5.1 cpe:/a:awstats:awstats:5.2 cpe:/a:awstats:awstats:5.3 cpe:/a:awstats:awstats:5.4 cpe:/a:awstats:awstats:5.5 cpe:/a:awstats:awstats:5.7 cpe:/a:awstats:awstats:5.8 cpe:/a:awstats:awstats:5.9 cpe:/a:awstats:awstats:6.0 cpe:/a:awstats:awstats:6.1 cpe:/a:awstats:awstats:6.2 cpe:/a:awstats:awstats:6.3

CVE-2005-0362

2005-02-09T00:00:00.000-05:00

2008-09-05T16:46:04.617-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-07T18:15:00.000-04:00

ALLOWS_USER_ACCESS

CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=294488 awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) "pluginmode", (2) "loadplugin", or (3) "noloadplugin" parameters.

cpe:/a:awstats:awstats:4.0 cpe:/a:awstats:awstats:6.2

CVE-2005-0363

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:04.820-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-07T10:15:00.000-04:00

ALLOWS_USER_ACCESS

CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=294488 DEBIAN DSA-682 awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter.

cpe:/o:hp:hp-ux:11.00 cpe:/o:hp:hp-ux:11.11 cpe:/o:hp:hp-ux:11.23::ia64_64-bit

CVE-2005-0364

2005-02-10T00:00:00.000-05:00

2017-10-10T21:29:55.137-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov HP HPSBUX01117 XF hpux-bind-dos(19276) Unknown vulnerability in BIND 9.2.0 in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to cause a denial of service.

cpe:/o:kde:kde:3.2.x cpe:/o:kde:kde:3.3.x

CVE-2005-0365

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:55.200-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugs.kde.org/show_bug.cgi?id=97608 FEDORA FEDORA-2005-245 BUGTRAQ 20050211 insecure temporary file creation in kdelibs 3.3.2 GENTOO GLSA-200503-14 SECTRACK 1013525 CONFIRM http://www.kde.org/info/security/advisory-20050316-2.txt MANDRAKE MDKSA-2005:045 MANDRAKE MDKSA-2005:058 REDHAT RHSA-2005:325 The dcopidlng script in KDE 3.2.x and 3.3.x creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.

cpe:/a:openpgp:openpgp

CVE-2005-0366

2005-05-02T00:00:00.000-04:00

2008-09-10T15:35:25.557-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-07T10:31:00.000-04:00

MISC http://eprint.iacr.org/2005/033 MISC http://eprint.iacr.org/2005/033.pdf SECTRACK 1013166 GENTOO GLSA-200503-29 CERT-VN VU#303094 MANDRAKE MDKSA-2005:057 SUSE SUSE-SR:2005:007 CONFIRM http://www.pgp.com/library/ctocorner/openpgp.html BID 12529 The integrity check feature in OpenPGP, when handling a message that was encrypted using cipher feedback (CFB) mode, allows remote attackers to recover part of the plaintext via a chosen-ciphertext attack when the first 2 bytes of a message block are known, and an oracle or other mechanism is available to determine whether an integrity check failed.

cpe:/a:argosoft:argosoft_mail_server:1.8.7.3

CVE-2005-0367

2005-02-09T00:00:00.000-05:00

2016-10-17T23:11:04.517-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050209 [SIG^2 G-TEC] ArGoSoft Mail Server Webmail Multiple Directory Traversal Vulnerabilities MISC http://www.security.org.sg/vuln/argosoftmail1873.html Multiple directory traversal vulnerabilities in ArGoSoft Mail Server 1.8.7.3 allow remote authenticated users to read, delete, or upload arbitrary files via a .. (dot dot) in (1) the filename of an e-mail attachment, (2) the _msgatt.rec file, (3) and the /msg, /delete, /folderadd, and /folderdelete operations for the Folder parameter.

cpe:/a:chipmunk_scripts:cmscore

CVE-2005-0368

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:15.610-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050209 CMS Core SQL injection BID 12457 XF cmscore-multiple-sql-injection(19235) Multiple SQL injection vulnerabilities in CMScore allow remote attackers to execute arbitrary SQL commands via the (1) EntryID or (2) searchterm parameter to index.php, or (3) username parameter to authenticate.php.

cpe:/a:armagetron:armagetron:0.2.6.0 cpe:/a:armagetron:armagetron_advanced:0.2.7.0

CVE-2005-0369

2005-05-02T00:00:00.000-04:00

2016-10-17T23:11:06.860-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050210 Crashes and socket unreacheable in Armagetron Advanced 0.2.7.0 Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 earlier allows remote attackers to cause a denial of service (application crash) via a packet with a large (1) descriptor ID or (2) claim_id, which exceeds the boundaries of an array.

cpe:/a:armagetron:armagetron:0.2.6.0 cpe:/a:armagetron:armagetron_advanced:0.2.7.0

CVE-2005-0370

2005-05-02T00:00:00.000-04:00

2016-10-17T23:11:08.127-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050210 Crashes and socket unreacheable in Armagetron Advanced 0.2.7.0 Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 and earlier allow remote attackers to cause a denial of service (network disconnection) via an empty UDP packet, which is not properly distinguished from the "no new packets" state of the associated socket.

cpe:/a:armagetron:armagetron:0.2.5.2 cpe:/a:armagetron:armagetron:0.2.6.0 cpe:/a:armagetron:armagetron_advanced:0.2.7.0

CVE-2005-0371

2005-05-02T00:00:00.000-04:00

2016-10-17T23:11:09.577-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050210 Crashes and socket unreacheable in Armagetron Advanced 0.2.7.0 Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 and earlier allow remote attackers to cause a denial of service (freeze) via a large number of player connections that do not send any data.

cpe:/a:gtk:gtk%2b:2.0.0 cpe:/a:gtk:gtk%2b:2.0.1 cpe:/a:gtk:gtk%2b:2.0.2 cpe:/a:gtk:gtk%2b:2.0.3 cpe:/a:gtk:gtk%2b:2.0.4 cpe:/a:gtk:gtk%2b:2.0.5 cpe:/a:gtk:gtk%2b:2.0.6 cpe:/a:gtk:gtk%2b:2.0.7 cpe:/a:gtk:gtk%2b:2.0.8 cpe:/a:gtk:gtk%2b:2.0.9 cpe:/a:gtk:gtk%2b:2.0.18

CVE-2005-0372

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:55.280-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONECTIVA CLSA-2005:957 DEBIAN DSA-686 GENTOO GLSA-200502-27 MANDRAKE MDKSA-2005:050 REDHAT RHSA-2005:410 FEDORA FEDORA-2005-309 FEDORA FEDORA-2005-310 BID 12539 Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.

cpe:/a:cyrus:sasl:1.5.24 cpe:/a:cyrus:sasl:1.5.27 cpe:/a:cyrus:sasl:1.5.28 cpe:/a:cyrus:sasl:2.1.9 cpe:/a:cyrus:sasl:2.1.10 cpe:/a:cyrus:sasl:2.1.11 cpe:/a:cyrus:sasl:2.1.12 cpe:/a:cyrus:sasl:2.1.13 cpe:/a:cyrus:sasl:2.1.14 cpe:/a:cyrus:sasl:2.1.15 cpe:/a:cyrus:sasl:2.1.16 cpe:/a:cyrus:sasl:2.1.17 cpe:/a:cyrus:sasl:2.1.18 cpe:/a:cyrus:sasl:2.1.18_r1 cpe:/a:openpkg:openpkg:2.1 cpe:/a:openpkg:openpkg:2.2 cpe:/a:suse:suse_cvsup:16.1h_36.i586 cpe:/o:apple:mac_os_x:10.0 cpe:/o:apple:mac_os_x:10.0.1 cpe:/o:apple:mac_os_x:10.0.2 cpe:/o:apple:mac_os_x:10.0.3 cpe:/o:apple:mac_os_x:10.0.4 cpe:/o:apple:mac_os_x:10.1 cpe:/o:apple:mac_os_x:10.1.1 cpe:/o:apple:mac_os_x:10.1.2 cpe:/o:apple:mac_os_x:10.1.3 cpe:/o:apple:mac_os_x:10.1.4 cpe:/o:apple:mac_os_x:10.1.5 cpe:/o:apple:mac_os_x:10.2 cpe:/o:apple:mac_os_x:10.2.1 cpe:/o:apple:mac_os_x:10.2.2 cpe:/o:apple:mac_os_x:10.2.3 cpe:/o:apple:mac_os_x:10.2.4 cpe:/o:apple:mac_os_x:10.2.5 cpe:/o:apple:mac_os_x:10.2.6 cpe:/o:apple:mac_os_x:10.2.7 cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3 cpe:/o:apple:mac_os_x:10.3.1 cpe:/o:apple:mac_os_x:10.3.2 cpe:/o:apple:mac_os_x:10.3.3 cpe:/o:apple:mac_os_x:10.3.4 cpe:/o:apple:mac_os_x:10.3.5 cpe:/o:apple:mac_os_x:10.3.6 cpe:/o:apple:mac_os_x:10.3.7 cpe:/o:apple:mac_os_x:10.3.8 cpe:/o:apple:mac_os_x_server:10.0 cpe:/o:apple:mac_os_x_server:10.1 cpe:/o:apple:mac_os_x_server:10.1.1 cpe:/o:apple:mac_os_x_server:10.1.2 cpe:/o:apple:mac_os_x_server:10.1.3 cpe:/o:apple:mac_os_x_server:10.1.4 cpe:/o:apple:mac_os_x_server:10.1.5 cpe:/o:apple:mac_os_x_server:10.2 cpe:/o:apple:mac_os_x_server:10.2.1 cpe:/o:apple:mac_os_x_server:10.2.2 cpe:/o:apple:mac_os_x_server:10.2.3 cpe:/o:apple:mac_os_x_server:10.2.4 cpe:/o:apple:mac_os_x_server:10.2.5 cpe:/o:apple:mac_os_x_server:10.2.6 cpe:/o:apple:mac_os_x_server:10.2.7 cpe:/o:apple:mac_os_x_server:10.2.8 cpe:/o:apple:mac_os_x_server:10.3 cpe:/o:apple:mac_os_x_server:10.3.1 cpe:/o:apple:mac_os_x_server:10.3.2 cpe:/o:apple:mac_os_x_server:10.3.3 cpe:/o:apple:mac_os_x_server:10.3.4 cpe:/o:apple:mac_os_x_server:10.3.5 cpe:/o:apple:mac_os_x_server:10.3.6 cpe:/o:apple:mac_os_x_server:10.3.7 cpe:/o:apple:mac_os_x_server:10.3.8 cpe:/o:conectiva:linux:9.0 cpe:/o:conectiva:linux:10.0 cpe:/o:redhat:fedora_core:core_1.0 cpe:/o:suse:suse_linux:1.0::desktop cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.0::i386 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::enterprise_server cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.1::x86_64 cpe:/o:suse:suse_linux:9.2 cpe:/o:suse:suse_linux:9.2::x86_64

CVE-2005-0373

2004-10-07T00:00:00.000-04:00

2017-07-10T21:32:15.687-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

GENTOO GLSA-200410-05 SUSE SUSE-SR:2005:006 MANDRAKE MDKSA-2005:054 MLIST [openbsd-ports] 20040717 UPDATE: cyrus-sasl-2.1.19 BID 11347 CONFIRM https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c.diff?r1=1.170&r2=1.171 CONFIRM https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c?rev=1.171&content-type=text/x-cvsweb-markup XF cyrus-sasl-digestmda5-bo(17642) Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code.

cpe:/a:bitshifters:bitboard:2.0 cpe:/a:bitshifters:bitboard:2.5

CVE-2005-0374

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:15.750-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050112 Security Advisory: BiTBOARD xss SECTRACK 1012864 BID 12248 XF bitshifters-bitboard-xss(18871) Cross-site scripting (XSS) vulnerability in Bitboard 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via an [img] bbcode image tag with an event such as mouseover.

cpe:/a:sergey_kiselev:sgallery:1.01

CVE-2005-0375

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:15.797-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050112 [waraxe-2005-SA#039] - Critical Sql Injection in Sgallery module for PhpNuke SECTRACK 1012868 MISC http://www.waraxe.us/advisory-39.html XF sgallery-path-disclosure(18877) imageview.php in SGallery 1.01 allows remote attackers to obtain sensitive information via an HTTP request with (1) idalbum and (2) idimage unset, which reveals the installation path in an error message for the sql_fetch_row function.

cpe:/a:sergey_kiselev:sgallery:1.01

CVE-2005-0376

2005-01-12T00:00:00.000-05:00

2017-07-10T21:32:15.843-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20050112 [waraxe-2005-SA#039] - Critical Sql Injection in Sgallery module for PhpNuke BUGTRAQ 20050112 [waraxe-2005-SA#039] - Critical Sql Injection in Sgallery module for PhpNuke SECTRACK 1012868 MISC http://www.waraxe.us/advisory-39.html XF sgallery-file-include(18878) PHP remote file inclusion vulnerability in SGallery 1.01 allows local and possibly remote attackers to execute arbitrary PHP code by modifying the DOCUMENT_ROOT parameter to reference a URL on a remote web server that contains (1) config.php or (2) sql_layer.php.

cpe:/a:sergey_kiselev:sgallery:1.01

CVE-2005-0377

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:15.907-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050112 [waraxe-2005-SA#039] - Critical Sql Injection in Sgallery module for PhpNuke SECTRACK 1012868 BID 12249 MISC http://www.waraxe.us/advisory-39.html XF sgallery-imageview-sql-injection(18876) SQL injection vulnerability in imageview.php for SGallery 1.01 allows remote attackers to execute arbitrary SQL commands via the (1) idalbum or (2) idimage parameters.

cpe:/a:horde:horde:3.0

CVE-2005-0378

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:15.967-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050113 Cross Site Scripting holes found in Horde 3.0 SECTRACK 1012892 MISC http://www.hyperdose.com/advisories/H2005-01.txt BID 12255 XF horde-prefs-index-xss(18881) Multiple cross-site scripting (XSS) vulnerabilities in Horde 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) group parameter to prefs.php or (2) url parameter to index.php.

cpe:/a:zeroboard:zeroboard:4.1_pl2 cpe:/a:zeroboard:zeroboard:4.1_pl3 cpe:/a:zeroboard:zeroboard:4.1_pl4 cpe:/a:zeroboard:zeroboard:4.1_pl5

CVE-2005-0379

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:16.017-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050113 STG Security Advisory: [SSA-20050113-25] ZeroBoard multiple vulnerabilities SECTRACK 1012884 BID 12257 XF zeroboard-file-disclosure(18891) Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the _zb_path parameter to (1) _head.php or (2) outlogin.php, or the dir parameter to (3) write.php.

cpe:/a:zeroboard:zeroboard:4.1_pl2 cpe:/a:zeroboard:zeroboard:4.1_pl3 cpe:/a:zeroboard:zeroboard:4.1_pl4 cpe:/a:zeroboard:zeroboard:4.1_pl5

CVE-2005-0380

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:16.077-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050113 STG Security Advisory: [SSA-20050113-25] ZeroBoard multiple vulnerabilities SECTRACK 1012884 BID 12206 BID 12258 XF zeroboard-printcategory-file-include(18892) XF zeroboard-zero-vote-file-include(18893) Multiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3) setup.php, (4) ask_password.php, or (5) error.php in ZeroBoard 4.1pl5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the dir parameter to reference a URL on a remote web server that contains the code.

cpe:/a:forumkit:forumkit:1.0

CVE-2005-0381

2005-01-13T00:00:00.000-05:00

2017-07-10T21:32:16.140-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050113 XSS Vulnerability in ForumKIT SECTRACK 1012895 BID 12256 XF forumkit-members-xss(18880) Cross-site scripting (XSS) vulnerability in f.aspx in forumKIT 1.0 allows remote attackers to inject arbitrary web script or HTML via the members parameter.

cpe:/a:breed:breed:patch_1

CVE-2005-0382

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:16.187-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050113 Server crash in Breed patch #1 BID 12262 XF breed-udp-datagram-dos(18890) Breed patch 1 and earlier allows remote attackers to cause a denial of service (application crash) via an empty UDP packet, which triggers a null dereference.

cpe:/a:trend_micro:control_manager:3.0_enterprise

CVE-2005-0383

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:16.233-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050113 Trend Micro Control Manager - Enterprise Edition 3.0 Web application Replay attack BUGTRAQ 20050113 Trend Micro Control Manager - Enterprise Edition 3.0 Web application Replay attack MISC http://www.cirt.dk/advisories/cirt-28-advisory.pdf XF control-manager-replay-attack(18887) Trend Micro Control Manager 3.0 Enterprise Edition allows remote attackers to gain privileges via a replay attack of the encrypted username and password.

cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2 cpe:/o:trustix:secure_linux:2 cpe:/o:trustix:secure_linux:2.1 cpe:/o:trustix:secure_linux:2.2 cpe:/o:ubuntu:ubuntu_linux:4.10

CVE-2005-0384

2005-03-15T00:00:00.000-05:00

2018-10-03T17:29:34.263-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 SUSE SUSE-SA:2005:018 REDHAT RHSA-2005:283 REDHAT RHSA-2005:284 REDHAT RHSA-2005:293 REDHAT RHSA-2005:366 BID 12810 TRUSTIX 2005-0009 FEDORA FLSA:152532 UBUNTU USN-95-1 Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via a pppd client.

cpe:/a:frank_mcingvale:luxman:0.41 cpe:/a:frank_mcingvale:luxman:0.41_17

CVE-2005-0385

2005-05-02T00:00:00.000-04:00

2018-08-13T17:47:21.727-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

DEBIAN DSA-693 BUGTRAQ 20050314 DMA[2005-0310a] - 'Frank McIngvale LuxMan buffer overflow' BID 12797 XF luxman-bo-execute-commands(19680) Buffer overflow in luxman before 0.41, if used with certain insecure svgalib libraries, allows local users to execute arbitrary code via a long -f command line argument.

cpe:/a:mailreader.com:mailreader.com:2.3.20 cpe:/a:mailreader.com:mailreader.com:2.3.21 cpe:/a:mailreader.com:mailreader.com:2.3.22 cpe:/a:mailreader.com:mailreader.com:2.3.23 cpe:/a:mailreader.com:mailreader.com:2.3.24 cpe:/a:mailreader.com:mailreader.com:2.3.25 cpe:/a:mailreader.com:mailreader.com:2.3.26 cpe:/a:mailreader.com:mailreader.com:2.3.27 cpe:/a:mailreader.com:mailreader.com:2.3.28 cpe:/a:mailreader.com:mailreader.com:2.3.29

CVE-2005-0386

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:08.773-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-07T11:17:00.000-04:00

DEBIAN DSA-700 Cross-site scripting (XSS) vulnerability in network.cgi in mailreader before 2.3.29 earlier allows remote attackers to inject arbitrary web script or HTML via MIME text/enriched or text/richtext messages.

cpe:/a:remstats:remstats:1.0.8a cpe:/a:remstats:remstats:1.0.9b cpe:/a:remstats:remstats:1.0.13 cpe:/a:remstats:remstats:1.00a4

CVE-2005-0387

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:08.963-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-07T11:22:00.000-04:00

DEBIAN DSA-704 remstats 1.0.13 and earlier, when processing uptime data, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.

cpe:/a:remstats:remstats:1.0.13

CVE-2005-0388

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:09.133-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-07T11:25:00.000-04:00

ALLOWS_USER_ACCESS

DEBIAN DSA-704 Unknown vulnerability in the remoteping service in remstats 1.0.13 and earlier allows remote attackers to execute arbitrary commands "due to missing input sanitising."

CVE-2005-0389

2005-05-02T00:00:00.000-04:00

2008-09-10T15:35:29.087-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0814. Reason: This candidate is a duplicate of CVE-2005-0814. Notes: All CVE users should reference CVE-2005-0814 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:axel:axel:1.0a

CVE-2005-0390

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:09.430-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-07T11:25:00.000-04:00

ALLOWS_USER_ACCESS

GENTOO GLSA-200504-09 DEBIAN DSA-706 CONFIRM http://www.mail-archive.com/debian-devel-changes@lists.debian.org/msg118978.html BID 13059 Buffer overflow in the HTTP redirection capability in conn.c for Axel before 1.0b may allow remote attackers to execute arbitrary code.

cpe:/a:daniel_de_rauglaudre:geneweb:4.10

CVE-2005-0391

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:16.360-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov DEBIAN DSA-712 XF geneweb-insecure-file-permission(20176) geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers to modify arbitrary files.

cpe:/a:debian:ppxp

CVE-2005-0392

2005-05-19T00:00:00.000-04:00

2008-11-15T00:43:03.127-05:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

DEBIAN DSA-725 BID 13681 ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands.

cpe:/a:crip:crip:3.5

CVE-2005-0393

2005-07-05T00:00:00.000-04:00

2008-09-05T16:46:09.917-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-07-05T11:52:00.000-04:00

DEBIAN DSA-733 The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack vectors.

CVE-2005-0395

2005-06-09T00:00:00.000-04:00

2008-09-10T15:35:29.617-04:00

cpe:/a:kde:dcopserver:3.3 cpe:/a:kde:desktop_communication_protocol_daemon:3.3

CVE-2005-0396

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:10.653-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050316 Multiple KDE Security Advisories (2005-03-16) GENTOO GLSA-200503-22 CONFIRM http://www.kde.org/info/security/advisory-20050316-1.txt MANDRAKE MDKSA-2005:058 REDHAT RHSA-2005:307 REDHAT RHSA-2005:325 FEDORA FLSA:178606 BID 12820 Desktop Communication Protocol (DCOP) daemon, aka dcopserver, in KDE before 3.4 allows local users to cause a denial of service (dcopserver consumption) by "stalling the DCOP authentication process."

cpe:/a:imagemagick:imagemagick:5.2 cpe:/a:imagemagick:imagemagick:5.3 cpe:/a:imagemagick:imagemagick:5.4 cpe:/a:imagemagick:imagemagick:5.5

CVE-2005-0397

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:55.513-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=83542 BUGTRAQ 20050303 [USN-90-1] Imagemagick vulnerability DEBIAN DSA-702 GENTOO GLSA-200503-11 SUSE SUSE-SA:2005:017 REDHAT RHSA-2005:070 REDHAT RHSA-2005:320 XF imagemagick-filename-format-string(19586) Format string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a filename argument to convert, which may be called by other web applications.

cpe:/a:ipsec-tools:ipsec-tools:0.3.3 cpe:/a:ipsec-tools:ipsec-tools:0.5 cpe:/a:kame:racoon:2003-07-11 cpe:/a:kame:racoon:2004-04-05 cpe:/a:kame:racoon:2004-04-07b cpe:/a:kame:racoon:2004-05-03 cpe:/a:kame:racoon:2005-01-03 cpe:/a:kame:racoon:2005-01-10 cpe:/a:kame:racoon:2005-01-17 cpe:/a:kame:racoon:2005-01-24 cpe:/a:kame:racoon:2005-01-31 cpe:/a:kame:racoon:2005-02-07 cpe:/a:kame:racoon:2005-02-14 cpe:/a:kame:racoon:2005-02-21 cpe:/a:kame:racoon:2005-02-28 cpe:/a:kame:racoon:2005-03-07 cpe:/a:sgi:propack:3.0 cpe:/o:altlinux:alt_linux:2.3::compact cpe:/o:altlinux:alt_linux:2.3::junior cpe:/o:redhat:enterprise_linux:3.0::advanced_servers cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation cpe:/o:redhat:enterprise_linux:4.0::advanced_server cpe:/o:redhat:enterprise_linux:4.0::enterprise_server cpe:/o:redhat:enterprise_linux:4.0::workstation cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:enterprise_linux_desktop:4.0 cpe:/o:suse:suse_linux:::desktop cpe:/o:suse:suse_linux:::enterprise_server cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.1::x86_64 cpe:/o:suse:suse_linux:9.2 cpe:/o:suse:suse_linux:9.2::x86_64

CVE-2005-0398

2005-03-14T00:00:00.000-05:00

2017-10-10T21:29:55.590-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov GENTOO GLSA-200503-33 SECTRACK 1013433 MLIST [ipsec-tools-devel] 20050312 potential remote crash in racoon MANDRAKE MDKSA-2005:062 REDHAT RHSA-2005:232 BID 12804 VUPEN ADV-2005-0264 MISC https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=109966&action=view XF racoon-isakmp-header-dos(19707) The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.

cpe:/a:mozilla:firefox:0.8 cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:firefox:0.9:rc cpe:/a:mozilla:firefox:0.9.1 cpe:/a:mozilla:firefox:0.9.2 cpe:/a:mozilla:firefox:0.9.3 cpe:/a:mozilla:firefox:0.10 cpe:/a:mozilla:firefox:0.10.1 cpe:/a:mozilla:firefox:1.0 cpe:/a:mozilla:firefox:1.0.1 cpe:/a:mozilla:mozilla:1.3 cpe:/a:mozilla:mozilla:1.4 cpe:/a:mozilla:mozilla:1.4:alpha cpe:/a:mozilla:mozilla:1.4.1 cpe:/a:mozilla:mozilla:1.5 cpe:/a:mozilla:mozilla:1.5:alpha cpe:/a:mozilla:mozilla:1.5:rc1 cpe:/a:mozilla:mozilla:1.5:rc2 cpe:/a:mozilla:mozilla:1.5.1 cpe:/a:mozilla:mozilla:1.6 cpe:/a:mozilla:mozilla:1.6:alpha cpe:/a:mozilla:mozilla:1.6:beta cpe:/a:mozilla:mozilla:1.7 cpe:/a:mozilla:mozilla:1.7:alpha cpe:/a:mozilla:mozilla:1.7:beta cpe:/a:mozilla:mozilla:1.7:rc1 cpe:/a:mozilla:mozilla:1.7:rc2 cpe:/a:mozilla:mozilla:1.7:rc3 cpe:/a:mozilla:mozilla:1.7.1 cpe:/a:mozilla:mozilla:1.7.2 cpe:/a:mozilla:mozilla:1.7.3 cpe:/a:mozilla:mozilla:1.7.5 cpe:/a:mozilla:thunderbird:0.1 cpe:/a:mozilla:thunderbird:0.2 cpe:/a:mozilla:thunderbird:0.3 cpe:/a:mozilla:thunderbird:0.4 cpe:/a:mozilla:thunderbird:0.5 cpe:/a:mozilla:thunderbird:0.6 cpe:/a:mozilla:thunderbird:0.7 cpe:/a:mozilla:thunderbird:0.7.1 cpe:/a:mozilla:thunderbird:0.7.2 cpe:/a:mozilla:thunderbird:0.7.3 cpe:/a:mozilla:thunderbird:0.8 cpe:/a:mozilla:thunderbird:0.9 cpe:/a:mozilla:thunderbird:1.0 cpe:/a:mozilla:thunderbird:1.0.1

CVE-2005-0399

2005-05-02T00:00:00.000-04:00

2018-05-02T21:29:28.130-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SCO SCOSA-2005.49 CIAC P-160 GENTOO GLSA-200503-30 CERT-VN VU#557948 CONFIRM http://www.mozilla.org/security/announce/mfsa2005-30.html SUSE SUSE-SA:2006:004 REDHAT RHSA-2005:323 REDHAT RHSA-2005:335 REDHAT RHSA-2005:336 REDHAT RHSA-2005:337 BID 12881 BID 15495 VUPEN ADV-2005-0296 ISS 20050323 Mozilla Foundation GIF Overflow MISC https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=150877 XF gif-extension-overflow(19269) Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.

cpe:/o:linux:linux_kernel:2.6.11.6

CVE-2005-0400

2005-05-02T00:00:00.000-04:00

2018-10-03T17:29:35.980-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://arkoon.net/advisories/ext2-make-empty-leak.txt CONFIRM http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.6 BUGTRAQ 20050401 Information leak in the Linux kernel ext2 implementation REDHAT RHSA-2005:366 REDHAT RHSA-2005:663 REDHAT RHSA-2006:0190 REDHAT RHSA-2006:0191 BID 12932 VUPEN ADV-2005-1878 FEDORA FLSA:152532 XF kernel-ext2-information-disclosure(19866) UBUNTU USN-103-1 The ext2_make_empty function call in the Linux kernel before 2.6.11.6 does not properly initialize memory when creating a block for a new directory entry, which allows local users to obtain potentially sensitive information by reading the block.

CVE-2005-0401

2005-05-02T00:00:00.000-04:00

2018-05-02T21:29:28.397-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050324 Firescrolling 2 [Firefox 1.0.1] MISC http://mikx.de/firescrolling2/ GENTOO GLSA-200503-30 CONFIRM http://www.mozilla.org/security/announce/mfsa2005-32.html REDHAT RHSA-2005:335 REDHAT RHSA-2005:336 REDHAT RHSA-2005:384 BID 12885 VUPEN ADV-2005-0296 FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar, a variant of CVE-2005-0527, aka "Firescrolling 2."

CVE-2005-0402

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:55.747-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.mozilla.org/security/announce/mfsa2005-31.html REDHAT RHSA-2005:336 VUPEN ADV-2005-0296 MISC https://bugzilla.mozilla.org/show_bug.cgi?id=284627 Firefox before 1.0.2 allows remote attackers to execute arbitrary code by tricking a user into saving a page as a Firefox sidebar panel, then using the sidebar panel to inject Javascript into a privileged page.

cpe:/o:redhat:enterprise_linux:3.0::advanced_servers cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation cpe:/o:redhat:enterprise_linux_desktop:3.0

CVE-2005-0403

2005-09-01T18:03:00.000-04:00

2017-10-10T21:29:55.793-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

REDHAT RHSA-2005:293 MISC https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=144059 init_dev in tty_io.c in the Red Hat backport of NPTL to Red Hat Enterprise Linux 3 does not properly clear controlling tty's in multi-threaded applications, which allows local users to cause a denial of service (crash) and possibly gain tty access via unknown attack vectors that trigger an access of a pointer to a freed structure.

cpe:/a:kmail:kmail:1.7.1 cpe:/o:kde:kde:3.3.2

CVE-2005-0404

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:11.790-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-07T11:49:00.000-04:00

MISC http://bugs.kde.org/show_bug.cgi?id=96020 MLIST [kmail-devel] 20050215 [Bug 96020] HTML Allows Spoofing of Emails Content MISC http://www.securiteam.com/unixfocus/5GP0B0AFFE.html KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypted, via HTML formatted email.

cpe:/a:image_processing_software:image_processing_software

CVE-2005-0406

2005-02-14T00:00:00.000-05:00

2008-09-10T15:35:31.007-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-07T11:59:00.000-04:00

FULLDISC 20050214 Advisory: JPEG EXIF information disclosure MISC http://www.redteam-pentesting.de/advisories/rt-sa-2005-008.txt A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image.

cpe:/a:zakon_group:openconf:1.0 cpe:/a:zakon_group:openconf:1.0_beta1 cpe:/a:zakon_group:openconf:1.0_beta2 cpe:/a:zakon_group:openconf:1.0_rc1 cpe:/a:zakon_group:openconf:1.0_rc2 cpe:/a:zakon_group:openconf:1.01 cpe:/a:zakon_group:openconf:1.02 cpe:/a:zakon_group:openconf:1.03 cpe:/a:zakon_group:openconf:1.04

CVE-2005-0407

2005-05-02T00:00:00.000-04:00

2008-09-10T15:35:31.087-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-07T12:26:00.000-04:00

FULLDISC 20050214 Advisory: Cross Site Scripting Vulnerability in Openconf Conference Management Software MISC http://www.redteam-pentesting.de/advisories/rt-sa-2005-007.txt BID 12554 Cross-site scripting (XSS) vulnerability in Openconf 1.04, and possibly other versions before 1.10, allows remote attackers to inject arbitrary HTML and web script via the paper title.

cpe:/a:citrusdb:citrusdb:0.3.6

CVE-2005-0408

2005-02-14T00:00:00.000-05:00

2008-09-10T15:35:31.147-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-07T12:09:00.000-04:00

ALLOWS_OTHER_ACCESS

FULLDISC 20050214 Advisory: Authentication bypass in CitrusDB MISC http://www.redteam-pentesting.de/advisories/rt-sa-2005-002.txt CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the id_hash cookie, which allows remote attackers to bypass authentication and gain privileges by calculating the MD5 checksum of the user name combined with the "boogaadeeboo" string, which is hard-coded in the $hidden_hash variable.

cpe:/a:citrusdb:citrusdb:0.3.6

CVE-2005-0409

2005-02-14T00:00:00.000-05:00

2008-09-10T15:35:31.227-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-07T12:16:00.000-04:00

FULLDISC 20050214 Advisory: Upload Authorization bypass in CitrusDB MISC http://www.redteam-pentesting.de/advisories/rt-sa-2005-003.txt CitrusDB 0.3.6 and earlier does not verify authorization for the (1) importcc.php and (2) uploadcc.php, which allows remote attackers to upload credit card data and obtain sensitive information such as the pathnames for temporary files that store credit card data, and facilitates the exploitation of other vulnerabilities.

cpe:/a:citrusdb:citrusdb:0.3.6

CVE-2005-0410

2005-02-14T00:00:00.000-05:00

2008-09-10T15:35:31.290-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-07T12:26:00.000-04:00

FULLDISC 20050214 Advisory: SQL-Injection in CitrusDB MISC http://www.redteam-pentesting.de/advisories/rt-sa-2005-004.txt SQL injection vulnerability in importcc.php for CitrusDB 0.3.6 and earlier allows remote attackers to inject data via the fields of a CSV file.

cpe:/a:citrusdb:citrusdb:0.3.6

CVE-2005-0411

2005-02-14T00:00:00.000-05:00

2008-09-10T15:35:31.353-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-07T12:37:00.000-04:00

FULLDISC 20050214 Advisory: Directory traversal in CitrusDB MISC http://www.redteam-pentesting.de/advisories/rt-sa-2005-005.txt Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote attackers and local users to include arbitrary PHP files via .. (dot dot) sequences in the load parameter.

cpe:/a:spidean:postwrap

CVE-2005-0412

2005-04-27T00:00:00.000-04:00

2017-07-10T21:32:16.670-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

FULLDISC 20050208 XSS VULNERABILITY AT MODULE PostWrap SECTRACK 1013130 XF postwrap-xss(19261) Cross-site scripting (XSS) vulnerability in Spidean PostWrap allows remote attackers to inject arbitrary HTML and web script via the page parameter.

cpe:/a:myphp_forum:myphp_forum:1.0 cpe:/a:myphp_forum:myphp_forum:2.0 cpe:/a:myphp_forum:myphp_forum:3.0

CVE-2005-0413

2005-04-27T00:00:00.000-04:00

2017-10-10T21:29:55.857-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050209 Several SQL injection bugs in myPHP Forum v.1.0 SECTRACK 1013136 BID 12501 BID 27083 XF myphpforum-multiple-sql-injection(19272) XF myphpforum-member-sql-injection(39348) EXPLOIT-DB 4822 Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the fid in forum.php, (2) the member parameter in member.php, (3) the email parameter in forgot.php, or (4) the nbuser or nbpass parameters in include.php. NOTE: it was later reported that vector 2 exists in 3.0 and earlier.

cpe:/a:mercuryboard:mercuryboard:1.1.1

CVE-2005-0414

2005-04-27T00:00:00.000-04:00

2017-07-10T21:32:16.780-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://cvs.sunsite.dk/viewcvs.cgi/mercury/func/post.php.diff?r1=1.68&r2=1.70 BUGTRAQ 20050124 Multiple vulnerabilities in MercuryBoard 1.1.1 BUGTRAQ 20050209 Mercuryboard =?iso-8859-1?Q?<=3D?= 1.1.1 Working Sql Injection SECTRACK 1013137 XF mercuryboard-index-sql-injection(19051) SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via a reply post action for index.php with (1) the t parameter or (2) the qu parameter.

cpe:/a:ulrik_petersen:emdros_database_engine:1.1.14 cpe:/a:ulrik_petersen:emdros_database_engine:1.1.15 cpe:/a:ulrik_petersen:emdros_database_engine:1.1.16 cpe:/a:ulrik_petersen:emdros_database_engine:1.1.17 cpe:/a:ulrik_petersen:emdros_database_engine:1.1.18 cpe:/a:ulrik_petersen:emdros_database_engine:1.1.19 cpe:/a:ulrik_petersen:emdros_database_engine:1.1.20 cpe:/a:ulrik_petersen:emdros_database_engine:1.1.21

CVE-2005-0415

2005-04-27T00:00:00.000-04:00

2017-07-10T21:32:16.827-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://sourceforge.net/project/shownotes.php?release_id=303465 CONFIRM http://sourceforge.net/tracker/index.php?func=detail&aid=1116935&group_id=37219&atid=419458 XF emdros-mql-dos(19273) Multiple memory leaks in the MQL parser in Emdros before 1.1.22 allow remote attackers to cause a denial of service (memory consumption) via malformed MQL statements.

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2000::sp1 cpe:/o:microsoft:windows_2000::sp2 cpe:/o:microsoft:windows_2000::sp3 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server:enterprise::64-bit cpe:/o:microsoft:windows_2003_server:enterprise_64-bit cpe:/o:microsoft:windows_2003_server:r2::64-bit cpe:/o:microsoft:windows_2003_server:r2::datacenter_64-bit cpe:/o:microsoft:windows_2003_server:standard::64-bit cpe:/o:microsoft:windows_2003_server:web cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_98se cpe:/o:microsoft:windows_me cpe:/o:microsoft:windows_nt:4.0::enterprise_server cpe:/o:microsoft:windows_nt:4.0::server cpe:/o:microsoft:windows_nt:4.0::terminal_server cpe:/o:microsoft:windows_nt:4.0::workstation cpe:/o:microsoft:windows_nt:4.0:sp1:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp1:server cpe:/o:microsoft:windows_nt:4.0:sp1:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp1:workstation cpe:/o:microsoft:windows_nt:4.0:sp2:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp2:server cpe:/o:microsoft:windows_nt:4.0:sp2:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp2:workstation cpe:/o:microsoft:windows_nt:4.0:sp3:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp3:server cpe:/o:microsoft:windows_nt:4.0:sp3:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp3:workstation cpe:/o:microsoft:windows_nt:4.0:sp4:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp4:server cpe:/o:microsoft:windows_nt:4.0:sp4:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp4:workstation cpe:/o:microsoft:windows_nt:4.0:sp5:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp5:server cpe:/o:microsoft:windows_nt:4.0:sp5:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp5:workstation cpe:/o:microsoft:windows_nt:4.0:sp6:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp6:server cpe:/o:microsoft:windows_nt:4.0:sp6:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp6:workstation cpe:/o:microsoft:windows_nt:4.0:sp6a:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp6a:server cpe:/o:microsoft:windows_nt:4.0:sp6a:workstation cpe:/o:microsoft:windows_xp:::64-bit cpe:/o:microsoft:windows_xp:::embedded cpe:/o:microsoft:windows_xp:::home cpe:/o:microsoft:windows_xp:::media_center cpe:/o:microsoft:windows_xp::gold:professional cpe:/o:microsoft:windows_xp::sp1:64-bit cpe:/o:microsoft:windows_xp::sp1:embedded cpe:/o:microsoft:windows_xp::sp1:home cpe:/o:microsoft:windows_xp::sp1:media_center cpe:/o:microsoft:windows_xp::sp2:tablet_pc

CVE-2005-0416

2005-04-27T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://eeye.com/html/research/advisories/AD20050111.html BUGTRAQ 20050111 EEYE: Windows ANI File Parsing Buffer Overflow BUGTRAQ 20050112 Windows ANI File Parsing Proof Of Concept (MS05-002) BID 12233 MS MS05-002 XF win-user32-aniheader-overflow(18879) The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow.

cpe:/a:ibm:db2_universal_database:6.0 cpe:/a:ibm:db2_universal_database:7.0::linux cpe:/a:ibm:db2_universal_database:7.1::linux cpe:/a:ibm:db2_universal_database:7.2::linux cpe:/a:ibm:db2_universal_database:8.0::linux cpe:/a:ibm:db2_universal_database:8.1::aix cpe:/a:ibm:db2_universal_database:8.2::windows

CVE-2005-0417

2005-04-27T00:00:00.000-04:00

2016-10-17T23:11:31.177-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov BUGTRAQ 20050209 Patch available for high risk IBM DB2 Universal Database flaw MISC http://www.ngssoftware.com/advisories/db2-09-05-05.htm BID 12508 Unknown "high risk" vulnerability in DB2 Universal Database 8.1 and earlier has unknown impact and attack vectors. NOTE: due to the delayed disclosure of details for this issue, this candidate may be SPLIT in the future. In addition, this may be a duplicate of other issues as reported by the vendor.

cpe:/a:sun:j2se:1.4.2::sdk cpe:/a:sun:j2se:1.4.2_01::sdk cpe:/a:sun:j2se:1.4.2_02::sdk cpe:/a:sun:j2se:1.4.2_03::sdk cpe:/a:sun:j2se:1.4.2_04::sdk cpe:/a:sun:j2se:1.4.2_05::sdk cpe:/a:sun:j2se:1.4.2_06::sdk

CVE-2005-0418

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:14.070-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-07T12:34:00.000-04:00

ALLOWS_OTHER_ACCESS

APPLE APPLE-SA-2005-03-24 Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06, on Mac OS X, allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file. NOTE: it is highly likely that this item will be MERGED with CVE-2005-0836.

cpe:/a:3com:3cserver:1.1

CVE-2005-0419

2005-04-27T00:00:00.000-04:00

2017-07-10T21:32:16.937-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050207 Vulnerability in 3Com 3CServer v1.1 XF 3cserver-multiple-command-bo(19250) Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via long FTP commands, as demonstrated using the STAT command.

cpe:/a:microsoft:exchange_server:2003 cpe:/a:microsoft:exchange_server:2003:sp1

CVE-2005-0420

2005-04-27T00:00:00.000-04:00

2017-07-10T21:32:17.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20050206 Microsoft Outlook Web Access URL Injection Vulnerability BID 12459 VUPEN ADV-2005-0105 XF owa-owalogonasp-url-redirect(19225) Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application.

cpe:/a:delphiturk:delphiturk_ftp:1.0

CVE-2005-0421

2005-04-27T00:00:00.000-04:00

2017-07-10T21:32:17.047-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013139 XF delphiturkcodebank-obtain-information(19248) DelphiTurk FTP 1.0 stores usernames and passwords in the profile.dat file, which allows local users to gain privileges.

cpe:/a:delphiturk:codebank:3.1

CVE-2005-0422

2005-04-27T00:00:00.000-04:00

2017-07-10T21:32:17.093-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013139 XF delphiturkcodebank-obtain-information(19248) DelphiTurk CodeBank (aka KodBank) 3.1 and earlier stores usernames and passwords in the Codebank registry key, which allows local users to gain privileges.

cpe:/a:aspjar:aspjar_guestbook:1.0

CVE-2005-0423

2005-04-27T00:00:00.000-04:00

2017-07-10T21:32:17.157-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050210 ASPjar guestbook (Injection in login page) BID 12521 XF aspjar-guest-login-sql-injection(19299) SQL injection vulnerability in login.asp in ASPjar Guestbook allows remote attackers to execute arbitrary SQL commands via the password field.

cpe:/a:aspjar:aspjar_guestbook:1.0

CVE-2005-0424

2005-04-27T00:00:00.000-04:00

2017-07-10T21:32:17.203-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050210 ASPjar guestbook (Injection in login page) BID 12521 XF aspjar-delete-message-deletion(19301) Unknown vulnerability in the delete.asp program in certain versions of ASPjar Guestbook allows remote attackers to delete messages. NOTE: there is insufficient information to know if this is the same issue as CVE-2002-1730.

cpe:/a:ibm:websphere_application_server:5.0 cpe:/a:ibm:websphere_application_server:5.1.0 cpe:/a:ibm:websphere_application_server:6.0

CVE-2005-0425

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:15.197-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg24008814 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg24008815 Unknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on Windows, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via a crafted URL that causes the page to be processed by the file serving servlet instead of the JSP engine.

cpe:/o:sun:solaris:9.0::sparc cpe:/o:sun:sunos:5.8

CVE-2005-0426

2005-05-02T00:00:00.000-04:00

2018-10-30T12:25:37.090-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SUNALERT 57728 BID 12385 XF solaris-udp-end-point-dos(19119) Unknown vulnerability in Solaris 8 and 9 allows remote attackers to cause a denial of service (panic) via "Heavy UDP Usage" that triggers a NULL dereference.

cpe:/a:gentoo:webmin:1.140 cpe:/a:gentoo:webmin:1.150 cpe:/a:gentoo:webmin:1.160 cpe:/a:gentoo:webmin:1.170:r1 cpe:/a:gentoo:webmin:1.170:r2

CVE-2005-0427

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:17.297-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://bugs.gentoo.org/show_bug.cgi?id=77731 GENTOO GLSA-200502-12 XF webmin-encrypted-password(19315) The ebuild of Webmin before 1.170-r3 on Gentoo Linux includes the encrypted root password in the miniserv.users file when building a tbz2 of the webmin package, which allows remote attackers to obtain and possibly crack the encrypted password.

cpe:/a:powerdns:powerdns:2.0_rc1 cpe:/a:powerdns:powerdns:2.8 cpe:/a:powerdns:powerdns:2.9.15

CVE-2005-0428

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:17.360-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://doc.powerdns.com/changelog.html#CHANGELOG-2-9-17 MISC http://ds9a.nl/cgi-bin/cvstrac/pdns/tktview?tn=21 GENTOO GLSA-200502-15 BID 12446 XF powerdns-random-bytes-dos(19221) The DNSPacket::expand method in dnspacket.cc in PowerDNS before 2.9.17 allows remote attackers to cause a denial of service by sending a random stream of bytes.

cpe:/a:jelsoft:vbulletin:3.0 cpe:/a:jelsoft:vbulletin:3.0.1 cpe:/a:jelsoft:vbulletin:3.0.2 cpe:/a:jelsoft:vbulletin:3.0.3 cpe:/a:jelsoft:vbulletin:3.0.4

CVE-2005-0429

2005-05-02T00:00:00.000-04:00

2016-10-17T23:11:36.240-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050213 vbulletin 3.0.x PHP code execution BID 12542 Direct code injection vulnerability in forumdisplay.php in vBulletin 3.0 through 3.0.4, when showforumusers is enabled, allows remote attackers to execute inject arbitrary PHP commands via the comma parameter.

cpe:/a:id_software:quake_3_engine

CVE-2005-0430

2005-02-12T00:00:00.000-05:00

2016-10-17T23:11:37.507-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/q3infoboom-adv.txt BUGTRAQ 20050212 Infostring crash and shutdown in the Quake 3 engine BID 12534 The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service (shutdown game server) and possibly crash the server via a long infostring, possibly triggering a buffer overflow.

cpe:/h:barracuda_networks:barracuda_spam_firewall:3.1.10

CVE-2005-0431

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:17.407-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050210 Barracuda Spam Firewall <= 3.1.10 acts as open relay for whitelisted senders. XF barracuda-open-relay(19283) Barracuda Spam Firewall 3.1.10 and earlier does not restrict the domains that white-listed domains can send mail to, which allows members of white-listed domains to use Barracuda as an open mail relay for spam.

cpe:/a:bea:weblogic_server:7.0:sp5 cpe:/a:bea:weblogic_server:8.1:sp3

CVE-2005-0432

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:16.353-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-07T13:07:00.000-04:00

CONFIRM http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA05-74.00.jsp BEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 Service Pack 3 and earlier, generates different login exceptions that suggest why an authentication attempt fails, which makes it easier for remote attackers to guess passwords via brute force attacks.

cpe:/a:francisco_burzi:php-nuke:6.0 cpe:/a:francisco_burzi:php-nuke:6.5 cpe:/a:francisco_burzi:php-nuke:6.5_beta1 cpe:/a:francisco_burzi:php-nuke:6.5_final cpe:/a:francisco_burzi:php-nuke:6.5_rc1 cpe:/a:francisco_burzi:php-nuke:6.5_rc2 cpe:/a:francisco_burzi:php-nuke:6.5_rc3 cpe:/a:francisco_burzi:php-nuke:6.6 cpe:/a:francisco_burzi:php-nuke:6.7 cpe:/a:francisco_burzi:php-nuke:6.9 cpe:/a:francisco_burzi:php-nuke:7.0 cpe:/a:francisco_burzi:php-nuke:7.0_final cpe:/a:francisco_burzi:php-nuke:7.1 cpe:/a:francisco_burzi:php-nuke:7.2 cpe:/a:francisco_burzi:php-nuke:7.3 cpe:/a:francisco_burzi:php-nuke:7.6

CVE-2005-0433

2005-02-15T00:00:00.000-05:00

2017-07-10T21:32:17.467-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 12561 MISC http://www.waraxe.us/advisory-40.html XF phpnuke-multiple-scripts-path-disclosure(19344) Php-Nuke 7.5 allows remote attackers to determine the full path of the web server via invalid or missing arguments to (1) db.php, (2) mainfile.php, (3) Downloads/index.php, or (4) Web_Links/index.php, which lists the path in a PHP error message.

CVE-2005-0434

2005-02-15T00:00:00.000-05:00

2017-07-10T21:32:17.517-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 12561 MISC http://www.waraxe.us/advisory-40.html XF phpnuke-downloads-weblinks-xss(19346) Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 7.5 allow remote attackers to inject arbitrary HTML or web script via (1) the newdownloadshowdays parameter in a NewDownloads operation or (2) the newlinkshowdays parameter in a NewLinks operation.

cpe:/a:awstats:awstats:6.3 cpe:/a:awstats:awstats:6.4

CVE-2005-0435

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:17.577-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050214 AWStats <= 6.4 Multiple vulnerabilities XF awstats-awstatpl-obtain-information(19333) awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginmode parameters to rawlog.

cpe:/a:awstats:awstats:6.3 cpe:/a:awstats:awstats:6.4

CVE-2005-0436

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:17.623-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050214 AWStats <= 6.4 Multiple vulnerabilities XF awstats-function-code-execution(19336) Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of Perl code via the PluginMode parameter.

cpe:/a:awstats:awstats:6.3 cpe:/a:awstats:awstats:6.4

CVE-2005-0437

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:17.257-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-07T13:15:00.000-04:00

BUGTRAQ 20050214 AWStats <= 6.4 Multiple vulnerabilities Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to include arbitrary Perl modules via .. (dot dot) sequences in the loadplugin parameter.

cpe:/a:awstats:awstats:6.3 cpe:/a:awstats:awstats:6.4

CVE-2005-0438

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:17.670-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050214 AWStats <= 6.4 Multiple vulnerabilities XF awstats-information-disclosure(19477) awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to obtain sensitive information by setting the debug parameter.

cpe:/a:stefan_ritt:elog_web_logbook:2.0.0 cpe:/a:stefan_ritt:elog_web_logbook:2.0.1 cpe:/a:stefan_ritt:elog_web_logbook:2.0.2 cpe:/a:stefan_ritt:elog_web_logbook:2.0.3 cpe:/a:stefan_ritt:elog_web_logbook:2.0.4 cpe:/a:stefan_ritt:elog_web_logbook:2.0.5 cpe:/a:stefan_ritt:elog_web_logbook:2.1.0 cpe:/a:stefan_ritt:elog_web_logbook:2.1.1 cpe:/a:stefan_ritt:elog_web_logbook:2.1.2 cpe:/a:stefan_ritt:elog_web_logbook:2.1.3 cpe:/a:stefan_ritt:elog_web_logbook:2.2.0 cpe:/a:stefan_ritt:elog_web_logbook:2.2.1 cpe:/a:stefan_ritt:elog_web_logbook:2.2.2 cpe:/a:stefan_ritt:elog_web_logbook:2.2.3 cpe:/a:stefan_ritt:elog_web_logbook:2.2.4 cpe:/a:stefan_ritt:elog_web_logbook:2.4 cpe:/a:stefan_ritt:elog_web_logbook:2.5 cpe:/a:stefan_ritt:elog_web_logbook:2.5.6

CVE-2005-0439

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:17.733-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://midas.psi.ch/elogs/Forum/941 CONFIRM http://sourceforge.net/project/shownotes.php?group_id=40505&release_id=304880 BID 12556 XF elog-weblog-bo(19313) Buffer overflow in the decode_post function in ELOG before 2.5.7 allows remote attackers to execute arbitrary code via attachments with long file names.

CVE-2005-0440

2005-05-02T00:00:00.000-04:00

2011-03-07T21:20:00.500-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-07T13:48:00.000-04:00

ALLOWS_OTHER_ACCESS

CONFIRM http://midas.psi.ch/elogs/Forum/941 CONFIRM http://sourceforge.net/project/shownotes.php?group_id=40505&release_id=304880 BID 12556 ELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration file that contains a sensitive write password via a modified URL.

cpe:/a:sybase:adaptive_server_enterprise:11.03.3::linux cpe:/a:sybase:adaptive_server_enterprise:11.5::digital_unix cpe:/a:sybase:adaptive_server_enterprise:11.5::hp cpe:/a:sybase:adaptive_server_enterprise:11.5::sun cpe:/a:sybase:adaptive_server_enterprise:11.5::win cpe:/a:sybase:adaptive_server_enterprise:11.5.1::digital_unix cpe:/a:sybase:adaptive_server_enterprise:11.5.1::hp cpe:/a:sybase:adaptive_server_enterprise:11.5.1::sun cpe:/a:sybase:adaptive_server_enterprise:11.5.1::win cpe:/a:sybase:adaptive_server_enterprise:11.9.2::digital_unix cpe:/a:sybase:adaptive_server_enterprise:11.9.2::hp cpe:/a:sybase:adaptive_server_enterprise:11.9.2::sun cpe:/a:sybase:adaptive_server_enterprise:11.9.2::win cpe:/a:sybase:adaptive_server_enterprise:12.0::digital_unix cpe:/a:sybase:adaptive_server_enterprise:12.0::hp cpe:/a:sybase:adaptive_server_enterprise:12.0::sun cpe:/a:sybase:adaptive_server_enterprise:12.0::win cpe:/a:sybase:adaptive_server_enterprise:12.0.1::digital_unix cpe:/a:sybase:adaptive_server_enterprise:12.0.1::hp cpe:/a:sybase:adaptive_server_enterprise:12.0.1::sun cpe:/a:sybase:adaptive_server_enterprise:12.0.1::win cpe:/a:sybase:adaptive_server_enterprise:12.5::digital_unix cpe:/a:sybase:adaptive_server_enterprise:12.5::hp cpe:/a:sybase:adaptive_server_enterprise:12.5::linux cpe:/a:sybase:adaptive_server_enterprise:12.5::sgi cpe:/a:sybase:adaptive_server_enterprise:12.5::sun cpe:/a:sybase:adaptive_server_enterprise:12.5::win cpe:/a:sybase:adaptive_server_enterprise:12.5.2 cpe:/a:sybase:adaptive_server_enterprise:12.5.3

CVE-2005-0441

2004-12-22T00:00:00.000-05:00

2017-07-10T21:32:17.813-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20041222 Sybase ASE 12.5.2 vulnerabilities BUGTRAQ 20050405 Sybase ASE Multiple Security Issues (#NISR05042005) MISC http://www.ngssoftware.com/advisories/sybase-ase.txt BUGTRAQ 20050321 Details of Sybase ASE bugs withheld BID 12080 CONFIRM http://www.sybase.com/detail?id=1034520 CONFIRM http://www.sybase.com/detail?id=1034752 XF sybase-adaptive-server(19354) XF sybase-ase-attribvalid-bo(19974) XF sybase-ase-convert-bo(19976) XF sybase-ase-declare-bo(19978) XF sybase-ase-abstract-bo(19979) XF sybase-ase-install-java-bo(19980) Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticated users to execute arbitrary code via the (1) attrib_valid function, (2) covert function, (3) declare statement, or (4) a crafted query plan, or remote authenticated users with database owner or "sa" role privileges to execute arbitrary code via (5) a crafted install java statement.

cpe:/a:devellion:cubecart:2.0.1 cpe:/a:devellion:cubecart:2.0.4

CVE-2005-0442

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:17.873-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050214 [NOBYTES.COM: #2] CubeCart 2.0.4 - Multiple Vulnerabilities BUGTRAQ 20050406 RE: [NOBYTES.COM: #6] CubeCart 2.0.6 - Information Disclosure CONFIRM http://www.cubecart.com/site/forums/index.php?showtopic=5741 BID 12549 XF cubecart-dotdot-directory-traversal(19322) Directory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote attackers to read arbitrary files via the language parameter.

cpe:/a:devellion:cubecart:2.0.1 cpe:/a:devellion:cubecart:2.0.4

CVE-2005-0443

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:17.920-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050214 [NOBYTES.COM: #2] CubeCart 2.0.4 - Multiple Vulnerabilities CONFIRM http://www.cubecart.com/site/forums/index.php?showtopic=5741 BID 12549 XF cubecart-index-xss(19328) index.php in CubeCart 2.0.4 allows remote attackers to (1) obtain the full path for the web server or (2) conduct cross-site scripting (XSS) attacks via an invalid language parameter, which echoes the parameter in a PHP error message.

cpe:/a:vmware:workstation:4.5.2_build_8848:r4

CVE-2005-0444

2005-02-14T00:00:00.000-05:00

2008-09-05T16:46:18.557-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-07T13:46:00.000-04:00

ALLOWS_USER_ACCESS

GENTOO GLSA-200502-18 VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries using a path that includes the rrdharan world-writable temporary directory, which allows local users to execute arbitrary code.

cpe:/a:open_webmail:open_webmail:2.00 cpe:/a:open_webmail:open_webmail:2.01 cpe:/a:open_webmail:open_webmail:2.10 cpe:/a:open_webmail:open_webmail:2.20 cpe:/a:open_webmail:open_webmail:2.21 cpe:/a:open_webmail:open_webmail:2.30 cpe:/a:open_webmail:open_webmail:2.32 cpe:/a:open_webmail:open_webmail:2.40 cpe:/a:open_webmail:open_webmail:2.41 cpe:/a:open_webmail:open_webmail:2.50

CVE-2005-0445

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:17.983-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013172 CONFIRM http://turtle.ee.ncku.edu.tw/openwebmail/doc/changes.txt CONFIRM http://turtle.ee.ncku.edu.tw/openwebmail/download/cert/patches/SA-05:01/2.5x.patch BID 12547 XF open-webmail-logindomain-xss(19335) Cross-site scripting (XSS) vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web script via the domain name parameter (logindomain) in the login page.

cpe:/a:squid:squid:2.0.patch1 cpe:/a:squid:squid:2.0.patch2 cpe:/a:squid:squid:2.0.pre1 cpe:/a:squid:squid:2.0.release cpe:/a:squid:squid:2.0_patch2 cpe:/a:squid:squid:2.1.patch1 cpe:/a:squid:squid:2.1.patch2 cpe:/a:squid:squid:2.1.pre1 cpe:/a:squid:squid:2.1.pre3 cpe:/a:squid:squid:2.1.pre4 cpe:/a:squid:squid:2.1.release cpe:/a:squid:squid:2.1_patch2 cpe:/a:squid:squid:2.2.devel3 cpe:/a:squid:squid:2.2.devel4 cpe:/a:squid:squid:2.2.pre1 cpe:/a:squid:squid:2.2.pre2 cpe:/a:squid:squid:2.2.stable1 cpe:/a:squid:squid:2.2.stable2 cpe:/a:squid:squid:2.2.stable3 cpe:/a:squid:squid:2.2.stable4 cpe:/a:squid:squid:2.2.stable5 cpe:/a:squid:squid:2.3.devel2 cpe:/a:squid:squid:2.3.devel3 cpe:/a:squid:squid:2.3.stable1 cpe:/a:squid:squid:2.3.stable2 cpe:/a:squid:squid:2.3.stable3 cpe:/a:squid:squid:2.3.stable4 cpe:/a:squid:squid:2.3.stable5 cpe:/a:squid:squid:2.3_.stable4 cpe:/a:squid:squid:2.3_.stable5 cpe:/a:squid:squid:2.3_stable5 cpe:/a:squid:squid:2.4 cpe:/a:squid:squid:2.4.stable1 cpe:/a:squid:squid:2.4.stable2 cpe:/a:squid:squid:2.4.stable3 cpe:/a:squid:squid:2.4.stable4 cpe:/a:squid:squid:2.4.stable6 cpe:/a:squid:squid:2.4.stable7 cpe:/a:squid:squid:2.4_.stable2 cpe:/a:squid:squid:2.4_.stable6 cpe:/a:squid:squid:2.4_.stable7 cpe:/a:squid:squid:2.4_stable7 cpe:/a:squid:squid:2.5.6 cpe:/a:squid:squid:2.5.stable1 cpe:/a:squid:squid:2.5.stable2 cpe:/a:squid:squid:2.5.stable3 cpe:/a:squid:squid:2.5.stable4 cpe:/a:squid:squid:2.5.stable5 cpe:/a:squid:squid:2.5.stable6 cpe:/a:squid:squid:2.5.stable7 cpe:/a:squid:squid:2.5.stable8 cpe:/a:squid:squid:2.5_.stable1 cpe:/a:squid:squid:2.5_.stable3 cpe:/a:squid:squid:2.5_.stable4 cpe:/a:squid:squid:2.5_.stable5 cpe:/a:squid:squid:2.5_.stable6 cpe:/a:squid:squid:2.5_stable3 cpe:/a:squid:squid:2.5_stable4 cpe:/a:squid:squid:2.5_stable9

CVE-2005-0446

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:55.937-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2005:931 FEDORA FLSA-2006:152809 BUGTRAQ 20050221 [USN-84-1] Squid vulnerabilities DEBIAN DSA-688 GENTOO GLSA-200502-25 MANDRAKE MDKSA-2005:047 REDHAT RHSA-2005:173 REDHAT RHSA-2005:201 BID 12551 CONFIRM http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE8-dns_assert CONFIRM http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE8-dns_assert.patch XF squid-xstrndup-dos(19332) Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.

cpe:/o:sun:solaris:9.0::sparc cpe:/o:sun:sunos:5.7 cpe:/o:sun:sunos:5.8

CVE-2005-0447

2005-02-15T00:00:00.000-05:00

2018-10-30T12:26:22.763-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1013179 SUNALERT 57673 BID 12553 XF solaris-arp-dos(19331) Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (hang) via a flood of certain ARP packets.

cpe:/a:larry_wall:perl:5.8.0 cpe:/a:larry_wall:perl:5.8.1 cpe:/a:larry_wall:perl:5.8.3 cpe:/a:larry_wall:perl:5.8.4

CVE-2005-0448

2005-05-02T00:00:00.000-04:00

2018-10-03T17:29:37.747-04:00

1.2

LOCAL

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov SGI 20060101-01-U CONECTIVA CLSA-2006:1056 FEDORA FLSA-2006:152845 DEBIAN DSA-696 GENTOO GLSA-200501-38 MANDRIVA MDKSA-2005:079 REDHAT RHSA-2005:674 REDHAT RHSA-2005:881 HP HPSBUX01208 BID 12767 UBUNTU USN-94-1 Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.

CVE-2005-0449

2005-05-02T00:00:00.000-04:00

2018-10-03T17:29:39.667-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SGI 20060402-01-U CONECTIVA CLA-2005:945 MLIST [netdev] 20050124 Re: skb_checksum_help DEBIAN DSA-1017 DEBIAN DSA-1018 MANDRAKE MDKSA-2005:218 SUSE SUSE-SA:2005:018 REDHAT RHSA-2005:283 REDHAT RHSA-2005:284 REDHAT RHSA-2005:293 REDHAT RHSA-2005:366 BID 12598 FEDORA FLSA:152532 UBUNTU USN-82-1 The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) or bypass firewall rules via crafted packets, which are not properly handled by the skb_checksum_help function.

cpe:/a:sami:sami_http_server:1.0.5

CVE-2005-0450

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:19.773-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-07T14:13:00.000-04:00

SECTRACK 1013191 Directory traversal vulnerability in Sami HTTP Server 1.0.5 allows remote attackers to read arbitrary files via an HTTP request containing (1) .. (dot dot) or (2) "%2e%2e" (encoded dot dot) sequences.

cpe:/a:sami:sami_http_server:1.0.5

CVE-2005-0451

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:19.930-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-07T14:17:00.000-04:00

SECTRACK 1013191 Sami HTTP Server 1.0.5 allows remote attackers to cause a denial of service via an HTTP request containing two CRLF sequences, which triggers a NULL dereference.

cpe:/a:microsoft:asp.net:1.0 cpe:/a:microsoft:asp.net:1.0:sp1 cpe:/a:microsoft:asp.net:1.0:sp2 cpe:/a:microsoft:asp.net:1.1 cpe:/a:microsoft:asp.net:1.1:sp1

CVE-2005-0452

2005-02-16T00:00:00.000-05:00

2016-10-17T23:11:45.100-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://it-project.ru/andir/docs/aspxvuln/aspxvuln.en.xml BUGTRAQ 20050217 XSS vulnerabilty in ASP.Net [with details] BID 12574 Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<".

cpe:/a:lighttpd:lighttpd:1.3.7

CVE-2005-0453

2005-02-16T00:00:00.000-05:00

2008-09-05T16:46:20.257-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-07T14:22:00.000-04:00

CONFIRM http://article.gmane.org/gmane.comp.web.lighttpd/1171 GENTOO GLSA-200502-21 The buffer_urldecode function in Lighttpd 1.3.7 and earlier does not properly handle control characters, which allows remote attackers to obtain the source code for CGI and FastCGI scripts via a URL with a %00 (null) character after the file extension.

cpe:/a:codeworx_technologies:dcp-portal:6.1.1

CVE-2005-0454

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:11.153-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://glide.stanford.edu/yichen/research/sec.pdf BUGTRAQ 20050216 [hackgen-2005-#003] - SQL injection bugs in DCP-Portal SREASON 108 SECTRACK 1013216 MISC http://www.hackgen.org/advisories/hackgen-2005-003.txt BUGTRAQ 20051211 [PHP-CHECKER] 99 potential SQL injection vulnerabilities BID 12573 XF dcpportal-multiple-sql-injection(19361) Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the lcat, doc, or uid parameters to index.php, or (2) the mid or bid parameters to forums.php.

CVE-2005-0455

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:56.153-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://service.real.com/help/faq/security/050224_player IDEFENSE 20050301 RealNetworks RealPlayer .smil Buffer Overflow Vulnerability REDHAT RHSA-2005:265 REDHAT RHSA-2005:271 Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value.

cpe:/a:opera_software:opera_web_browser:5.0::linux cpe:/a:opera_software:opera_web_browser:5.0::mac cpe:/a:opera_software:opera_web_browser:5.0.2::win32 cpe:/a:opera_software:opera_web_browser:5.1.0::win32 cpe:/a:opera_software:opera_web_browser:5.1.1::win32 cpe:/a:opera_software:opera_web_browser:5.12 cpe:/a:opera_software:opera_web_browser:5.12::win32 cpe:/a:opera_software:opera_web_browser:6.0 cpe:/a:opera_software:opera_web_browser:6.0::win32 cpe:/a:opera_software:opera_web_browser:6.0.1 cpe:/a:opera_software:opera_web_browser:6.0.1::linux cpe:/a:opera_software:opera_web_browser:6.0.1::win32 cpe:/a:opera_software:opera_web_browser:6.0.2::linux cpe:/a:opera_software:opera_web_browser:6.0.2::win32 cpe:/a:opera_software:opera_web_browser:6.0.3::linux cpe:/a:opera_software:opera_web_browser:6.0.3::win32 cpe:/a:opera_software:opera_web_browser:6.0.4::win32 cpe:/a:opera_software:opera_web_browser:6.0.5::win32 cpe:/a:opera_software:opera_web_browser:6.0.6 cpe:/a:opera_software:opera_web_browser:6.0.6::win32 cpe:/a:opera_software:opera_web_browser:6.10::linux cpe:/a:opera_software:opera_web_browser:7.0::win32 cpe:/a:opera_software:opera_web_browser:7.0.1::win32 cpe:/a:opera_software:opera_web_browser:7.0.2::win32 cpe:/a:opera_software:opera_web_browser:7.0.3::win32 cpe:/a:opera_software:opera_web_browser:7.0_beta1::win32 cpe:/a:opera_software:opera_web_browser:7.0_beta2::win32 cpe:/a:opera_software:opera_web_browser:7.10 cpe:/a:opera_software:opera_web_browser:7.11 cpe:/a:opera_software:opera_web_browser:7.11b cpe:/a:opera_software:opera_web_browser:7.11j cpe:/a:opera_software:opera_web_browser:7.20 cpe:/a:opera_software:opera_web_browser:7.20_beta1_build2981 cpe:/a:opera_software:opera_web_browser:7.21 cpe:/a:opera_software:opera_web_browser:7.22 cpe:/a:opera_software:opera_web_browser:7.23 cpe:/a:opera_software:opera_web_browser:7.50 cpe:/a:opera_software:opera_web_browser:7.51 cpe:/a:opera_software:opera_web_browser:7.52 cpe:/a:opera_software:opera_web_browser:7.53 cpe:/a:opera_software:opera_web_browser:7.54 cpe:/a:opera_software:opera_web_browser:9.10

CVE-2005-0456

2005-01-12T00:00:00.000-05:00

2017-07-10T21:32:18.343-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov GENTOO GLSA-200502-17 CERT-VN VU#882926 SUSE SUSE-SA:2005:031 CONFIRM http://www.opera.com/linux/changelogs/754u2/ XF opera-data-dialog-spoofing(18867) Opera 7.54 and earlier does not properly validate base64 encoded binary data in a data: (RFC 2397) URL, which causes the URL to be obscured in a download dialog, which may allow remote attackers to trick users into executing arbitrary code.

cpe:/a:opera_software:opera_web_browser:7.50 cpe:/a:opera_software:opera_web_browser:7.50b1 cpe:/a:opera_software:opera_web_browser:7.52 cpe:/a:opera_software:opera_web_browser:7.53 cpe:/a:opera_software:opera_web_browser:7.54

CVE-2005-0457

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:21.040-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-06-07T14:40:00.000-04:00

ALLOWS_ADMIN_ACCESS

CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=81747 GENTOO GLSA-200502-17 Opera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local users to gain privileges by inserting malicious libraries into the PORTAGE_TMPDIR (portage) temporary directory.

cpe:/a:oscommerce:oscommerce:2.2_ms2

CVE-2005-0458

2005-05-02T00:00:00.000-04:00

2016-10-17T23:11:47.477-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050215 [NOBYTES.COM: #3] osCommerce 2.2-MS2 - XSS Vulnerability Cross-site scripting (XSS) vulnerability in contact_us.php in osCommerce 2.2-MS2 allows remote attackers to inject arbitrary web script or HTML via the enquiry parameter.

cpe:/a:phpmyadmin:phpmyadmin:2.0 cpe:/a:phpmyadmin:phpmyadmin:2.0.1 cpe:/a:phpmyadmin:phpmyadmin:2.0.2 cpe:/a:phpmyadmin:phpmyadmin:2.0.3 cpe:/a:phpmyadmin:phpmyadmin:2.0.4 cpe:/a:phpmyadmin:phpmyadmin:2.0.5 cpe:/a:phpmyadmin:phpmyadmin:2.1 cpe:/a:phpmyadmin:phpmyadmin:2.1.1 cpe:/a:phpmyadmin:phpmyadmin:2.1.2 cpe:/a:phpmyadmin:phpmyadmin:2.2.2 cpe:/a:phpmyadmin:phpmyadmin:2.2.3 cpe:/a:phpmyadmin:phpmyadmin:2.2.4 cpe:/a:phpmyadmin:phpmyadmin:2.2.5 cpe:/a:phpmyadmin:phpmyadmin:2.2.6 cpe:/a:phpmyadmin:phpmyadmin:2.2_pre1 cpe:/a:phpmyadmin:phpmyadmin:2.2_rc1 cpe:/a:phpmyadmin:phpmyadmin:2.2_rc2 cpe:/a:phpmyadmin:phpmyadmin:2.2_rc3 cpe:/a:phpmyadmin:phpmyadmin:2.3.1 cpe:/a:phpmyadmin:phpmyadmin:2.3.2 cpe:/a:phpmyadmin:phpmyadmin:2.4.0 cpe:/a:phpmyadmin:phpmyadmin:2.5.0 cpe:/a:phpmyadmin:phpmyadmin:2.5.1 cpe:/a:phpmyadmin:phpmyadmin:2.5.2 cpe:/a:phpmyadmin:phpmyadmin:2.5.4 cpe:/a:phpmyadmin:phpmyadmin:2.5.5 cpe:/a:phpmyadmin:phpmyadmin:2.5.5_pl1 cpe:/a:phpmyadmin:phpmyadmin:2.5.5_rc1 cpe:/a:phpmyadmin:phpmyadmin:2.5.5_rc2 cpe:/a:phpmyadmin:phpmyadmin:2.5.6_rc1 cpe:/a:phpmyadmin:phpmyadmin:2.5.7 cpe:/a:phpmyadmin:phpmyadmin:2.5.7_pl1 cpe:/a:phpmyadmin:phpmyadmin:2.6.0_pl1 cpe:/a:phpmyadmin:phpmyadmin:2.6.0_pl2 cpe:/a:phpmyadmin:phpmyadmin:2.6.0_pl3 cpe:/a:phpmyadmin:phpmyadmin:2.6.2_dev

CVE-2005-0459

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:21.383-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-07T14:34:00.000-04:00

SECTRACK 1013210 phpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the full path of the web root via a direct request to select_lang.lib.php, which reveals the path in a PHP error message.

cpe:/a:mercuryboard:mercuryboard:1.0 cpe:/a:mercuryboard:mercuryboard:1.1 cpe:/a:mercuryboard:mercuryboard:1.1.1

CVE-2005-0460

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:21.617-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-07T14:48:00.000-04:00

MISC http://lostmon.blogspot.com/2005/02/mercuryboard-debug-information.html index.php in MercuryBoard 1.0.x and 1.1.x allows remote attackers to obtain sensitive information by setting the debug parameter.

CVE-2005-0461

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:21.790-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-07T14:46:00.000-04:00

CONFIRM http://newsbruiser.tigris.org/servlets/NewsItemView?newsItemID=1016 CONFIRM http://newsbruiser.tigris.org/source/browse/newsbruiser/CHANGELOG?rev=1.283&content-type=text/x-cvsweb-markup Unknown vulnerability in NewsBruiser 2.x before 2.6.1 allows remote attackers to "take actions on comments."

cpe:/a:mercuryboard:mercuryboard:1.0 cpe:/a:mercuryboard:mercuryboard:1.1 cpe:/a:mercuryboard:mercuryboard:1.1.1

CVE-2005-0462

2005-02-17T00:00:00.000-05:00

2008-09-05T16:46:21.960-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-07T14:57:00.000-04:00

MISC http://lostmon.blogspot.com/2005/02/mercuryboard-forumphp-f-variable-xss.html Cross-site scripting (XSS) vulnerability in MercuryBoard 1.0.x and 1.1.x allows remote attackers to inject arbitrary HTML and web script via the f parameter.

cpe:/a:inl:ulog-php:0.8 cpe:/a:inl:ulog-php:0.8.1 cpe:/a:inl:ulog-php:0.8.2

CVE-2005-0463

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:22.133-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-07T14:54:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1013220 CONFIRM http://www.inl.fr/article.php3?id_article=7 BID 12610 Unknown "major security flaws" in Ulog-php before 1.0, related to input validation, have unknown impact and attack vectors, probably related to SQL injection vulnerabilities in (1) host.php, (2) port.php, and (3) index.php.

cpe:/o:sgi:irix:6.5.22

CVE-2005-0464

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:22.290-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-07T14:55:00.000-04:00

SGI 20050402-01-P SECTRACK 1013662 IDEFENSE 20050407 SGI IRIX gr_osview Information Disclosure Vulnerability gr_osview in SGI IRIX 6.5.22, and possibly other 6.5 versions, does not drop privileges when opening description files while in debug mode, which allows local users to read a line from arbitrary files via the -d and -D options, which prints the line as a formatting error.

cpe:/o:sgi:irix:3.2 cpe:/o:sgi:irix:3.3 cpe:/o:sgi:irix:3.3.1 cpe:/o:sgi:irix:3.3.2 cpe:/o:sgi:irix:3.3.3 cpe:/o:sgi:irix:4.0 cpe:/o:sgi:irix:4.0.1 cpe:/o:sgi:irix:4.0.1t cpe:/o:sgi:irix:4.0.2 cpe:/o:sgi:irix:4.0.3 cpe:/o:sgi:irix:4.0.4 cpe:/o:sgi:irix:4.0.4b cpe:/o:sgi:irix:4.0.4t cpe:/o:sgi:irix:4.0.5 cpe:/o:sgi:irix:4.0.5_iop cpe:/o:sgi:irix:4.0.5_ipr cpe:/o:sgi:irix:4.0.5a cpe:/o:sgi:irix:4.0.5b cpe:/o:sgi:irix:4.0.5e cpe:/o:sgi:irix:4.0.5f cpe:/o:sgi:irix:4.0.5g cpe:/o:sgi:irix:4.0.5h cpe:/o:sgi:irix:5.0 cpe:/o:sgi:irix:5.0.1 cpe:/o:sgi:irix:5.1 cpe:/o:sgi:irix:5.1.1 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:5.3::xfs cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.0.1::xfs cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 cpe:/o:sgi:irix:6.5 cpe:/o:sgi:irix:6.5.1 cpe:/o:sgi:irix:6.5.2 cpe:/o:sgi:irix:6.5.2f cpe:/o:sgi:irix:6.5.2m cpe:/o:sgi:irix:6.5.3 cpe:/o:sgi:irix:6.5.3f cpe:/o:sgi:irix:6.5.3m cpe:/o:sgi:irix:6.5.4 cpe:/o:sgi:irix:6.5.4f cpe:/o:sgi:irix:6.5.4m cpe:/o:sgi:irix:6.5.5 cpe:/o:sgi:irix:6.5.5f cpe:/o:sgi:irix:6.5.5m cpe:/o:sgi:irix:6.5.6 cpe:/o:sgi:irix:6.5.6f cpe:/o:sgi:irix:6.5.6m cpe:/o:sgi:irix:6.5.7 cpe:/o:sgi:irix:6.5.7f cpe:/o:sgi:irix:6.5.7m cpe:/o:sgi:irix:6.5.8 cpe:/o:sgi:irix:6.5.8f cpe:/o:sgi:irix:6.5.8m cpe:/o:sgi:irix:6.5.9 cpe:/o:sgi:irix:6.5.9f cpe:/o:sgi:irix:6.5.9m cpe:/o:sgi:irix:6.5.10 cpe:/o:sgi:irix:6.5.10f cpe:/o:sgi:irix:6.5.10m cpe:/o:sgi:irix:6.5.11 cpe:/o:sgi:irix:6.5.11f cpe:/o:sgi:irix:6.5.11m cpe:/o:sgi:irix:6.5.12 cpe:/o:sgi:irix:6.5.12f cpe:/o:sgi:irix:6.5.12m cpe:/o:sgi:irix:6.5.13 cpe:/o:sgi:irix:6.5.13f cpe:/o:sgi:irix:6.5.13m cpe:/o:sgi:irix:6.5.14 cpe:/o:sgi:irix:6.5.14f cpe:/o:sgi:irix:6.5.14m cpe:/o:sgi:irix:6.5.15 cpe:/o:sgi:irix:6.5.15f cpe:/o:sgi:irix:6.5.15m cpe:/o:sgi:irix:6.5.16 cpe:/o:sgi:irix:6.5.16f cpe:/o:sgi:irix:6.5.16m cpe:/o:sgi:irix:6.5.17 cpe:/o:sgi:irix:6.5.17f cpe:/o:sgi:irix:6.5.17m cpe:/o:sgi:irix:6.5.18 cpe:/o:sgi:irix:6.5.18f cpe:/o:sgi:irix:6.5.18m cpe:/o:sgi:irix:6.5.19 cpe:/o:sgi:irix:6.5.19f cpe:/o:sgi:irix:6.5.19m cpe:/o:sgi:irix:6.5.20 cpe:/o:sgi:irix:6.5.20f cpe:/o:sgi:irix:6.5.20m cpe:/o:sgi:irix:6.5.21 cpe:/o:sgi:irix:6.5.21f cpe:/o:sgi:irix:6.5.21m cpe:/o:sgi:irix:6.5.22 cpe:/o:sgi:irix:6.5_20

CVE-2005-0465

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:22.460-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-07T15:06:00.000-04:00

SGI 20050402-01-P SECTRACK 1013662 IDEFENSE 20050407 SGI IRIX gr_osview File Overwrite Vulnerability gr_osview in SGI IRIX does not drop privileges before opening files, which allows local users to overwrite arbitrary files via the -s option.

cpe:/a:putty:putty:0.56

CVE-2005-0467

2005-02-21T00:00:00.000-05:00

2017-07-10T21:32:18.407-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-sftp-readdir.html CONFIRM http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-sftp-string.html GENTOO GLSA-200502-28 IDEFENSE 20050221 Multiple PuTTY SFTP Client Packet Parsing Integer Overflow Vulnerabilities CONFIRM http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002414 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002416 XF putty-sftppktgetstring-bo(19403) Multiple integer overflows in the (1) sftp_pkt_getstring and (2) fxp_readdir_recv functions in the PSFTP and PSCP clients for PuTTY 0.56, and possibly earlier versions, allow remote malicious web sites to execute arbitrary code via SFTP responses that corrupt the heap after insufficient memory has been allocated.

cpe:/a:ncsa:telnet:c

CVE-2005-0468

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:56.217-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

FREEBSD FreeBSD-SA-05:01.telnet SGI 20050405-01-P CONECTIVA CLA-2005:962 SUNALERT 101665 SUNALERT 101671 SUNALERT 57755 SUNALERT 57761 CONFIRM http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-001-telnet.txt DEBIAN DSA-731 DEBIAN DSA-703 IDEFENSE 20050328 Multiple Telnet Client env_opt_add() Buffer Overflow Vulnerability CERT-VN VU#341908 MANDRAKE MDKSA-2005:061 REDHAT RHSA-2005:327 REDHAT RHSA-2005:330 BID 12919 UBUNTU USN-224-1 Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated.

cpe:/a:ncsa:telnet

CVE-2005-0469

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:56.293-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

FREEBSD FreeBSD-SA-05:01.telnet SGI 20050405-01-P SUNALERT 101665 SUNALERT 101671 SUNALERT 57755 SUNALERT 57761 CONFIRM http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-001-telnet.txt DEBIAN DSA-731 DEBIAN DSA-697 DEBIAN DSA-699 DEBIAN DSA-703 GENTOO GLSA-200503-36 IDEFENSE 20050328 Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability CERT-VN VU#291924 MANDRAKE MDKSA-2005:061 REDHAT RHSA-2005:327 REDHAT RHSA-2005:330 BID 12918 UBUNTU USN-224-1 Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character (SLC) commands.

cpe:/a:wpa_supplicant:wpa_supplicant:0.2 cpe:/a:wpa_supplicant:wpa_supplicant:0.2.1 cpe:/a:wpa_supplicant:wpa_supplicant:0.2.2 cpe:/a:wpa_supplicant:wpa_supplicant:0.2.3 cpe:/a:wpa_supplicant:wpa_supplicant:0.2.4 cpe:/a:wpa_supplicant:wpa_supplicant:0.2.5 cpe:/a:wpa_supplicant:wpa_supplicant:0.2.6 cpe:/o:gentoo:linux cpe:/o:suse:suse_linux:9.2 cpe:/o:suse:suse_linux:9.2::x86_64

CVE-2005-0470

2005-03-14T00:00:00.000-05:00

2017-07-10T21:32:18.453-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MLIST [HostAP] 20050213 wpa_supplicant - new stable releases v0.3.8 and v0.2.7 SECTRACK 1013226 GENTOO GLSA-200502-22 XF wpasupplicant-bo(19357) Buffer overflow in wpa_supplicant before 0.2.7 allows remote attackers to cause a denial of service (segmentation fault) via invalid EAPOL-Key packet data.

cpe:/a:sun:jdk:1.1.0 cpe:/a:sun:jdk:1.2.0 cpe:/a:sun:jdk:1.3.0 cpe:/a:sun:jdk:1.4.0 cpe:/a:sun:jdk:1.5.0 cpe:/a:sun:jre:1.1 cpe:/a:sun:jre:1.2 cpe:/a:sun:jre:1.3.0 cpe:/a:sun:jre:1.4 cpe:/a:sun:jre:1.5.0

CVE-2005-0471

2005-03-14T00:00:00.000-05:00

2017-07-10T21:32:18.517-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CERT-VN VU#544392 XF sun-java-create-files(19285) Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system that uses 8.3 style short names, which allows remote attackers to write arbitrary files to known locations and facilitates the exploitation of vulnerabilities in applications that rely on unpredictable file names.

cpe:/a:rob_flynn:gaim:1.0 cpe:/a:rob_flynn:gaim:1.0.1 cpe:/a:rob_flynn:gaim:1.1.1 cpe:/a:rob_flynn:gaim:1.1.2 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.1 cpe:/o:mandrakesoft:mandrake_linux:10.1::x86_64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0::x86_64 cpe:/o:redhat:enterprise_linux:4.0::advanced_server cpe:/o:redhat:enterprise_linux:4.0::enterprise_server cpe:/o:redhat:enterprise_linux:4.0::workstation cpe:/o:redhat:enterprise_linux_desktop:4.0

CVE-2005-0472

2005-03-14T00:00:00.000-05:00

2018-10-19T11:31:11.763-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2005:933 CONFIRM http://gaim.sourceforge.net/security/index.php?id=10 BUGTRAQ 20050225 [USN-85-1] Gaim vulnerabilities DEBIAN DSA-716 GENTOO GLSA-200503-03 CERT-VN VU#839280 MANDRAKE MDKSA-2005:049 SUSE SUSE-SA:2005:036 REDHAT RHSA-2005:215 REDHAT RHSA-2005:432 FEDORA FLSA:158543 BID 12589 XF gaim-snac-dos(19380) Gaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via malformed SNAC packets from (1) AIM or (2) ICQ.

CVE-2005-0473

2005-03-14T00:00:00.000-05:00

2018-10-19T11:31:12.933-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2005:933 CONFIRM http://gaim.sourceforge.net/security/index.php?id=11 BUGTRAQ 20050225 [USN-85-1] Gaim vulnerabilities GENTOO GLSA-200503-03 CERT-VN VU#523888 MANDRAKE MDKSA-2005:049 SUSE SUSE-SA:2005:036 REDHAT RHSA-2005:215 FEDORA FLSA:158543 BID 12589 XF gaim-html-dos(19381) The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0208.

cpe:/a:webcalendar:webcalendar:0.9.45

CVE-2005-0474

2005-03-30T00:00:00.000-05:00

2017-07-10T21:32:18.703-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050217 [ SCL-2005.001 ] - WebCalendar: SQL Injection from encoded cookie SECTRACK 1013231 MISC http://www.scovettalabs.com/advisory/SCL-2005.001.txt XF webcalendar-sql-injection(19369) SQL injection vulnerability in the user_valid_crypt function in user.php in WebCalendar 0.9.45 allows remote attackers to execute arbitrary SQL commands via an encoded webcalendar_session cookie.

cpe:/a:php_arena:pafaq:beta4

CVE-2005-0475

2005-03-30T00:00:00.000-05:00

2017-07-10T21:32:18.750-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050217 [PersianHacker.NET 200505-07] paFAQ Beta4 Sql Injection XF pafaq-sql-injection(19371) SQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers to execute arbitrary SQL code via the (1) offset, (2) limit, (3) order, or (4) orderby parameter to question.php, (5) offset parameter to answer.php, (6) search_item parameter to search.php, (7) cat_id, (8) cid, or (9) id parameter to comment.php.

cpe:/a:hpm_guestbook.cgi:hpm_guestbook.cgi

CVE-2005-0476

2005-03-30T00:00:00.000-05:00

2017-07-10T21:32:18.797-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050217 hpm_guestbook.cgi JavaScript-Injection XF hpm-guestbook-xss(19372) Cross-site scripting (XSS) vulnerability in hpm_guestbook.cgi allows remote attackers to inject arbitrary web script or HTML by posting a message.

cpe:/a:invision_power_services:invision_power_board:1.0 cpe:/a:invision_power_services:invision_power_board:1.0.1 cpe:/a:invision_power_services:invision_power_board:1.1.1 cpe:/a:invision_power_services:invision_power_board:1.1.2 cpe:/a:invision_power_services:invision_power_board:1.2 cpe:/a:invision_power_services:invision_power_board:1.3 cpe:/a:invision_power_services:invision_power_board:1.3.1_final cpe:/a:invision_power_services:invision_power_board:1.3_final

CVE-2005-0477

2005-03-30T00:00:00.000-05:00

2017-07-10T21:32:18.907-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050217 Invision Power Boards 1.3.1 FINAL XSS Exploit XF invision-power-board-sml-xss(19399) Cross-site scripting (XSS) vulnerability in the SML code for Invision Power Board 1.3.1 FINAL allows remote attackers to inject arbitrary web script via (1) a signature file or (2) a message post containing an IMG tag within a COLOR tag whose style is set to background:url.

cpe:/a:trackercam:trackercam:5.12

CVE-2005-0478

2005-03-30T00:00:00.000-05:00

2017-07-10T21:32:18.953-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050218 Multiple vulnerabilities in TrackerCam 5.12 BID 12592 XF trackercam-useragent-bo(19409) XF trackercam-php-bo(19411) Multiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) an HTTP request with a long User-Agent header or (2) a long argument to an arbitrary PHP script.

cpe:/a:trackercam:trackercam:5.12

CVE-2005-0479

2005-03-30T00:00:00.000-05:00

2017-07-10T21:32:19.000-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050218 Multiple vulnerabilities in TrackerCam 5.12 BID 12592 XF trackercam-fn-directory-traversal(19414) Directory traversal vulnerability in ComGetLogFile.php3 for TrackerCam 5.12 and earlier allows remote attackers to read arbitrary files via ".." sequences and (1) "/" slash), (2) "\" (backslash), or (3) hex-encoded characters in the fn parameter.

cpe:/a:trackercam:trackercam:5.12

CVE-2005-0480

2005-03-30T00:00:00.000-05:00

2017-07-10T21:32:19.063-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050218 Multiple vulnerabilities in TrackerCam 5.12 BID 12592 XF trackercam-xss(19416) Cross-site scripting (XSS) vulnerability in TrackerCam 5.12 and earlier allows remote attackers to inject arbitrary HTML or web script via the login request, which is recorded in a log file but not properly handled when the administrator views the log file.

cpe:/a:trackercam:trackercam:5.12

CVE-2005-0481

2005-03-30T00:00:00.000-05:00

2017-07-10T21:32:19.110-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050218 Multiple vulnerabilities in TrackerCam 5.12 BID 12592 XF trackercam-fn-path-disclosure(19415) TrackerCam 5.12 and earlier allows remote attackers to read log files via the fn parameter in a direct request to the ComGetLogFile.php3 script.

cpe:/a:trackercam:trackercam:5.12

CVE-2005-0482

2005-03-30T00:00:00.000-05:00

2017-07-10T21:32:19.170-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050218 Multiple vulnerabilities in TrackerCam 5.12 BID 12592 XF trackercam-contentlength-dos(19417) TrackerCam 5.12 and earlier allows remote attackers to cause a denial of service (crash) via (1) a large number of connections with a negative Content-Length header, possibly triggering an integer signedness error, or (2) a large amount of data.

cpe:/a:glftpd:glftpd:1.26 cpe:/a:glftpd:glftpd:1.27 cpe:/a:glftpd:glftpd:1.28 cpe:/a:glftpd:glftpd:1.29.1 cpe:/a:glftpd:glftpd:1.31 cpe:/a:glftpd:glftpd:1.32 cpe:/a:glftpd:glftpd:2.0 cpe:/a:glftpd:glftpd:2.0_rc1 cpe:/a:glftpd:glftpd:2.0_rc2 cpe:/a:glftpd:glftpd:2.0_rc3 cpe:/a:glftpd:glftpd:2.0_rc4 cpe:/a:glftpd:glftpd:2.0_rc5 cpe:/a:glftpd:glftpd:2.0_rc6 cpe:/a:glftpd:glftpd:2.0_rc7

CVE-2005-0483

2005-03-30T00:00:00.000-05:00

2017-07-10T21:32:19.217-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050218 Multiple vulnerabilities in Glftpd v1.26 - v2.00 default zip based plug-ins BID 12586 XF glftpd-sitenfosh-directory-traversal(19401) Multiple directory traversal vulnerabilities in sitenfo.sh, sitezipchk.sh, and siteziplist.sh in Glftpd 1.26 to 2.00 allow remote authenticated users to (1) determine the existence of arbitrary files, (2) list files in restricted directories, or (3) read arbitrary files from within ZIP or gzip files, via .. (dot dot) sequences and globbing ("*") characters in a SITE NFO command.

cpe:/a:gproftpd:gproftpd:8.1.8

CVE-2005-0484

2005-03-30T00:00:00.000-05:00

2008-09-05T16:46:25.790-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

ALLOWS_OTHER_ACCESS

CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=81894 GENTOO GLSA-200502-26 Format string vulnerability in gprostats for GProFTPD before 8.1.9 may allow remote attackers to execute arbitrary code via an FTP transfer with a crafted filename that causes format string specifiers to be inserted into the ProFTPD transfer log.

cpe:/a:phparena:panews:2.0b4

CVE-2005-0485

2005-03-30T00:00:00.000-05:00

2017-07-10T21:32:19.280-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050216 [PersianHacker.NET 200505-06] paNews v2.0b4 XSS Vulnerability BID 12576 XF panews-commentphp-xss(19359) Cross-site scripting (XSS) vulnerability in comment.php for paNews 2.0b4 for PHP Arena allows remote attackers to inject arbitrary HTML and web script via the showpost parameter.

cpe:/a:tarantella:secure_global_desktop:enterprise_3.42 cpe:/a:tarantella:secure_global_desktop:enterprise_4.0 cpe:/a:tarantella:tarantella_enterprise:3.30 cpe:/a:tarantella:tarantella_enterprise:3.40

CVE-2005-0486

2005-03-30T00:00:00.000-05:00

2017-07-10T21:32:19.327-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.tarantella.com/security/bulletin-11.html XF tarantella-enterprise-obtain-information(19407) Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive information during authentication, which allows remote attackers to identify valid usernames and the authentication scheme.

cpe:/a:kayako:esupport:2.3.1

CVE-2005-0487

2005-03-30T00:00:00.000-05:00

2017-07-10T21:32:19.390-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20050215 Kayako eSupport v2.3.1 Support Tracker XSS BID 12563 XF kayako-index-xss(18571) Cross-site scripting (XSS) vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows remote attackers to inject arbitrary HTML and web script via the nav parameter.

cpe:/a:microsoft:telnet_client:5.1.2600.2180 cpe:/a:mit:kerberos:5-1.3.4 cpe:/o:sun:sunos:5.9

CVE-2005-0488

2005-06-14T00:00:00.000-04:00

2018-10-30T12:25:12.467-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov IDEFENSE 20050614 Multiple Vendor Telnet Client Information Disclosure Vulnerability APPLE APPLE-SA-2006-08-01 SECTRACK 1014203 SUNALERT 101665 SUNALERT 101671 SUNALERT 57755 SUNALERT 57761 CERT-VN VU#800829 SUSE SUSE-SR:2005:016 REDHAT RHSA-2005:504 REDHAT RHSA-2005:562 BID 13940 BID 19289 CERT TA06-214A VUPEN ADV-2006-3101 Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.

CVE-2005-0489

2005-12-31T00:00:00.000-05:00

2008-09-05T16:46:26.617-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2006-05-31T15:10:00.000-04:00

CONFIRM http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 BID 18173 The /proc handling (proc/base.c) Linux kernel 2.4 before 2.4.17 allows local users to cause a denial of service via unknown vectors that cause an invalid access of free memory.

cpe:/a:curl:curl:7.12.1 cpe:/a:libcurl:libcurl:7.12.1

CVE-2005-0490

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:56.560-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONECTIVA CLA-2005:940 FULLDISC 20050228 [USN-86-1] cURL vulnerability GENTOO GLSA-200503-20 IDEFENSE 20050221 Multiple Unix/Linux Vendor cURL/libcURL NTLM Authentication Buffer Overflow Vulnerability IDEFENSE 20050221 Multiple Unix/Linux Vendor cURL/libcURL Kerberos Authentication Buffer Overflow Vulnerability MANDRAKE MDKSA-2005:048 SUSE SUSE-SA:2005:011 REDHAT RHSA-2005:340 BID 12615 BID 12616 XF curl-kerberos-bo(19423) Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by (1) the Curl_input_ntlm function in http_ntlm.c during NTLM authentication or (2) the Curl_krb_kauth and krb4_auth functions in krb4.c during Kerberos authentication.

cpe:/a:knox_software:arkeia_server_backup:5.3.0 cpe:/a:knox_software:arkeia_server_backup:5.3.0_rc1 cpe:/a:knox_software:arkeia_server_backup:5.3.0_rc2 cpe:/a:knox_software:arkeia_server_backup:5.3.0_rc3 cpe:/a:knox_software:arkeia_server_backup:5.3.0_rc4 cpe:/a:knox_software:arkeia_server_backup:5.3.1 cpe:/a:knox_software:arkeia_server_backup:5.3.2 cpe:/a:knox_software:arkeia_server_backup:5.3.3 cpe:/a:knox_software:arkeia_server_backup:5.3.4

CVE-2005-0491

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:19.500-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20050218 Knox Arkeia remote root/system exploit BID 12594 XF arkeia-backup-client-bo(19398) Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a long type 77 request.

cpe:/a:adobe:acrobat_reader:6.0.3 cpe:/a:adobe:acrobat_reader:7.0

CVE-2005-0492

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:19.547-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050218 Adobe Reader invalid root page node Count value DOS CONFIRM http://www.adobe.com/support/techdocs/331468.html VUPEN ADV-2005-0310 XF adobe-root-page-node-dos(19946) Adobe Acrobat Reader 6.0.3 and 7.0.0 allows remote attackers to cause a denial of service (application crash) via a PDF file that contains a negative Count value in the root page node.

cpe:/a:seth_m._knorr:biz_mail_form:2.1

CVE-2005-0493

2005-05-02T00:00:00.000-04:00

2016-10-17T23:12:02.853-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050218 BizMail 2.1 Spam Exploit CRLF injection vulnerability in bizmail.cgi in Biz Mail Form before 2.2 allows remote attackers to bypass the email check and send spam e-mail via CRLF sequences and forged mail headers in the email parameter.

cpe:/h:thomson:thomson_cable_modem:tcw690

CVE-2005-0494

2005-02-21T00:00:00.000-05:00

2017-07-10T21:32:19.593-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050219 Thomson TCW690 POST Password Validation Vulnerability XF thomson-tcw690-gain-access(19387) The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a does not properly validate the password before performing changes, which allows remote attackers on the LAN to gain access via a direct POST request.

cpe:/a:zeroboard:zeroboard:4.1_pl2 cpe:/a:zeroboard:zeroboard:4.1_pl3 cpe:/a:zeroboard:zeroboard:4.1_pl4 cpe:/a:zeroboard:zeroboard:4.1_pl5 cpe:/a:zeroboard:zeroboard:4.1_pl6

CVE-2005-0495

2005-02-19T00:00:00.000-05:00

2017-07-10T21:32:19.640-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050219 Multiples vulnerability in ZeroBoard, SECTRACK 1013243 XF zeroboard-xss(19420) Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the (1) sn1, (2) year, or (3) page parameter to zboard.php or (4) filename to view_image.php.

cpe:/a:knox_software:arkeia:4.0 cpe:/a:knox_software:arkeia:4.1 cpe:/a:knox_software:arkeia:4.2 cpe:/a:knox_software:arkeia:5.2 cpe:/a:knox_software:arkeia:5.3

CVE-2005-0496

2005-02-21T00:00:00.000-05:00

2017-07-10T21:32:19.687-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050220 Arkeia Network Backup Client Remote Access MISC http://metasploit.com/research/arkeia_agent/ SECTRACK 1013256 XF arkeia-backup-client-gain-access(20667) Arkeia Network Backup Client 5.x contains hard-coded credentials that effectively serve as a back door, which allows remote attackers to access the file system and possibly execute arbitrary commands.

cpe:/a:adp:elite_system_max_9000

CVE-2005-0497

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:19.733-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20050219 ADP Elite System Max 9000 Series Login Vulnerability XF adp-elite-gain-privileges(20622) ADP Elite System Max 9000 allows remote authenticated users to gain privileges by uploading a .profile that sets the ADPROOT environment variable to the root directory.

cpe:/h:gigafast_ethernet:gigafast_router:ee400-r cpe:/h:gigafast_ethernet:gigafast_router:ee410-r

CVE-2005-0498

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:19.797-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050220 Gigafast/CompUSA router (model EE400-R) vulnerabilities XF gigafast-backupcfg-plaintext-password(19422) Gigafast router (aka CompUSA router) allows remote attackers to gain sensitive information and bypass the login page via a direct request to backup.cfg, which reveals the administrator password in plaintext.

cpe:/h:gigafast_ethernet:gigafast_router:ee400-r cpe:/h:gigafast_ethernet:gigafast_router:ee410-r

CVE-2005-0499

2005-02-20T00:00:00.000-05:00

2017-07-10T21:32:19.843-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050220 Gigafast/CompUSA router (model EE400-R) vulnerabilities XF gigafast-dns-queries-dos(19426) Gigafast router (aka CompUSA router) with the DNS proxy option enabled allows remote attackers to cause a denial of service via malformed DNS queries.

cpe:/a:microsoft:ie:6.0 cpe:/a:microsoft:ie:6.0:sp1 cpe:/a:microsoft:ie:6.0:sp2

CVE-2005-0500

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:19.890-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20050221 WindowsXPSP2 script-initiated popup window BID 12602 XF ie-title-bar-spoofing(19452) Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to spoof the domain name of a URL in a titlebar for a script-initiated popup window, which could facilitate phishing attacks.

cpe:/a:digipen_institute_of_technology:bontago:1.1

CVE-2005-0501

2005-05-02T00:00:00.000-04:00

2017-07-11T21:29:01.440-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MISC http://aluigi.altervista.org/adv/bontagobof-adv.txt BID 12603 XF bontago-nickname-bo(19406) Buffer overflow in Bontago 1.1 and earlier allows remote attackers to execute arbitrary code via a long nickname.

cpe:/a:xinkaa_web_station:xinkaa_web_station:1.0.3

CVE-2005-0502

2005-02-18T00:00:00.000-05:00

2017-07-10T21:32:19.983-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/xinkaa-adv.txt BID 12606 VUPEN ADV-2005-0189 XF xinkaa-web-directory-traversal(19404) Directory traversal vulnerability in Xinkaa 1.0.3 and earlier allows remote attackers to read arbitrary files via (1) ../ and (2) ..\ characters in an HTTP request.

cpe:/a:uim:uim:0.4.5 cpe:/o:mandrakesoft:mandrake_linux:10.1 cpe:/o:mandrakesoft:mandrake_linux:10.1::x86_64

CVE-2005-0503

2005-02-21T00:00:00.000-05:00

2008-09-10T15:36:04.197-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-07T16:43:00.000-04:00

ALLOWS_USER_ACCESS

MLIST [uim] 20050220 uim 0.4.5.1 released MANDRAKE MDKSA-2005:046 BID 12604 uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges.

cpe:/o:linux:linux_kernel:2.2.0 cpe:/o:linux:linux_kernel:2.2.1 cpe:/o:linux:linux_kernel:2.2.2 cpe:/o:linux:linux_kernel:2.2.3 cpe:/o:linux:linux_kernel:2.2.4 cpe:/o:linux:linux_kernel:2.2.5 cpe:/o:linux:linux_kernel:2.2.6 cpe:/o:linux:linux_kernel:2.2.7 cpe:/o:linux:linux_kernel:2.2.8 cpe:/o:linux:linux_kernel:2.2.9 cpe:/o:linux:linux_kernel:2.2.10 cpe:/o:linux:linux_kernel:2.2.11 cpe:/o:linux:linux_kernel:2.2.12 cpe:/o:linux:linux_kernel:2.2.13 cpe:/o:linux:linux_kernel:2.2.14 cpe:/o:linux:linux_kernel:2.2.15 cpe:/o:linux:linux_kernel:2.2.15:pre16 cpe:/o:linux:linux_kernel:2.2.15_pre20 cpe:/o:linux:linux_kernel:2.2.16 cpe:/o:linux:linux_kernel:2.2.16:pre6 cpe:/o:linux:linux_kernel:2.2.17 cpe:/o:linux:linux_kernel:2.2.18 cpe:/o:linux:linux_kernel:2.2.19 cpe:/o:linux:linux_kernel:2.2.20 cpe:/o:linux:linux_kernel:2.2.21 cpe:/o:linux:linux_kernel:2.2.22 cpe:/o:linux:linux_kernel:2.2.23 cpe:/o:linux:linux_kernel:2.2.24 cpe:/o:linux:linux_kernel:2.2.25 cpe:/o:linux:linux_kernel:2.3.0 cpe:/o:linux:linux_kernel:2.3.99 cpe:/o:linux:linux_kernel:2.3.99:pre1 cpe:/o:linux:linux_kernel:2.3.99:pre2 cpe:/o:linux:linux_kernel:2.3.99:pre3 cpe:/o:linux:linux_kernel:2.3.99:pre4 cpe:/o:linux:linux_kernel:2.3.99:pre5 cpe:/o:linux:linux_kernel:2.3.99:pre6 cpe:/o:linux:linux_kernel:2.3.99:pre7 cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.0:test1 cpe:/o:linux:linux_kernel:2.4.0:test10 cpe:/o:linux:linux_kernel:2.4.0:test11 cpe:/o:linux:linux_kernel:2.4.0:test12 cpe:/o:linux:linux_kernel:2.4.0:test2 cpe:/o:linux:linux_kernel:2.4.0:test3 cpe:/o:linux:linux_kernel:2.4.0:test4 cpe:/o:linux:linux_kernel:2.4.0:test5 cpe:/o:linux:linux_kernel:2.4.0:test6 cpe:/o:linux:linux_kernel:2.4.0:test7 cpe:/o:linux:linux_kernel:2.4.0:test8 cpe:/o:linux:linux_kernel:2.4.0:test9 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.18::x86 cpe:/o:linux:linux_kernel:2.4.18:pre1 cpe:/o:linux:linux_kernel:2.4.18:pre2 cpe:/o:linux:linux_kernel:2.4.18:pre3 cpe:/o:linux:linux_kernel:2.4.18:pre4 cpe:/o:linux:linux_kernel:2.4.18:pre5 cpe:/o:linux:linux_kernel:2.4.18:pre6 cpe:/o:linux:linux_kernel:2.4.18:pre7 cpe:/o:linux:linux_kernel:2.4.18:pre8 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.19:pre1 cpe:/o:linux:linux_kernel:2.4.19:pre2 cpe:/o:linux:linux_kernel:2.4.19:pre3 cpe:/o:linux:linux_kernel:2.4.19:pre4 cpe:/o:linux:linux_kernel:2.4.19:pre5 cpe:/o:linux:linux_kernel:2.4.19:pre6 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.21:pre1 cpe:/o:linux:linux_kernel:2.4.21:pre4 cpe:/o:linux:linux_kernel:2.4.21:pre7 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.23:pre9 cpe:/o:linux:linux_kernel:2.4.23_ow2 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.24_ow1 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.4.27 cpe:/o:linux:linux_kernel:2.4.27:pre1 cpe:/o:linux:linux_kernel:2.4.27:pre2 cpe:/o:linux:linux_kernel:2.4.27:pre3 cpe:/o:linux:linux_kernel:2.4.27:pre4 cpe:/o:linux:linux_kernel:2.4.27:pre5 cpe:/o:linux:linux_kernel:2.4.28 cpe:/o:linux:linux_kernel:2.4.29:rc2 cpe:/o:linux:linux_kernel:2.5.0 cpe:/o:linux:linux_kernel:2.5.1 cpe:/o:linux:linux_kernel:2.5.2 cpe:/o:linux:linux_kernel:2.5.3 cpe:/o:linux:linux_kernel:2.5.4 cpe:/o:linux:linux_kernel:2.5.5 cpe:/o:linux:linux_kernel:2.5.6 cpe:/o:linux:linux_kernel:2.5.7 cpe:/o:linux:linux_kernel:2.5.8 cpe:/o:linux:linux_kernel:2.5.9 cpe:/o:linux:linux_kernel:2.5.10 cpe:/o:linux:linux_kernel:2.5.11 cpe:/o:linux:linux_kernel:2.5.12 cpe:/o:linux:linux_kernel:2.5.13 cpe:/o:linux:linux_kernel:2.5.14 cpe:/o:linux:linux_kernel:2.5.15 cpe:/o:linux:linux_kernel:2.5.16 cpe:/o:linux:linux_kernel:2.5.17 cpe:/o:linux:linux_kernel:2.5.18 cpe:/o:linux:linux_kernel:2.5.19 cpe:/o:linux:linux_kernel:2.5.20 cpe:/o:linux:linux_kernel:2.5.21 cpe:/o:linux:linux_kernel:2.5.22 cpe:/o:linux:linux_kernel:2.5.23 cpe:/o:linux:linux_kernel:2.5.24 cpe:/o:linux:linux_kernel:2.5.25 cpe:/o:linux:linux_kernel:2.5.26 cpe:/o:linux:linux_kernel:2.5.27 cpe:/o:linux:linux_kernel:2.5.28 cpe:/o:linux:linux_kernel:2.5.29 cpe:/o:linux:linux_kernel:2.5.30 cpe:/o:linux:linux_kernel:2.5.31 cpe:/o:linux:linux_kernel:2.5.32 cpe:/o:linux:linux_kernel:2.5.33 cpe:/o:linux:linux_kernel:2.5.34 cpe:/o:linux:linux_kernel:2.5.35 cpe:/o:linux:linux_kernel:2.5.36 cpe:/o:linux:linux_kernel:2.5.37 cpe:/o:linux:linux_kernel:2.5.38 cpe:/o:linux:linux_kernel:2.5.39 cpe:/o:linux:linux_kernel:2.5.40 cpe:/o:linux:linux_kernel:2.5.41 cpe:/o:linux:linux_kernel:2.5.42 cpe:/o:linux:linux_kernel:2.5.43 cpe:/o:linux:linux_kernel:2.5.44 cpe:/o:linux:linux_kernel:2.5.45 cpe:/o:linux:linux_kernel:2.5.46 cpe:/o:linux:linux_kernel:2.5.47 cpe:/o:linux:linux_kernel:2.5.48 cpe:/o:linux:linux_kernel:2.5.49 cpe:/o:linux:linux_kernel:2.5.50 cpe:/o:linux:linux_kernel:2.5.51 cpe:/o:linux:linux_kernel:2.5.52 cpe:/o:linux:linux_kernel:2.5.53 cpe:/o:linux:linux_kernel:2.5.54 cpe:/o:linux:linux_kernel:2.5.55 cpe:/o:linux:linux_kernel:2.5.56 cpe:/o:linux:linux_kernel:2.5.57 cpe:/o:linux:linux_kernel:2.5.58 cpe:/o:linux:linux_kernel:2.5.59 cpe:/o:linux:linux_kernel:2.5.60 cpe:/o:linux:linux_kernel:2.5.61 cpe:/o:linux:linux_kernel:2.5.62 cpe:/o:linux:linux_kernel:2.5.63 cpe:/o:linux:linux_kernel:2.5.64 cpe:/o:linux:linux_kernel:2.5.65 cpe:/o:linux:linux_kernel:2.5.66 cpe:/o:linux:linux_kernel:2.5.67 cpe:/o:linux:linux_kernel:2.5.68 cpe:/o:linux:linux_kernel:2.5.69 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.6:rc1 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.7:rc1 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8:rc1 cpe:/o:linux:linux_kernel:2.6.8:rc2 cpe:/o:linux:linux_kernel:2.6.8:rc3 cpe:/o:linux:linux_kernel:2.6.9:2.6.20 cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.10:rc2 cpe:/o:linux:linux_kernel:2.6.21:rc7 cpe:/o:linux:linux_kernel:2.6_test9_cvs

CVE-2005-0504

2005-03-14T00:00:00.000-05:00

2017-10-10T21:29:56.653-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 FULLDISC 20050107 grsecurity 2.1.0 release / 5 Linux kernel advisories SECTRACK 1013273 DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 REDHAT RHSA-2005:529 REDHAT RHSA-2005:551 REDHAT RHSA-2005:663 REDHAT RHSA-2008:0237 BID 12195 UBUNTU USN-508-1 VUPEN ADV-2005-1878 Buffer overflow in the MoxaDriverIoctl function for the moxa serial driver (moxa.c) in Linux 2.2.x, 2.4.x, and 2.6.x before 2.6.22 allows local users to execute arbitrary code via a certain modified length value.

cpe:/a:stackworks_enterprises:information_resource_manager:1.4.3 cpe:/a:stackworks_enterprises:information_resource_manager:1.5.0 cpe:/a:stackworks_enterprises:information_resource_manager:1.5.1 cpe:/a:stackworks_enterprises:information_resource_manager:1.5.1.4

CVE-2005-0505

2005-03-14T00:00:00.000-05:00

2017-07-18T21:29:01.190-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://sourceforge.net/project/shownotes.php?release_id=306629 XF irm-ldap-security-bypass(19419) Unknown vulnerability in Information Resource Manager (IRM) before 1.5.2.1 allows remote attackers to have "potentially serious" impact, related to LDAP logins.

cpe:/a:avaya:ip_office_phone_manager cpe:/a:avaya:ip_soft_phone

CVE-2005-0506

2005-03-14T00:00:00.000-05:00

2016-10-17T23:12:12.543-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050222 Avaya IP Office Phone Manager - Sensitive Information Cleartext BUGTRAQ 20050222 Re: Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerability CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2005-041_Sensitive_Info_Leak.pdf The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a registry key, which allows local and possibly remote users to steal usernames and passwords and impersonate other users via keys such as Avaya\IP400\Generic.

cpe:/a:gd_software:sd_server:4.0.70

CVE-2005-0507

2005-03-14T00:00:00.000-05:00

2016-10-17T23:12:13.853-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050222 SD Server 4.0.70 Directory Traversal Bug FULLDISC 20050221 SD Server 4.0.70 Directory Traversal Bug CONFIRM http://www.gdsoftware.dk/ Directory traversal vulnerability in SD Server 4.0.70 and earlier allows remote attackers to read arbitrary files via .. sequences in an HTTP request.

CVE-2005-0508

2005-03-14T00:00:00.000-05:00

2008-09-10T15:36:05.087-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

ALLOWS_OTHER_ACCESS

BID 12619 CONFIRM http://xml.apache.org/batik/#SecurityWarning Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain features of the Rhino scripting engine due to a "script security issue."

cpe:/a:microsoft:.net_framework:1.0 cpe:/a:microsoft:.net_framework:1.0:sp1 cpe:/a:microsoft:.net_framework:1.0:sp2 cpe:/a:microsoft:.net_framework:1.1 cpe:/a:microsoft:.net_framework:1.1:sp1 cpe:/a:mono:mono:1.0.5

CVE-2005-0509

2005-03-14T00:00:00.000-05:00

2016-10-17T23:12:15.247-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://it-project.ru/andir/docs/aspxvuln/aspxvuln.en.xml BUGTRAQ 20050217 XSS vulnerabilty in ASP.Net [with details] Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (.Net) allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<".

cpe:/a:fallback-reboot:fallback-reboot

CVE-2005-0510

2005-03-14T00:00:00.000-05:00

2008-09-05T16:46:30.787-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

CONFIRM http://dcs.nac.uci.edu/~strombrg/fallback-reboot/ The daemon for fallback-reboot before 0.995 allows attackers to cause a denial of service (daemon exit), possibly related to verbose debug messages when the daemon is not on a tty.

cpe:/a:jelsoft:vbulletin:2.0 cpe:/a:jelsoft:vbulletin:2.0.1 cpe:/a:jelsoft:vbulletin:2.0.2 cpe:/a:jelsoft:vbulletin:2.0_beta_2 cpe:/a:jelsoft:vbulletin:2.0_beta_3 cpe:/a:jelsoft:vbulletin:2.2.0 cpe:/a:jelsoft:vbulletin:2.2.1 cpe:/a:jelsoft:vbulletin:2.2.2 cpe:/a:jelsoft:vbulletin:2.2.3 cpe:/a:jelsoft:vbulletin:2.2.4 cpe:/a:jelsoft:vbulletin:2.2.5 cpe:/a:jelsoft:vbulletin:2.2.6 cpe:/a:jelsoft:vbulletin:2.2.7 cpe:/a:jelsoft:vbulletin:2.2.8 cpe:/a:jelsoft:vbulletin:2.2.9_can cpe:/a:jelsoft:vbulletin:2.3.0 cpe:/a:jelsoft:vbulletin:2.3.3 cpe:/a:jelsoft:vbulletin:2.3.4 cpe:/a:jelsoft:vbulletin:3.0.0 cpe:/a:jelsoft:vbulletin:3.0.0_beta_2 cpe:/a:jelsoft:vbulletin:3.0.0_can4 cpe:/a:jelsoft:vbulletin:3.0.0_rc4 cpe:/a:jelsoft:vbulletin:3.0.1 cpe:/a:jelsoft:vbulletin:3.0.2 cpe:/a:jelsoft:vbulletin:3.0.3 cpe:/a:jelsoft:vbulletin:3.0.4 cpe:/a:jelsoft:vbulletin:3.0.5 cpe:/a:jelsoft:vbulletin:3.0.6 cpe:/a:jelsoft:vbulletin:3.0_beta_2

CVE-2005-0511

2005-02-21T00:00:00.000-05:00

2016-10-17T23:12:16.370-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050222 [SCAN Associates Security Advisory] vbulletin 3.0.6 and below php code injection BID 12622 CONFIRM http://www.vbulletin.com/forum/showthread.php?postid=819562 misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers to execute arbitrary PHP code via nested variables in the template parameter.

cpe:/a:mambo:mambo:4.5.2

CVE-2005-0512

2005-02-21T00:00:00.000-05:00

2008-09-05T16:46:31.163-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-07T17:13:00.000-04:00

ALLOWS_OTHER_ACCESS

CONFIRM http://mamboforge.net/frs/download.php/4043/Patch_4.5.2_to_4.5.2.1.zip PHP remote file inclusion vulnerability in Tar.php in Mambo 4.5.2 allows remote attackers to execute arbitrary PHP code by modifying the mosConfig_absolute_path parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2004-1693.

cpe:/a:pmachine:pmachine_pro:2.4

CVE-2005-0513

2005-02-19T00:00:00.000-05:00

2016-10-17T23:12:17.557-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20050219 pMachine Pro / pMachine Free Remote Code Execution BID 12597 BID 15473 PHP remote file inclusion vulnerability in mail_autocheck.php in the Email This Entry add-on for pMachine Pro 2.4, and possibly other versions including pMachine Free, allows remote attackers to execute arbitrary PHP code by directly requesting mail_autocheck.php and modifying the pm_path parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2003-1086.

cpe:/a:verity:verity_ultraseek:5.3.3

CVE-2005-0514

2005-02-22T00:00:00.000-05:00

2008-09-05T16:46:31.490-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-07T17:18:00.000-04:00

FULLDISC 20041223 Cross-Site Scripting - an industry-wide problem CERT-VN VU#716144 MISC http://www.mikx.de/index.php?p=6 Cross-site scripting (XSS) vulnerability in Verity Ultraseek before 5.3.3 allows remote attackers to inject arbitrary HTML and web script via search parameters.

cpe:/a:webroot_software:my_firewall_plus:5.0

CVE-2005-0515

2005-05-18T00:00:00.000-04:00

2008-09-05T16:46:31.647-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-07T17:19:00.000-04:00

BID 12842 CONFIRM http://www.webroot.com/services/mfp_advisory.php Smc.exe in My Firewall Plus 5.0 build 1117, and possibly other versions, does not drop privileges before launching the Log Viewer export functionality, which allows local users to corrupt arbitrary files by saving log files.

cpe:/a:twiki:imagegalleryplugin

CVE-2005-0516

2005-02-23T00:00:00.000-05:00

2016-10-17T23:12:18.747-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050223 Robustness patch for TWiki, vulnerability in ImageGalleryPlugin MISC http://static.enyo.de/fw/patches/twiki/imagegallery-robustness-20041128.diff MISC http://www.enyo.de/fw/security/notes/twiki-robustness.html The ImageGalleryPlugin (ImageGalleryPlugin.pm) in Twiki allows remote attackers to execute arbitrary commands via certain commands that generate thumbnails.

cpe:/a:peerftp_5:peerftp_5

CVE-2005-0517

2005-02-23T00:00:00.000-05:00

2008-09-05T16:46:31.960-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-07T17:37:00.000-04:00

SECTRACK 1013263 PeerFTP_5 stores sensitive information such as passwords in plaintext in the PeerFTP.ini files, which allows local users to gain privileges.

cpe:/a:exeem:exeem:0.21

CVE-2005-0518

2005-02-23T00:00:00.000-05:00

2008-09-05T16:46:32.117-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-07T17:43:00.000-04:00

SECTRACK 1013266 eXeem 0.21 stores sensitive information such as passwords in plaintext in the Exeem registry key, which allows local users to gain privileges via the proxy_user and proxy_password values.

cpe:/a:argosoft:ftp_server:1.4.1.1 cpe:/a:argosoft:ftp_server:1.4.1.2 cpe:/a:argosoft:ftp_server:1.4.1.3 cpe:/a:argosoft:ftp_server:1.4.1.4 cpe:/a:argosoft:ftp_server:1.4.1.5 cpe:/a:argosoft:ftp_server:1.4.1.6 cpe:/a:argosoft:ftp_server:1.4.1.7 cpe:/a:argosoft:ftp_server:1.4.1.8 cpe:/a:argosoft:ftp_server:1.4.1.9 cpe:/a:argosoft:ftp_server:1.4.2 cpe:/a:argosoft:ftp_server:1.4.2.1 cpe:/a:argosoft:ftp_server:1.4.2.2

CVE-2005-0519

2005-02-18T00:00:00.000-05:00

2017-07-10T21:32:20.123-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://www.argosoft.com/ftpserver/changelist.aspx BID 12487 XF argosoft-ink-file-upload(17939) ArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a ZIP file containing a shortcut (.LNK) file, using SITE UNZIP to extract the .LNK file onto the server, then accessing the file, a different vulnerability than CVE-2005-0520.

CVE-2005-0520

2005-02-23T00:00:00.000-05:00

2017-07-10T21:32:20.170-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://www.argosoft.com/ftpserver/changelist.aspx BID 12632 XF argosoft-site-copy-files(19442) ArGoSoft FTP Server before 1.4.2.8 allows remote attackers to read arbitrary files via shortcut (.LNK) files in the SITE COPY command, a different vulnerability than CVE-2005-0519.

CVE-2005-0521

2005-02-23T00:00:00.000-05:00

2008-09-05T16:46:32.680-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-07T18:01:00.000-04:00

SECTRACK 1013269 SendLink 1.5 stores sensitive information, possibly including passwords, in plaintext in the data.eat file, which allows local users to gain privileges.

cpe:/a:lionmax_software:chat_anywhere:2.72a

CVE-2005-0522

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:32.837-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-07T21:42:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1013270 Chat Anywhere 2.72a stores sensitive information such as passwords in plaintext in the .INI file for a chatroom, which allows local users to gain privileges.

cpe:/a:prozilla:prozilla_download_accelerator:1.3.0 cpe:/a:prozilla:prozilla_download_accelerator:1.3.1 cpe:/a:prozilla:prozilla_download_accelerator:1.3.2 cpe:/a:prozilla:prozilla_download_accelerator:1.3.3 cpe:/a:prozilla:prozilla_download_accelerator:1.3.4 cpe:/a:prozilla:prozilla_download_accelerator:1.3.5 cpe:/a:prozilla:prozilla_download_accelerator:1.3.5.1 cpe:/a:prozilla:prozilla_download_accelerator:1.3.5.2 cpe:/a:prozilla:prozilla_download_accelerator:1.3.6

CVE-2005-0523

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:32.990-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-07T21:47:00.000-04:00

ALLOWS_USER_ACCESS

DEBIAN DSA-719 MISC http://www.securiteam.com/exploits/5WP082KEUW.html BID 12635 Format string vulnerability in ProZilla 1.3.7.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the Location header.

cpe:/a:php:php:4.2.2 cpe:/a:php:php:4.3.9 cpe:/a:php:php:4.3.10 cpe:/a:php:php:5.0.3

CVE-2005-0524

2005-05-02T00:00:00.000-04:00

2018-05-02T21:29:28.583-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2005-06-08 SECTRACK 1013619 GENTOO GLSA-200504-15 MANDRAKE MDKSA-2005:072 REDHAT RHSA-2005:405 REDHAT RHSA-2005:406 IDEFENSE 20050331 PHP getimagesize() Multiple Denial of Service Vulnerabilities VUPEN ADV-2005-0305 XF php-phphandleiff-dos(19920) The php_handle_iff function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service (infinite loop) via a -8 size value.

cpe:/a:php:php:4.2.2 cpe:/a:php:php:4.3.9 cpe:/a:php:php:4.3.10 cpe:/a:php:php:5.0.3

CVE-2005-0525

2005-05-02T00:00:00.000-04:00

2018-05-02T21:29:28.770-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2005-06-08 SECTRACK 1013619 DEBIAN DSA-708 DEBIAN DSA-729 GENTOO GLSA-200504-15 MANDRAKE MDKSA-2005:072 REDHAT RHSA-2005:405 REDHAT RHSA-2005:406 IDEFENSE 20050331 PHP getimagesize() Multiple Denial of Service Vulnerabilities VUPEN ADV-2005-0305 The php_next_marker function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service (infinite loop) via a JPEG image with an invalid marker value, which causes a negative length value to be passed to php_stream_seek.

cpe:/a:pblang:pblang:4.65

CVE-2005-0526

2005-05-02T00:00:00.000-04:00

2016-10-17T23:12:20.167-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050222 Software PBLang 4.65 search.php XSS vulnerability BUGTRAQ 20050222 Software PBLang 4.65 pmpshow.php XSS vulnerability BUGTRAQ 20050222 Software PBLang 4.65 pm.php XSS vulnerability SECTRACK 1013277 Multiple cross-site scripting (XSS) vulnerabilities in PBLang 4.65 allow remote attackers to inject arbitrary web script or HTML via (1) the search string to search.php, (2) the subject of a PM, which is processed by pm.php, or (3) the body of a PM, which is processed by pmpshow.php.

cpe:/a:mozilla:firefox:1.0

CVE-2005-0527

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:56.733-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050225 Firescrolling [Firefox 1.0] SECTRACK 1013301 GENTOO GLSA-200503-10 GENTOO GLSA-200503-30 MISC http://www.mikx.de/?p=11 CONFIRM http://www.mozilla.org/security/announce/mfsa2005-27.html REDHAT RHSA-2005:176 REDHAT RHSA-2005:384 Firefox 1.0 allows remote attackers to execute arbitrary code via plugins that load "privileged content" into frames, as demonstrated using certain XUL events when a user drags a scrollbar two times, aka "Firescrolling."

CVE-2005-0528

2005-12-31T00:00:00.000-05:00

2008-09-10T15:36:08.147-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2003-0985. Reason: This candidate is a duplicate of CVE-2003-0985. Notes: All CVE users should reference CVE-2003-0985 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.11_rc1_bk6

CVE-2005-0529

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:56.780-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONECTIVA CLA-2005:930 CONFIRM http://linux.bkbits.net:8080/linux-2.6/cset@4201818eC6aMn0x3GY_9rw3ueb2ZWQ BUGTRAQ 20050315 [USN-95-1] Linux kernel vulnerabilities FULLDISC 20050215 linux kernel 2.6 fun. windoze is a joke MISC http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html SUSE SUSE-SA:2005:018 REDHAT RHSA-2005:366 Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types for offset arguments to the proc_file_read and locks_read_proc functions, which leads to a heap-based buffer overflow when a signed comparison causes negative integers to be used in a positive context.

cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.11_rc1_bk6

CVE-2005-0530

2005-05-02T00:00:00.000-04:00

2017-10-18T21:29:01.907-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONECTIVA CLA-2005:930 CONFIRM http://linux.bkbits.net:8080/linux-2.6/cset@420181322LZmhPTewcCOLkubGwOL3w BUGTRAQ 20050315 [USN-95-1] Linux kernel vulnerabilities FULLDISC 20050215 linux kernel 2.6 fun. windoze is a joke MISC http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html SUSE SUSE-SA:2005:018 REDHAT RHSA-2005:366 Signedness error in the copy_from_read_buf function in n_tty.c for Linux kernel 2.6.10 and 2.6.11rc1 allows local users to read kernel memory via a negative argument.

cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.11 cpe:/o:linux:linux_kernel:2.6.11:rc1 cpe:/o:linux:linux_kernel:2.6.11:rc2 cpe:/o:linux:linux_kernel:2.6.11:rc3

CVE-2005-0531

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:56.840-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONECTIVA CLA-2005:930 CONFIRM http://linux.bkbits.net:8080/linux-2.6/gnupatch@4208e1fcfccuD-eH2OGM5mBhihmQ3A BUGTRAQ 20050315 [USN-95-1] Linux kernel vulnerabilities FULLDISC 20050215 linux kernel 2.6 fun. windoze is a joke MISC http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html REDHAT RHSA-2005:366 The atm_get_addr function in addr.c for Linux kernel 2.6.10 and 2.6.11 before 2.6.11-rc4 may allow local users to trigger a buffer overflow via negative arguments.

cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.11 cpe:/o:linux:linux_kernel:2.6.11:rc1 cpe:/o:linux:linux_kernel:2.6.11:rc2 cpe:/o:linux:linux_kernel:2.6.11:rc3

CVE-2005-0532

2005-05-02T00:00:00.000-04:00

2016-10-17T23:12:26.607-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://linux.bkbits.net:8080/linux-2.6/cset@42018227TkNpHlX6BefnItV_GqMmzQ BUGTRAQ 20050315 [USN-95-1] Linux kernel vulnerabilities FULLDISC 20050215 linux kernel 2.6 fun. windoze is a joke MISC http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html SUSE SUSE-SA:2005:018 The reiserfs_copy_from_user_to_file_region function in reiserfs/file.c for Linux kernel 2.6.10 and 2.6.11 before 2.6.11-rc4, when running on 64-bit architectures, may allow local users to trigger a buffer overflow as a result of casting discrepancies between size_t and int data types.

cpe:/a:trend_micro:client-server-messaging_suite_smb:gold::windows cpe:/a:trend_micro:client-server_suite_smb:gold::windows cpe:/a:trend_micro:control_manager:gold::as_400 cpe:/a:trend_micro:control_manager:gold::s_390 cpe:/a:trend_micro:control_manager:gold::solaris cpe:/a:trend_micro:control_manager:gold::windows cpe:/a:trend_micro:control_manager:gold::windows_nt cpe:/a:trend_micro:control_manager:netware cpe:/a:trend_micro:interscan_emanager:3.5::hp cpe:/a:trend_micro:interscan_emanager:3.5.2::windows cpe:/a:trend_micro:interscan_emanager:3.6::linux cpe:/a:trend_micro:interscan_emanager:3.6::sun cpe:/a:trend_micro:interscan_emanager:3.51 cpe:/a:trend_micro:interscan_emanager:3.51_j cpe:/a:trend_micro:interscan_messaging_security_suite:3.81 cpe:/a:trend_micro:interscan_messaging_security_suite:5.5 cpe:/a:trend_micro:interscan_messaging_security_suite:gold::linux cpe:/a:trend_micro:interscan_messaging_security_suite:gold::solaris cpe:/a:trend_micro:interscan_messaging_security_suite:gold::windows cpe:/a:trend_micro:interscan_viruswall:3.0.1::linux cpe:/a:trend_micro:interscan_viruswall:3.0.1::unix cpe:/a:trend_micro:interscan_viruswall:3.4::windows_nt cpe:/a:trend_micro:interscan_viruswall:3.5::windows_nt cpe:/a:trend_micro:interscan_viruswall:3.6::hp_ux cpe:/a:trend_micro:interscan_viruswall:3.6::solaris cpe:/a:trend_micro:interscan_viruswall:3.6::unix cpe:/a:trend_micro:interscan_viruswall:3.6::windows_nt cpe:/a:trend_micro:interscan_viruswall:3.6.5::linux cpe:/a:trend_micro:interscan_viruswall:3.51::windows_nt cpe:/a:trend_micro:interscan_viruswall:3.52::windows_nt cpe:/a:trend_micro:interscan_viruswall:3.52_build1466::windows_nt cpe:/a:trend_micro:interscan_viruswall:5.1::windows_nt cpe:/a:trend_micro:interscan_viruswall:gold::aix cpe:/a:trend_micro:interscan_viruswall:gold::linux_for_smb cpe:/a:trend_micro:interscan_viruswall:gold::smb cpe:/a:trend_micro:interscan_viruswall:gold::windows cpe:/a:trend_micro:interscan_viruswall:gold::windows_nt_for_smb cpe:/a:trend_micro:interscan_web_security_suite:gold::linux cpe:/a:trend_micro:interscan_web_security_suite:gold::solaris cpe:/a:trend_micro:interscan_web_security_suite:gold::windows cpe:/a:trend_micro:interscan_webmanager:1.2 cpe:/a:trend_micro:interscan_webmanager:2.0 cpe:/a:trend_micro:interscan_webmanager:2.1 cpe:/a:trend_micro:interscan_webprotect:gold::isa cpe:/a:trend_micro:officescan:3.0::corporate cpe:/a:trend_micro:officescan:corporate_3.0::windows_nt_server cpe:/a:trend_micro:officescan:corporate_3.1.1::windows_nt_server cpe:/a:trend_micro:officescan:corporate_3.5 cpe:/a:trend_micro:officescan:corporate_3.5::windows_nt_server cpe:/a:trend_micro:officescan:corporate_3.11 cpe:/a:trend_micro:officescan:corporate_3.11::windows_nt_server cpe:/a:trend_micro:officescan:corporate_3.13 cpe:/a:trend_micro:officescan:corporate_3.13::windows_nt_server cpe:/a:trend_micro:officescan:corporate_3.54 cpe:/a:trend_micro:officescan:corporate_5.02 cpe:/a:trend_micro:officescan:corporate_5.5 cpe:/a:trend_micro:officescan:corporate_5.58 cpe:/a:trend_micro:officescan:corporate_6.5 cpe:/a:trend_micro:pc-cillin:6.0 cpe:/a:trend_micro:pc-cillin:2000 cpe:/a:trend_micro:pc-cillin:2002 cpe:/a:trend_micro:pc-cillin:2003 cpe:/a:trend_micro:portalprotect:1.0 cpe:/a:trend_micro:scanmail:2.6::domino cpe:/a:trend_micro:scanmail:2.51::domino cpe:/a:trend_micro:scanmail:3.8::microsoft_exchange cpe:/a:trend_micro:scanmail:3.81::microsoft_exchange cpe:/a:trend_micro:scanmail:6.1::microsoft_exchange cpe:/a:trend_micro:scanmail:gold::lotus_domino_on_aix cpe:/a:trend_micro:scanmail:gold::lotus_domino_on_as_400 cpe:/a:trend_micro:scanmail:gold::lotus_domino_on_s_390 cpe:/a:trend_micro:scanmail:gold::lotus_domino_on_solaris cpe:/a:trend_micro:scanmail:gold::lotus_domino_on_windows cpe:/a:trend_micro:scanmail_emanager cpe:/a:trend_micro:serverprotect:1.3::linux cpe:/a:trend_micro:serverprotect:1.25_2007-02-16::linux cpe:/a:trend_micro:serverprotect:2.5::linux cpe:/a:trend_micro:serverprotect:5.3.1

CVE-2005-0533

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:34.663-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-08T09:14:00.000-04:00

ALLOWS_USER_ACCESS

SECTRACK 1013289 SECTRACK 1013290 BID 12643 CONFIRM http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+VSAPI+ARJ+parsing+could+allow+Remote+Code+execution ISS 20050224 Trend Micro AntiVirus Library Heap Overflow Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a crafted ARJ file with long header file names that modify pointers within a structure.

cpe:/a:mediawiki:mediawiki:1.3.0 cpe:/a:mediawiki:mediawiki:1.3.1 cpe:/a:mediawiki:mediawiki:1.3.2 cpe:/a:mediawiki:mediawiki:1.3.3 cpe:/a:mediawiki:mediawiki:1.3.4 cpe:/a:mediawiki:mediawiki:1.3.5 cpe:/a:mediawiki:mediawiki:1.3.6 cpe:/a:mediawiki:mediawiki:1.3.7 cpe:/a:mediawiki:mediawiki:1.3.8 cpe:/a:mediawiki:mediawiki:1.3.9 cpe:/a:mediawiki:mediawiki:1.3.10 cpe:/a:mediawiki:mediawiki:1.4_beta1 cpe:/a:mediawiki:mediawiki:1.4_beta2 cpe:/a:mediawiki:mediawiki:1.4_beta3 cpe:/a:mediawiki:mediawiki:1.4_beta4 cpe:/a:mediawiki:mediawiki:1.4_beta5 cpe:/a:mediawiki:mediawiki:1.4_beta6

CVE-2005-0534

2005-05-02T00:00:00.000-04:00

2011-03-07T21:20:12.080-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-08T09:25:00.000-04:00

SECTRACK 1013260 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=307067 GENTOO GLSA-200502-33 Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allow remote attackers to inject arbitrary web script.

CVE-2005-0535

2005-02-22T00:00:00.000-05:00

2011-03-07T21:20:12.157-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-08T09:29:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1013260 GENTOO GLSA-200502-33 Cross-site request forgery (CSRF) vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users.

CVE-2005-0536

2005-05-02T00:00:00.000-04:00

2011-03-07T21:20:12.250-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-08T09:30:00.000-04:00

SECTRACK 1013260 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=307067 GENTOO GLSA-200502-33 Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or determine file existence via a parameter related to image deletion.

cpe:/a:igeneric:free_shopping_cart:1.2

CVE-2005-0537

2005-02-21T00:00:00.000-05:00

2016-10-17T23:12:27.857-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050221 [NOBYTES.COM: #5] iGeneric eShop 1.2 - Information Disclosure & Possible SQL Injection SECTRACK 1013268 Multiple SQL injection vulnerabilities in page.php for iGeneric (iG) Shop 1.2 may allow remote attackers to execute arbitrary SQL statements via the (1) cats, (2) l_price, or (3) u_price parameters.

cpe:/a:ginp:ginp:0.20 cpe:/a:ginp:ginp:0.21

CVE-2005-0538

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:35.740-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-08T09:35:00.000-04:00

CONFIRM http://sourceforge.net/project/shownotes.php?release_id=307518 Directory traversal vulnerability in (1) GinpPictureServlet.java and (2) PicCollection.java in ginp (Java Photo Gallery Web Application) before 0.22 allows remote attackers to read arbitrary files.

cpe:/a:ibm:hardware_management_console:4.1 cpe:/a:ibm:hardware_management_console:4.2

CVE-2005-0539

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:35.897-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-08T09:45:00.000-04:00

ALLOWS_USER_ACCESS

CONFIRM http://techsupport.services.ibm.com/server/hmc/power5/fixes/ptf_MH00220.html Unknown vulnerability in IBM Hardware Management Console (HMC) before 4.4 for POWER5 servers allows local users to gain privileges, related to the Guided Setup Wizard.

cpe:/a:cyclades:alterpath_manager:1.2.1

CVE-2005-0540

2005-05-02T00:00:00.000-04:00

2016-10-17T23:12:29.060-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20050224 Cyclades AlterPath Manager Vulnerabilities MISC http://www.cirt.net/advisories/alterpath_disclosure.shtml Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote attackers to obtain sensitive information via a direct request to the /about.html page.

cpe:/a:cyclades:alterpath_manager:1.2.1

CVE-2005-0541

2005-05-02T00:00:00.000-04:00

2016-10-17T23:12:30.560-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20050224 Cyclades AlterPath Manager Vulnerabilities MISC http://www.cirt.net/advisories/alterpath_console.shtml consoleConnect.jsp in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote attackers to connect to arbitrary consoles by modifying the consolename parameter.

cpe:/a:cyclades:alterpath_manager:1.2.1

CVE-2005-0542

2005-05-02T00:00:00.000-04:00

2016-10-17T23:12:31.687-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20050224 Cyclades AlterPath Manager Vulnerabilities MISC http://www.cirt.net/advisories/alterpath_privesc.shtml saveUser.do in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows local users to gain privileges by setting the adminUser parameter to true.

cpe:/a:phpmyadmin:phpmyadmin:2.6.0_pl2 cpe:/a:phpmyadmin:phpmyadmin:2.6.0_pl3 cpe:/a:phpmyadmin:phpmyadmin:2.6.1 cpe:/a:phpmyadmin:phpmyadmin:2.6.1_rc1

CVE-2005-0543

2005-02-24T00:00:00.000-05:00

2017-07-10T21:32:20.313-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050224 [SECURITYREASON.COM] phpMyAdmin 2.6.1 Remote file inclusion and XSS cXIb8O3.4 GENTOO GLSA-200503-07 BID 12644 XF phpmyadmin-multiple-php-xss(19462) Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via (1) the strServer, cfg[BgcolorOne], or strServerChoice parameters in select_server.lib.php, (2) the bg_color or row_no parameters in display_tbl_links.lib.php, the left_font_family parameter in theme_left.css.php, or the right_font_family parameter in theme_right.css.php.

cpe:/a:phpmyadmin:phpmyadmin:2.6.1

CVE-2005-0544

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:36.727-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-08T09:56:00.000-04:00

CONFIRM http://sourceforge.net/tracker/index.php?func=detail&aid=1149383&group_id=23067&atid=377408 GENTOO GLSA-200503-07 phpMyAdmin 2.6.1 allows remote attackers to obtain the full path of the server via direct requests to (1) sqlvalidator.lib.php, (2) sqlparser.lib.php, (3) select_theme.lib.php, (4) select_lang.lib.php, (5) relation_cleanup.lib.php, (6) header_meta_style.inc.php, (7) get_foreign.lib.php, (8) display_tbl_links.lib.php, (9) display_export.lib.php, (10) db_table_exists.lib.php, (11) charset_conversion.lib.php, (12) ufpdf.php, (13) mysqli.dbi.lib.php, (14) setup.php, or (15) cookie.auth.lib.php, which reveals the path in a PHP error message.

CVE-2005-0545

2005-05-02T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20050225 Re: Office 10 applications & flashdrives can be used to browse restricted BUGTRAQ 20050223 Office 10 applications & flashdrives can be used to browse restricted drives BID 12641 Microsoft Windows XP Pro SP2 and Windows 2000 Server SP4 running Active Directory allow local users to bypass group policies that restrict access to hidden drives by using the browse feature in Office 10 applications such as Word or Excel, or using a flash drive. NOTE: this issue has been disputed in a followup post.

cpe:/a:cyrus:imapd:2.0.17 cpe:/a:cyrus:imapd:2.1.16 cpe:/a:cyrus:imapd:2.1.17 cpe:/a:cyrus:imapd:2.1.18 cpe:/a:cyrus:imapd:2.2.10

CVE-2005-0546

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:14.153-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MLIST [info-cyrus] 20050214 Cyrus IMAPd 2.2.11 Released CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=82404 CONECTIVA CLA-2005:937 BUGTRAQ 20050228 [USN-87-1] Cyrus IMAP server vulnerability GENTOO GLSA-200502-29 SECTRACK 1013278 MANDRAKE MDKSA-2005:051 REDHAT RHSA-2005:408 FEDORA FLSA:156290 BID 12636 Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imapd annotate extension, (2) an off-by-one error in "cached header handling," (3) a stack-based buffer overflow in fetchnews, or (4) a stack-based buffer overflow in imapd.

cpe:/o:hp:hp-ux:11.00 cpe:/o:hp:hp-ux:11.4 cpe:/o:hp:hp-ux:11.11 cpe:/o:hp:hp-ux:11.22 cpe:/o:hp:hp-ux:11.23::ia64_64-bit

CVE-2005-0547

2005-02-24T00:00:00.000-05:00

2017-10-10T21:29:56.983-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov HP SSRT4694 BID 12651 XF hp-ux-ftpd-gain-access(19467) Unknown vulnerability in ftpd on HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23 allows remote authenticated users to gain "unauthorized access to files."

cpe:/a:sun:solaris_answerbook2:1.2 cpe:/a:sun:solaris_answerbook2:1.3 cpe:/a:sun:solaris_answerbook2:1.4 cpe:/a:sun:solaris_answerbook2:1.4.1 cpe:/a:sun:solaris_answerbook2:1.4.2 cpe:/a:sun:solaris_answerbook2:1.4.3 cpe:/a:sun:solaris_answerbook2:1.4.4

CVE-2005-0548

2005-03-07T00:00:00.000-05:00

2016-10-17T23:12:38.623-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050328 Multiple XSS issues in Sun AnswerBook2 SUNALERT 57737 SUNALERT 1000230 Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search function.

cpe:/a:sun:solaris_answerbook2:1.4.4

CVE-2005-0549

2005-05-02T00:00:00.000-04:00

2016-10-17T23:12:39.967-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_xp::sp1:tablet_pc cpe:/o:microsoft:windows_xp::sp2:tablet_pc

CVE-2005-0550

2005-05-02T00:00:00.000-04:00

2018-10-12T17:36:12.767-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov MS MS05-018 Buffer overflow in Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to cause a denial of service (i.e., system crash) via a malformed request, aka "Object Management Vulnerability".

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_xp::sp1:tablet_pc cpe:/o:microsoft:windows_xp::sp2:tablet_pc

CVE-2005-0551

2005-05-02T00:00:00.000-04:00

2018-10-12T17:36:13.407-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20050412 Microsoft Windows CSRSS.EXE Stack Overflow Vulnerability MS MS05-018 Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window information with a long FaceName value.

cpe:/a:microsoft:ie:5.01:sp3 cpe:/a:microsoft:ie:5.01:sp4 cpe:/a:microsoft:ie:5.5:sp2 cpe:/a:microsoft:ie:6.0 cpe:/a:microsoft:ie:6.0:sp1

CVE-2005-0553

2005-05-02T00:00:00.000-04:00

2018-10-12T17:36:14.157-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

IDEFENSE 20050412 Microsoft Internet Explorer DHTML Engine Race Condition Vulnerability CERT-VN VU#774338 CERT TA05-102A MS MS05-020 XF ie-dhtml-bo(19831) Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail, aka "DHTML Object Memory Corruption Vulnerability".

cpe:/a:microsoft:ie:5.01 cpe:/a:microsoft:ie:5.5 cpe:/a:microsoft:ie:6.0

CVE-2005-0554

2005-05-02T00:00:00.000-04:00

2018-10-12T17:36:15.517-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

IDEFENSE 20050412 Microsoft Windows Internet Explorer Long Hostname Heap Corruption Vulnerability CERT-VN VU#756122 CERT TA05-102A MS MS05-020 Buffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL with a long hostname, aka "URL Parsing Memory Corruption Vulnerability."

cpe:/a:microsoft:ie:5.01 cpe:/a:microsoft:ie:5.5 cpe:/a:microsoft:ie:6.0

CVE-2005-0555

2005-04-12T00:00:00.000-04:00

2018-10-12T17:36:16.703-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CERT-VN VU#222050 CERT TA05-102A MS MS05-020 XF ie-content-advisor-bo(19842) Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a crafted Content Advisor file, aka "Content Advisor Memory Corruption Vulnerability."

cpe:/a:microsoft:word:2000 cpe:/a:microsoft:word:2002 cpe:/a:microsoft:word:2003

CVE-2005-0558

2005-05-02T00:00:00.000-04:00

2018-10-12T17:36:17.953-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MS MS05-023 XF word-document-bo(19828) Buffer overflow in Microsoft Word 2000, Word 2002, and Word 2003 allows remote attackers to execute arbitrary code via a crafted document.

cpe:/a:microsoft:exchange_server:2000 cpe:/a:microsoft:exchange_server:2003

CVE-2005-0560

2005-05-02T00:00:00.000-04:00

2018-10-12T17:36:18.720-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050419 MS05-021 Microsoft Exchange X-LINK2STATE Heap Overflow PoC CERT-VN VU#275193 CERT TA05-102A ISS 20050412 Microsoft Exchange Remote Compromise MS MS05-021 Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers to execute arbitrary code via a crafted X-LINK2STATE extended verb request to the SMTP port.

cpe:/a:microsoft:msn_messenger:6.2

CVE-2005-0562

2005-04-12T00:00:00.000-04:00

2018-10-12T17:36:19.500-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CERT-VN VU#633446 CERT TA05-102A MS MS05-022 XF msn-messenger-gif-execute-code(19950) GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width.

cpe:/a:microsoft:exchange_server:5.5

CVE-2005-0563

2005-06-14T00:00:00.000-04:00

2019-05-31T20:29:00.323-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov IDEFENSE 20050614 Microsoft Outlook Web Access Cross-Site Scripting Vulnerability BID 13952 MS MS05-029 Cross-site scripting (XSS) vulnerability in Microsoft Outlook Web Access (OWA) component in Exchange Server 5.5 allows remote attackers to inject arbitrary web script or HTML via an email message with an encoded javascript: URL ("jav&#X41sc
ript:") in an IMG tag.

cpe:/a:microsoft:word:2000 cpe:/a:microsoft:word:2002

CVE-2005-0564

2005-07-12T00:00:00.000-04:00

2018-10-12T17:36:20.377-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

IDEFENSE 20050712 Microsoft Word 2000 and Word 2002 Font Parsing Buffer Overflow Vulnerability CERT-VN VU#218621 CERT TA05-193A MS MS05-035 Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers to execute arbitrary code via a .doc file with long font information.

cpe:/a:phpwebsite:phpwebsite:0.9.0 cpe:/a:phpwebsite:phpwebsite:0.9.1 cpe:/a:phpwebsite:phpwebsite:0.9.2 cpe:/a:phpwebsite:phpwebsite:0.9.2.1 cpe:/a:phpwebsite:phpwebsite:0.9.3 cpe:/a:phpwebsite:phpwebsite:0.9.3.1 cpe:/a:phpwebsite:phpwebsite:0.9.3.2 cpe:/a:phpwebsite:phpwebsite:0.9.3.3 cpe:/a:phpwebsite:phpwebsite:0.9.3.4 cpe:/a:phpwebsite:phpwebsite:0.10.0

CVE-2005-0565

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:20.670-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050224 phpWebSite-0.10.0_exploit SECTRACK 1013298 GENTOO GLSA-200503-04 XF phpwebsite-announce-execute-code(19482) The Announce module in phpWebSite 0.10.0 and earlier allows remote attackers to execute arbitrary PHP code by setting the Image field to reference a PHP file whose name contains a .gif.php extension.

cpe:/a:kmint21_software:golden_ftp_server:1.00b cpe:/a:kmint21_software:golden_ftp_server:1.20b cpe:/a:kmint21_software:golden_ftp_server:1.30b cpe:/a:kmint21_software:golden_ftp_server:1.31b cpe:/a:kmint21_software:golden_ftp_server:2.02b

CVE-2005-0566

2005-01-22T00:00:00.000-05:00

2017-07-10T21:32:20.733-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

FULLDISC 20050122 several BO's in goldenftpd SECTRACK 1012973 MISC http://www.goldenftpserver.com CERT-VN VU#620862 BID 12333 XF golden-ftp-rnto-bo(19015) Buffer overflow in Golden FTP Server Pro (goldenftpd) 2.x allows remote attackers to execute arbitrary code via a long RNTO command.

cpe:/a:phpmyadmin:phpmyadmin:2.6.1

CVE-2005-0567

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:20.797-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050224 [SECURITYREASON.COM] phpMyAdmin 2.6.1 Remote file inclusion and XSS cXIb8O3.4 CONFIRM http://sourceforge.net/tracker/index.php?func=detail&aid=1149381&group_id=23067&atid=377408 CONFIRM http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-1 BID 12645 XF phpmyadmin-file-include(19465) Multiple PHP remote file inclusion vulnerabilities in phpMyAdmin 2.6.1 allow remote attackers to execute arbitrary PHP code by modifying the (1) theme parameter to phpmyadmin.css.php or (2) cfg[Server][extension] parameter to database_interface.lib.php to reference a URL on a remote web server that contains the code.

cpe:/a:raven_software:soldier_of_fortune_2:1.0.2 cpe:/a:raven_software:soldier_of_fortune_2:1.0.3

CVE-2005-0568

2005-05-02T00:00:00.000-04:00

2016-10-17T23:12:44.843-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/sof2guidboom-adv.txt BUGTRAQ 20050224 In-game cl_guid crash in Soldier of Fortune II 1.03 SECTRACK 1013291 BID 12650 Soldier of Fortune II 1.03 gold allows remote attackers to cause a denial of service (application crash) via a large cl_guid value, which results in an invalid pointer dereference.

cpe:/a:punbb:punbb:1.2.1

CVE-2005-0569

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:20.843-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050224 Multiple vulns in punBB CONFIRM http://www.punbb.org/changelogs/1.2.1_to_1.2.2.txt BID 12652 XF punbb-multiple-sql-injection(19473) Multiple SQL injection vulnerabilities in PunBB 1.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) language parameter to register.php, (2) change email feature in profile.php, (3) posts or (4) topics parameter to moderate.php.

cpe:/a:punbb:punbb:1.2.1

CVE-2005-0570

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:20.890-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050224 Multiple vulns in punBB BID 12652 XF punbb-profile-dos(19483) profile.php in PunBB 1.2.1 allows remote attackers to cause a denial of service (account lockout) by setting the user's password to NULL.

cpe:/a:punbb:punbb:1.2.1

CVE-2005-0571

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:20.953-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050224 Multiple vulns in punBB CONFIRM http://www.punbb.org/changelogs/1.2.1_to_1.2.2.txt CONFIRM http://www.punbb.org/download/patch/punbb-1.2.1_to_1.2.2.patch XF punbb-file-disclosure(19478) admin_loader.php in PunBB 1.2.1 allows remote attackers to read arbitrary files via the plugin parameter.

CVE-2005-0572

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:21.000-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050225 phpWebSite 0.10.0 Full Path disclosure MISC http://neossecurity.net/Advisories/Advisory-05.txt GENTOO GLSA-200503-04 XF phpwebsite-search-path-disclosure(19480) index.php in phpWebSite 0.10.0 and earlier allows remote attackers to obtain sensitive information via an invalid SEA_search_module parameter, which reveals the path in a PHP error message.

cpe:/a:rob_flynn:gaim:1.1.3

CVE-2005-0573

2005-05-02T00:00:00.000-04:00

2016-10-17T23:12:51.047-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20050224 GAIM exploit SECTRACK 1013300 Gaim 1.1.3 on Windows systems allows remote attackers to cause a denial of service (client crash) via a file transfer in which the filename contains "(" or ")" (parenthesis) characters.

cpe:/a:cupidsystems:cis_webserver:3.5.13

CVE-2005-0574

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:40.897-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-08T12:33:00.000-04:00

BUGTRAQ 20050225 CIS WebServer Directory Traversal Bug BID 12662 Directory traversal vulnerability in CIS WebServer 3.5.13 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the URL.

cpe:/a:stormy_studios:knet:1.0 cpe:/a:stormy_studios:knet:1.2 cpe:/a:stormy_studios:knet:1.3 cpe:/a:stormy_studios:knet:1.4b cpe:/a:stormy_studios:knet:1.4c

CVE-2005-0575

2005-05-02T00:00:00.000-04:00

2016-10-17T23:12:52.423-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050225 Knet <= 1.04c Buffer Overflow Bug EXPLOIT-DB 24897 EXPLOIT-DB 24950 BID 12671 Buffer overflow in Stormy Studios Knet 1.04c and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP GET request.

cpe:/o:sun:solaris:9.0::sparc cpe:/o:sun:solaris:9.0::x86

CVE-2005-0576

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:41.227-04:00

3.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-08T12:40:00.000-04:00

SUNALERT 57738 BID 12656 Unknown vulnerability in Standard Type Services Framework (STSF) Font Server Daemon (stfontserverd) in Solaris 9 allows local users to modify or delete arbitrary files.

cpe:/a:dna:mkbold-mkitalic:0.06_1

CVE-2005-0577

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:41.383-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

2005-06-08T12:46:00.000-04:00

ALLOWS_USER_ACCESS

CONFIRM http://www.freshports.org/x11-fonts/mkbold-mkitalic/ CONFIRM http://www.vuxml.org/freebsd/32d4f0f1-85c3-11d9-b6dc-0007e900f747.html Format string vulnerability in DNA MKBold-MKItalic 0.06_1 and earlier allows remote attackers to execute arbitrary code via crafted BDF font files.

CVE-2005-0578

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:57.793-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov GENTOO GLSA-200503-10 GENTOO GLSA-200503-30 CONFIRM http://www.mozilla.org/security/announce/mfsa2005-28.html REDHAT RHSA-2005:176 REDHAT RHSA-2005:384 BID 12659 Firefox before 1.0.1 and Mozilla Suite before 1.7.6 use a predictable filename for the plugin temporary directory, which allows local users to delete arbitrary files of other users via a symlink attack on the plugtmp directory.

cpe:/a:freenx:freenx:0.2.0 cpe:/a:freenx:freenx:0.2.1 cpe:/a:freenx:freenx:0.2.2 cpe:/a:freenx:freenx:0.2.3 cpe:/a:freenx:freenx:0.2.4 cpe:/a:freenx:freenx:0.2.5 cpe:/a:freenx:freenx:0.2.6 cpe:/a:freenx:freenx:0.2.7

CVE-2005-0579

2005-02-25T00:00:00.000-05:00

2008-09-05T16:46:41.773-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-08T12:51:00.000-04:00

ALLOWS_OTHER_ACCESS

MLIST [FreeNX-kNX] 20050217 Security: Serious bug in authority handling found and fixed SUSE SUSE-SR:2005:006 nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allows local users to access the X server without X authentication.

cpe:/a:krzysztof_dabrowski:cmd5checkpw:0.20 cpe:/a:krzysztof_dabrowski:cmd5checkpw:0.21 cpe:/a:krzysztof_dabrowski:cmd5checkpw:0.22

CVE-2005-0580

2005-02-25T00:00:00.000-05:00

2008-09-05T16:46:41.960-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-08T13:13:00.000-04:00

GENTOO GLSA-200502-30 cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file.

cpe:/a:ca:license_software:0.1.0.15

CVE-2005-0581

2005-05-02T00:00:00.000-04:00

2016-10-17T23:12:53.610-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050302 License Patches Are Now Available To Address Buffer Overflows CONFIRM http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp IDEFENSE 20050302 Computer Associates License Client and Server Invalid Command Buffer Overflow IDEFENSE 20050302 Computer Associates License Client/Server GETCONFIG Buffer Overflow IDEFENSE 20050302 Computer Associates License Client/Server GCR Network Buffer Overflow IDEFENSE 20050302 Computer Associates License Client/Server GCR Checksum Buffer Overflow Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code via (1) certain long fields in the Checksum item in a GCR request, (2) a long IP address, hostname, or netmask values in a GCR request, (3) a long last parameter in a GETCONFIG packet, or (4) long values in a request with an invalid format.

cpe:/a:ca:license_software:0.1.0.15

CVE-2005-0582

2005-05-02T00:00:00.000-04:00

2016-10-17T23:12:54.957-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20050302 License Patches Are Now Available To Address Buffer Overflows CONFIRM http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp IDEFENSE 20050302 Computer Associates License Client PUTOLF Buffer Overflow Buffer overflow in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in a PUTOLF request.

cpe:/a:ca:license_software:0.1.0.15

CVE-2005-0583

2005-05-02T00:00:00.000-04:00

2016-10-17T23:12:56.237-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050302 License Patches Are Now Available To Address Buffer Overflows CONFIRM http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp IDEFENSE 20050302 Computer Associates License Client PUTOLF Directory Traversal Directory traversal vulnerability in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to create arbitrary files via .. (dot dot) sequences in a PUTOLF request.

CVE-2005-0584

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:57.857-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov GENTOO GLSA-200503-10 GENTOO GLSA-200503-30 CONFIRM http://www.mozilla.org/security/announce/mfsa2005-24.html REDHAT RHSA-2005:176 REDHAT RHSA-2005:384 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=277574 Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that generated the prompt, which could facilitate spoofing and phishing attacks.

CVE-2005-0585

2005-03-25T00:00:00.000-05:00

2017-10-10T21:29:57.983-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov GENTOO GLSA-200503-10 GENTOO GLSA-200503-30 CONFIRM http://www.mozilla.org/security/announce/mfsa2005-23.html REDHAT RHSA-2005:176 REDHAT RHSA-2005:384 Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote malicious web sites to spoof legitimate sites and facilitate phishing attacks.

CVE-2005-0586

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:58.123-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov GENTOO GLSA-200503-10 CONFIRM http://www.mozilla.org/security/announce/mfsa2005-22.html REDHAT RHSA-2005:176 REDHAT RHSA-2005:384 BID 12659 Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the extensions of files to download via the Content-Disposition header, which could be used to trick users into downloading dangerous content.

CVE-2005-0587

2005-03-25T00:00:00.000-05:00

2017-10-10T21:29:58.187-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.mozilla.org/security/announce/mfsa2005-21.html SUSE SUSE-SA:2006:004 BID 12659 Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downloading a .LNK (link) file twice, which overwrites the file that was referenced in the first .LNK file.

CVE-2005-0588

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:58.263-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov GENTOO GLSA-200503-10 GENTOO GLSA-200503-30 CONFIRM http://www.mozilla.org/security/announce/mfsa2005-20.html REDHAT RHSA-2005:176 REDHAT RHSA-2005:384 BID 12659 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=271209 Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system.

CVE-2005-0589

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:58.403-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov GENTOO GLSA-200503-10 CONFIRM http://www.mozilla.org/security/announce/mfsa2005-19.html REDHAT RHSA-2005:176 BID 12659 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=270697 The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that monitors the values that are generated by the autocomplete capability.

cpe:/a:mozilla:firefox:0.8 cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:firefox:0.9:rc cpe:/a:mozilla:firefox:0.9.1 cpe:/a:mozilla:firefox:0.9.2 cpe:/a:mozilla:firefox:0.9.3 cpe:/a:mozilla:firefox:0.10 cpe:/a:mozilla:firefox:0.10.1 cpe:/a:mozilla:firefox:1.0 cpe:/a:mozilla:mozilla:1.3 cpe:/a:mozilla:mozilla:1.4 cpe:/a:mozilla:mozilla:1.4:alpha cpe:/a:mozilla:mozilla:1.4.1 cpe:/a:mozilla:mozilla:1.5 cpe:/a:mozilla:mozilla:1.5:alpha cpe:/a:mozilla:mozilla:1.5:rc1 cpe:/a:mozilla:mozilla:1.5:rc2 cpe:/a:mozilla:mozilla:1.5.1 cpe:/a:mozilla:mozilla:1.6 cpe:/a:mozilla:mozilla:1.6:alpha cpe:/a:mozilla:mozilla:1.6:beta cpe:/a:mozilla:mozilla:1.7 cpe:/a:mozilla:mozilla:1.7:alpha cpe:/a:mozilla:mozilla:1.7:beta cpe:/a:mozilla:mozilla:1.7:rc1 cpe:/a:mozilla:mozilla:1.7:rc2 cpe:/a:mozilla:mozilla:1.7:rc3 cpe:/a:mozilla:mozilla:1.7.1 cpe:/a:mozilla:mozilla:1.7.2 cpe:/a:mozilla:mozilla:1.7.3 cpe:/a:mozilla:mozilla:1.7.5 cpe:/a:mozilla:thunderbird:0.1 cpe:/a:mozilla:thunderbird:0.2 cpe:/a:mozilla:thunderbird:0.3 cpe:/a:mozilla:thunderbird:0.4 cpe:/a:mozilla:thunderbird:0.5 cpe:/a:mozilla:thunderbird:0.6 cpe:/a:mozilla:thunderbird:0.7 cpe:/a:mozilla:thunderbird:0.7.1 cpe:/a:mozilla:thunderbird:0.7.2 cpe:/a:mozilla:thunderbird:0.7.3 cpe:/a:mozilla:thunderbird:0.8 cpe:/a:mozilla:thunderbird:0.9 cpe:/a:mozilla:thunderbird:1.0

CVE-2005-0590

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:58.483-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov GENTOO GLSA-200503-10 GENTOO GLSA-200503-30 CONFIRM http://www.mozilla.org/security/announce/mfsa2005-17.html SUSE SUSE-SA:2006:004 REDHAT RHSA-2005:176 REDHAT RHSA-2005:384 BID 12659 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=268059 The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long "user:pass" sequence in the URL, which appears before the real hostname.

CVE-2005-0591

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:58.560-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050111 Firespoofing [Firefox 1.0] GENTOO GLSA-200503-10 GENTOO GLSA-200503-30 MISC http://www.mikx.de/firespoofing/ MISC http://www.mikx.de/index.php?p=7 CONFIRM http://www.mozilla.org/security/announce/mfsa2005-16.html REDHAT RHSA-2005:176 REDHAT RHSA-2005:384 BID 12234 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=260560 XF web-browser-modal-spoofing(18864) Firefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka "Firespoofing."

CVE-2005-0592

2005-03-25T00:00:00.000-05:00

2017-10-10T21:29:58.637-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

GENTOO GLSA-200503-10 GENTOO GLSA-200503-30 CONFIRM http://www.mozilla.org/security/announce/mfsa2005-15.html SUSE SUSE-SA:2006:004 REDHAT RHSA-2005:176 BID 12659 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=241440 Heap-based buffer overflow in the UTF8ToNewUnicode function for Firefox before 1.0.1 and Mozilla before 1.7.6 might allow remote attackers to cause a denial of service (crash) or execute arbitrary code via invalid sequences in a UTF8 encoded string that result in a zero length value.

CVE-2005-0593

2005-03-04T00:00:00.000-05:00

2017-10-10T21:29:58.733-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov GENTOO GLSA-200503-10 GENTOO GLSA-200503-30 CONFIRM http://www.mozilla.org/security/announce/mfsa2005-14.html REDHAT RHSA-2005:176 REDHAT RHSA-2005:384 BID 12659 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=258048 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=268483 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=276720 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=277564 Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL "secure site" lock icon via (1) a web site that does not finish loading, which shows the lock of the previous site, (2) a non-HTTP server that uses SSL, which causes the lock to be displayed when the SSL handshake is completed, or (3) a URL that generates an HTTP 204 error, which updates the icon and location information but does not change the display of the original site.

cpe:/o:apple:mac_os_x_server:10.3.9

CVE-2005-0594

2005-05-04T00:00:00.000-04:00

2008-09-05T16:46:44.897-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-05-12T15:46:00.000-04:00

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2005-05-03 CERT-VN VU#354486 CERT TA05-136A Buffer overflow in the Netinfo Setup Tool (NeST) allows local users to execute arbitrary code.

cpe:/a:working_resources_inc.:badblue:2.55

CVE-2005-0595

2005-05-02T00:00:00.000-04:00

2017-07-11T21:29:01.503-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

FULLDISC 20050226 Badblue HTTP Server, ext.dll buffer overflow BID 12673 Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand parameter.

cpe:/a:php:php:4.0

CVE-2005-0596

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:45.210-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-08T14:22:00.000-04:00

SUSE SUSE-SR:2005:006 BID 12665 PHP 4 (PHP4) allows attackers to cause a denial of service (daemon crash) by using the readfile function on a file whose size is a multiple of the page size.

cpe:/a:cisco:application_and_content_networking_software:5.0 cpe:/a:cisco:application_and_content_networking_software:5.0.1 cpe:/a:cisco:application_and_content_networking_software:5.0.3 cpe:/a:cisco:application_and_content_networking_software:5.0.5 cpe:/a:cisco:application_and_content_networking_software:5.0.17.5 cpe:/a:cisco:application_and_content_networking_software:5.1 cpe:/a:cisco:application_and_content_networking_software:5.1.11.5

CVE-2005-0597

2005-05-02T00:00:00.000-04:00

2018-09-26T11:32:56.850-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2018-09-26T07:54:55.277-04:00

CISCO 20050224 ACNS Denial of Service and Default Admin Password Vulnerabilities BID 12648 XF cisco-tcp-acns-dos(19466) Cisco devices running Application and Content Networking System (ACNS) 5.0 before 5.0.17.6 and 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service (process restart) via a "crafted TCP connection."

cpe:/a:cisco:application_and_content_networking_software:%28acns%29 cpe:/a:cisco:application_and_content_networking_software:4.0.3 cpe:/a:cisco:application_and_content_networking_software:4.1.1 cpe:/a:cisco:application_and_content_networking_software:4.1.3 cpe:/a:cisco:application_and_content_networking_software:4.2 cpe:/a:cisco:application_and_content_networking_software:4.2.9 cpe:/a:cisco:application_and_content_networking_software:4.2.11 cpe:/a:cisco:application_and_content_networking_software:5.0 cpe:/a:cisco:application_and_content_networking_software:5.0.1 cpe:/a:cisco:application_and_content_networking_software:5.0.3 cpe:/a:cisco:application_and_content_networking_software:5.0.5 cpe:/a:cisco:application_and_content_networking_software:5.1 cpe:/a:cisco:content_delivery_manager:4630 cpe:/a:cisco:content_delivery_manager:4650 cpe:/a:cisco:content_distribution_manager_4630 cpe:/a:cisco:content_distribution_manager_4630:4.0 cpe:/a:cisco:content_distribution_manager_4630:4.1 cpe:/a:cisco:content_distribution_manager_4650 cpe:/a:cisco:content_distribution_manager_4650:4.0 cpe:/a:cisco:content_distribution_manager_4650:4.1 cpe:/a:cisco:content_distribution_manager_4670 cpe:/a:cisco:content_engine:507 cpe:/a:cisco:content_engine:507_2.2_.0 cpe:/a:cisco:content_engine:507_3.1 cpe:/a:cisco:content_engine:507_4.0 cpe:/a:cisco:content_engine:507_4.1 cpe:/a:cisco:content_engine:510 cpe:/a:cisco:content_engine:560 cpe:/a:cisco:content_engine:560_2.2_.0 cpe:/a:cisco:content_engine:560_3.1 cpe:/a:cisco:content_engine:560_4.0 cpe:/a:cisco:content_engine:560_4.1 cpe:/a:cisco:content_engine:565 cpe:/a:cisco:content_engine:590 cpe:/a:cisco:content_engine:590_2.2_.0 cpe:/a:cisco:content_engine:590_3.1 cpe:/a:cisco:content_engine:590_4.0 cpe:/a:cisco:content_engine:590_4.1 cpe:/a:cisco:content_engine:7320 cpe:/a:cisco:content_engine:7320_2.2_.0 cpe:/a:cisco:content_engine:7320_3.1 cpe:/a:cisco:content_engine:7320_4.0 cpe:/a:cisco:content_engine:7320_4.1 cpe:/a:cisco:content_engine:7325 cpe:/a:cisco:content_engine_module_for_cisco_router:2600_series cpe:/a:cisco:content_engine_module_for_cisco_router:2800_series cpe:/a:cisco:content_engine_module_for_cisco_router:3600_series cpe:/a:cisco:content_engine_module_for_cisco_router:3700_series cpe:/a:cisco:content_engine_module_for_cisco_router:3800_series cpe:/a:cisco:enterprise_content_delivery_network_software:4.0 cpe:/a:cisco:enterprise_content_delivery_network_software:4.1 cpe:/h:cisco:content_router_4430 cpe:/h:cisco:content_router_4450

CVE-2005-0598

2005-02-24T00:00:00.000-05:00

2018-10-30T12:25:18.480-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CISCO 20050224 ACNS Denial of Service and Default Admin Password Vulnerabilities CERT-VN VU#579240 BID 12648 XF cisco-realserver-realsubscriber-dos(19469) The RealServer RealSubscriber on Cisco devices running Application and Content Networking System (ACNS) 5.1 allow remote attackers to cause a denial of service (CPU consumption) via malformed packets.

cpe:/a:cisco:application_and_content_networking_software:4.0.3 cpe:/a:cisco:application_and_content_networking_software:4.1.1 cpe:/a:cisco:application_and_content_networking_software:4.1.3 cpe:/a:cisco:application_and_content_networking_software:4.2 cpe:/a:cisco:application_and_content_networking_software:4.2.9 cpe:/a:cisco:application_and_content_networking_software:4.2.11 cpe:/a:cisco:application_and_content_networking_software:5.0 cpe:/a:cisco:application_and_content_networking_software:5.0.1 cpe:/a:cisco:application_and_content_networking_software:5.0.3 cpe:/a:cisco:application_and_content_networking_software:5.0.5 cpe:/a:cisco:application_and_content_networking_software:5.1.11.5

CVE-2005-0599

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:21.217-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CISCO 20050224 ACNS Denial of Service and Default Admin Password Vulnerabilities BID 12648 XF cisco-ip-packet-dos(19468) Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, or 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service (CPU consumption) via malformed IP packets.

CVE-2005-0600

2005-02-24T00:00:00.000-05:00

2018-10-30T12:25:18.480-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CISCO 20050224 ACNS Denial of Service and Default Admin Password Vulnerabilities BID 12648 XF cisco-acns-dos(19470) Cisco devices running Application and Content Networking System (ACNS) 5.0, 5.1 before 5.1.13.7, or 5.2 before 5.2.3.9 allow remote attackers to cause a denial of service (bandwidth consumption) via "crafted IP packets" that are continuously forwarded.

CVE-2005-0601

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:21.343-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CISCO 20050224 ACNS Denial of Service and Default Admin Password Vulnerabilities BID 12648 XF cisco-acns-gain-access(19471) Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, 5.1, or 5.2 use a default password when the setup dialog has not been run, which allows remote attackers to gain access.

cpe:/a:info-zip:unzip:5.50 cpe:/a:info-zip:unzip:5.51

CVE-2005-0602

2005-05-02T00:00:00.000-04:00

2016-10-17T23:12:58.567-04:00

6.2

LOCAL

HIGH

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20050228 7a69Adv#22 - UNIX unzip keep setuid and setgid files SUNALERT 103150 SUNALERT 200844 CONFIRM http://www.info-zip.org/FAQ.html MANDRIVA MDKSA-2005:197 BID 14447 TRUSTIX 2005-0053 VUPEN ADV-2007-3866 Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges.

CVE-2005-0603

2005-02-28T00:00:00.000-05:00

2016-10-17T23:13:00.080-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050225 -==phpBB 2.0.12 Full path disclosure==- CONFIRM http://www.phpbb.com/phpBB/viewtopic.php?t=267563 viewtopic.php in phpBB 2.0.12 and earlier allows remote attackers to obtain sensitive information via a highlight parameter containing invalid regular expression syntax, which reveals the path in a PHP error message.

cpe:/a:gfi:languard_network_security_scanner:5.0

CVE-2005-0604

2005-05-02T00:00:00.000-04:00

2016-10-17T23:13:01.283-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050228 [Hat-Squad] GFI L.N.S.S 5.0 Insecure Credential Storage MISC http://www.hat-squad.com/en/000160.html lnss.exe in GFI Languard Network Security Scanner 5.0 stores the username and password in memory in plaintext, which could allow local administrators to obtain domain administrator credentials.

cpe:/a:lesstif:lesstif:0.93.94 cpe:/a:sgi:propack:3.0 cpe:/a:x.org:x11r6:6.7.0 cpe:/a:x.org:x11r6:6.8 cpe:/a:x.org:x11r6:6.8.1 cpe:/a:xfree86_project:x11r6:3.3 cpe:/a:xfree86_project:x11r6:3.3.2 cpe:/a:xfree86_project:x11r6:3.3.3 cpe:/a:xfree86_project:x11r6:3.3.4 cpe:/a:xfree86_project:x11r6:3.3.5 cpe:/a:xfree86_project:x11r6:3.3.6 cpe:/a:xfree86_project:x11r6:4.0 cpe:/a:xfree86_project:x11r6:4.0.1 cpe:/a:xfree86_project:x11r6:4.0.2.11 cpe:/a:xfree86_project:x11r6:4.0.3 cpe:/a:xfree86_project:x11r6:4.1.0 cpe:/a:xfree86_project:x11r6:4.1.11 cpe:/a:xfree86_project:x11r6:4.1.12 cpe:/a:xfree86_project:x11r6:4.2.0 cpe:/a:xfree86_project:x11r6:4.2.1 cpe:/a:xfree86_project:x11r6:4.2.1::errata cpe:/a:xfree86_project:x11r6:4.3.0 cpe:/a:xfree86_project:x11r6:4.3.0.1 cpe:/a:xfree86_project:x11r6:4.3.0.2 cpe:/o:altlinux:alt_linux:2.3::compact cpe:/o:altlinux:alt_linux:2.3::junior cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.1 cpe:/o:mandrakesoft:mandrake_linux:10.1::x86_64 cpe:/o:mandrakesoft:mandrake_linux:10.2 cpe:/o:mandrakesoft:mandrake_linux:10.2::x86_64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1::x86_64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0::x86_64 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux:4.0::advanced_server cpe:/o:redhat:enterprise_linux:4.0::enterprise_server cpe:/o:redhat:enterprise_linux:4.0::workstation cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:enterprise_linux_desktop:4.0 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:redhat:fedora_core:core_3.0 cpe:/o:suse:suse_linux:6.1 cpe:/o:suse:suse_linux:6.1:alpha cpe:/o:suse:suse_linux:6.2 cpe:/o:suse:suse_linux:6.3 cpe:/o:suse:suse_linux:6.3::ppc cpe:/o:suse:suse_linux:6.3:alpha cpe:/o:suse:suse_linux:6.4 cpe:/o:suse:suse_linux:6.4::i386 cpe:/o:suse:suse_linux:6.4::ppc cpe:/o:suse:suse_linux:6.4:alpha cpe:/o:suse:suse_linux:7.0 cpe:/o:suse:suse_linux:7.0::i386 cpe:/o:suse:suse_linux:7.0::ppc cpe:/o:suse:suse_linux:7.0::sparc cpe:/o:suse:suse_linux:7.0:alpha cpe:/o:suse:suse_linux:7.1 cpe:/o:suse:suse_linux:7.1::spa cpe:/o:suse:suse_linux:7.1::sparc cpe:/o:suse:suse_linux:7.1::x86 cpe:/o:suse:suse_linux:7.1:alpha cpe:/o:suse:suse_linux:7.2 cpe:/o:suse:suse_linux:7.2::i386 cpe:/o:suse:suse_linux:7.3 cpe:/o:suse:suse_linux:7.3::i386 cpe:/o:suse:suse_linux:7.3::ppc cpe:/o:suse:suse_linux:7.3::sparc cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.0::i386 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.1::x86_64 cpe:/o:suse:suse_linux:9.2 cpe:/o:suse:suse_linux:9.2::x86_64

CVE-2005-0605

2005-03-02T00:00:00.000-05:00

2018-10-03T17:29:41.527-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SCO SCOSA-2006.5 SCO SCOSA-2005.57 SGI 20060403-01-U CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=83598 CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=83655 APPLE APPLE-SA-2005-08-17 APPLE APPLE-SA-2005-08-15 GENTOO GLSA-200503-08 SECTRACK 1013339 DEBIAN DSA-723 GENTOO GLSA-200503-15 FEDORA FLSA-2006:152803 REDHAT RHSA-2005:044 REDHAT RHSA-2005:198 REDHAT RHSA-2005:331 REDHAT RHSA-2005:412 REDHAT RHSA-2005:473 REDHAT RHSA-2008:0261 BID 12714 CONFIRM https://bugs.freedesktop.org/attachment.cgi?id=1909 UBUNTU USN-92-1 UBUNTU USN-97-1 scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.

cpe:/a:devellion:cubecart:2.0.0 cpe:/a:devellion:cubecart:2.0.1 cpe:/a:devellion:cubecart:2.0.2 cpe:/a:devellion:cubecart:2.0.3 cpe:/a:devellion:cubecart:2.0.5

CVE-2005-0606

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:21.390-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://lostmon.blogspot.com/2005/02/cubecart-20x-multiple-variable-xss.html SECTRACK 1013304 CONFIRM http://www.cubecart.com/site/forums/index.php?showtopic=6032 BID 12658 XF cubecart-multiple-xss(20637) Cross-site scripting (XSS) vulnerability in settings.inc.php for CubeCart 2.0.0 through 2.0.5, as used in multiple PHP files, allows remote attackers to inject arbitrary HTML or web script via the (1) cat_id, (2) PHPSESSID, (3) view_doc, (4) product, (5) session, (6) catname, (7) search, or (8) page parameters.

cpe:/a:devellion:cubecart:2.0.0 cpe:/a:devellion:cubecart:2.0.1 cpe:/a:devellion:cubecart:2.0.2 cpe:/a:devellion:cubecart:2.0.3 cpe:/a:devellion:cubecart:2.0.5

CVE-2005-0607

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:21.437-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://lostmon.blogspot.com/2005/02/cubecart-20x-multiple-variable-xss.html SECTRACK 1013304 CONFIRM http://www.cubecart.com/site/forums/index.php?showtopic=6032 XF cubecart-multiple-path-disclosure(20638) CubeCart 2.0.0 through 2.0.5 allows remote attackers to determine the full path of the server via direct calls without parameters to (1) information.php, (2) language.php, (3) list_docs.php, (4) popular_prod.php, (5) sale.php, (6) subfooter.inc.php, (7) subheader.inc.php, (8) cat_navi.php, or (9) check_sum.php, which reveals the path in a PHP error message.

cpe:/a:webmod:webmod:0.47

CVE-2005-0608

2005-02-28T00:00:00.000-05:00

2008-09-05T16:46:47.740-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-08T15:31:00.000-04:00

ALLOWS_USER_ACCESS

CONFIRM http://djeyl.net/forum/index.php?showtopic=41440 Heap-based buffer overflow in server.cpp for WebMod 0.47 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a POST request with a Content-Length that is less than the amount of data that is actually sent.

CVE-2005-0609

2017-05-11T10:29:02.290-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2005. Notes: none.

cpe:/o:freebsd:freebsd:4.0 cpe:/o:freebsd:freebsd:4.0:alpha cpe:/o:freebsd:freebsd:4.0:releng cpe:/o:freebsd:freebsd:4.1 cpe:/o:freebsd:freebsd:4.1.1 cpe:/o:freebsd:freebsd:4.1.1:release cpe:/o:freebsd:freebsd:4.1.1:stable cpe:/o:freebsd:freebsd:4.2 cpe:/o:freebsd:freebsd:4.2:stable cpe:/o:freebsd:freebsd:4.3 cpe:/o:freebsd:freebsd:4.3:release cpe:/o:freebsd:freebsd:4.3:release_p38 cpe:/o:freebsd:freebsd:4.3:releng cpe:/o:freebsd:freebsd:4.3:stable cpe:/o:freebsd:freebsd:4.4 cpe:/o:freebsd:freebsd:4.4:release_p42 cpe:/o:freebsd:freebsd:4.4:releng cpe:/o:freebsd:freebsd:4.4:stable cpe:/o:freebsd:freebsd:4.5 cpe:/o:freebsd:freebsd:4.5:release cpe:/o:freebsd:freebsd:4.5:release_p32 cpe:/o:freebsd:freebsd:4.5:releng cpe:/o:freebsd:freebsd:4.5:stable cpe:/o:freebsd:freebsd:4.6 cpe:/o:freebsd:freebsd:4.6:release cpe:/o:freebsd:freebsd:4.6:release_p20 cpe:/o:freebsd:freebsd:4.6:releng cpe:/o:freebsd:freebsd:4.6:stable cpe:/o:freebsd:freebsd:4.6.2 cpe:/o:freebsd:freebsd:4.7 cpe:/o:freebsd:freebsd:4.7:release cpe:/o:freebsd:freebsd:4.7:release_p17 cpe:/o:freebsd:freebsd:4.7:releng cpe:/o:freebsd:freebsd:4.7:stable cpe:/o:freebsd:freebsd:4.8 cpe:/o:freebsd:freebsd:4.8:pre-release cpe:/o:freebsd:freebsd:4.8:release_p6 cpe:/o:freebsd:freebsd:4.8:releng cpe:/o:freebsd:freebsd:4.9 cpe:/o:freebsd:freebsd:4.9:pre-release cpe:/o:freebsd:freebsd:4.9:releng cpe:/o:freebsd:freebsd:4.10 cpe:/o:freebsd:freebsd:4.10:release cpe:/o:freebsd:freebsd:4.10:releng cpe:/o:freebsd:freebsd:4.11:stable cpe:/o:freebsd:freebsd:5.0 cpe:/o:freebsd:freebsd:5.0:alpha cpe:/o:freebsd:freebsd:5.0:release_p14 cpe:/o:freebsd:freebsd:5.0:releng cpe:/o:freebsd:freebsd:5.1 cpe:/o:freebsd:freebsd:5.1:alpha cpe:/o:freebsd:freebsd:5.1:release cpe:/o:freebsd:freebsd:5.1:release_p5 cpe:/o:freebsd:freebsd:5.1:releng cpe:/o:freebsd:freebsd:5.2 cpe:/o:freebsd:freebsd:5.2.1:release cpe:/o:freebsd:freebsd:5.2.1:releng cpe:/o:freebsd:freebsd:5.3 cpe:/o:freebsd:freebsd:5.3:release cpe:/o:freebsd:freebsd:5.3:releng cpe:/o:freebsd:freebsd:5.3:stable cpe:/o:freebsd:freebsd:5.4:pre-release cpe:/o:freebsd:freebsd:5.4:release

CVE-2005-0610

2005-04-12T00:00:00.000-04:00

2008-09-05T16:46:47.913-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-06-08T15:39:00.000-04:00

BID 13106 MISC http://www.vuxml.org/freebsd/22f00553-a09d-11d9-a788-0001020eed82.html Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to (1) overwrite arbitrary files and possibly replace packages to execute arbitrary code via pkg_fetch, (2) overwrite arbitrary files via temporary files when portupgrade upgrades a port or package, or (3) create arbitrary zero-byte files via the pkgdb.fixme temporary file.

cpe:/a:realnetworks:helix_player cpe:/a:realnetworks:realone_player:1.0 cpe:/a:realnetworks:realone_player:2.0 cpe:/a:realnetworks:realplayer:::enterprise cpe:/a:realnetworks:realplayer:8.0 cpe:/a:realnetworks:realplayer:10.0 cpe:/a:realnetworks:realplayer:10.5

CVE-2005-0611

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:58.903-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050302 RealOne Player / Real .WAV Heap Overflow File Format Vulnerability VULNWATCH 20050302 RealOne Player / Real .WAV Heap Overflow File Format Vulnerability CONFIRM http://service.real.com/help/faq/security/050224_player/EN/ REDHAT RHSA-2005:265 REDHAT RHSA-2005:271 Heap-based buffer overflow in RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files.

cpe:/h:cisco:ipvc-3510-mcu cpe:/h:cisco:ipvc-3520-gw-2b cpe:/h:cisco:ipvc-3520-gw-2b2v cpe:/h:cisco:ipvc-3520-gw-2v cpe:/h:cisco:ipvc-3520-gw-4v cpe:/h:cisco:ipvc-3525-gw-1p cpe:/h:cisco:ipvc-3530-vta

CVE-2005-0612

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:48.397-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-08T15:42:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1013067 CISCO 20050202 Default SNMP Community Strings in Cisco IP/VC Products BID 12424 Cisco IP/VC Videoconferencing System 3510, 3520, 3525 and 3530 contain hard-coded default SNMP community strings, which allows remote attackers to gain access, cause a denial of service, and modify configuration.

cpe:/a:fckeditor:fckeditor:2.0_rc2

CVE-2005-0613

2005-02-28T00:00:00.000-05:00

2008-09-05T16:46:48.570-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-08T15:50:00.000-04:00

BID 12676 Unknown vulnerability in FCKeditor 2.0 RC2, when used with PHP-Nuke, allows remote attackers to upload arbitrary files.

cpe:/a:phpbb_group:phpbb:1.0.0 cpe:/a:phpbb_group:phpbb:1.2.0 cpe:/a:phpbb_group:phpbb:1.2.1 cpe:/a:phpbb_group:phpbb:1.4.0 cpe:/a:phpbb_group:phpbb:1.4.1 cpe:/a:phpbb_group:phpbb:1.4.2 cpe:/a:phpbb_group:phpbb:1.4.4 cpe:/a:phpbb_group:phpbb:2.0.0 cpe:/a:phpbb_group:phpbb:2.0.1 cpe:/a:phpbb_group:phpbb:2.0.2 cpe:/a:phpbb_group:phpbb:2.0.3 cpe:/a:phpbb_group:phpbb:2.0.4 cpe:/a:phpbb_group:phpbb:2.0.5 cpe:/a:phpbb_group:phpbb:2.0.6 cpe:/a:phpbb_group:phpbb:2.0.6c cpe:/a:phpbb_group:phpbb:2.0.6d cpe:/a:phpbb_group:phpbb:2.0.7 cpe:/a:phpbb_group:phpbb:2.0.7a cpe:/a:phpbb_group:phpbb:2.0.8 cpe:/a:phpbb_group:phpbb:2.0.8a cpe:/a:phpbb_group:phpbb:2.0.9 cpe:/a:phpbb_group:phpbb:2.0.10 cpe:/a:phpbb_group:phpbb:2.0.11 cpe:/a:phpbb_group:phpbb:2.0.12 cpe:/a:phpbb_group:phpbb:2.0_beta1 cpe:/a:phpbb_group:phpbb:2.0_rc1 cpe:/a:phpbb_group:phpbb:2.0_rc2 cpe:/a:phpbb_group:phpbb:2.0_rc3 cpe:/a:phpbb_group:phpbb:2.0_rc4

CVE-2005-0614

2005-05-02T00:00:00.000-04:00

2016-10-17T23:13:03.737-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050301 phpBB <= 2.0.12 UID Exploit BUGTRAQ 20050304 phpBB 2.0.12 Session Handling Administrator Authentication Bypass CONFIRM http://www.phpbb.com/phpBB/viewtopic.php?t=267563 sessions.php in phpBB 2.0.12 and earlier allows remote attackers to gain administrator privileges via the autologinid value in a cookie.

cpe:/a:postnuke_software_foundation:postnuke:0.760_rc2

CVE-2005-0615

2005-05-02T00:00:00.000-04:00

2016-10-17T23:13:05.190-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050228 [SECURITYREASON.COM] PostNuke Critical SQL Injection 0.760-RC2=>x CONFIRM http://news.postnuke.com/Article2669.html SECTRACK 1013324 Multiple SQL injection vulnerabilities in (1) index.php, (2) modules.php, or (3) admin.php in PostNuke 0.760-RC2 allow remote attackers to execute arbitrary SQL code via the catid parameter.

CVE-2005-0616

2005-02-28T00:00:00.000-05:00

2016-10-17T23:13:06.363-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050228 [SECURITYREASON.COM] PostNuke Critical XSS 0.760-RC2=>x cXIb8O3.2 CONFIRM http://news.postnuke.com/Article2669.html SECTRACK 1013324 Multiple cross-site scripting (XSS) vulnerabilities in the Download module for PostNuke 0.750 and 0.760-RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) Program name, (2) File link, (3) Author name (4) Author e-mail address, (5) File size, (6) Version, or (7) Home page variables.

cpe:/a:postnuke_software_foundation:postnuke:0.750 cpe:/a:postnuke_software_foundation:postnuke:0.760_rc2

CVE-2005-0617

2005-05-02T00:00:00.000-04:00

2016-10-17T23:13:07.613-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050228 [SECURITYREASON.COM] PostNuke SQL Injection 0.760-RC2=>x cXIb8O3.3 CONFIRM http://news.postnuke.com/Article2669.html SECTRACK 1013324 SQL injection vulnerability in dl-search.php in PostNuke 0.750 and 0.760-RC2 allows remote attackers to execute arbitrary SQL commands via the show parameter.

cpe:/h:nexland:pro800turbo cpe:/h:symantec:firewall_vpn_appliance_200r cpe:/h:symantec:gateway_security_360:857 cpe:/h:symantec:gateway_security_460:857

CVE-2005-0618

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:49.427-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-08T16:05:00.000-04:00

CONFIRM http://securityresponse.symantec.com/avcenter/security/Content/2005.02.28.html The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460/460R firmware before vuild 858, and Nexland Pro800turbo, when configured for load balancing between two WANs, might send SMTP traffic to a trusted network through an untrusted network.

cpe:/a:bfriendly.com:einstein:1.0.1

CVE-2005-0619

2005-02-28T00:00:00.000-05:00

2017-10-18T21:29:01.970-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013316 EXPLOIT-DB 846 Einstein 1.0.1 stores sensitive information such as usernames and passwords in plaintext in the registry, which allows local users to gain privileges.

cpe:/a:bfriendly.com:einstein:1.0.1

CVE-2005-0620

2005-03-02T00:00:00.000-05:00

2008-09-05T16:46:49.757-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-08T16:35:00.000-04:00

Einstein 1.0 stores credit card information in plaintext in the world-readable wallets.dat file, which allows local users to steal the information.

cpe:/a:enlight_software:scrapland:1.0

CVE-2005-0621

2005-05-02T00:00:00.000-04:00

2016-10-17T23:13:08.847-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/scrapboom-adv.txt FULLDISC 20050228 Server termination in Scrapland 1.0 Scrapland 1.0 and earlier allows remote attackers to cause a denial of service (server termination) by triggering an error, which is treated as a fatal error by the server, as demonstrated using (1) signed integers for size values, (2) an invalid model, (3) a "newpos" value that is less than or equal to a size value, or (4) partial packets.

cpe:/a:raidenhttpd:raidenhttpd:1.1.32

CVE-2005-0622

2005-03-01T00:00:00.000-05:00

2016-10-17T23:13:10.347-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050301 [SIG^2 G-TEC] RaidenHTTPD Server Buffer Overflow and CGI Source Disclosure Vulnerabilities MISC http://www.security.org.sg/vuln/raidenhttpd1132.html RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to view the PHP source code via an HTTP GET request for a filename with a trailing (1) . (dot) or (2) space.

cpe:/a:raidenhttpd:raidenhttpd:1.1.32

CVE-2005-0623

2005-03-01T00:00:00.000-05:00

2016-10-17T23:13:11.490-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050301 [SIG^2 G-TEC] RaidenHTTPD Server Buffer Overflow and CGI Source Disclosure Vulnerabilities MISC http://www.security.org.sg/vuln/raidenhttpd1132.html Buffer overflow in RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to execute arbitrary code via a long URL.

cpe:/a:debian:reportbug:2.60 cpe:/a:debian:reportbug:2.61

CVE-2005-0624

2005-02-28T00:00:00.000-05:00

2017-07-10T21:32:21.500-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=295407 BUGTRAQ 20050228 [USN-88-1] reportbug information disclosure CONFIRM https://bugzilla.ubuntu.com/show_bug.cgi?id=6600 XF reportbug-file-world-readable(19504) reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords.

cpe:/a:debian:reportbug:2.60 cpe:/a:debian:reportbug:2.61 cpe:/a:debian:reportbug:3.2

CVE-2005-0625

2005-02-28T00:00:00.000-05:00

2017-07-10T21:32:21.547-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=295407 BUGTRAQ 20050228 [USN-88-1] reportbug information disclosure MISC https://bugzilla.ubuntu.com/show_bug.cgi?id=6600 CONFIRM https://bugzilla.ubuntu.com/show_bug.cgi?id=6717 XF reportbug-smtppasswd-information-disclosure(19520) reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd.

cpe:/a:squid:squid:2.5.stable5 cpe:/a:squid:squid:2.5.stable6 cpe:/a:squid:squid:2.5.stable7

CVE-2005-0626

2005-03-08T00:00:00.000-05:00

2018-10-03T17:29:45.357-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov FEDORA FLSA-2006:152809 REDHAT RHSA-2005:415 BID 12716 CONFIRM http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-setcookie XF squid-set-cookie-race-condition(19581) UBUNTU USN-93-1 Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies.

cpe:/a:trolltech:qt:3.0 cpe:/a:trolltech:qt:3.0.3 cpe:/a:trolltech:qt:3.0.5 cpe:/a:trolltech:qt:3.1 cpe:/a:trolltech:qt:3.1.1 cpe:/a:trolltech:qt:3.1.2 cpe:/a:trolltech:qt:3.2.1 cpe:/a:trolltech:qt:3.2.3 cpe:/a:trolltech:qt:3.3.0 cpe:/a:trolltech:qt:3.3.1 cpe:/a:trolltech:qt:3.3.2 cpe:/a:trolltech:qt:3.3.3

CVE-2005-0627

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:50.943-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-08T17:23:00.000-04:00

ALLOWS_OTHER_ACCESS

MISC http://bugs.gentoo.org/show_bug.cgi?id=75181 GENTOO GLSA-200503-01 BID 12695 Qt before 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to load shared libraries regardless of the LD_LIBRARY_PATH environment variable, which allows local users to execute arbitrary programs.

cpe:/a:demof:forumwa:v1

CVE-2005-0628

2005-03-01T00:00:00.000-05:00

2016-10-17T23:13:15.397-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050301 Forumwa search.php xss vulnerability BID 12689 Multiple cross-site scripting (XSS) vulnerabilities in Forumwa 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter in search.php or the (2) body or (3) subject of a forum message.

cpe:/a:427bb:fourtwosevenbb:2.0 cpe:/a:427bb:fourtwosevenbb:2.0.1 cpe:/a:427bb:fourtwosevenbb:2.1 cpe:/a:427bb:fourtwosevenbb:2.1.1 cpe:/a:427bb:fourtwosevenbb:2.1.2 cpe:/a:427bb:fourtwosevenbb:2.1.3 cpe:/a:427bb:fourtwosevenbb:2.2 cpe:/a:427bb:fourtwosevenbb:2.2.1

CVE-2005-0629

2005-03-01T00:00:00.000-05:00

2017-07-10T21:32:21.670-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050301 427BB profile.php XSS vulnerability. BUGTRAQ 20050301 427BB profile.php XSS vulnerability. SECTRACK 1013337 BID 12693 XF 427bb-profile-xss(19546) Multiple cross-site scripting (XSS) vulnerabilities in profile.php in 427BB 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) Avatar parameters.

cpe:/a:pblang:pblang:4.0 cpe:/a:pblang:pblang:4.6 cpe:/a:pblang:pblang:4.56_4.5_rc2 cpe:/a:pblang:pblang:4.63

CVE-2005-0630

2005-03-01T00:00:00.000-05:00

2017-07-10T21:32:21.717-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050301 Software PBLang 4.63 sendpm.php reply file read vulnerability CONFIRM http://pblforum.drmartinus.de/post.php?cat=2&fid=2&pid=40&page=1 BID 12690 XF pblang-sendpm-obtain-information(19544) sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the orig parameter.

cpe:/a:pblang:pblang:4.0 cpe:/a:pblang:pblang:4.6 cpe:/a:pblang:pblang:4.56_4.5_rc2 cpe:/a:pblang:pblang:4.63

CVE-2005-0631

2005-03-01T00:00:00.000-05:00

2017-07-10T21:32:21.767-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050301 Software PBLang 4.63 delpm.php authentication vulnerability CONFIRM http://pblforum.drmartinus.de/post.php?cat=2&fid=2&pid=42&page=1 BID 12694 XF pblang-delpm-delete-messages(19552) delpm.php in PBLang 4.63 allows remote authenticated users to delete arbitrary PM files by modifying the "id" and "a" parameters.

cpe:/a:phpnews:phpnews:1.2.3 cpe:/a:phpnews:phpnews:1.2.4

CVE-2005-0632

2005-03-01T00:00:00.000-05:00

2016-10-17T23:13:20.083-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050301 PHP News <= 1.2.4 - Remote File Inclusion (VXSfx) BUGTRAQ 20050303 PHP News <= 1.2.4 - Remote File Inclusion Exploit SECTRACK 1013345 BID 12696 PHP remote file inclusion vulnerability in auth.php in PHPNews 1.2.4 and possibly 1.2.3, allows remote attackers to execute arbitrary PHP code via the path parameter.

cpe:/a:cerulean_studios:trillian:3.0 cpe:/a:cerulean_studios:trillian_pro:3.0

CVE-2005-0633

2005-03-02T00:00:00.000-05:00

2016-10-17T23:13:21.427-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050306 See-security advisory: Trillian Basic 3.0 PNG Processing Buffer overflow MISC http://www.securiteam.com/exploits/5KP030KF5E.html BID 12703 VUPEN ADV-2005-0221 Buffer overflow in Trillian 3.0 and Pro 3.0 allows remote attackers to execute arbitrary code via a crafted PNG image file.

cpe:/a:kmint21_software:golden_ftp_server:1.92

CVE-2005-0634

2005-05-02T00:00:00.000-04:00

2011-03-07T21:20:19.313-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MISC http://retrogod.altervista.org/golden_heap.html BUGTRAQ 20050302 Golden Ftp server 1.29 Username remote Buffer Overflow BID 12704 VUPEN ADV-2006-4936 Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command.

cpe:/a:foxmail:foxmail_email_server:2.0

CVE-2005-0635

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:52.273-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-06-08T17:30:00.000-04:00

ALLOWS_ADMIN_ACCESS

SECTRACK 1013356 BUGTRAQ 20050302 Foxmail server "USER" command Multiple remote buffer overflow BID 12711 Buffer overflow in Foxmail Server 2.0 allows remote attackers to execute arbitrary code via a long USER command.

cpe:/a:foxmail:foxmail_email_server:2.0

CVE-2005-0636

2005-03-02T00:00:00.000-05:00

2008-09-05T16:46:52.443-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-06-08T17:34:00.000-04:00

ALLOWS_ADMIN_ACCESS

SECTRACK 1013356 BUGTRAQ 20050302 Foxmail server "USER" command Multiple remote buffer overflow BID 12711 Format string vulnerability in Foxmail Server 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the USER command.

cpe:/o:openbsd:openbsd:3.5 cpe:/o:openbsd:openbsd:3.6

CVE-2005-0637

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:21.827-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013333 OPENBSD 20050228 011: SECURITY FIX: February 28, 2005 i386 only OPENBSD 20050228 028: SECURITY FIX: February 28, 2005 BID 12825 XF openbsd-copy-functions(19531) The copy functions in locore.s such as copyout in OpenBSD 3.5 and 3.6, and possibly other BSD based operating systems, may allow attackers to exceed certain address boundaries and modify kernel memory.

cpe:/a:xli:xli:1.14 cpe:/a:xli:xli:1.15 cpe:/a:xli:xli:1.16 cpe:/a:xli:xli:1.17 cpe:/o:altlinux:alt_linux:2.3::compact cpe:/o:altlinux:alt_linux:2.3::junior cpe:/o:suse:suse_linux:1.0 cpe:/o:suse:suse_linux:2.0 cpe:/o:suse:suse_linux:3.0 cpe:/o:suse:suse_linux:4.0 cpe:/o:suse:suse_linux:4.2 cpe:/o:suse:suse_linux:4.3 cpe:/o:suse:suse_linux:4.4 cpe:/o:suse:suse_linux:4.4.1 cpe:/o:suse:suse_linux:5.0 cpe:/o:suse:suse_linux:5.1 cpe:/o:suse:suse_linux:5.2 cpe:/o:suse:suse_linux:5.3 cpe:/o:suse:suse_linux:6.0 cpe:/o:suse:suse_linux:6.1 cpe:/o:suse:suse_linux:6.1:alpha cpe:/o:suse:suse_linux:6.2 cpe:/o:suse:suse_linux:6.3 cpe:/o:suse:suse_linux:6.3::ppc cpe:/o:suse:suse_linux:6.3:alpha cpe:/o:suse:suse_linux:6.4 cpe:/o:suse:suse_linux:6.4::i386 cpe:/o:suse:suse_linux:6.4::ppc cpe:/o:suse:suse_linux:6.4:alpha cpe:/o:suse:suse_linux:7.0 cpe:/o:suse:suse_linux:7.0::i386 cpe:/o:suse:suse_linux:7.0::ppc cpe:/o:suse:suse_linux:7.0::sparc cpe:/o:suse:suse_linux:7.0:alpha cpe:/o:suse:suse_linux:7.1 cpe:/o:suse:suse_linux:7.1::spa cpe:/o:suse:suse_linux:7.1::sparc cpe:/o:suse:suse_linux:7.1::x86 cpe:/o:suse:suse_linux:7.1:alpha cpe:/o:suse:suse_linux:7.2 cpe:/o:suse:suse_linux:7.2::i386 cpe:/o:suse:suse_linux:7.3 cpe:/o:suse:suse_linux:7.3::i386 cpe:/o:suse:suse_linux:7.3::ppc cpe:/o:suse:suse_linux:7.3::sparc cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.0::i386 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.1::x86_64 cpe:/o:suse:suse_linux:9.2 cpe:/o:suse:suse_linux:9.2::x86_64 cpe:/o:suse:suse_linux:9.3

CVE-2005-0638

2005-03-02T00:00:00.000-05:00

2018-10-19T11:31:15.043-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=79762 GENTOO GLSA-200503-05 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2005-134_RHSA-2005-332.pdf DEBIAN DSA-695 REDHAT RHSA-2005:332 FEDORA FLSA-2006:152923 BID 12712 xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.

CVE-2005-0639

2005-03-02T00:00:00.000-05:00

2008-09-05T16:46:53.067-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-08T17:45:00.000-04:00

ALLOWS_OTHER_ACCESS

CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=79762 GENTOO GLSA-200503-05 DEBIAN DSA-695 Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via "buffer management errors" from certain image properties, some of which may be related to integer overflows in PPM files.

cpe:/a:ca:unicenter_asset_management:4.0

CVE-2005-0640

2005-03-02T00:00:00.000-05:00

2008-09-05T16:46:53.367-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-08T17:55:00.000-04:00

ALLOWS_OTHER_ACCESS

CONFIRM http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=Qo64323 Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 does not properly initialize the "Change Credentials for Database" window, which allows local users to recover the SQL Admin password via certain methods.

cpe:/a:ca:unicenter_asset_management:4.0

CVE-2005-0641

2005-03-02T00:00:00.000-05:00

2008-09-05T16:46:53.520-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-08T18:17:00.000-04:00

CONFIRM http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=Qo64323 Cross-site scripting (XSS) vulnerability in the Reporter for Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 allows remote attackers to inject arbitrary HTML or web script via the (1) name or (2) description in a report template.

cpe:/a:ca:unicenter_asset_management:4.0

CVE-2005-0642

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:53.693-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-08T20:04:00.000-04:00

ALLOWS_OTHER_ACCESS

CONFIRM http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=Qo64323 SQL injection vulnerability in the Query Designer for Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 allows remote attackers to execute arbitrary SQL via an imported file.

cpe:/a:mcafee:antivirus_engine:4.3.20

CVE-2005-0643

2005-05-02T00:00:00.000-04:00

2008-09-10T15:36:21.587-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-08T20:16:00.000-04:00

ALLOWS_USER_ACCESS

CONFIRM http://images.mcafee.com/misc/McAfee_Security_Bulletin_05-march-17.pdf BID 10243 Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4357 allows remote attackers to execute arbitrary code via crafted LHA files.

cpe:/a:mcafee:antivirus_engine:4.3.20

CVE-2005-0644

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:54.007-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-08T20:21:00.000-04:00

ALLOWS_USER_ACCESS

CONFIRM http://images.mcafee.com/misc/McAfee_Security_Bulletin_05-march-17.pdf SECTRACK 1013463 CERT-VN VU#361180 BID 10243 BID 12832 ISS 20050317 McAfee AntiVirus Library Stack Overflow Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4436 allows remote attackers to execute arbitrary code via a malformed LHA file with a type 2 header file name field, a variant of CVE-2005-0643.

CVE-2005-0645

2005-05-02T00:00:00.000-04:00

2016-10-17T23:13:23.007-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050301 Kernelpanik Labs Digest 2005-2 MISC http://www.kernelpanik.org/docs/kernelpanik/cutenews.txt Cross-site scripting (XSS) vulnerability in show.inc.php in cuteNews 1.3.6 allows remote attackers to inject arbitrary HTML, web script, and PHP code via the (1) CLIENT-IP or (2) X-FORWARDED-FOR header in an HTTP POST request to show_news.php.

cpe:/a:php_arena:panews:2.0.4b

CVE-2005-0646

2005-05-02T00:00:00.000-04:00

2016-10-17T23:13:24.240-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050301 Kernelpanik Labs Digest 2005-2 MISC http://www.kernelpanik.org/docs/kernelpanik/panews.txt SQL injection vulnerability in auth.php in paNews 2.0.4b allows remote attackers to execute arbitrary SQL via the mysql_prefix parameter.

cpe:/a:php_arena:panews:2.0.4b

CVE-2005-0647

2005-05-02T00:00:00.000-04:00

2016-10-17T23:13:25.490-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050301 Kernelpanik Labs Digest 2005-2 MISC http://www.kernelpanik.org/docs/kernelpanik/panews.txt admin_setup.php in paNews 2.0.4b allows remote attackers to inject arbitrary PHP code via the (1) $form[comments] or (2) $form[autoapprove] parameters, which are written to config.php.

cpe:/a:pixel-apes_group:safehtml:1.3.0

CVE-2005-0648

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:54.647-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-08T20:44:00.000-04:00

CONFIRM http://pixel-apes.com/safehtml/feed SECTRACK 1013315 Multiple vulnerabilities in Pixel-Apes SafeHTML before 1.3.0 allow remote attackers to bypass cross-site scripting (XSS) protection via (1) "decimal HTML entities" or (2) "the \x00 symbol."

cpe:/a:pixel-apes_group:safehtml:1.2.0

CVE-2005-0649

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:54.803-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-08T20:51:00.000-04:00

CONFIRM http://pixel-apes.com/safehtml/feed Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to bypass cross-site scripting (XSS) protection via "hexadecimal HTML entities."

cpe:/a:projectbb:projectbb:0.4.5.1

CVE-2005-0650

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:21.873-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050308 failles dans ProjectBB v0.4.5.1 SECTRACK 1013332 BID 12709 VUPEN ADV-2005-0223 XF projectbb-multiple-xss(19556) Multiple cross-site scripting (XSS) vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to inject arbitrary web script or HTML via (1) the pages parameter to divers.php (incorrectly referred to as "drivers.php" by some sources), (2) in the search feature text area, (3) forum name, (4) site name or (5) the maximum avatar size in the option section, (5) new category or (6) new forum fields in the forum section.

cpe:/a:projectbb:projectbb:0.4.5.1

CVE-2005-0651

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:21.920-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050308 failles dans ProjectBB v0.4.5.1 SECTRACK 1013332 BID 12710 VUPEN ADV-2005-0223 XF projectbb-mulitple-sql-injection(19557) Multiple SQL injection vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to execute arbitrary SQL commands via (1) liste or (2) desc parameters to divers.php (incorrectly referred to as "drivers.php" by some sources), (3) the search feature text area, (4) post name in the post creation feature, (5) City, (6) Homepage, (7) ICQ, (8) AOL, (9) Yahoo!, (10) MSN, or (11) e-mail fields in the profile feature or (12) the new field in the moderator section.

cpe:/o:hp:openvms:6.2::alpha cpe:/o:hp:openvms:6.2::vax cpe:/o:hp:openvms:7.3::vax cpe:/o:hp:openvms:7.3-1::alpha cpe:/o:hp:openvms:7.3-2::alpha

CVE-2005-0652

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:21.983-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov HP SSRT4866 XF openvms-gain-access(19566) Unknown vulnerability in HP OpenVMS VAX 7.x and 6.x and OpenVMS Alpha 7.x or 6.x allows local users to access privileged files.

cpe:/a:phpmyadmin:phpmyadmin:2.6.1

CVE-2005-0653

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:55.443-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-08T21:29:00.000-04:00

ALLOWS_OTHER_ACCESS

MISC http://bugs.gentoo.org/show_bug.cgi?id=83792 GENTOO GLSA-200503-07 phpMyAdmin 2.6.1 does not properly grant permissions on tables with an underscore in the name, which grants remote authenticated users more privileges than intended.

cpe:/a:the_gimp_team:gimp:2.0.5 cpe:/a:the_gimp_team:gimp:2.2.3 cpe:/a:the_gimp_team:gimp:2.2.4

CVE-2005-0654

2005-05-02T00:00:00.000-04:00

2016-10-17T23:13:30.600-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050304 GIMP gifload.exe GIF file (image width)*(image height)==0 DOS vulnerability gifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4 allows remote attackers or local users to cause a denial of service (application crash) via the image descriptor (1) height or (2) width fields set to zero.

cpe:/a:arif_supriyanto:auracms:1.5

CVE-2005-0655

2005-05-02T00:00:00.000-04:00

2016-10-17T23:13:32.133-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050302 Vulnerabilities in Aura CMS SECTRACK 1013357 auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to (1) teman.php, (2) hal.php, or (3) arsip.php, which reveals the path in a PHP error message.

cpe:/a:arif_supriyanto:auracms:1.5

CVE-2005-0656

2005-05-02T00:00:00.000-04:00

2016-10-17T23:13:33.320-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050302 Vulnerabilities in Aura CMS SECTRACK 1013357 Multiple cross-site scripting (XSS) vulnerabilities in auraCMS 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) hits parameter to hits.php, (2) query parameter to index.php, or (3) theCount parameter to counter.php.

cpe:/a:computalynx:cproxy:3.3 cpe:/a:computalynx:cproxy:3.4 cpe:/a:computalynx:cproxy:3.4.4

CVE-2005-0657

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:22.047-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050302 Security Advisory: Computalynx CProxy Server Multiple Remote Vulnerabilities XF computalynx-cproxy-directory-traversal(19573) XF computalynx-cproxy-get-dos(19574) Directory traversal vulnerability in Computalynx CProxy 3.3.x and 3.4.x through 3.4.4 allows remote attackers to read arbitrary files or cause a denial of service (application crash) via a .. (dot dot) in an HTTP request.

cpe:/a:cmw_linklist:cmw_linklist:1.4.1

CVE-2005-0658

2005-05-02T00:00:00.000-04:00

2016-10-17T23:13:35.697-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050303 TYPO3 SQL Injection vunerabilitie BUGTRAQ 20050304 RE: TYPO3 SQL Injection vunerabilitie BUGTRAQ 20050304 Re: TYPO3 SQL Injection vunerabilitie SQL injection vulnerability in a third party extension to TYPO3 allows remote attackers to execute arbitrary SQL commands via the category_uid parameter.

cpe:/a:phpbb_group:phpbb:1.0.0 cpe:/a:phpbb_group:phpbb:1.2.0 cpe:/a:phpbb_group:phpbb:1.2.1 cpe:/a:phpbb_group:phpbb:1.4.0 cpe:/a:phpbb_group:phpbb:1.4.1 cpe:/a:phpbb_group:phpbb:1.4.2 cpe:/a:phpbb_group:phpbb:1.4.4 cpe:/a:phpbb_group:phpbb:2.0.0 cpe:/a:phpbb_group:phpbb:2.0.1 cpe:/a:phpbb_group:phpbb:2.0.2 cpe:/a:phpbb_group:phpbb:2.0.3 cpe:/a:phpbb_group:phpbb:2.0.4 cpe:/a:phpbb_group:phpbb:2.0.5 cpe:/a:phpbb_group:phpbb:2.0.6 cpe:/a:phpbb_group:phpbb:2.0.6c cpe:/a:phpbb_group:phpbb:2.0.6d cpe:/a:phpbb_group:phpbb:2.0.7 cpe:/a:phpbb_group:phpbb:2.0.7a cpe:/a:phpbb_group:phpbb:2.0.8 cpe:/a:phpbb_group:phpbb:2.0.8a cpe:/a:phpbb_group:phpbb:2.0.9 cpe:/a:phpbb_group:phpbb:2.0.10 cpe:/a:phpbb_group:phpbb:2.0.11 cpe:/a:phpbb_group:phpbb:2.0.12 cpe:/a:phpbb_group:phpbb:2.0.13 cpe:/a:phpbb_group:phpbb:2.0_beta1 cpe:/a:phpbb_group:phpbb:2.0_rc1 cpe:/a:phpbb_group:phpbb:2.0_rc2 cpe:/a:phpbb_group:phpbb:2.0_rc3 cpe:/a:phpbb_group:phpbb:2.0_rc4

CVE-2005-0659

2005-05-02T00:00:00.000-04:00

2016-10-17T23:13:37.197-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050304 -==phpBB 2.0.13 Full path disclosure==- MISC http://neosecurityteam.net/Advisories/Advisory-09.txt SECTRACK 1013377 phpBB 2.0.13 and earlier allows remote attackers to obtain sensitive information via a direct request to oracle.php, which reveals the path in a PHP error message.

cpe:/a:adalis:d-forum:1.11

CVE-2005-0660

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:56.630-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-08T22:18:00.000-04:00

SECTRACK 1013349 Multiple cross-site scripting (XSS) vulnerabilities in D-Forum 1.11 allows remote attackers to inject arbitrary web script or HTML via certain fields, as demonstrated using the page parameter in nav.php3.

cpe:/a:woltlab:burning_board:2.0.3 cpe:/a:woltlab:burning_board:2.1.5 cpe:/a:woltlab:burning_board:2.2.1 cpe:/a:woltlab:burning_board:2.3.0

CVE-2005-0661

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:56.787-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-08T22:46:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1013351 SQL injection vulnerability in the getwbbuserdata function in session.php for Woltlab Burning Board 2.0.3 through 2.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) lastvisit cookie.

cpe:/a:mercuryboard:mercuryboard:1.1.2

CVE-2005-0662

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:56.960-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-08T22:56:00.000-04:00

Cross-site scripting (XSS) vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the Avatar field.

cpe:/a:mercuryboard:mercuryboard:1.1.2

CVE-2005-0663

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:22.093-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

XF mercuryboard-index-sql-injection(19051) SQL injection vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary SQL commands via the f parameter.

cpe:/a:libexif:libexif:0.6.9

CVE-2005-0664

2005-05-02T00:00:00.000-04:00

2018-10-03T17:29:46.090-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1013398 SUNALERT 102041 DEBIAN DSA-709 GENTOO GLSA-200503-17 MANDRAKE MDKSA-2005:064 REDHAT RHSA-2005:300 VUPEN ADV-2005-0240 VUPEN ADV-2005-2565 MISC https://bugzilla.ubuntu.com/show_bug.cgi?id=7152 UBUNTU USN-91-1 Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.

cpe:/a:john_bradley:xv:3.10a

CVE-2005-0665

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:57.427-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

2005-06-09T10:02:00.000-04:00

ALLOWS_USER_ACCESS

MISC http://bugs.gentoo.org/show_bug.cgi?id=83686 GENTOO GLSA-200503-09 Format string vulnerability in xv before 3.10a allows remote attackers to execute arbitrary code via format string specifiers in a filename.

cpe:/a:the_pax_team:pax_linux:2.2 cpe:/a:the_pax_team:pax_linux:2.4.20 cpe:/a:the_pax_team:pax_linux:2.4.21 cpe:/a:the_pax_team:pax_linux:2.4.22 cpe:/a:the_pax_team:pax_linux:2.4.23 cpe:/a:the_pax_team:pax_linux:2.4.24 cpe:/a:the_pax_team:pax_linux:2.4.25 cpe:/a:the_pax_team:pax_linux:2.4.26 cpe:/a:the_pax_team:pax_linux:2.4.27 cpe:/a:the_pax_team:pax_linux:2.4.28 cpe:/a:the_pax_team:pax_linux:2.6.5

CVE-2005-0666

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:57.583-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-09T10:13:00.000-04:00

ALLOWS_USER_ACCESS

BUGTRAQ 20050305 PaX privilege elevation security bug BID 12729 Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC and VMA mirroring, allows local users and possibly remote attackers to bypass intended access restrictions and execute arbitrary code.

cpe:/a:sylpheed:sylpheed:0.8.11 cpe:/a:sylpheed:sylpheed:0.9.4 cpe:/a:sylpheed:sylpheed:0.9.5 cpe:/a:sylpheed:sylpheed:0.9.6 cpe:/a:sylpheed:sylpheed:0.9.7 cpe:/a:sylpheed:sylpheed:0.9.8 cpe:/a:sylpheed:sylpheed:0.9.9 cpe:/a:sylpheed:sylpheed:0.9.10 cpe:/a:sylpheed:sylpheed:0.9.11 cpe:/a:sylpheed:sylpheed:0.9.12 cpe:/a:sylpheed:sylpheed:0.9.99 cpe:/a:sylpheed:sylpheed:1.0.0 cpe:/a:sylpheed:sylpheed:1.0.1 cpe:/a:sylpheed:sylpheed:1.0.2 cpe:/a:sylpheed-claws:sylpheed-claws:1.0.2 cpe:/o:altlinux:alt_linux:2.3::compact cpe:/o:altlinux:alt_linux:2.3::junior cpe:/o:gentoo:linux cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:fedora_core:core_3.0 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor

CVE-2005-0667

2005-03-07T00:00:00.000-05:00

2008-09-05T16:46:57.770-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

2005-06-09T10:13:00.000-04:00

ALLOWS_USER_ACCESS

SECTRACK 1013376 CONFIRM http://sylpheed.good-day.net/changelog.html.en CONFIRM http://sylpheed.good-day.net/changelog-devel.html.en GENTOO GLSA-200503-26 REDHAT RHSA-2005:303 Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message.

cpe:/a:christian_hilgers:http_anti_virus_proxy_%28havp%29:0.50

CVE-2005-0668

2005-03-04T00:00:00.000-05:00

2008-09-05T16:46:57.990-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-09T10:32:00.000-04:00

SECTRACK 1013370 CONFIRM http://www.bemberg.de/server-side/index.htm Unknown vulnerability in HTTP Anti Virus Proxy (HAVP) before 0.51 prevents viruses from being properly detected in certain files such as (1) .CAB or (2) .ZIP files.

cpe:/a:coinsoft_technologies:phpcoin:1.2 cpe:/a:coinsoft_technologies:phpcoin:1.2.1 cpe:/a:coinsoft_technologies:phpcoin:1.2.1b

CVE-2005-0669

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:22.170-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://forums.phpcoin.com/index.php?showtopic=4101 CONFIRM http://forums.phpcoin.com/index.php?showtopic=4116 CONFIRM http://forums.phpcoin.com/index.php?showtopic=4118 MISC http://lostmon.blogspot.com/2005/03/phpcoin-posible-sql-injection-comands.html SECTRACK 1013329 BID 12686 XF phpcoin-id-sql-injection(19571) Multiple SQL injection vulnerabilities in mod.php for phpCOIN 1.2.0 through 1.2.1b allow remote attackers to execute arbitrary SQL commands via the (1) the faq_id in the faq mod, (2) the id parameter in the pages mod, (3) the id parameter in the siteinfo module, (4) the topic_id parameter in the articles module, (5) the ord_id in the orders module, (6) the dom_id parameter in the domains module, or (7) the invd_id parameter in the invoices module.

cpe:/a:coinsoft_technologies:phpcoin:1.2 cpe:/a:coinsoft_technologies:phpcoin:1.2.1 cpe:/a:coinsoft_technologies:phpcoin:1.2.1b

CVE-2005-0670

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:22.233-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://forums.phpcoin.com/index.php?showtopic=4101 CONFIRM http://forums.phpcoin.com/index.php?showtopic=4116 CONFIRM http://forums.phpcoin.com/index.php?showtopic=4118 MISC http://lostmon.blogspot.com/2005/03/phpcoin-posible-sql-injection-comands.html SECTRACK 1013329 BID 12686 XF phpcoin-xss(19572) Cross-site scripting (XSS) vulnerability in phpCOIN 1.2.0 through 1.2.1b allows remote attackers to inject arbitrary web script or HTML via (1) the new parameter to mod.php, (2) the w parameter to mod.php, (3) the e parameter to login.php, (4) the o parameter to login.php, and possibly other scripts.

cpe:/a:ca3de:ca3de:march_2004

CVE-2005-0671

2005-03-03T00:00:00.000-05:00

2008-09-05T16:46:58.473-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-09T10:45:00.000-04:00

ALLOWS_USER_ACCESS

MISC http://aluigi.altervista.org/adv/ca3dex-adv.txt SECTRACK 1013361 BID 12727 Format string vulnerability in Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via format string specifiers in a command.

cpe:/a:ca3de:ca3de

CVE-2005-0672

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:58.630-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-09T10:41:00.000-04:00

ALLOWS_USER_ACCESS

MISC http://aluigi.altervista.org/adv/ca3dex-adv.txt SECTRACK 1013361 BID 12727 Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via text strings that are not null terminated, which triggers a null dereference.

cpe:/a:phpbb_group:phpbb:2.0.13

CVE-2005-0673

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:58.803-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-09T10:51:00.000-04:00

SECTRACK 1013362 Cross-site scripting (XSS) vulnerability in usercp_register.php for phpBB 2.0.13 allows remote attackers to inject arbitrary web script or HTML by setting the (1) allowhtml, (2) allowbbcode, or (3) allowsmilies parameters to inject HTML into signatures for personal messages, possibly when they are processed by privmsg.php or viewtopic.php.

cpe:/a:php_arena:pabox:1.6

CVE-2005-0674

2005-03-03T00:00:00.000-05:00

2016-10-17T23:13:38.367-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050303 [XSS] paBox 1.6 SECTRACK 1013363 BID 12719 Cross-site scripting (XSS) vulnerability in the News module for paBox 1.6 allows remote attackers to inject arbitrary web script or HTML via the text hidden parameter in an HTTP POST request.

cpe:/a:phpoutsourcing:zorum:3.3 cpe:/a:phpoutsourcing:zorum:3.4 cpe:/a:phpoutsourcing:zorum:3.5

CVE-2005-0675

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:59.117-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-09T15:46:00.000-04:00

SECTRACK 1013365 Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.5 allows remote attackers to inject arbitrary web script or HTML via the (1) list or (2) frommethod parameters.

cpe:/a:phpoutsourcing:zorum:3.5

CVE-2005-0676

2005-05-04T00:00:00.000-04:00

2008-09-05T16:46:59.270-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-09T16:03:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1013365 index.php in Zorum 3.5 allows remote attackers to trigger an SQL error, and possibly inject arbitrary SQL commands, via the search capability.

cpe:/a:phpoutsourcing:zorum:3.5

CVE-2005-0677

2005-05-02T00:00:00.000-04:00

2008-09-05T16:46:59.443-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-09T15:51:00.000-04:00

SECTRACK 1013365 index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter.

cpe:/a:stadtaus:form_mail_script:2.3

CVE-2005-0678

2005-05-02T00:00:00.000-04:00

2016-10-17T23:13:39.463-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050304 PHP Form Mail Script (2.3) - Arbitrary File Inclusion (VXSfx) SECTRACK 1013378 CONFIRM http://www.stadtaus.com/forum/t-1579.html PHP remote file inclusion vulnerability in formmail.inc.php for Form Mail Script 2.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the script_root to reference a URL on a remote web server that contains the code.

cpe:/a:stadtaus:tell_a_friend_script:2.7

CVE-2005-0679

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:16.060-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://arfis.wordpress.com/2007/09/13/rfi-02-openelibrary/ SECTRACK 1013390 BUGTRAQ 20070727 Friend Script 2.5 - 2.4 Remote File İnclude CONFIRM http://www.stadtaus.com/forum/t-1579.html XF tellafriend-scriptroot-file-include(19630) PHP remote file inclusion vulnerability in tell_a_friend.inc.php for Tell A Friend Script 2.7 before 20050305 allows remote attackers to execute arbitrary PHP code by modifying the script_root parameter to reference a URL on a remote web server that contains the code. NOTE: it was later reported that 2.4 is also affected.

CVE-2005-0680

2005-03-07T00:00:00.000-05:00

2016-10-17T23:13:40.633-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050304 Download Center Lite (DCL) - Arbitrary File Inclusion (VXSfx) CONFIRM http://www.stadtaus.com/forum/t-1579.html PHP remote file inclusion vulnerability in download_center_lite.inc.php for Download Center Lite 1.6 allows remote attackers to execute arbitrary PHP code by modifying the script_root parameter to reference a URL on a remote web server that contains the code.

cpe:/a:nokia:series:60

CVE-2005-0681

2005-03-06T00:00:00.000-05:00

2017-07-10T21:32:22.360-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1013380 MISC http://www.securiteam.com/securitynews/5PP0V00G1S.html BID 12743 XF nokia-symbian-dos(19594) Nokia Symbian 60 allows remote attackers to cause a denial of service (phone restart) via a Bluetooth nickname.

cpe:/a:drupal:drupal:4.4.0 cpe:/a:drupal:drupal:4.4.1 cpe:/a:drupal:drupal:4.4.2 cpe:/a:drupal:drupal:4.5.0 cpe:/a:drupal:drupal:4.5.1

CVE-2005-0682

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:00.257-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-09T16:28:00.000-04:00

CONFIRM http://drupal.org/drupal-4.5.2 CONFIRM http://drupal.org/files/drupal-4.5-xss-fix.patch Cross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via certain inputs.

CVE-2005-0683

2005-05-02T00:00:00.000-04:00

2008-09-10T15:36:42.430-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0659. Reason: This candidate is a duplicate of CVE-2005-0659. Notes: All CVE users should reference CVE-2005-0659 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVE-2005-0684

2005-04-25T00:00:00.000-04:00

2011-03-07T21:20:26.250-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-06-09T16:39:00.000-04:00

ALLOWS_ADMIN_ACCESS

CONFIRM http://dev.mysql.com/doc/maxdb/changes/changes_7.5.00.26.html#WebDAV IDEFENSE 20050425 MySQL MaxDB Webtool Remote Stack Overflow Vulnerability IDEFENSE 20050425 MySQL MaxDB Webtool Remote Lock-Token Stack Overflow Vulnerability BID 13368 Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long file parameter after a percent ("%") sign or (2) a long Lock-Token string to the WebDAV functionality, which is not properly handled by the getLockTokenHeader function in WDVHandler_CommonUtils.c.

cpe:/a:outstart:participate_enterprise:3

CVE-2005-0685

2005-03-08T00:00:00.000-05:00

2017-07-10T21:32:22.407-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://security.honour.ca/outstartpsi.txt BUGTRAQ 20050308 PE Multiple Remote Access Validation Vulnerabilities (Participate Systems Inc. / Outstart Inc.) BID 12752 XF pe-access-validation-dos(19632) Multiple access validation errors in OutStart Participate Enterprise (PE) allow remote attackers to (1) browse arbitrary directory trees by modifying the rootFolder parameter to displaynavigator.jsp, (2) rename arbitrary directory objects by modifying the selectedObject parameter to renamepopup.jsp, (3) delete arbitrary directory objects by modifying the selectedObjectsCSV parameter to displaydeletenavigator.jsp, and conduct other unauthorized activities via the (4) showDeleteView, (5) showWebFolderView, (6) showLibraryView, (7) showMyLibraryView, (8) singleSelectObject, (9) processRadioSelection, (10) processCheckboxSelection, (11) singleSelectObject, (12) addToSelectedObjects, or (13) removeFromSelectedObjects commands.

cpe:/a:mlterm:mlterm:2.5 cpe:/a:mlterm:mlterm:2.6 cpe:/a:mlterm:mlterm:2.6.1 cpe:/a:mlterm:mlterm:2.6.2 cpe:/a:mlterm:mlterm:2.6.3 cpe:/a:mlterm:mlterm:2.7 cpe:/a:mlterm:mlterm:2.8 cpe:/a:mlterm:mlterm:2.9 cpe:/a:mlterm:mlterm:2.9.1

CVE-2005-0686

2005-03-07T00:00:00.000-05:00

2008-09-05T16:47:00.880-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-09T16:52:00.000-04:00

ALLOWS_USER_ACCESS

GENTOO GLSA-200503-13 CONFIRM https://sourceforge.net/project/shownotes.php?release_id=310416 Integer overflow in mlterm 2.5.0 through 2.9.1, with gdk-pixbuf support enabled, allows remote attackers to execute arbitrary code via a large image file that is used as a background.

cpe:/a:hashcash:hashcash:1.14 cpe:/a:hashcash:hashcash:1.15 cpe:/a:hashcash:hashcash:1.16

CVE-2005-0687

2005-03-06T00:00:00.000-05:00

2008-09-05T16:47:01.067-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-09T17:10:00.000-04:00

ALLOWS_USER_ACCESS

MISC http://bugs.gentoo.org/show_bug.cgi?id=83541 GENTOO GLSA-200503-12 Format string vulnerability in Hashcash 1.16 allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via format string specifiers in a reply address, which is not properly handled when printing the header.

cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_xp::sp2:tablet_pc

CVE-2005-0688

2005-03-05T00:00:00.000-05:00

2018-10-19T11:31:16.513-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050305 Windows Server 2003 and XP SP2 LAND attack vulnerability HP SSRT061264 VUPEN ADV-2006-3983 MS MS05-019 MS MS06-064 Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability (CVE-1999-0016).

cpe:/a:jimmy:the_includer:1.0 cpe:/a:jimmy:the_includer:1.1

CVE-2005-0689

2005-03-07T00:00:00.000-05:00

2016-10-17T23:13:43.370-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050307 Remote Command Execution BUGTRAQ 20050308 Re: Remote Command Execution BID 12738 includer.cgi in The Includer allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the URL or (2) the template parameter.

cpe:/a:gene6:g6_ftp_server:2.0 cpe:/a:gene6:g6_ftp_server:3.0 cpe:/a:gene6:g6_ftp_server:3.0.1 cpe:/a:gene6:g6_ftp_server:3.0.2 cpe:/a:gene6:g6_ftp_server:3.1 cpe:/a:gene6:g6_ftp_server:3.2 cpe:/a:gene6:g6_ftp_server:3.3 cpe:/a:gene6:g6_ftp_server:3.3.1 cpe:/a:gene6:g6_ftp_server:3.4

CVE-2005-0690

2005-03-07T00:00:00.000-05:00

2016-10-17T23:13:44.683-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050307 Gene6 FTP Server Local Privilege Escalation Vulnerability BUGTRAQ 20050308 Re: Gene6 FTP Server Local Privilege Escalation Vulnerability MISC http://secway.org/Advisory/ad20050303.txt BID 12739 Gene6 FTP Server does not properly restrict access to the control console, which allows local users to modify the server configuration and gain privileges, as demonstrated by defining a SITE command.

cpe:/a:socialmpn:socialmpn:1.2.1 cpe:/a:socialmpn:socialmpn:1.2.2 cpe:/a:socialmpn:socialmpn:1.2.3 cpe:/a:socialmpn:socialmpn:1.2.4 cpe:/a:socialmpn:socialmpn:1.2.5

CVE-2005-0691

2005-03-06T00:00:00.000-05:00

2016-10-17T23:13:45.870-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050307 Remote Testing SocialMPN Remote File Inclusion by y3dips MISC http://waraxe.us/ftopic-542-0-days0-orderasc-.html PHP remote file inclusion vulnerability in article mode for modules.php in SocialMPN allows remote attackers to execute arbitrary PHP code by modifying the name parameter to reference a URL on a remote web server that contains the code.

cpe:/a:php_fusion:php_fusion:5.0

CVE-2005-0692

2005-03-06T00:00:00.000-05:00

2016-10-17T23:13:47.400-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050306 PHP-FUSION 5.* XSS VULNERABILITY CONFIRM http://www.php-fusion.co.uk/news.php?readmore=183 Cross-site scripting (XSS) vulnerability in fusion_core.php for PHP-Fusion 5.x allows remote attackers to inject arbitrary web script or HTML via a message with IMG bbcode containing character-encoded Javascript.

cpe:/a:jowood_productions:chaser:1.0 cpe:/a:jowood_productions:chaser:1.50

CVE-2005-0693

2005-03-07T00:00:00.000-05:00

2008-09-05T16:47:02.053-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-09T17:48:00.000-04:00

ALLOWS_USER_ACCESS

MISC http://aluigi.altervista.org/adv/chasercool-adv.txt BID 12733 Buffer overflow in JoWood Chaser 1.50 and earlier allows remote attackers to cause a denial of service (client or server crash) and execute arbitrary code via a long nickname.

cpe:/a:hosting_controller:hosting_controller:1.1 cpe:/a:hosting_controller:hosting_controller:1.3 cpe:/a:hosting_controller:hosting_controller:1.4.1 cpe:/a:hosting_controller:hosting_controller:1.4b cpe:/a:hosting_controller:hosting_controller:6.1 cpe:/a:hosting_controller:hosting_controller:6.1_hotfix_1.4 cpe:/a:hosting_controller:hosting_controller:6.1_hotfix_1.7

CVE-2005-0694

2005-03-07T00:00:00.000-05:00

2016-10-17T23:13:48.697-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://isun.shabgard.org/hc2.txt BUGTRAQ 20050307 Hosting Controller Multiple Unauthenticated information disclose Hosting Controller 6.1 Hotfix 1.7 and earlier stores log files under the web root, which allows remote attackers to obtain sensitive information via a direct request to HCDiskQuotaService.csv.

CVE-2005-0695

2005-03-07T00:00:00.000-05:00

2016-10-17T23:13:49.947-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://isun.shabgard.org/hc2.txt BUGTRAQ 20050307 Hosting Controller Multiple Unauthenticated information disclose The password recovery feature (forgotpassword.asp) in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field.

cpe:/a:argosoft:ftp_server:1.4.2.8 cpe:/a:argosoft:ftp_server:1.4.2.29 cpe:/a:argosoft:ftp_server:1.4.3.5

CVE-2005-0696

2005-03-08T00:00:00.000-05:00

2018-10-19T11:31:17.497-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

FULLDISC 20060225 ArGoSoft FTP server remote heap overflow SREASON 494 SECTRACK 1015681 BUGTRAQ 20050308 ArGoSoft FTP Server 1.4.2.8 Buffer Overflow BUGTRAQ 20060225 ArGoSoft FTP server remote heap overflow BID 12755 MISC https://www.securinfos.info/english/security-advisories-alerts/20060225_ArGoSoft.FTP.Server_Heap.Overflow.html Buffer overflow in ArGoSoft FTP Server 1.4.2.8 allows remote authenticated users to execute arbitrary code via a long DELE command. NOTE: this issue was later reported to also affect 1.4.3.5.

cpe:/a:brt:copperexport:0.1 cpe:/a:brt:copperexport:0.2

CVE-2005-0697

2005-03-07T00:00:00.000-05:00

2008-09-05T16:47:02.723-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-09T18:08:00.000-04:00

ALLOWS_OTHER_ACCESS

CONFIRM http://www.zzamboni.org/copperexport/ SQL injection vulnerability in the process_picture function xp_publish.php in CopperExport 0.2.1 allows remote attackers to execute arbitrary SQL commands, possibly via the (1) title, (2) caption, or (3) keywords parameters.

cpe:/a:jason_hines:phpweblog:0.4.2 cpe:/a:jason_hines:phpweblog:0.5 cpe:/a:jason_hines:phpweblog:0.5.1 cpe:/a:jason_hines:phpweblog:0.5.2 cpe:/a:jason_hines:phpweblog:0.5.3

CVE-2005-0698

2005-03-07T00:00:00.000-05:00

2008-09-05T16:47:02.880-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-09T18:10:00.000-04:00

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050307 phpWebLog <= 0.5.3 arbitrary file inclusion (VXSfx) BID 12747 PHP remote file inclusion vulnerability in PHPWebLog 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the (1) G_PATH parameter to init.inc.php or the (2) PATH parameter to index.php to reference a URL on a remote web server that contains the code.

cpe:/a:ethereal_group:ethereal:0.10.3 cpe:/a:ethereal_group:ethereal:0.10.4 cpe:/a:ethereal_group:ethereal:0.10.5 cpe:/a:ethereal_group:ethereal:0.10.6 cpe:/a:ethereal_group:ethereal:0.10.7 cpe:/a:ethereal_group:ethereal:0.10.8 cpe:/a:ethereal_group:ethereal:0.10.9 cpe:/o:altlinux:alt_linux:compact_2.3 cpe:/o:altlinux:alt_linux:junior_2.3 cpe:/o:conectiva:linux:9.0 cpe:/o:conectiva:linux:10.0 cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux:4.0::advanced_server cpe:/o:redhat:enterprise_linux:4.0::enterprise_server cpe:/o:redhat:enterprise_linux:4.0::workstation cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:enterprise_linux_desktop:4.0 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor

CVE-2005-0699

2005-03-08T00:00:00.000-05:00

2017-10-10T21:29:59.327-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050309 RE: Ethereal remote buffer overflow - addon BUGTRAQ 20050314 Ethereal 0.10.9 and below remote root exploit GENTOO GLSA-200503-16 MISC http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-03-04 CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00018.html MANDRAKE MDKSA-2005:053 FEDORA FLSA-2006:152922 REDHAT RHSA-2005:306 BUGTRAQ 20050308 Ethereal remote buffer overflow BID 12759 Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11.c) for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via RADIUS authentication packets with large length values.

cpe:/a:aztek_forum:aztek_forum:4.0

CVE-2005-0700

2005-03-07T00:00:00.000-05:00

2008-09-05T16:47:03.270-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-09T18:20:00.000-04:00

MISC http://www.frsirt.com/exploits/20050307.aztek.c.php BID 12745 The export_index action in myadmin.php for Aztek Forum 4.0 allows remote attackers to obtain database files, possibly by setting the ATK_ADMIN cookie.

cpe:/a:oracle:database_server

CVE-2005-0701

2005-03-07T00:00:00.000-05:00

2016-10-17T23:13:52.357-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20050307 - Argeniss - Oracle Database Server Directory transversal BUGTRAQ 20050307 - Argeniss - Oracle Database Server Directory transversal MISC http://www.argeniss.com/research/ARGENISS-ADV-030501.txt Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\\.\\.." (modified dot dot backslash) sequences to UTL_FILE functions such as (1) UTL_FILE.FOPEN or (2) UTL_FILE.frename.

cpe:/a:phpmyfaq:phpmyfaq:1.4 cpe:/a:phpmyfaq:phpmyfaq:1.4_alpha1 cpe:/a:phpmyfaq:phpmyfaq:1.4_alpha2 cpe:/a:phpmyfaq:phpmyfaq:1.4a cpe:/a:phpmyfaq:phpmyfaq:1.5

CVE-2005-0702

2005-03-07T00:00:00.000-05:00

2008-09-05T16:47:03.583-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-09T18:44:00.000-04:00

CONFIRM http://www.phpmyfaq.de/advisory_2005-03-06.php SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in forum messages.

cpe:/h:xerox:workcentre_165:::pro cpe:/h:xerox:workcentre_165:7.47.30.000::pro cpe:/h:xerox:workcentre_165:7.47.33.008::pro cpe:/h:xerox:workcentre_175:::pro cpe:/h:xerox:workcentre_175:7.47.30.000::pro cpe:/h:xerox:workcentre_175:7.47.33.008::pro cpe:/h:xerox:workcentre_2128:::pro_color cpe:/h:xerox:workcentre_2128:0.001.04.044::pro_color cpe:/h:xerox:workcentre_2636:::pro_color cpe:/h:xerox:workcentre_2636:0.001.04.044::pro_color cpe:/h:xerox:workcentre_32_color:::pro cpe:/h:xerox:workcentre_32_color:0.001.00.060::pro cpe:/h:xerox:workcentre_32_color:0.001.02.081::pro cpe:/h:xerox:workcentre_35:::pro cpe:/h:xerox:workcentre_35:3.028.11.000::pro cpe:/h:xerox:workcentre_35:3.97.20.032::pro cpe:/h:xerox:workcentre_3545:::pro_color cpe:/h:xerox:workcentre_3545:0.001.04.044::pro_color cpe:/h:xerox:workcentre_40_color:::pro cpe:/h:xerox:workcentre_40_color:0.001.00.060::pro cpe:/h:xerox:workcentre_40_color:0.001.02.081::pro cpe:/h:xerox:workcentre_45:::pro cpe:/h:xerox:workcentre_45:3.028.11.000::pro cpe:/h:xerox:workcentre_45:3.97.20.032::pro cpe:/h:xerox:workcentre_55:::pro cpe:/h:xerox:workcentre_55:3.028.11.000::pro cpe:/h:xerox:workcentre_55:3.97.20.032::pro cpe:/h:xerox:workcentre_65:::pro cpe:/h:xerox:workcentre_65:1.001.00.060::pro cpe:/h:xerox:workcentre_65:1.001.02.084::pro cpe:/h:xerox:workcentre_75:::pro cpe:/h:xerox:workcentre_75:1.001.00.060::pro cpe:/h:xerox:workcentre_75:1.001.02.084::pro cpe:/h:xerox:workcentre_90:::pro cpe:/h:xerox:workcentre_90:1.001.00.060::pro cpe:/h:xerox:workcentre_90:1.001.02.084::pro cpe:/h:xerox:workcentre_m165 cpe:/h:xerox:workcentre_m165:6.47.30.000 cpe:/h:xerox:workcentre_m165:6.47.33.008 cpe:/h:xerox:workcentre_m165:8.47.30.000 cpe:/h:xerox:workcentre_m165:8.47.33.008 cpe:/h:xerox:workcentre_m175 cpe:/h:xerox:workcentre_m175:6.47.30.000 cpe:/h:xerox:workcentre_m175:6.47.33.008 cpe:/h:xerox:workcentre_m175:8.47.30.000 cpe:/h:xerox:workcentre_m175:8.47.33.008 cpe:/h:xerox:workcentre_m35 cpe:/h:xerox:workcentre_m35:2.28.11.000 cpe:/h:xerox:workcentre_m35:2.97.20.032 cpe:/h:xerox:workcentre_m35:4.84.16.000 cpe:/h:xerox:workcentre_m45 cpe:/h:xerox:workcentre_m45:2.28.11.000 cpe:/h:xerox:workcentre_m45:2.97.20.032 cpe:/h:xerox:workcentre_m45:4.84.16.000 cpe:/h:xerox:workcentre_m55 cpe:/h:xerox:workcentre_m55:2.28.11.000 cpe:/h:xerox:workcentre_m55:2.97.20.032 cpe:/h:xerox:workcentre_m55:4.84.16.000

CVE-2005-0703

2005-03-07T00:00:00.000-05:00

2008-09-05T16:47:03.757-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-09T18:49:00.000-04:00

CONFIRM http://www.xerox.com/downloads/usa/en/c/cert_XRX05_005.pdf Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11.000 through 3.97.20.032, Pro 65/75/90 1.001.00.060 through 1.001.02.084, and others, has an "unauthenticated account," which allows remote attackers to modify system configuration, a different vulnerability than CVE-2005-1179.

cpe:/a:ethereal_group:ethereal:0.10.7 cpe:/a:ethereal_group:ethereal:0.10.8 cpe:/a:ethereal_group:ethereal:0.10.9

CVE-2005-0704

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:59.387-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00018.html GENTOO GLSA-200503-16 MANDRAKE MDKSA-2005:053 FEDORA FLSA-2006:152922 REDHAT RHSA-2005:306 BID 12762 Buffer overflow in the Etheric dissector in Ethereal 0.10.7 through 0.10.9 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code.

cpe:/a:ethereal_group:ethereal:0.10.7 cpe:/a:ethereal_group:ethereal:0.10.8 cpe:/a:ethereal_group:ethereal:0.10.9

CVE-2005-0705

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:59.450-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00018.html GENTOO GLSA-200503-16 MANDRAKE MDKSA-2005:053 FEDORA FLSA-2006:152922 REDHAT RHSA-2005:306 BID 12762 The GPRS-LLC dissector in Ethereal 0.10.7 through 0.10.9, with the "ignore cipher bit" option enabled. allows remote attackers to cause a denial of service (application crash).

cpe:/a:grip:grip:2.9.6 cpe:/a:grip:grip:3.1.2 cpe:/a:grip:grip:3.1.4 cpe:/a:grip:grip:3.2.0

CVE-2005-0706

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:59.530-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://rpmfind.net/linux/RPM/suse/9.3/i386/suse/i586/gnome-vfs-1.0.5-816.2.i586.html GENTOO GLSA-200503-21 CONFIRM http://sourceforge.net/tracker/index.php?func=detail&aid=1160134&group_id=3714&atid=303714 MISC http://sourceforge.net/tracker/index.php?func=detail&aid=834724&group_id=3714&atid=103714 REDHAT RHSA-2005:304 REDHAT RHSA-2009:0005 BID 12770 FEDORA FLSA:152919 XF grip-cddb-bo(19648) FEDORA FEDORA-2008-9604 FEDORA FEDORA-2008-9521 FEDORA FEDORA-2008-11956 Buffer overflow in discdb.c for grip 3.1.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the cddb lookup to return more matches than expected.

cpe:/a:ipswitch:ipswitch_collaboration_suite:8.15

CVE-2005-0707

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:22.530-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1013410 IDEFENSE 20050310 Ipswitch Collaboration Suite IMAP EXAMINE Buffer Overflow Vulnerability BID 12780 XF ipswitch-imail-imapexamine-bo(19655) Buffer overflow in the IMAP daemon (IMAP4d32.exe) for Ipswitch Collaboration Suite (ICS) before 8.15 Hotfix 1 allows remote authenticated users to execute arbitrary code via a long EXAMINE command.

cpe:/o:dragonflybsd:dragonflybsd:1.0 cpe:/o:dragonflybsd:dragonflybsd:1.1 cpe:/o:freebsd:freebsd:4.0 cpe:/o:freebsd:freebsd:4.0:alpha cpe:/o:freebsd:freebsd:4.0:releng cpe:/o:freebsd:freebsd:4.1 cpe:/o:freebsd:freebsd:4.1.1 cpe:/o:freebsd:freebsd:4.1.1:release cpe:/o:freebsd:freebsd:4.1.1:stable cpe:/o:freebsd:freebsd:4.2 cpe:/o:freebsd:freebsd:4.2:stable cpe:/o:freebsd:freebsd:4.3 cpe:/o:freebsd:freebsd:4.3:release cpe:/o:freebsd:freebsd:4.3:release_p38 cpe:/o:freebsd:freebsd:4.3:releng cpe:/o:freebsd:freebsd:4.3:stable cpe:/o:freebsd:freebsd:4.4 cpe:/o:freebsd:freebsd:4.4:release_p42 cpe:/o:freebsd:freebsd:4.4:releng cpe:/o:freebsd:freebsd:4.4:stable cpe:/o:freebsd:freebsd:4.5 cpe:/o:freebsd:freebsd:4.5:release cpe:/o:freebsd:freebsd:4.5:release_p32 cpe:/o:freebsd:freebsd:4.5:releng cpe:/o:freebsd:freebsd:4.5:stable cpe:/o:freebsd:freebsd:4.6 cpe:/o:freebsd:freebsd:4.6:release cpe:/o:freebsd:freebsd:4.6:release_p20 cpe:/o:freebsd:freebsd:4.6:releng cpe:/o:freebsd:freebsd:4.6:stable cpe:/o:freebsd:freebsd:4.6.2 cpe:/o:freebsd:freebsd:4.7 cpe:/o:freebsd:freebsd:4.7:release cpe:/o:freebsd:freebsd:4.7:release_p17 cpe:/o:freebsd:freebsd:4.7:releng cpe:/o:freebsd:freebsd:4.7:stable cpe:/o:freebsd:freebsd:4.8 cpe:/o:freebsd:freebsd:4.8:pre-release cpe:/o:freebsd:freebsd:4.8:release_p6 cpe:/o:freebsd:freebsd:4.8:releng cpe:/o:freebsd:freebsd:4.9 cpe:/o:freebsd:freebsd:4.9:pre-release cpe:/o:freebsd:freebsd:4.9:releng cpe:/o:freebsd:freebsd:4.10 cpe:/o:freebsd:freebsd:4.10:release cpe:/o:freebsd:freebsd:4.10:releng cpe:/o:freebsd:freebsd:4.11:stable cpe:/o:freebsd:freebsd:5.0 cpe:/o:freebsd:freebsd:5.0:alpha cpe:/o:freebsd:freebsd:5.0:release_p14 cpe:/o:freebsd:freebsd:5.0:releng cpe:/o:freebsd:freebsd:5.1 cpe:/o:freebsd:freebsd:5.1:alpha cpe:/o:freebsd:freebsd:5.1:release cpe:/o:freebsd:freebsd:5.1:release_p5 cpe:/o:freebsd:freebsd:5.1:releng cpe:/o:freebsd:freebsd:5.2 cpe:/o:freebsd:freebsd:5.2.1:release cpe:/o:freebsd:freebsd:5.2.1:releng cpe:/o:freebsd:freebsd:5.3 cpe:/o:freebsd:freebsd:5.3:release cpe:/o:freebsd:freebsd:5.3:stable cpe:/o:freebsd:freebsd:5.4:pre-release

CVE-2005-0708

2005-05-02T00:00:00.000-04:00

2017-10-11T21:29:00.507-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov FREEBSD FreeBSD-SA-05:02 The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer portions of kernel memory if a file is truncated while it is being sent, which could allow remote attackers to obtain sensitive information.

cpe:/a:mysql:mysql:4.0.20 cpe:/a:mysql:mysql:4.0.21 cpe:/a:mysql:mysql:4.0.23 cpe:/a:mysql:mysql:4.1.0:alpha cpe:/a:mysql:mysql:4.1.0.0 cpe:/a:mysql:mysql:4.1.2:alpha cpe:/a:mysql:mysql:4.1.3 cpe:/a:mysql:mysql:4.1.3:beta cpe:/a:mysql:mysql:4.1.4 cpe:/a:mysql:mysql:4.1.5 cpe:/a:mysql:mysql:4.1.10 cpe:/a:oracle:mysql:3.23.49 cpe:/a:oracle:mysql:4.0.0 cpe:/a:oracle:mysql:4.0.1 cpe:/a:oracle:mysql:4.0.2 cpe:/a:oracle:mysql:4.0.3 cpe:/a:oracle:mysql:4.0.4 cpe:/a:oracle:mysql:4.0.5 cpe:/a:oracle:mysql:4.0.5a cpe:/a:oracle:mysql:4.0.6 cpe:/a:oracle:mysql:4.0.7 cpe:/a:oracle:mysql:4.0.7:gamma cpe:/a:oracle:mysql:4.0.8 cpe:/a:oracle:mysql:4.0.8:gamma cpe:/a:oracle:mysql:4.0.9 cpe:/a:oracle:mysql:4.0.9:gamma cpe:/a:oracle:mysql:4.0.10 cpe:/a:oracle:mysql:4.0.11 cpe:/a:oracle:mysql:4.0.11:gamma cpe:/a:oracle:mysql:4.0.12 cpe:/a:oracle:mysql:4.0.13 cpe:/a:oracle:mysql:4.0.14 cpe:/a:oracle:mysql:4.0.15 cpe:/a:oracle:mysql:4.0.18

CVE-2005-0709

2005-05-02T00:00:00.000-04:00

2019-10-07T12:42:32.200-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

VULNWATCH 20050310 Mysql CREATE FUNCTION libc arbitrary code execution. APPLE APPLE-SA-2005-08-17 APPLE APPLE-SA-2005-08-15 BUGTRAQ 20050310 Mysql CREATE FUNCTION libc arbitrary code execution. SUNALERT 101864 DEBIAN DSA-707 GENTOO GLSA-200503-19 MANDRAKE MDKSA-2005:060 SUSE SUSE-SA:2005:019 REDHAT RHSA-2005:334 REDHAT RHSA-2005:348 BID 12781 TRUSTIX 2005-0009 UBUNTU USN-96-1 MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.

CVE-2005-0710

2005-05-02T00:00:00.000-04:00

2019-10-07T12:42:32.200-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

VULNWATCH 20050310 Mysql CREATE FUNCTION mysql.func table arbitrary library injection APPLE APPLE-SA-2005-08-17 APPLE APPLE-SA-2005-08-15 BUGTRAQ 20050310 Mysql CREATE FUNCTION mysql.func table arbitrary library injection SUNALERT 101864 DEBIAN DSA-707 GENTOO GLSA-200503-19 MANDRAKE MDKSA-2005:060 SUSE SUSE-SA:2005:019 REDHAT RHSA-2005:334 REDHAT RHSA-2005:348 BID 12781 TRUSTIX 2005-0009 XF mysql-udfinit-gain-access(19658) UBUNTU USN-96-1 MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute arbitrary libraries by using INSERT INTO to modify the mysql.func table, which is processed by the udf_init function.

CVE-2005-0711

2005-05-02T00:00:00.000-04:00

2019-10-07T12:42:32.200-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov VULNWATCH 20050310 Mysql insecure temporary file creation with CREATE TEMPORARY TABLE privilege escalation APPLE APPLE-SA-2005-08-17 APPLE APPLE-SA-2005-08-15 SUNALERT 101864 DEBIAN DSA-707 GENTOO GLSA-200503-19 MANDRAKE MDKSA-2005:060 SUSE SUSE-SA:2005:019 REDHAT RHSA-2005:334 REDHAT RHSA-2005:348 BID 12781 TRUSTIX 2005-0009 UBUNTU USN-96-1 MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack.

cpe:/o:apple:mac_os_x:10.1 cpe:/o:apple:mac_os_x:10.2 cpe:/o:apple:mac_os_x:10.3.4

CVE-2005-0712

2005-05-02T00:00:00.000-04:00

2008-09-10T15:36:49.103-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-09T23:31:00.000-04:00

ALLOWS_USER_ACCESS

APPLE APPLE-SA-2005-03-21 Mac OS X before 10.3.8 users world-writable permissions for certain directories, which may allow local users to gain privileges, possibly via the receipt cache or ColorSync profiles.

cpe:/o:apple:mac_os_x:10.3 cpe:/o:apple:mac_os_x:10.3.1 cpe:/o:apple:mac_os_x:10.3.2 cpe:/o:apple:mac_os_x:10.3.3 cpe:/o:apple:mac_os_x:10.3.4 cpe:/o:apple:mac_os_x:10.3.5 cpe:/o:apple:mac_os_x:10.3.6 cpe:/o:apple:mac_os_x:10.3.7 cpe:/o:apple:mac_os_x:10.3.8 cpe:/o:apple:mac_os_x_server:10.3 cpe:/o:apple:mac_os_x_server:10.3.1 cpe:/o:apple:mac_os_x_server:10.3.2 cpe:/o:apple:mac_os_x_server:10.3.3 cpe:/o:apple:mac_os_x_server:10.3.4 cpe:/o:apple:mac_os_x_server:10.3.5 cpe:/o:apple:mac_os_x_server:10.3.6 cpe:/o:apple:mac_os_x_server:10.3.7

CVE-2005-0713

2005-03-21T00:00:00.000-05:00

2008-09-05T16:47:06.007-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-10T07:42:00.000-04:00

ALLOWS_OTHER_ACCESS

APPLE APPLE-SA-2005-03-21 The Bluetooth Setup Assistant for Mac OS X before 10.3.8 can be launched without a keyboard or Bluetooth device, which allows local users to bypass access restrictions and gain privileges.

CVE-2005-0714

2005-05-02T00:00:00.000-04:00

2008-09-10T15:36:49.663-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0340. Reason: This candidate is a reservation duplicate of CVE-2005-0340. Notes: All CVE users should reference CVE-2005-0340 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVE-2005-0715

2005-03-21T00:00:00.000-05:00

2008-09-05T16:47:06.303-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-10T07:53:00.000-04:00

APPLE APPLE-SA-2005-03-21 AFP Server in Mac OS X before 10.3.8 uses insecure permissions for "Drop Boxes," which allows local users to read the contents of a Drop Box.

CVE-2005-0716

2005-03-21T00:00:00.000-05:00

2008-09-05T16:47:06.490-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-06-10T08:35:00.000-04:00

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2005-03-21 IDEFENSE 20050321 Mac OS X CF_CHARSET_PATH Buffer Overflow Vulnerability BID 13224 Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions, allows local users to execute arbitrary code via a long CF_CHARSET_PATH environment variable.

cpe:/a:squid:squid:2.0.patch1 cpe:/a:squid:squid:2.0.patch2 cpe:/a:squid:squid:2.0.pre1 cpe:/a:squid:squid:2.0.release cpe:/a:squid:squid:2.0_patch2 cpe:/a:squid:squid:2.1.patch1 cpe:/a:squid:squid:2.1.patch2 cpe:/a:squid:squid:2.1.pre1 cpe:/a:squid:squid:2.1.pre3 cpe:/a:squid:squid:2.1.pre4 cpe:/a:squid:squid:2.1.release cpe:/a:squid:squid:2.1_patch2 cpe:/a:squid:squid:2.2.devel3 cpe:/a:squid:squid:2.2.devel4 cpe:/a:squid:squid:2.2.pre1 cpe:/a:squid:squid:2.2.pre2 cpe:/a:squid:squid:2.2.stable1 cpe:/a:squid:squid:2.2.stable2 cpe:/a:squid:squid:2.2.stable3 cpe:/a:squid:squid:2.2.stable4 cpe:/a:squid:squid:2.2.stable5 cpe:/a:squid:squid:2.3.devel2 cpe:/a:squid:squid:2.3.devel3 cpe:/a:squid:squid:2.3.stable1 cpe:/a:squid:squid:2.3.stable2 cpe:/a:squid:squid:2.3.stable3 cpe:/a:squid:squid:2.3.stable4 cpe:/a:squid:squid:2.3.stable5 cpe:/a:squid:squid:2.3_.stable4 cpe:/a:squid:squid:2.3_.stable5 cpe:/a:squid:squid:2.3_stable5 cpe:/a:squid:squid:2.4 cpe:/a:squid:squid:2.4.stable1 cpe:/a:squid:squid:2.4.stable2 cpe:/a:squid:squid:2.4.stable3 cpe:/a:squid:squid:2.4.stable4 cpe:/a:squid:squid:2.4.stable6 cpe:/a:squid:squid:2.4.stable7 cpe:/a:squid:squid:2.4_.stable2 cpe:/a:squid:squid:2.4_.stable6 cpe:/a:squid:squid:2.4_.stable7 cpe:/a:squid:squid:2.4_stable7 cpe:/a:squid:squid:2.5.6 cpe:/a:squid:squid:2.5.stable1 cpe:/a:squid:squid:2.5.stable2 cpe:/a:squid:squid:2.5.stable3 cpe:/a:squid:squid:2.5.stable4 cpe:/a:squid:squid:2.5.stable5 cpe:/a:squid:squid:2.5.stable6 cpe:/a:squid:squid:2.5.stable7 cpe:/a:squid:squid:2.5_.stable1 cpe:/a:squid:squid:2.5_.stable3 cpe:/a:squid:squid:2.5_.stable4 cpe:/a:squid:squid:2.5_.stable5 cpe:/a:squid:squid:2.5_.stable6 cpe:/a:squid:squid:2.5_stable3 cpe:/a:squid:squid:2.5_stable4 cpe:/a:squid:squid:2.5_stable9

CVE-2005-0718

2005-04-14T00:00:00.000-04:00

2018-10-03T17:29:52.327-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2005:931 FEDORA FLSA-2006:152809 REDHAT RHSA-2005:415 REDHAT RHSA-2005:489 BID 13166 CONFIRM http://www.squid-cache.org/bugs/show_bug.cgi?id=1224 CONFIRM http://www1.uk.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-post XF squid-put-post-dos(19919) UBUNTU USN-111-1 Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the connection during a (1) PUT or (2) POST request, which causes Squid to access previously freed memory.

cpe:/o:hp:tru64:4.0f:pk8 cpe:/o:hp:tru64:4.0g:pk4 cpe:/o:hp:tru64:5.1a:pk6 cpe:/o:hp:tru64:5.1b1:pk3 cpe:/o:hp:tru64:5.1b1:pk4

CVE-2005-0719

2005-03-09T00:00:00.000-05:00

2017-07-10T21:32:22.733-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov HP SSRT4891 BID 12768 XF tru64-system-message-dos(19642) Unknown vulnerability in the systems message queue in HP Tru64 Unix 4.0F PK8 through 5.1B-2/PK4 allows local users to cause a denial of service (process crash) for processes such as nfsstat, pfstat, arp, ogated, rarpd, route, sendmail, srconfig, strsetup, trpt, netstat, and xntpd.

cpe:/a:mcnews:mcnews:1.3

CVE-2005-0720

2005-03-08T00:00:00.000-05:00

2018-10-19T11:31:17.983-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050307 PHP mcNews <= 1.3 arbitrary file inclusion (VXSfx) BUGTRAQ 20070811 mcNews (skinfile) Remote File Include Vulnerability BID 12776 XF mcnews-skinfile-file-include(19616) PHP remote file inclusion vulnerability in admin/header.php in PHP mcNews 1.3 allows remote attackers to execute arbitrary PHP code by modifying the skinfile parameter to reference a URL on a remote web server that contains the code.

cpe:/a:gamearena:experience2

CVE-2005-0721

2005-05-02T00:00:00.000-04:00

2016-10-17T23:13:58.497-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050307 Multiples Vulnerabilities PHP remote file inclusion vulnerability in modules.php in eXPerience2 allows remote attackers to execute arbitrary PHP code by modifying the file parameter to reference a URL on a remote web server that contains the code.

cpe:/a:experience2:experience2

CVE-2005-0722

2005-03-07T00:00:00.000-05:00

2016-10-17T23:14:00.060-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050307 Multiples Vulnerabilities eXPerience2 allows remote attackers to obtain the full path for the web root via a direct request to modules.php without any parameters, which leaks the path in a PHP error message.

cpe:/a:php_arena:pafiledb:3.1

CVE-2005-0723

2005-03-08T00:00:00.000-05:00

2016-10-17T23:14:01.293-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050308 Multiple vulnerabilities in paFileDB Cross-site scripting (XSS) vulnerability in the jumpmenu function in functions.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL parameters, which is not properly cleansed in the $pageurl variable, as demonstrated using pafiledb.php.

cpe:/a:php_arena:pafiledb:3.1

CVE-2005-0724

2005-05-02T00:00:00.000-04:00

2016-10-17T23:14:02.560-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050308 Multiple vulnerabilities in paFileDB paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via (1) an invalid str parameter to pafiledb.php, or a direct request to (2) viewall.php, (3) stats.php, (4) search.php, (5) rate.php, (6) main.php, (7) license.php, (8) category.php, (9) download.php, (10) file.php, (11) email.php, or (12) admin.php, which reveals the path in a PHP error message.

cpe:/a:wf-sections:wf-sections:1.07

CVE-2005-0725

2005-03-08T00:00:00.000-05:00

2017-07-10T21:32:22.827-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050308 Wfsection 1.07 vulnerabilities XF wfsections-wfsfiles-sql-injection(19660) SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows remote attackers to execute arbitrary SQL commands via the articleid parameter to article.php.

cpe:/a:ubbcentral:ubb.threads:6.0

CVE-2005-0726

2005-05-02T00:00:00.000-04:00

2016-10-17T23:14:05.137-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050311 UBB.threads 6 SQL Injection SQL injection vulnerability in editpost.php in UBB.threads 6.0 allows remote attackers to execute arbitrary SQL commands via the Number parameter.

CVE-2005-0727

2005-05-02T00:00:00.000-04:00

2008-09-10T15:36:52.663-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0735. Reason: This candidate is a duplicate of CVE-2005-0735. Notes: All CVE users should reference CVE-2005-0727 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVE-2005-0728

2005-05-02T00:00:00.000-04:00

2008-09-10T15:36:52.913-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0736. Reason: This candidate is a duplicate of CVE-2005-0736. Notes: All CVE users should reference CVE-2005-0736 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:techland:xpand_rally:1.0 cpe:/a:techland:xpand_rally:1.1

CVE-2005-0729

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:22.890-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MISC http://aluigi.altervista.org/adv/xprallyfs-adv.txt MISC http://www.securiteam.com/windowsntfocus/5DP0G00F5Q.html XF xpandrally-message-format-string(19649) Format string vulnerability in Xpand Rally 1.1.0.0 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a message.

cpe:/a:py_software:active_webcam:5.5

CVE-2005-0730

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:22.937-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20050310 Multiple Vulnerabilities of PY Software Active Webcam WebServer MISC http://secway.org/advisory/ad20050104.txt XF active-webcam-dos(19647) PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service via a request to a file on the floppy drive, as demonstrated using A:\a.txt.

cpe:/a:py_software:active_webcam:5.5

CVE-2005-0731

2005-03-10T00:00:00.000-05:00

2017-07-10T21:32:22.983-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20050310 Multiple Vulnerabilities of PY Software Active Webcam WebServer MISC http://secway.org/advisory/ad20050104.txt XF active-webcam-filelist-dos(19650) PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to Filelist.html.

cpe:/a:py_software:active_webcam:5.5

CVE-2005-0732

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:23.047-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20050310 Multiple Vulnerabilities of PY Software Active Webcam WebServer MISC http://secway.org/advisory/ad20050104.txt XF active-webcam-path-disclosure(19652) PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to obtain the full path of the web server via a request for a non-existent filename, which leaks the full path in an error message.

cpe:/a:py_software:active_webcam:5.5

CVE-2005-0733

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:23.093-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20050310 Multiple Vulnerabilities of PY Software Active Webcam WebServer MISC http://secway.org/advisory/ad20050104.txt XF active-webcam-file-disclosure(19654) PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not.

cpe:/a:py_software:active_webcam:5.5

CVE-2005-0734

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:23.173-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20050310 Multiple Vulnerabilities of PY Software Active Webcam WebServer MISC http://secway.org/advisory/ad20050104.txt XF active-webcam-memory-dos(19653) PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service (memory exhaustion and process crash) via a large number of HTTP requests.

cpe:/a:newsscript.co.uk:newsscript

CVE-2005-0735

2005-05-02T00:00:00.000-04:00

2009-04-03T00:00:00.000-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-06-10T10:14:00.000-04:00

ALLOWS_ADMIN_ACCESS

BID 12761 newsscript.pl for NewsScript allows remote attackers to gain privileges by setting the mode parameter to admin.

cpe:/o:conectiva:linux:10.0 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.9:2.6.20 cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.11 cpe:/o:redhat:enterprise_linux:4.0::advanced_server cpe:/o:redhat:enterprise_linux:4.0::enterprise_server cpe:/o:redhat:enterprise_linux:4.0::workstation cpe:/o:redhat:enterprise_linux_desktop:4.0 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:redhat:fedora_core:core_3.0

CVE-2005-0736

2005-03-09T00:00:00.000-05:00

2018-10-03T17:29:53.590-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20050309 overwriting low kernel memory SUSE SUSE-SA:2005:018 REDHAT RHSA-2005:293 REDHAT RHSA-2005:366 BID 12763 UBUNTU USN-95-1 Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events.

cpe:/a:yahoo:messenger:4.0 cpe:/a:yahoo:messenger:5.0 cpe:/a:yahoo:messenger:5.0.1046 cpe:/a:yahoo:messenger:5.0.1065 cpe:/a:yahoo:messenger:5.0.1232 cpe:/a:yahoo:messenger:5.5 cpe:/a:yahoo:messenger:5.5.1249 cpe:/a:yahoo:messenger:5.6 cpe:/a:yahoo:messenger:5.6.0.1347 cpe:/a:yahoo:messenger:5.6.0.1351 cpe:/a:yahoo:messenger:5.6.0.1355 cpe:/a:yahoo:messenger:5.6.0.1356 cpe:/a:yahoo:messenger:5.6.0.1358 cpe:/a:yahoo:messenger:6.0 cpe:/a:yahoo:messenger:6.0.0.1643 cpe:/a:yahoo:messenger:6.0.0.1750 cpe:/a:yahoo:messenger:6.0.0.1921

CVE-2005-0737

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:09.833-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-10T10:19:00.000-04:00

ALLOWS_USER_ACCESS

FULLDISC 20050308 Yahoo! Messenger Offline Mode Status Remote Buffer Overflow Vulnerability BID 12750 Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode.

cpe:/a:microsoft:exchange_server:2003 cpe:/a:microsoft:exchange_server:2003:sp1

CVE-2005-0738

2005-05-02T00:00:00.000-04:00

2008-12-10T00:00:00.000-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-10T10:25:00.000-04:00

MSKB 891504 Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) by deleting or moving a folder with deeply nested subfolders, which causes Microsoft Exchange Information Store service (Store.exe) to hang as a result of a large number of recursive calls.

cpe:/a:ethereal_group:ethereal:0.10.9

CVE-2005-0739

2005-05-02T00:00:00.000-04:00

2017-10-10T21:29:59.983-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://anonsvn.ethereal.com/viewcvs/viewcvs.py?view=rev&rev=13707 BUGTRAQ 20050312 Ethereal remote buffer overflow #2 MISC http://security.lss.hr/index.php?page=details&ID=LSS-2005-03-05 DEBIAN DSA-718 CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00018.html GENTOO GLSA-200503-16 MANDRAKE MDKSA-2005:053 FEDORA FLSA-2006:152922 REDHAT RHSA-2005:306 BID 12762 The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could leave it vulnerable to buffer overflows, as demonstrated using modified length values that are not properly handled by the dissect_pdus and pduval_to_str functions.

cpe:/o:openbsd:openbsd:2.0 cpe:/o:openbsd:openbsd:2.1 cpe:/o:openbsd:openbsd:2.2 cpe:/o:openbsd:openbsd:2.3 cpe:/o:openbsd:openbsd:2.4 cpe:/o:openbsd:openbsd:2.5 cpe:/o:openbsd:openbsd:2.6 cpe:/o:openbsd:openbsd:2.7 cpe:/o:openbsd:openbsd:2.8 cpe:/o:openbsd:openbsd:2.9 cpe:/o:openbsd:openbsd:3.0 cpe:/o:openbsd:openbsd:3.1 cpe:/o:openbsd:openbsd:3.2 cpe:/o:openbsd:openbsd:3.3 cpe:/o:openbsd:openbsd:3.4 cpe:/o:openbsd:openbsd:3.5 cpe:/o:openbsd:openbsd:3.6

CVE-2005-0740

2005-01-13T00:00:00.000-05:00

2008-09-05T16:47:10.350-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-10T10:37:00.000-04:00

SECTRACK 1012861 OPENBSD 20050111 027: RELIABILITY FIX: January 11, 2005 BID 12250 The TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of service (system panic) via crafted values in the TCP timestamp option, which causes invalid arguments to be used when calculating the retransmit timeout.

cpe:/a:yabb:yabb:2.0_rc1

CVE-2005-0741

2005-03-08T00:00:00.000-05:00

2008-09-05T16:47:10.600-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-10T10:48:00.000-04:00

SECTRACK 1013420 BID 12756 Cross-site scripting (XSS) vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a usersrecentposts action.

cpe:/a:sun:java_system_application_server:7.0 cpe:/a:sun:java_system_application_server:7.0::platform cpe:/a:sun:java_system_application_server:7.0::standard cpe:/a:sun:java_system_application_server:7.0:ur1:enterprise cpe:/a:sun:java_system_application_server:7.0:ur1:standard cpe:/a:sun:java_system_application_server:7.0:ur4 cpe:/a:sun:java_system_application_server:7.0:ur5:platform cpe:/a:sun:java_system_application_server:7.0:ur5:standard

CVE-2005-0742

2005-05-02T00:00:00.000-04:00

2010-03-02T00:36:06.257-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SUNALERT 57742 SUNALERT 200314 BID 12775 Cross-site scripting (XSS) vulnerability in Sun Java System Application Server 7 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

cpe:/a:xoops:xoops:1.0_rc1 cpe:/a:xoops:xoops:1.0_rc3 cpe:/a:xoops:xoops:1.0_rc3.0.5 cpe:/a:xoops:xoops:1.3.5 cpe:/a:xoops:xoops:1.3.6 cpe:/a:xoops:xoops:1.3.7 cpe:/a:xoops:xoops:1.3.8 cpe:/a:xoops:xoops:1.3.9 cpe:/a:xoops:xoops:1.3.10 cpe:/a:xoops:xoops:2.0 cpe:/a:xoops:xoops:2.0.1 cpe:/a:xoops:xoops:2.0.2 cpe:/a:xoops:xoops:2.0.3 cpe:/a:xoops:xoops:2.0.5 cpe:/a:xoops:xoops:2.0.5.1 cpe:/a:xoops:xoops:2.0.5.2 cpe:/a:xoops:xoops:2.0.9.2

CVE-2005-0743

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:23.233-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050308 [SCAN Associates Security Advisory] xoops 2.0.9.2 and below weak file extension validation BID 12754 CONFIRM http://www.xoops.org/modules/news/article.php?storyid=2114 XF xoops-uploader-file-upload(19634) The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote attackers to upload arbitrary PHP scripts, whose file extensions are not filtered.

cpe:/a:novell:ichain:2.2 cpe:/a:novell:ichain:2.3

CVE-2005-0744

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:23.297-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1013406 CONFIRM http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096885.htm XF ichain-gain-access(19646) The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privileges by (1) sniffing the connection on TCP port 51100 and replaying the authentication information or (2) obtaining and replaying the PCZQX02 authentication cookie from the browser.

cpe:/h:utstarcom:ian-02ex_voip_ata

CVE-2005-0745

2005-03-09T00:00:00.000-05:00

2008-09-05T16:47:11.303-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-10T11:01:00.000-04:00

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050307 Re: Lingo VoIP ATA / UTStarcom iAN-02EX remote access vulnerability UTStarcom iAN-02EX VoIP Analog Terminal Adaptor (ATA) allows local users to bypass ATA access restrictions by dialing "*#26845#" and causing a device reset.

cpe:/a:novell:ichain:2.2 cpe:/a:novell:ichain:2.2:sp1 cpe:/a:novell:ichain:2.2:sp1a cpe:/a:novell:ichain:2.2:sp2 cpe:/a:novell:ichain:2.2:sp3 cpe:/a:novell:ichain:2.2.113 cpe:/a:novell:ichain:2.3 cpe:/a:novell:ichain:2.3:sp2

CVE-2005-0746

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:23.343-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050315 [ISR] - Novell iChain Mini FTP Server Unauthorized Remote Path Disclosure Vulnerability SECTRACK 1013407 CONFIRM http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096886.htm MISC http://www.infobyte.com.ar/adv/ISR-03.html BID 12766 XF ichain-path-disclosure(19643) The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command.

cpe:/a:applyyourself:i-class

CVE-2005-0747

2005-03-08T00:00:00.000-05:00

2008-09-05T16:47:11.630-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-10T11:15:00.000-04:00

SECTRACK 1013400 ApplyYourself i-Class allows remote attackers to obtain sensitive information about their own applications by reusing the hidden ID field, as demonstrated using the id parameter to ApplicantDecision.asp.

cpe:/a:webinsta:webinsta_mailing_manager:1.3d

CVE-2005-0748

2005-03-10T00:00:00.000-05:00

2017-07-10T21:32:23.453-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1013409 BID 12773 VUPEN ADV-2005-0248 XF webinsta-initdb-file-include(19651) PHP remote file inclusion vulnerability in initdb.php for WEBInsta Mailing list manager 1.3d allows remote attackers to execute arbitrary PHP code by modifying the absolute_path parameter to reference a URL on a remote web server that contains the code.

cpe:/o:linux:linux_kernel:2.0 cpe:/o:linux:linux_kernel:2.0.1 cpe:/o:linux:linux_kernel:2.0.2 cpe:/o:linux:linux_kernel:2.0.3 cpe:/o:linux:linux_kernel:2.0.4 cpe:/o:linux:linux_kernel:2.0.5 cpe:/o:linux:linux_kernel:2.0.6 cpe:/o:linux:linux_kernel:2.0.7 cpe:/o:linux:linux_kernel:2.0.8 cpe:/o:linux:linux_kernel:2.0.9 cpe:/o:linux:linux_kernel:2.0.9.9 cpe:/o:linux:linux_kernel:2.0.10 cpe:/o:linux:linux_kernel:2.0.11 cpe:/o:linux:linux_kernel:2.0.12 cpe:/o:linux:linux_kernel:2.0.13 cpe:/o:linux:linux_kernel:2.0.14 cpe:/o:linux:linux_kernel:2.0.15 cpe:/o:linux:linux_kernel:2.0.16 cpe:/o:linux:linux_kernel:2.0.17 cpe:/o:linux:linux_kernel:2.0.18 cpe:/o:linux:linux_kernel:2.0.19 cpe:/o:linux:linux_kernel:2.0.20 cpe:/o:linux:linux_kernel:2.0.21 cpe:/o:linux:linux_kernel:2.0.22 cpe:/o:linux:linux_kernel:2.0.23 cpe:/o:linux:linux_kernel:2.0.24 cpe:/o:linux:linux_kernel:2.0.25 cpe:/o:linux:linux_kernel:2.0.26 cpe:/o:linux:linux_kernel:2.0.27 cpe:/o:linux:linux_kernel:2.0.28 cpe:/o:linux:linux_kernel:2.0.29 cpe:/o:linux:linux_kernel:2.0.30 cpe:/o:linux:linux_kernel:2.0.31 cpe:/o:linux:linux_kernel:2.0.32 cpe:/o:linux:linux_kernel:2.0.33 cpe:/o:linux:linux_kernel:2.0.34 cpe:/o:linux:linux_kernel:2.0.35 cpe:/o:linux:linux_kernel:2.0.36 cpe:/o:linux:linux_kernel:2.0.37 cpe:/o:linux:linux_kernel:2.0.38 cpe:/o:linux:linux_kernel:2.0.39 cpe:/o:linux:linux_kernel:2.1 cpe:/o:linux:linux_kernel:2.1.89 cpe:/o:linux:linux_kernel:2.2.0 cpe:/o:linux:linux_kernel:2.2.1 cpe:/o:linux:linux_kernel:2.2.2 cpe:/o:linux:linux_kernel:2.2.3 cpe:/o:linux:linux_kernel:2.2.4 cpe:/o:linux:linux_kernel:2.2.5 cpe:/o:linux:linux_kernel:2.2.6 cpe:/o:linux:linux_kernel:2.2.7 cpe:/o:linux:linux_kernel:2.2.8 cpe:/o:linux:linux_kernel:2.2.9 cpe:/o:linux:linux_kernel:2.2.10 cpe:/o:linux:linux_kernel:2.2.11 cpe:/o:linux:linux_kernel:2.2.12 cpe:/o:linux:linux_kernel:2.2.13 cpe:/o:linux:linux_kernel:2.2.14 cpe:/o:linux:linux_kernel:2.2.15 cpe:/o:linux:linux_kernel:2.2.15:pre16 cpe:/o:linux:linux_kernel:2.2.15_pre20 cpe:/o:linux:linux_kernel:2.2.16 cpe:/o:linux:linux_kernel:2.2.16:pre6 cpe:/o:linux:linux_kernel:2.2.17 cpe:/o:linux:linux_kernel:2.2.18 cpe:/o:linux:linux_kernel:2.2.19 cpe:/o:linux:linux_kernel:2.2.20 cpe:/o:linux:linux_kernel:2.2.21 cpe:/o:linux:linux_kernel:2.2.22 cpe:/o:linux:linux_kernel:2.2.23 cpe:/o:linux:linux_kernel:2.2.24 cpe:/o:linux:linux_kernel:2.2.25 cpe:/o:linux:linux_kernel:2.2.27:rc2 cpe:/o:linux:linux_kernel:2.3.0 cpe:/o:linux:linux_kernel:2.3.99 cpe:/o:linux:linux_kernel:2.3.99:pre1 cpe:/o:linux:linux_kernel:2.3.99:pre2 cpe:/o:linux:linux_kernel:2.3.99:pre3 cpe:/o:linux:linux_kernel:2.3.99:pre4 cpe:/o:linux:linux_kernel:2.3.99:pre5 cpe:/o:linux:linux_kernel:2.3.99:pre6 cpe:/o:linux:linux_kernel:2.3.99:pre7 cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.0:test1 cpe:/o:linux:linux_kernel:2.4.0:test10 cpe:/o:linux:linux_kernel:2.4.0:test11 cpe:/o:linux:linux_kernel:2.4.0:test12 cpe:/o:linux:linux_kernel:2.4.0:test2 cpe:/o:linux:linux_kernel:2.4.0:test3 cpe:/o:linux:linux_kernel:2.4.0:test4 cpe:/o:linux:linux_kernel:2.4.0:test5 cpe:/o:linux:linux_kernel:2.4.0:test6 cpe:/o:linux:linux_kernel:2.4.0:test7 cpe:/o:linux:linux_kernel:2.4.0:test8 cpe:/o:linux:linux_kernel:2.4.0:test9 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.3:pre3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.18::x86 cpe:/o:linux:linux_kernel:2.4.18:pre1 cpe:/o:linux:linux_kernel:2.4.18:pre2 cpe:/o:linux:linux_kernel:2.4.18:pre3 cpe:/o:linux:linux_kernel:2.4.18:pre4 cpe:/o:linux:linux_kernel:2.4.18:pre5 cpe:/o:linux:linux_kernel:2.4.18:pre6 cpe:/o:linux:linux_kernel:2.4.18:pre7 cpe:/o:linux:linux_kernel:2.4.18:pre8 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.19:pre1 cpe:/o:linux:linux_kernel:2.4.19:pre2 cpe:/o:linux:linux_kernel:2.4.19:pre3 cpe:/o:linux:linux_kernel:2.4.19:pre4 cpe:/o:linux:linux_kernel:2.4.19:pre5 cpe:/o:linux:linux_kernel:2.4.19:pre6 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.21:pre1 cpe:/o:linux:linux_kernel:2.4.21:pre4 cpe:/o:linux:linux_kernel:2.4.21:pre7 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.22:pre10 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.23:pre9 cpe:/o:linux:linux_kernel:2.4.23_ow2 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.24_ow1 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.4.27 cpe:/o:linux:linux_kernel:2.4.27:pre1 cpe:/o:linux:linux_kernel:2.4.27:pre2 cpe:/o:linux:linux_kernel:2.4.27:pre3 cpe:/o:linux:linux_kernel:2.4.27:pre4 cpe:/o:linux:linux_kernel:2.4.27:pre5 cpe:/o:linux:linux_kernel:2.4.28 cpe:/o:linux:linux_kernel:2.4.29 cpe:/o:linux:linux_kernel:2.4.29:rc1 cpe:/o:linux:linux_kernel:2.4.29:rc2 cpe:/o:linux:linux_kernel:2.4.30 cpe:/o:linux:linux_kernel:2.4.30:rc2 cpe:/o:linux:linux_kernel:2.4.30:rc3 cpe:/o:linux:linux_kernel:2.4.31:pre1 cpe:/o:linux:linux_kernel:2.5.0 cpe:/o:linux:linux_kernel:2.5.1 cpe:/o:linux:linux_kernel:2.5.2 cpe:/o:linux:linux_kernel:2.5.3 cpe:/o:linux:linux_kernel:2.5.4 cpe:/o:linux:linux_kernel:2.5.5 cpe:/o:linux:linux_kernel:2.5.6 cpe:/o:linux:linux_kernel:2.5.7 cpe:/o:linux:linux_kernel:2.5.8 cpe:/o:linux:linux_kernel:2.5.9 cpe:/o:linux:linux_kernel:2.5.10 cpe:/o:linux:linux_kernel:2.5.11 cpe:/o:linux:linux_kernel:2.5.12 cpe:/o:linux:linux_kernel:2.5.13 cpe:/o:linux:linux_kernel:2.5.14 cpe:/o:linux:linux_kernel:2.5.15 cpe:/o:linux:linux_kernel:2.5.16 cpe:/o:linux:linux_kernel:2.5.17 cpe:/o:linux:linux_kernel:2.5.18 cpe:/o:linux:linux_kernel:2.5.19 cpe:/o:linux:linux_kernel:2.5.20 cpe:/o:linux:linux_kernel:2.5.21 cpe:/o:linux:linux_kernel:2.5.22 cpe:/o:linux:linux_kernel:2.5.23 cpe:/o:linux:linux_kernel:2.5.24 cpe:/o:linux:linux_kernel:2.5.25 cpe:/o:linux:linux_kernel:2.5.26 cpe:/o:linux:linux_kernel:2.5.27 cpe:/o:linux:linux_kernel:2.5.28 cpe:/o:linux:linux_kernel:2.5.29 cpe:/o:linux:linux_kernel:2.5.30 cpe:/o:linux:linux_kernel:2.5.31 cpe:/o:linux:linux_kernel:2.5.32 cpe:/o:linux:linux_kernel:2.5.33 cpe:/o:linux:linux_kernel:2.5.34 cpe:/o:linux:linux_kernel:2.5.35 cpe:/o:linux:linux_kernel:2.5.36 cpe:/o:linux:linux_kernel:2.5.37 cpe:/o:linux:linux_kernel:2.5.38 cpe:/o:linux:linux_kernel:2.5.39 cpe:/o:linux:linux_kernel:2.5.40 cpe:/o:linux:linux_kernel:2.5.41 cpe:/o:linux:linux_kernel:2.5.42 cpe:/o:linux:linux_kernel:2.5.43 cpe:/o:linux:linux_kernel:2.5.44 cpe:/o:linux:linux_kernel:2.5.45 cpe:/o:linux:linux_kernel:2.5.46 cpe:/o:linux:linux_kernel:2.5.47 cpe:/o:linux:linux_kernel:2.5.48 cpe:/o:linux:linux_kernel:2.5.49 cpe:/o:linux:linux_kernel:2.5.50 cpe:/o:linux:linux_kernel:2.5.51 cpe:/o:linux:linux_kernel:2.5.52 cpe:/o:linux:linux_kernel:2.5.53 cpe:/o:linux:linux_kernel:2.5.54 cpe:/o:linux:linux_kernel:2.5.55 cpe:/o:linux:linux_kernel:2.5.56 cpe:/o:linux:linux_kernel:2.5.57 cpe:/o:linux:linux_kernel:2.5.58 cpe:/o:linux:linux_kernel:2.5.59 cpe:/o:linux:linux_kernel:2.5.60 cpe:/o:linux:linux_kernel:2.5.61 cpe:/o:linux:linux_kernel:2.5.62 cpe:/o:linux:linux_kernel:2.5.63 cpe:/o:linux:linux_kernel:2.5.64 cpe:/o:linux:linux_kernel:2.5.65 cpe:/o:linux:linux_kernel:2.5.66 cpe:/o:linux:linux_kernel:2.5.67 cpe:/o:linux:linux_kernel:2.5.68 cpe:/o:linux:linux_kernel:2.5.69 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.10:rc2 cpe:/o:linux:linux_kernel:2.6.11 cpe:/o:linux:linux_kernel:2.6.11:rc1 cpe:/o:linux:linux_kernel:2.6.11:rc2 cpe:/o:linux:linux_kernel:2.6.11:rc3 cpe:/o:linux:linux_kernel:2.6.11:rc4 cpe:/o:linux:linux_kernel:2.6.11.1 cpe:/o:linux:linux_kernel:2.6.11.2 cpe:/o:linux:linux_kernel:2.6.11.3 cpe:/o:linux:linux_kernel:2.6.11.4 cpe:/o:linux:linux_kernel:2.6.11.5 cpe:/o:linux:linux_kernel:2.6.11.6 cpe:/o:linux:linux_kernel:2.6.11.7 cpe:/o:linux:linux_kernel:2.6.11.8 cpe:/o:linux:linux_kernel:2.6_test9_cvs

CVE-2005-0749

2005-04-01T00:00:00.000-05:00

2018-10-03T17:29:54.543-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov SGI 20060402-01-U CONFIRM http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.6 REDHAT RHSA-2005:293 REDHAT RHSA-2005:366 REDHAT RHSA-2005:529 REDHAT RHSA-2005:551 BID 12935 FEDORA FLSA:152532 XF kernel-loadelflibrary-dos(19867) UBUNTU USN-103-1 The load_elf_library in the Linux kernel before 2.6.11.6 allows local users to cause a denial of service (kernel crash) via a crafted ELF library or executable, which causes a free of an invalid pointer.

cpe:/o:conectiva:linux:10.0 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.4.27 cpe:/o:linux:linux_kernel:2.4.28 cpe:/o:linux:linux_kernel:2.4.29 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.9:2.6.20 cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.11 cpe:/o:redhat:enterprise_linux:4.0::advanced_server cpe:/o:redhat:enterprise_linux:4.0::enterprise_server cpe:/o:redhat:enterprise_linux:4.0::workstation cpe:/o:redhat:enterprise_linux_desktop:4.0 cpe:/o:redhat:fedora_core:core_1.0 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:redhat:fedora_core:core_3.0 cpe:/o:redhat:linux:7.3 cpe:/o:redhat:linux:7.3::i386 cpe:/o:redhat:linux:7.3::i686 cpe:/o:redhat:linux:9.0::i386 cpe:/o:suse:suse_linux:1.0::desktop cpe:/o:suse:suse_linux:9.3 cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc

CVE-2005-0750

2005-03-27T00:00:00.000-05:00

2017-10-10T21:30:00.170-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20050327 local root security bug in linux >= 2.4.6 <= 2.4.30-rc1 and 2.6.x.y <= 2.6.11.5 BUGTRAQ 20050327 local root security bug in linux >= 2.4.6 <= 2.4.30-rc1 and 2.6.x.y <= 2.6.11.5 REDHAT RHSA-2005:283 REDHAT RHSA-2005:284 REDHAT RHSA-2005:293 REDHAT RHSA-2005:366 BID 12911 FEDORA FLSA:152532 XF kernel-bluezsockcreate-integer-underflow(19844) The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or (2) socketpair call with a negative protocol value.

CVE-2005-0751

2005-06-09T00:00:00.000-04:00

2008-09-10T15:36:55.930-04:00

CVE-2005-0752

2005-04-18T00:00:00.000-04:00

2017-10-10T21:30:00.247-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://www.mozilla.org/security/announce/mfsa2005-34.html REDHAT RHSA-2005:383 BID 13228 The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascript: URL in the PLUGINSPAGE attribute of an EMBED tag.

cpe:/a:cvs:cvs:1.10 cpe:/a:cvs:cvs:1.10.6 cpe:/a:cvs:cvs:1.10.7 cpe:/a:cvs:cvs:1.10.8 cpe:/a:cvs:cvs:1.11 cpe:/a:cvs:cvs:1.11.1 cpe:/a:cvs:cvs:1.11.1_p1 cpe:/a:cvs:cvs:1.11.2 cpe:/a:cvs:cvs:1.11.3 cpe:/a:cvs:cvs:1.11.4 cpe:/a:cvs:cvs:1.11.5 cpe:/a:cvs:cvs:1.11.6 cpe:/a:cvs:cvs:1.11.10 cpe:/a:cvs:cvs:1.11.11 cpe:/a:cvs:cvs:1.11.14 cpe:/a:cvs:cvs:1.11.15 cpe:/a:cvs:cvs:1.11.16

CVE-2005-0753

2005-04-18T00:00:00.000-04:00

2017-10-10T21:30:00.327-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MISC http://bugs.gentoo.org/attachment.cgi?id=54352&action=view DEBIAN DSA-742 GENTOO GLSA-200504-16 SUSE SUSE-SA:2005:024 REDHAT RHSA-2005:387 XF cvs-bo(20148) Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.

cpe:/a:kde:quanta:3.1 cpe:/o:conectiva:linux:9.0 cpe:/o:conectiva:linux:10.0 cpe:/o:gentoo:linux cpe:/o:kde:kde:3.2 cpe:/o:kde:kde:3.2.1 cpe:/o:kde:kde:3.2.2 cpe:/o:kde:kde:3.2.3 cpe:/o:kde:kde:3.3 cpe:/o:kde:kde:3.3.1 cpe:/o:kde:kde:3.3.2 cpe:/o:kde:kde:3.4 cpe:/o:redhat:fedora_core:core_3.0 cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc cpe:/o:ubuntu:ubuntu_linux:5.04::amd64 cpe:/o:ubuntu:ubuntu_linux:5.04::i386 cpe:/o:ubuntu:ubuntu_linux:5.04::powerpc

CVE-2005-0754

2005-04-22T00:00:00.000-04:00

2016-10-17T23:14:10.187-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.0-kdewebdev-kommander.diff BUGTRAQ 20050422 [KDE Security Advisory]: Kommander untrusted code execution CONFIRM http://www.kde.org/info/security/advisory-20050420-1.txt BID 13313 Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code.

cpe:/a:realnetworks:helix_player:10.0.3 cpe:/a:realnetworks:realone_player:1.0 cpe:/a:realnetworks:realone_player:2.0 cpe:/a:realnetworks:realplayer:8.0 cpe:/a:realnetworks:realplayer:8.0::~~~mac_os_x~~ cpe:/a:realnetworks:realplayer:8.0::~~~unix~~ cpe:/a:realnetworks:realplayer:10.0 cpe:/a:realnetworks:realplayer:10.0:::de cpe:/a:realnetworks:realplayer:10.0:::en cpe:/a:realnetworks:realplayer:10.0:::ja cpe:/a:realnetworks:realplayer:10.0:beta cpe:/a:realnetworks:realplayer:10.0_6.0.12.690

CVE-2005-0755

2005-04-19T00:00:00.000-04:00

2017-11-21T09:13:36.857-05:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

2017-11-21T08:14:01.590-05:00

ALLOWS_USER_ACCESS

BUGTRAQ 20050420 RealNetworks RealPlayer/RealOne Player/Helix Player Remote Heap Overflow MISC http://pb.specialised.info/all/adv/real-ram-adv.txt CONFIRM http://service.real.com/help/faq/security/050419_player/EN/ FEDORA FEDORA-2005-329 REDHAT RHSA-2005:363 REDHAT RHSA-2005:392 REDHAT RHSA-2005:394 Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to execute arbitrary code via a long hostname in a RAM file.

cpe:/o:linux:linux_kernel:2.6.8.1

CVE-2005-0756

2005-06-08T00:00:00.000-04:00

2018-10-19T11:31:18.373-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov DEBIAN DSA-921 DEBIAN DSA-922 REDHAT RHSA-2005:514 REDHAT RHSA-2005:663 FEDORA FLSA:157459-3 FEDORA FLSA:157459-2 BID 13891 VUPEN ADV-2005-1878 UBUNTU USN-137-1 ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to cause a denial of service (kernel crash).

cpe:/o:redhat:enterprise_linux:3.0::advanced_servers cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation cpe:/o:redhat:enterprise_linux_desktop:3.0

CVE-2005-0757

2005-05-18T00:00:00.000-04:00

2017-10-10T21:30:00.530-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov DEBIAN DSA-921 DEBIAN DSA-922 REDHAT RHSA-2005:294 BID 13680 The xattr file system code, as backported in Red Hat Enterprise Linux 3 on 64-bit systems, does not properly handle certain offsets, which allows local users to cause a denial of service (system crash) via certain actions on an ext3 file system with extended attributes enabled.

cpe:/a:gnu:gzip

CVE-2005-0758

2005-05-13T00:00:00.000-04:00

2017-10-10T21:30:00.623-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SCO SCOSA-2005.58 SGI 20060301-01-U MISC http://bugs.gentoo.org/show_bug.cgi?id=90626 CONFIRM http://docs.info.apple.com/article.html?artnum=306172 APPLE APPLE-SA-2007-07-31 REDHAT RHSA-2005:357 SECTRACK 1013928 SLACKWARE SSA:2006-262 FEDORA FLSA:158801 GENTOO GLSA-200505-05 MANDRIVA MDKSA-2006:026 MANDRIVA MDKSA-2006:027 OPENPKG OpenPKG-SA-2007.002 REDHAT RHSA-2005:474 BID 13582 BID 25159 UBUNTU USN-158-1 VUPEN ADV-2007-2732 XF gzip-zgrep-file-installation(20539) zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.

CVE-2005-0759

2005-03-23T00:00:00.000-05:00

2017-10-10T21:30:00.700-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1013550 DEBIAN DSA-702 SUSE SUSE-SA:2005:017 BID 12875 REDHAT RHSA-2005:070 ImageMagick before 6.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image with an invalid tag.

CVE-2005-0760

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:00.763-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1013550 DEBIAN DSA-702 SUSE SUSE-SA:2005:017 REDHAT RHSA-2005:070 The TIFF decoder in ImageMagick before 6.0 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file.

cpe:/a:imagemagick:imagemagick:5.3.3 cpe:/a:imagemagick:imagemagick:5.3.8 cpe:/a:imagemagick:imagemagick:5.4.3 cpe:/a:imagemagick:imagemagick:5.4.4.5 cpe:/a:imagemagick:imagemagick:5.4.7 cpe:/a:imagemagick:imagemagick:5.4.8 cpe:/a:imagemagick:imagemagick:5.4.8.2.1.1.0 cpe:/a:imagemagick:imagemagick:5.5.3.2.1.2.0 cpe:/a:imagemagick:imagemagick:5.5.4 cpe:/a:imagemagick:imagemagick:5.5.6 cpe:/a:imagemagick:imagemagick:5.5.6.0_2003-04-09 cpe:/a:imagemagick:imagemagick:5.5.7 cpe:/a:imagemagick:imagemagick:6.0 cpe:/a:imagemagick:imagemagick:6.0.1 cpe:/a:imagemagick:imagemagick:6.0.2 cpe:/a:imagemagick:imagemagick:6.0.2.5 cpe:/a:imagemagick:imagemagick:6.0.3 cpe:/a:imagemagick:imagemagick:6.0.4 cpe:/a:imagemagick:imagemagick:6.0.5 cpe:/a:imagemagick:imagemagick:6.0.6 cpe:/a:imagemagick:imagemagick:6.0.7 cpe:/a:imagemagick:imagemagick:6.0.8 cpe:/a:imagemagick:imagemagick:6.1 cpe:/a:imagemagick:imagemagick:6.1.1.6 cpe:/a:imagemagick:imagemagick:6.1.2 cpe:/a:imagemagick:imagemagick:6.1.3 cpe:/a:imagemagick:imagemagick:6.1.4 cpe:/a:imagemagick:imagemagick:6.1.5 cpe:/a:imagemagick:imagemagick:6.1.6 cpe:/a:imagemagick:imagemagick:6.1.7 cpe:/a:sgi:propack:3.0

CVE-2005-0761

2005-03-23T00:00:00.000-05:00

2017-10-10T21:30:00.840-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov REDHAT RHSA-2005:070 SECTRACK 1013550 SUSE SUSE-SA:2005:017 BID 12876 Unknown vulnerability in ImageMagick before 6.1.8 allows remote attackers to cause a denial of service (application crash) via a crafted PSD file.

CVE-2005-0762

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:00.903-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

REDHAT RHSA-2005:070 SECTRACK 1013550 DEBIAN DSA-702 SUSE SUSE-SA:2005:017 Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI image file.

cpe:/a:midnight_commander:midnight_commander:4.5.55

CVE-2005-0763

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:15.223-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-10T13:35:00.000-04:00

ALLOWS_OTHER_ACCESS

DEBIAN DSA-698 REDHAT RHSA-2005:512 Buffer overflow in Midnight Commander (mc) 4.5.55 and earlier may allow attackers to execute arbitrary code.

cpe:/a:marc_lehmann:rxvt-unicode:3.4 cpe:/a:marc_lehmann:rxvt-unicode:3.5 cpe:/a:marc_lehmann:rxvt-unicode:3.6 cpe:/a:marc_lehmann:rxvt-unicode:3.7 cpe:/a:marc_lehmann:rxvt-unicode:3.8 cpe:/a:marc_lehmann:rxvt-unicode:3.9 cpe:/a:marc_lehmann:rxvt-unicode:4.0 cpe:/a:marc_lehmann:rxvt-unicode:4.1 cpe:/a:marc_lehmann:rxvt-unicode:4.2 cpe:/a:marc_lehmann:rxvt-unicode:4.3 cpe:/a:marc_lehmann:rxvt-unicode:4.4 cpe:/a:marc_lehmann:rxvt-unicode:4.5 cpe:/a:marc_lehmann:rxvt-unicode:4.6 cpe:/a:marc_lehmann:rxvt-unicode:4.7 cpe:/a:marc_lehmann:rxvt-unicode:4.8 cpe:/a:marc_lehmann:rxvt-unicode:4.9 cpe:/a:marc_lehmann:rxvt-unicode:5.0 cpe:/a:marc_lehmann:rxvt-unicode:5.1 cpe:/a:marc_lehmann:rxvt-unicode:5.2

CVE-2005-0764

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:15.380-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-10T13:39:00.000-04:00

ALLOWS_USER_ACCESS

MISC http://bugs.gentoo.org/show_bug.cgi?id=84680 GENTOO GLSA-200503-23 Buffer overflow in command.C for rxvt-unicode before 5.3 allows remote attackers to execute arbitrary code via a crafted file containing long escape sequences.

cpe:/a:ethereal_group:ethereal:0.10.9

CVE-2005-0765

2005-03-12T00:00:00.000-05:00

2017-10-10T21:30:00.967-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00018.html GENTOO GLSA-200503-16 MANDRAKE MDKSA-2005:053 BID 12762 Unknown vulnerability in the JXTA dissector in Ethereal 0.10.9 allows remote attackers to cause a denial of service (application crash).

cpe:/a:ethereal_group:ethereal:0.10.9

CVE-2005-0766

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:01.047-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00018.html GENTOO GLSA-200503-16 MANDRAKE MDKSA-2005:053 BID 12762 Unknown vulnerability in the sFlow dissector in Ethereal 0.9.14 through 0.10.9 allows remote attackers to cause a denial of service (application crash).

cpe:/o:linux:linux_kernel:2.6.8.1

CVE-2005-0767

2005-03-15T00:00:00.000-05:00

2018-10-03T17:29:58.340-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONECTIVA CLA-2005:945 REDHAT RHSA-2005:366 UBUNTU USN-95-1 Race condition in the Radeon DRI driver for Linux kernel 2.6.8.1 allows local users with DRI privileges to execute arbitrary code as root.

cpe:/a:goodtech_systems:goodtech_telnet_server:4.0::windows_nt cpe:/a:goodtech_systems:goodtech_telnet_server:5.0::windows_nt

CVE-2005-0768

2005-05-02T00:00:00.000-04:00

2016-10-17T23:14:12.733-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20050315 GoodTech Telnet Server Buffer Overflow Vulnerability MISC http://unsecure.altervista.org/security/goodtechtelnet.htm Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions before 5.0.7, allows remote attackers to execute arbitrary code via a long string to port 2380.

cpe:/a:openslp:openslp:1.0.1 cpe:/a:openslp:openslp:1.0.2 cpe:/a:openslp:openslp:1.0.3 cpe:/a:openslp:openslp:1.0.4 cpe:/a:openslp:openslp:1.0.5 cpe:/a:openslp:openslp:1.0.6 cpe:/a:openslp:openslp:1.0.7 cpe:/a:openslp:openslp:1.0.8_a cpe:/a:openslp:openslp:1.0.9_a cpe:/a:openslp:openslp:1.0.10 cpe:/a:openslp:openslp:1.0.11 cpe:/a:openslp:openslp:1.0_.0 cpe:/a:openslp:openslp:1.1.5 cpe:/a:openslp:openslp:1.2.1 cpe:/a:openslp:openslp:1.2_.0

CVE-2005-0769

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:19.263-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

GENTOO GLSA-200503-25 MANDRAKE MDKSA-2005:055 SUSE SUSE-SA:2005:015 HP SSRT061149 BID 12792 VUPEN ADV-2006-3879 XF openslp-slp-bo(19683) UBUNTU USN-98-1 Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets.

cpe:/a:datarescue:ida_pro:4.7.0.830

CVE-2005-0770

2005-05-02T00:00:00.000-04:00

2016-10-17T23:14:14.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050316 ADVISORY: DataRescue Interactive Disassembler Pro Debugger Format String Vulnerability MISC http://pb.specialised.info/all/adv/ida-debugger-adv.txt CONFIRM http://www.datarescue.com/cgi-local/ultimatebb.cgi?ubb=get_topic;f=2;t=000155;p=0 Format string vulnerability in DataRescue Interactive Disassembler and Debugger (IDA) Pro 4.7.0.830 allows remote attackers or local users to cause a denial of service (CPU consumption or application crash) and possibly execute arbitrary code via format string specifiers in a dynamic link library (DLL) name.

cpe:/a:symantec_veritas:backup_exec:9.0_rev.4367 cpe:/a:symantec_veritas:backup_exec:9.0_rev.4454 cpe:/a:symantec_veritas:backup_exec:9.1_rev.4691 cpe:/a:symantec_veritas:backup_exec:10.0_rev.5484

CVE-2005-0771

2005-06-23T00:00:00.000-04:00

2011-03-07T21:20:33.893-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-08-02T10:10:00.000-04:00

ALLOWS_ADMIN_ACCESS

SECTRACK 1014273 CONFIRM http://seer.support.veritas.com/docs/276605.htm CONFIRM http://seer.support.veritas.com/docs/277429.htm IDEFENSE 20050623 Veritas Backup Exec Server Remote Registry Access Vulnerability CERT-VN VU#584505 CERT TA05-180A VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by calling methods to the RPC interface on TCP port 6106.

cpe:/a:symantec_veritas:backup_exec:10.0 cpe:/a:symantec_veritas:backup_exec:10.0_sp1

CVE-2005-0772

2005-06-28T00:00:00.000-04:00

2011-03-07T21:20:33.987-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-28T10:50:00.000-04:00

SECTRACK 1014273 CONFIRM http://seer.support.veritas.com/docs/276533.htm CONFIRM http://seer.support.veritas.com/docs/277485.htm IDEFENSE 20050623 Veritas Backup Exec Remote Agent NDMLSRVR.DLL DoS Vulnerability IDEFENSE 20050623 Veritas Backup Exec Agent Error Status Remote DoS Vulnerability VERITAS Backup Exec 9.0 through 10.0 for Windows Servers, and 9.0.4019 through 9.1.307 for Netware, allows remote attackers to cause a denial of service (Remote Agent crash) via (1) a crafted packet in NDMLSRVR.DLL or (2) a request packet with an invalid (non-0) "Error Status" value, which triggers a null dereference.

cpe:/a:symantec_veritas:backup_exec:9.0.4019 cpe:/a:symantec_veritas:backup_exec:9.0.4170 cpe:/a:symantec_veritas:backup_exec:9.0.4172 cpe:/a:symantec_veritas:backup_exec:9.0.4174 cpe:/a:symantec_veritas:backup_exec:9.0.4202 cpe:/a:symantec_veritas:backup_exec:9.0_rev.4367 cpe:/a:symantec_veritas:backup_exec:9.0_rev.4367_sp1 cpe:/a:symantec_veritas:backup_exec:9.0_rev.4454 cpe:/a:symantec_veritas:backup_exec:9.0_rev.4454_sp1 cpe:/a:symantec_veritas:backup_exec:9.1.306 cpe:/a:symantec_veritas:backup_exec:9.1.307 cpe:/a:symantec_veritas:backup_exec:9.1.1067.2 cpe:/a:symantec_veritas:backup_exec:9.1.1067.3 cpe:/a:symantec_veritas:backup_exec:9.1.1127.1 cpe:/a:symantec_veritas:backup_exec:9.1.1151.1 cpe:/a:symantec_veritas:backup_exec:9.1.1152 cpe:/a:symantec_veritas:backup_exec:9.1.1152.4 cpe:/a:symantec_veritas:backup_exec:9.1.1154 cpe:/a:symantec_veritas:backup_exec:9.1_rev.4691 cpe:/a:symantec_veritas:backup_exec:9.1_rev.4691_sp2 cpe:/a:symantec_veritas:backup_exec:10.0_rev.5484 cpe:/a:symantec_veritas:backup_exec:10.0_rev.5484_sp1

CVE-2005-0773

2005-06-18T00:00:00.000-04:00

2011-03-07T21:20:34.063-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-08-02T10:07:00.000-04:00

ALLOWS_USER_ACCESS

SECTRACK 1014273 CONFIRM http://seer.support.veritas.com/docs/276604.htm CONFIRM http://seer.support.veritas.com/docs/277429.htm IDEFENSE 20050623 Veritas Backup Exec Agent CONNECT_CLIENT_AUTH Buffer Overflow Vulnerability CERT-VN VU#492105 BID 14022 CERT TA05-180A Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allows remote attackers to execute arbitrary code via a CONNECT_CLIENT_AUTH request with authentication method type 3 (Windows credentials) and a long password argument.

cpe:/a:photopost:photopost_php_pro:5.0_rc3

CVE-2005-0774

2005-03-10T00:00:00.000-05:00

2017-07-10T21:32:23.920-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050311 PhotoPost PHP 5.0 RC3, and later, multiple vulnerabilities BID 12779 XF photopost-uid-sql-injection(19675) SQL injection vulnerability in member.php and possibly other scripts in PhotoPost PHP 5.0 RC3 allows remote attackers to execute arbitrary SQL commands via the uid parameter.

cpe:/a:photopost:photopost_php_pro:5.0_rc3

CVE-2005-0775

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:23.967-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050311 PhotoPost PHP 5.0 RC3, and later, multiple vulnerabilities BID 12779 XF photopost-email-security-bypass(19676) The reportpost action in misc.php for PhotoPost PHP 5.0 RC3 does not limit the logging data that is sent to the administrator, which allows remote attackers to send large amounts of email to the administrator.

cpe:/a:photopost:photopost_php_pro:5.0_rc3

CVE-2005-0776

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:24.017-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050311 PhotoPost PHP 5.0 RC3, and later, multiple vulnerabilities BID 12779 XF photopost-image-modification(19677) adm-photo.php in PhotoPost PHP 5.0 RC3 does not properly verify administrative privileges before manipulating photos, which could allow remote attackers to manipulate other users' photos.

cpe:/a:photopost:photopost_php_pro:5.0_rc3

CVE-2005-0777

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:24.140-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050311 PhotoPost PHP 5.0 RC3, and later, multiple vulnerabilities BID 12779 XF photopost-editbio-xss(19678) Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP 5.0 RC3 allow remote attackers to inject arbitrary web script or HTML via (1) the check_tags function or (2) the editbio field in the user profile.

cpe:/a:photopost:photopost_php_pro:5.0_rc3

CVE-2005-0778

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:24.187-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050311 PhotoPost PHP 5.0 RC3, and later, multiple vulnerabilities BID 12779 XF photopost-file-upload(19679) PhotoPost PHP 5.0 RC3 does not fully verify that an uploaded file is an image file, which allows remote attackers to inject arbitrary Javascript by uploading non-image files with an image extension such as .gif.

cpe:/a:platinumftp:platinumftpserver:1.0.18

CVE-2005-0779

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:19.937-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050312 PlatinumFTP 1.0.18 remote DoS BUGTRAQ 20070101 Re: PlatinumFTP 1.0.18 remote DoS BID 12790 XF platinumftp-username-dos(19674) PlatinumFTP 1.0.18, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via multiple connection attempts with a \ (backslash) in the username.

cpe:/a:php_arena:pafiledb:1.1.3 cpe:/a:php_arena:pafiledb:2.1.1 cpe:/a:php_arena:pafiledb:3.0 cpe:/a:php_arena:pafiledb:3.0_beta_3.1 cpe:/a:php_arena:pafiledb:3.1

CVE-2005-0780

2005-03-12T00:00:00.000-05:00

2016-10-17T23:14:22.673-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050312 [SECURITYREASON.COM] Mass Full Path Disclosure in paFileDB paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) auth.php, (2) login.php, (3) category.php, (4) file.php, (5) team.php, (6) license.php, (7) custom.php, (8) admins.php, or (9) backupdb.php, which reveal the path in a PHP error message.

cpe:/a:php_arena:pafiledb:1.1.3 cpe:/a:php_arena:pafiledb:2.1.1 cpe:/a:php_arena:pafiledb:3.0 cpe:/a:php_arena:pafiledb:3.0_beta_3.1 cpe:/a:php_arena:pafiledb:3.1

CVE-2005-0781

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:24.280-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050312 [SECURITYREASON.COM] SQL injection and XSS in paFileDB BID 12788 XF pafiledb-viewall-category-sql-injection(19688) SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter to pafiledb.php.

cpe:/a:php_arena:pafiledb:1.1.3 cpe:/a:php_arena:pafiledb:2.1.1 cpe:/a:php_arena:pafiledb:3.0 cpe:/a:php_arena:pafiledb:3.0_beta_3.1 cpe:/a:php_arena:pafiledb:3.1

CVE-2005-0782

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:24.343-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://digitalparadox.org/advisories/pafdb.txt BUGTRAQ 20050312 [SECURITYREASON.COM] SQL injection and XSS in paFileDB BUGTRAQ 20050330 PaFileDB Version 3.1 and below are exploitable via a XSS and a SQL injection vulnerability BID 12788 XF pafiledb-viewall-category-xss(19690) Cross-site scripting (XSS) vulnerability in (1) viewall.php and (2) category.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the start parameter to pafiledb.php.

cpe:/a:phorum:phorum:5.0.14

CVE-2005-0783

2005-05-02T00:00:00.000-04:00

2016-10-17T23:14:26.610-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050313 3 XSS Vulnerabilities in Phorum <= 5.0.14 BID 12800 Cross-site scripting (XSS) vulnerability in Phorum before 5.0.14a allows remote attackers to inject arbitrary web script or HTML via the filename of an attached file.

cpe:/a:phorum:phorum:5.0.14

CVE-2005-0784

2005-05-02T00:00:00.000-04:00

2016-10-17T23:14:27.877-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050313 3 XSS Vulnerabilities in Phorum <= 5.0.14 BID 12800 Multiple cross-site scripting (XSS) vulnerabilities in Phorum before 5.0.15 allow remote attackers to inject arbitrary web script or HTML via (1) the subject line to follow.php or (2) the subject line in the user's personal control panel.

cpe:/a:yabb:yabb:2.0_rc1

CVE-2005-0785

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:24.390-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050313 YaBB2 rc1 XSS SECTRACK 1013420 BID 12756 XF yabb-usersrecentposts-xss(19671) Cross-site scripting (XSS) vulnerability in usersrecentposts in YaBB 2.0 rc1 allows remote attackers to inject arbitrary web script or HTML via the username parameter.

cpe:/a:simpgb:simpgb:1.0

CVE-2005-0786

2005-03-14T00:00:00.000-05:00

2017-07-10T21:32:24.483-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050313 SimpGB SQL Injection Vulnerability BID 12801 XF simpgb-gbnew-sql-injection(19694) SQL injection vulnerability in gb_new.inc in SimpGB allows remote attackers to execute arbitrary SQL commands via the quote parameter to guestbook.php.

cpe:/a:wine:wine:2005-02-11 cpe:/a:wine:wine:2005-03-05 cpe:/a:wine:wine:2005-03-10

CVE-2005-0787

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:24.530-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://bugs.winehq.org/show_bug.cgi?id=2715 BUGTRAQ 20050314 [ZH2005-02SA] Insecure tmp file creation in Wine SECTRACK 1013428 BID 12791 MISC http://www.zone-h.org/advisories/read/id=7300 XF wine-registry-information-disclosure(19697) Wine 20050211 and earlier creates temp files with world readable permissions and predictable file names, which allows local users to obtain sensitive information, such as passwords.

cpe:/a:limewire:limewire:4.1.2 cpe:/a:limewire:limewire:4.5.6

CVE-2005-0788

2005-03-14T00:00:00.000-05:00

2017-07-10T21:32:24.593-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050314 LimeWire Gnutella client two vulnerabilities GENTOO GLSA-200503-37 XF limewire-client-information-disclosure(19693) LimeWire 4.1.2 through 4.5.6 allows remote attackers to read arbitrary files by specifying the full pathname in a Gnutella GET request.

cpe:/a:limewire:limewire:3.9.6 cpe:/a:limewire:limewire:4.6.0

CVE-2005-0789

2005-03-14T00:00:00.000-05:00

2017-07-10T21:32:24.657-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050314 LimeWire Gnutella client two vulnerabilities GENTOO GLSA-200503-37 XF limewire-magnet-directory-traversal(19695) Directory traversal vulnerability in LimeWire 3.9.6 through 4.6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in a magnet request.

cpe:/a:phpadsnew:phpadsnew:2.0.4_pr1

CVE-2005-0790

2005-03-14T00:00:00.000-05:00

2017-07-10T21:32:24.703-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050314 [SECURITYREASON.COM] phpAdsNew 2.0.4-pr1 Multiple vulnerabilities cXIb8O3.9 MISC http://securityreason.com/adv/%5BphpAdsNew%202.0.4-pr1%20Multiple%20vulnerabilities%20cXIb8O3.9%5D.asc SECTRACK 1013429 XF phpadsnews-path-disclosure(19689) phpAdsNew 2.0.4 allows remote attackers to obtain sensitive information via a direct request to (1) lib-xmlrpcs.inc.php, (2) maintenance-activation.php, (3) maintenance-cleantables.php, (4) maintenance-autotargeting.php, (5) maintenance-reports.php, (6) phpads.php, (7) remotehtmlview.php, (8) click.php, (9) adcontent.php, which reveal the path in a PHP error message.

CVE-2005-0791

2005-03-14T00:00:00.000-05:00

2017-07-10T21:32:24.750-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050314 [SECURITYREASON.COM] phpAdsNew 2.0.4-pr1 Multiple vulnerabilities cXIb8O3.9 MISC http://securityreason.com/adv/%5BphpAdsNew%202.0.4-pr1%20Multiple%20vulnerabilities%20cXIb8O3.9%5D.asc SECTRACK 1013429 BID 12803 XF phpadsnew-phpini-xss(19692) Cross-site scripting (XSS) vulnerability in adframe.php in phpAdsNew 2.0.4-pr1, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the refresh parameter.

cpe:/a:zpanel:zpanel:2.0 cpe:/a:zpanel:zpanel:2.5_beta cpe:/a:zpanel:zpanel:2.5_beta9 cpe:/a:zpanel:zpanel:2.5_beta10

CVE-2005-0792

2005-03-15T00:00:00.000-05:00

2017-07-10T21:32:24.813-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050315 Few remote bugs in zPanel BUGTRAQ 20050320 Re: Few remote bugs in zPanel BID 12809 XF zpanel-index-sql-injection(19709) SQL injection vulnerability in ZPanel 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) uname parameter to index.php or (2) page parameter to zpanel.php.

cpe:/a:zpanel:zpanel:2.0 cpe:/a:zpanel:zpanel:2.5_beta cpe:/a:zpanel:zpanel:2.5_beta9 cpe:/a:zpanel:zpanel:2.5_beta10

CVE-2005-0793

2005-03-15T00:00:00.000-05:00

2016-10-17T23:14:39.020-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050315 Few remote bugs in zPanel BUGTRAQ 20050320 Re: Few remote bugs in zPanel BID 12809 PHP remote file inclusion vulnerability in zpanel.php in ZPanel allows remote attackers to (1) execute arbitrary PHP code in ZPanel 2.0 or (2) include local files in ZPanel 2.5 beta 10 and earlier by modifying the page parameter.

cpe:/a:zpanel:zpanel:2.0 cpe:/a:zpanel:zpanel:2.5_beta10

CVE-2005-0794

2005-03-15T00:00:00.000-05:00

2017-07-10T21:32:24.860-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050315 Few remote bugs in zPanel BUGTRAQ 20050320 Re: Few remote bugs in zPanel XF zpanel-reinstall-security-bypass(19711) ZPanel 2.0 and 2.5 beta 10 does not remove or protect installation scripts after they have been used, which allows remote attackers to reinstall the software and possibly cause a denial of service via a direct request to install.php.

cpe:/a:hola:holacms:1.2.9 cpe:/a:hola:holacms:1.2.10 cpe:/a:hola:holacms:1.4 cpe:/a:hola:holacms:1.4.1 cpe:/a:hola:holacms:1.4.2 cpe:/a:hola:holacms:1.4.2a cpe:/a:hola:holacms:1.4.3 cpe:/a:hola:holacms:1.4.4 cpe:/a:hola:holacms:1.4.5 cpe:/a:hola:holacms:1.4.6 cpe:/a:hola:holacms:1.4.7 cpe:/a:hola:holacms:1.4.8 cpe:/a:hola:holacms:1.4.9 cpe:/a:hola:holacms:1.4.9_1

CVE-2005-0795

2005-03-14T00:00:00.000-05:00

2017-07-10T21:32:24.907-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050315 Virginity Security Advisory 2005-001 : Hola CMS - File destruction and System access CONFIRM http://www.holacms.de/?content=changelog XF hola-votefilename-directory-traversal(19672) HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite arbitrary files via a modified vote_filename parameter.

CVE-2005-0796

2005-05-02T00:00:00.000-04:00

2016-10-17T23:14:41.380-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050315 Virginity Security Advisory 2005-002 : Hola CMS - Another File destruction and System access CONFIRM http://www.holacms.de/?content=changelog Directory traversal vulnerability in HolaCMS 1.4.9-1 allows remote attackers to overwrite arbitrary files via a "holaDB/votes" followed by a .. (dot dot) in the vote_filename parameter, which bypasses the check by HolaCMS to ensure that the file is in the holaDB/votes directory.

CVE-2005-0797

2005-03-15T00:00:00.000-05:00

2016-10-17T23:14:42.927-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050315 [ISR] - Novell iChain Mini FTP Server Valid User Disclosure Vulnerability MISC http://www.infobyte.com.ar/adv/ISR-04.html BID 12811 Novell iChain Mini FTP Server 2.3 displays different error messages if a user exists or not, which allows remote attackers to obtain sensitive information and facilitates brute force attacks.

CVE-2005-0798

2005-03-15T00:00:00.000-05:00

2016-10-17T23:14:44.050-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050315 [ISR] - Novell iChain Mini FTP Server Bruteforce Problem SECTRACK 1013408 CONFIRM http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096887.htm MISC http://www.infobyte.com.ar/adv/ISR-05.html Novell iChain Mini FTP Server 2.3, and possibly earlier versions, does not limit the number of incorrect logins, which makes it easier for remote attackers to conduct brute force login attacks.

cpe:/a:mysql:mysql:4.1.9

CVE-2005-0799

2005-03-15T00:00:00.000-05:00

2016-10-17T23:14:45.177-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugs.mysql.com/bug.php?id=9148 BUGTRAQ 20050315 Denial of Service Vulnerability in MySQL Server for Windows MySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to cause a denial of service (application crash) via a use command followed by an MS-DOS device name such as (1) LPT1 or (2) PRN.

cpe:/a:mcnews:mcnews:1.0 cpe:/a:mcnews:mcnews:1.1 cpe:/a:mcnews:mcnews:1.1a cpe:/a:mcnews:mcnews:1.2 cpe:/a:mcnews:mcnews:1.3

CVE-2005-0800

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:20.187-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050317 PHP mcNews arbitrary file inclusion BUGTRAQ 20060906 mcNews v1.3 - Remote File Include BID 12835 XF mcnews-install-file-include(19726) PHP remote file inclusion vulnerability in install.php in mcNews 1.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the l parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2005-0720.

cpe:/a:includer.cgi:includer.cgi

CVE-2005-0801

2005-05-02T00:00:00.000-04:00

2016-10-17T23:14:47.817-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050317 Another includer.cgi problem? Directory traversal vulnerability in includer.cgi in The Includer allows remote attackers to read arbitrary files via (1) a .. (dot dot) or (2) a full pathname in the URL.

cpe:/a:asp_press:acs_blog:0.8 cpe:/a:asp_press:acs_blog:0.9 cpe:/a:asp_press:acs_blog:1.0 cpe:/a:asp_press:acs_blog:1.1b

CVE-2005-0802

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:25.017-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050317 XSS in ACS blog SECTRACK 1013470 BID 12836 XF acs-blog-search-xss(19728) Cross-site scripting (XSS) vulnerability in search.asp in ACS Blog 0.8 through 1.1b allows remote attackers to execute arbitrary web script or HTML via the search parameter.

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2000::sp1 cpe:/o:microsoft:windows_2000::sp2 cpe:/o:microsoft:windows_2000::sp3 cpe:/o:microsoft:windows_2000::sp4

CVE-2005-0803

2005-05-02T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050317 Windows 2000 GDI32.DLL GetEnhMetaFilePaletteEntries() API specially crafted EMF file DOS vulnerability SECTRACK 1015168 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf CERT-VN VU#134756 BID 12834 CERT TA05-312A VUPEN ADV-2005-2348 MS MS05-053 XF win-2000-gdi32dll-dos(19727) The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (application crash) via a crafted Enhanced Metafile (EMF) file that causes invalid (1) end, (2) emreof, or (3) palent offsets to be used, aka "Enhanced Metafile Vulnerability."

cpe:/a:mailenable:mailenable_standard:1.8

CVE-2005-0804

2005-05-02T00:00:00.000-04:00

2016-10-17T23:14:51.367-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050317 See-security Advisory: Format string vulnerability in MailEnable 1.8 BID 12833 Format string vulnerability in MailEnable 1.8 allows remote attackers to cause a denial of service (application crash) via format string specifiers in the mailto field.

cpe:/a:subdreamer:subdreamer_light:1.0

CVE-2005-0805

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:20.530-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050318 possible SQL injection in Subdreamer BUGTRAQ 20060621 Re: possible SQL injection in Subdreamer BID 12839 CONFIRM http://www.subdreamer.com/forum/showthread.php?t=2501 SQL injection vulnerability in index.php in Subdreamer Light, when magic_quotes_gpc is enabled, allows remote attackers to execute arbitrary SQL commands via certain parameters that are used as global variables, as demonstrated using the imageid parameter, which is not properly handled by imagegallery.php.

cpe:/a:ximian:evolution:2.0.3

CVE-2005-0806

2005-05-02T00:00:00.000-04:00

2018-10-03T17:29:59.717-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugzilla.ximian.com/show_bug.cgi?id=72609 MANDRAKE MDKSA-2005:059 REDHAT RHSA-2005:397 UBUNTU USN-166-1 Evolution 2.0.3 allows remote attackers to cause a denial of service (application crash or hang) via crafted messages, possibly involving charsets in attachment filenames.

cpe:/a:oxid:cain_and_abel:2.5 cpe:/a:oxid:cain_and_abel:2.5_beta21 cpe:/a:oxid:cain_and_abel:2.5_beta29 cpe:/a:oxid:cain_and_abel:2.5_beta34 cpe:/a:oxid:cain_and_abel:2.5_beta36 cpe:/a:oxid:cain_and_abel:2.5_beta40 cpe:/a:oxid:cain_and_abel:2.5_beta41 cpe:/a:oxid:cain_and_abel:2.5_beta47 cpe:/a:oxid:cain_and_abel:2.5_beta51 cpe:/a:oxid:cain_and_abel:2.5_beta56 cpe:/a:oxid:cain_and_abel:2.5_beta59 cpe:/a:oxid:cain_and_abel:2.5_beta65 cpe:/a:oxid:cain_and_abel:2.65

CVE-2005-0807

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:25.170-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050318 Cain & Abel PSK Sniffer Heap overflow SECTRACK 1013476 CONFIRM http://www.oxid.it/ BID 12840 XF cain-abel-ikepsk-bo(19742) XF cain-abel-http-filter-bo(19744) Multiple buffer overflows in Cain & Abel before 2.67 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via (1) an IKE packet with a large ID field that is not properly handled by the PSK sniffer filter, (2) the HTTP sniffer filter, or the (3) POP3, (4) SMTP, (5) IMAP, (6) NNTP, or (7) TDS sniffer filters.

cpe:/a:apache:tomcat:3.0 cpe:/a:apache:tomcat:3.1 cpe:/a:apache:tomcat:3.1.1 cpe:/a:apache:tomcat:3.2 cpe:/a:apache:tomcat:3.2.1 cpe:/a:apache:tomcat:3.2.2:beta2 cpe:/a:apache:tomcat:3.2.3 cpe:/a:apache:tomcat:3.2.4 cpe:/a:apache:tomcat:3.3 cpe:/a:apache:tomcat:3.3.1 cpe:/a:apache:tomcat:3.3.1a

CVE-2005-0808

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:25.233-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.hitachi-support.com/security_e/vuls_e/HS05-006_e/index-e.html CERT-VN VU#204710 CONFIRM http://www.kb.cert.org/vuls/id/JGEI-6A2LEF BID 12795 XF tomcat-manager-ajp12-dos(19681) Apache Tomcat before 5.x allows remote attackers to cause a denial of service (application crash) via a crafted AJP12 packet to TCP port 8007.

cpe:/a:notify_technology:notifylink:enterprise_server

CVE-2005-0809

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:22.847-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-10T19:27:00.000-04:00

ALLOWS_OTHER_ACCESS

CERT-VN VU#581068 BID 12843 NotifyLink, when configured for client key retrieval, allows remote attackers to obtain AES keys via a direct request to /hwp/get.asp, then uses a weak encryption scheme (fixed byte reordering) to protect the key, which allows remote attackers to obtain the key via a brute force attack.

cpe:/a:notify_technology:notifylink:enterprise_server

CVE-2005-0810

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:23.003-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-10T19:29:00.000-04:00

ALLOWS_OTHER_ACCESS

CERT-VN VU#264097 BID 12843 SQL injection vulnerability in NotifyLink before 3.0 allows remote attackers to execute arbitrary SQL commands via the URL.

cpe:/a:notify_technology:notifylink:enterprise_server

CVE-2005-0811

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:23.160-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-10T19:32:00.000-04:00

ALLOWS_OTHER_ACCESS

CERT-VN VU#131828 BID 12843 The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, which allows remote authenticated users to bypass intended restrictions via a direct request to certain URLs.

cpe:/a:notify_technology:notifylink:enterprise_server

CVE-2005-0812

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:23.317-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-10T19:34:00.000-04:00

CERT-VN VU#770532 BID 12843 The web interface in NotifyLink 3.0 displays passwords in cleartext on the administrative page, which could allow remote attackers or local users to obtain sensitive information.

cpe:/a:initial_redirect:initial_redirect_squid_proxy_plug-in:0.1 cpe:/a:initial_redirect:initial_redirect_squid_proxy_plug-in:0.2

CVE-2005-0813

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:23.473-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-10T19:40:00.000-04:00

BID 12827 CONFIRM http://www.vanheusden.com/ir/ Buffer overflow in Initial Redirect (ir) Squid Proxy Plug-In 0.1 and 0.2 may allow attackers to cause a denial of service and execute arbitrary code via unknown vectors.

cpe:/a:lysator:lsh:1.0 cpe:/a:lysator:lsh:1.0.1 cpe:/a:lysator:lsh:1.0.2 cpe:/a:lysator:lsh:1.0.3 cpe:/a:lysator:lsh:1.0.4 cpe:/a:lysator:lsh:1.0.5 cpe:/a:lysator:lsh:1.0.6 cpe:/a:lysator:lsh:1.0.7 cpe:/a:lysator:lsh:1.1.0 cpe:/a:lysator:lsh:1.1.1 cpe:/a:lysator:lsh:1.1.2 cpe:/a:lysator:lsh:1.1.3 cpe:/a:lysator:lsh:1.1.4 cpe:/a:lysator:lsh:1.1.5 cpe:/a:lysator:lsh:1.1.6 cpe:/a:lysator:lsh:1.1.7 cpe:/a:lysator:lsh:1.1.8 cpe:/a:lysator:lsh:1.1.9 cpe:/a:lysator:lsh:1.2 cpe:/a:lysator:lsh:1.2.1 cpe:/a:lysator:lsh:1.2.2 cpe:/a:lysator:lsh:1.2.3 cpe:/a:lysator:lsh:1.2.4 cpe:/a:lysator:lsh:1.2.5 cpe:/a:lysator:lsh:1.3.0 cpe:/a:lysator:lsh:1.3.1 cpe:/a:lysator:lsh:1.3.2 cpe:/a:lysator:lsh:1.3.3 cpe:/a:lysator:lsh:1.3.4 cpe:/a:lysator:lsh:1.3.5 cpe:/a:lysator:lsh:1.3.6 cpe:/a:lysator:lsh:1.3.7 cpe:/a:lysator:lsh:1.4 cpe:/a:lysator:lsh:1.4.1 cpe:/a:lysator:lsh:1.4.2 cpe:/a:lysator:lsh:1.4.3 cpe:/a:lysator:lsh:1.5 cpe:/a:lysator:lsh:1.5.1 cpe:/a:lysator:lsh:1.5.2 cpe:/a:lysator:lsh:1.5.3 cpe:/a:lysator:lsh:1.5.4 cpe:/a:lysator:lsh:1.5.5 cpe:/a:lysator:lsh:2.0 cpe:/a:lysator:lsh:2.0.1

CVE-2005-0814

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:25.297-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MLIST [lsh-bugs] 20050316 ANNOUNCE: LSH-2.0.1, fix for denial of service bug DEBIAN DSA-717 XF lsh-lshd-dos(19724) Unknown vulnerability in lshd in Lysator LSH 1.x and 2.x before 2.0.1 allows remote attackers to cause a denial of service via unknown vectors.

CVE-2005-0815

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:01.357-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.12-rc1 MANDRIVA MDKSA-2006:072 REDHAT RHSA-2005:366 REDHAT RHSA-2005:663 REDHAT RHSA-2006:0190 REDHAT RHSA-2006:0191 BUGTRAQ 20050317 Linux ISO9660 handling flaws BID 12837 VUPEN ADV-2005-1878 FEDORA FLSA:152532 XF kernel-iso9660-filesystem(19741) Multiple "range checking flaws" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may allow attackers to cause a denial of service or corrupt memory via a crafted filesystem.

cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:solaris:8.0::x86 cpe:/o:sun:solaris:9.0::sparc cpe:/o:sun:solaris:9.0::x86 cpe:/o:sun:sunos:5.7 cpe:/o:sun:sunos:5.8

CVE-2005-0816

2005-05-02T00:00:00.000-04:00

2018-10-30T12:26:22.763-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1013462 SUNALERT 57710 BID 12838 XF solaris-newgrp-bo(19729) Buffer overflow in newgrp in Solaris 7 through 9 allows local users to gain root privileges.

cpe:/a:symantec:enterprise_firewall:7.0 cpe:/a:symantec:enterprise_firewall:8.0 cpe:/a:symantec:velociraptor:model_1300 cpe:/h:symantec:gateway_security_5300:1.0 cpe:/h:symantec:gateway_security_5400:2.0

CVE-2005-0817

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:25.517-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040615 Symantec Enterprise Firewall DNSD cache poisoning Vulnerability CONFIRM http://securityresponse.symantec.com/avcenter/security/Content/2005.03.15.html SECTRACK 1013451 MISC http://www.isc.sans.org/diary.php?date=2005-03-04 XF sef-dns-spoofing(16423) XF symantec-dnsdproxy-redirect(44530) Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and VelociRaptor 1100/1200/1300 1.5, allows remote attackers to poison the DNS cache and redirect users to malicious sites.

cpe:/a:punbb:punbb:1.2.3

CVE-2005-0818

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:25.563-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013446 XF punbb-email-jabber-xss(19725) Cross-site scripting (XSS) vulnerability in PunBB 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) email or (2) Jabber parameters.

cpe:/o:novell:netware:6.5:sp2 cpe:/o:novell:netware:6.5:sp3

CVE-2005-0819

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:25.147-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-10T21:04:00.000-04:00

SECTRACK 1013460 CONFIRM http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971038.htm BID 12831 The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start.

CVE-2005-0820

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:25.317-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-10T21:12:00.000-04:00

SECTRACK 1013454 MSKB 867443 BID 12824 Microsoft Office InfoPath 2003 SP1 includes sensitive information in the Manifest.xsf file in a custom .xsn form, which allows attackers to obtain printer and network information, obtain the database name, username, and password, or obtain the internal web server name.

CVE-2005-0821

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:25.627-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1013457 CONFIRM http://support.citrix.com/kb/entry.jspa?externalID=CTX105574 BID 12821 XF metaframe-conferencing-gain-access(19723) Unknown vulnerability in Citrix MetaFrame Conferencing Manager 3.0 allows conference members to bypass organizer restrictions to control the keyboard and mouse.

cpe:/a:citrix:metaframe_password_manager:2.5

CVE-2005-0822

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:25.630-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-10T21:29:00.000-04:00

SECTRACK 1018077 CONFIRM http://support.citrix.com/article/CTX105800 CONFIRM http://support.citrix.com/kb/entry.jspa?entryID=5970&categoryID=254 CONFIRM http://support.citrix.com/kb/entry.jspa?externalID=CTX105762 BID 24041 Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy.

cpe:/a:thepoolclub:ipool:1.6.81 cpe:/a:thepoolclub:isnooker:1.6.8

CVE-2005-0823

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:25.687-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1013458 SECTRACK 1013459 BID 12830 XF ipool-mydetails-plaintext-password(19717) XF isnooker-mydetails-plaintext-password(19718) ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.txt file, which allows local users to gain privileges.

cpe:/a:mathopd:mathopd

CVE-2005-0824

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:25.957-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-10T21:50:00.000-04:00

CONFIRM http://www.mail-archive.com/mathopd%40mathopd.org/msg00272.html The internal_dump function in Mathopd before 1.5p5, and 1.6x before 1.6b6 BETA, when Mathopd is running with the -n option, allows local users to overwrite arbitrary files via a symlink attack on dump files that are triggered by a SIGWINCH signal.

cpe:/a:lgames:ltris:1.0.8 cpe:/a:lgames:ltris:1.0.9

CVE-2005-0825

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:26.113-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-10T21:52:00.000-04:00

ALLOWS_USER_ACCESS

MISC http://bugs.gentoo.org/show_bug.cgi?id=85770 CONFIRM http://lgames.sourceforge.net/index.php?action=show_news&news_action=show_item&item_id=108 GENTOO GLSA 200503-24 Buffer overflow in LTris before 1.0.10 allows local users to execute arbitrary code via a crafted highscores file.

cpe:/a:ollydbg:ollydbg:1.06 cpe:/a:ollydbg:ollydbg:1.08b cpe:/a:ollydbg:ollydbg:1.09 cpe:/a:ollydbg:ollydbg:1.10

CVE-2005-0826

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:25.733-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050319 OllyDbg long process Module debug Vulnerability SECTRACK 1013478 BID 12850 XF ollydbg-long-filename-do(19750) OllyDbg 1.10 and earlier allows remote attackers to cause a denial of service (application crash) via a dynamic link library (DLL) with a long filename.

cpe:/a:ciamos:ciamos:0.9.2_rc1 cpe:/a:e-xoops:e-xoops:1.05_rev3 cpe:/a:runcms:runcms:1.1a

CVE-2005-0827

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:25.797-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050318 runcms installation path BUGTRAQ 20050319 Ciamos Installation path(IHS) MISC http://www.ihsteam.com/download/sections/runcms%20advisory%20-%20eng.pdf XF ciamos-viewcat-path-disclosure(19755) Viewcat.php in (1) RUNCMS 1.1A, (2) Ciamos 0.9.2 RC1, e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allow remote attackers to obtain sensitive information via an invalid parameter to the convertorderbytrans function, which reveals the path in a PHP error message.

cpe:/a:ciamos:ciamos:0.9.2_rc1 cpe:/a:e-xoops:e-xoops:1.05r3 cpe:/a:runcms:runcms:1.1a

CVE-2005-0828

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:25.843-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050318 runcms highlight.php hole BUGTRAQ 20050319 Ciamos Highlight.php Security Hole(IHS) SECTRACK 1013485 MISC http://www.ihsteam.com/download/advisory/Exoops%20highlight%20hole.txt MISC http://www.ihsteam.com/download/sections/runcms%20advisory%20-%20eng.pdf BID 12848 XF ciamos-file-information-disclosure(19754) highlight.php in (1) RUNCMS 1.1A, (2) CIAMOS 0.9.2 RC1, (3) e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allows remote attackers to read arbitrary PHP files by specifying the pathname in the file parameter, as demonstrated by reading database configuration information from mainfile.php.

cpe:/a:php_fusion:php_fusion:5.01

CVE-2005-0829

2005-05-02T00:00:00.000-04:00

2016-10-17T23:14:59.897-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050319 [PersianHacker.NET 200503-10]PHP-Fusion v5.01 Html Injection BUGTRAQ 20050319 Fw: [PersianHacker.NET 200503-10]PHP-Fusion v5.01 Html Injection Vulnerability BUGTRAQ 20050319 Re: [PersianHacker.NET 200503-10]PHP-Fusion v5.01 Html Injection Cross-site scripting (XSS) vulnerability in setuser.php of the Digitanium addon to PHP-Fusion 5.01 allows remote attackers to inject arbitrary web script or HTML via the (1) user_name or (2) user_pass parameters.

cpe:/a:xzabite:dyndnsupdate:0.6.15

CVE-2005-0830

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:26.910-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-10T22:04:00.000-04:00

ALLOWS_USER_ACCESS

MISC http://bugs.gentoo.org/show_bug.cgi?id=84659 GENTOO GLSA-200503-27 Multiple buffer overflows in Xzabite DYNDNSUpdate 0.6.15 and earlier, including the ipcheck function in dyndnsupdate.c, allow remote attackers who spoof a dyndns.org server to execute arbitrary code via unknown vectors.

cpe:/a:php-post:php-post_web_forum:0.1 cpe:/a:php-post:php-post_web_forum:0.2 cpe:/a:php-post:php-post_web_forum:0.3 cpe:/a:php-post:php-post_web_forum:0.21 cpe:/a:php-post:php-post_web_forum:0.22 cpe:/a:php-post:php-post_web_forum:0.32

CVE-2005-0831

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:27.067-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-10T22:07:00.000-04:00

BUGTRAQ 20050318 PHP-Post Exploit BID 12845 PHP-Post allows remote attackers to spoof the names of other users by registering with a username containing hex-encoded characters.

CVE-2005-0832

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:27.237-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-10T22:08:00.000-04:00

CONFIRM http://www.php-post.co.uk/index.php?s=content&p=download BID 12845 Cross-site scripting (XSS) vulnerability in PHP-Post before 0.33 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

cpe:/h:belkin:belkin_54g_wireless_router:f5d7130

CVE-2005-0833

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:27.410-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-10T22:09:00.000-04:00

BID 12846 Belkin 54G (F5D7130) wireless router allows remote attackers to access restricted resources by sniffing URIs from UPNP datagrams, then accessing those URIs, which do not require authentication.

CVE-2005-0834

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:27.567-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-10T22:25:00.000-04:00

BID 12846 Belkin 54G (F5D7130) wireless router enables SNMP by default in a manner that allows remote attackers to obtain sensitive information.

cpe:/h:belkin:54g_wireless_router:f5d7130

CVE-2005-0835

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:27.723-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-10T22:10:00.000-04:00

BID 12846 The SNMP service in the Belkin 54G (F5D7130) wireless router allows remote attackers to cause a denial of service via unknown vectors.

CVE-2005-0836

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:01.350-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://jouko.iki.fi/adv/ws.html FULLDISC 20050318 Java Web Start argument injection vulnerability SUNALERT 57740 SUNALERT 200255 SUNALERT 1000200 GENTOO GLSA-200503-28 SUSE SUSE-SA:2005:032 BID 12847 Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06 allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file.

cpe:/a:icecast:icecast:2.0 cpe:/a:icecast:icecast:2.0.1 cpe:/a:icecast:icecast:2.0.2 cpe:/a:icecast:icecast:2.1.0 cpe:/a:icecast:icecast:2.2

CVE-2005-0837

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:25.907-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013475 BUGTRAQ 20050318 IceCast up to v2.20 multiple vulnerabilities BID 12849 XF icecast-get-bypass-security(19760) IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .xsl file with a trailing . (dot).

cpe:/a:icecast:icecast:2.20

CVE-2005-0838

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:25.967-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1013475 BUGTRAQ 20050318 IceCast up to v2.20 multiple vulnerabilities BID 12849 XF icecast-xsl-gain-pivileges(19753) Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possibly execute arbitrary code via (1) a long test value in an xsl:when tag, (2) a long test value in an xsl:if tag, or (3) a long select value in an xsl:value-of tag.

cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8.1 cpe:/o:linux:linux_kernel:2.6.9:2.6.20 cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.10:rc2

CVE-2005-0839

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:20.780-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://linux.bkbits.net:8080/linux-2.6/cset@41fa6464E1UuGu6zmketEYxm73KSyQ MLIST [linux-kernel] 20050301 Re: Breakage from patch: Only root should be able to set the N_MOUSE line discipline. REDHAT RHSA-2005:366 FEDORA FLSA:157459-3 Linux kernel 2.6 before 2.6.11 does not restrict access to the N_MOUSE line discipline for a TTY, which allows local users to gain privileges by injecting mouse or keyboard events into other user sessions.

CVE-2005-0840

2005-05-02T00:00:00.000-04:00

2008-09-10T15:37:14.180-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0706. Reason: This candidate is a duplicate of CVE-2005-0706. Notes: All CVE users should reference CVE-2005-0706 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:phpmyfamily:phpmyfamily:1.4

CVE-2005-0841

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:26.017-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050321 phpMyFamily 1.4.0 SQL vulnerabilities SECTRACK 1013493 BID 12860 XF phpmyfamily-multiple-scripts-sql-injection(19787) SQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5) census.php, (6) passthru.php and possibly other php files in phpMyFamily 1.4.0 allows remote attackers to execute arbitrary SQL commands, as demonstrated via (1) the person parameter to people.php or (2) the Login field.

cpe:/a:kayako:esupport:2.3

CVE-2005-0842

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:04.897-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050322 Kayako eSupport Cross Site Scripting Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) _i or (2) _c parameter.

cpe:/a:phorum:phorum:5.0.14a

CVE-2005-0843

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:05.960-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050322 [ Positive Technologies #SA] Phorum "location" HTTP Response CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting attacks via the body parameter, which is included in the resulting Location header.

cpe:/h:nortel:contivity:5.01

CVE-2005-0844

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:26.063-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050322 Nortel VPN Client Issue: Clear-text password stored in memory SECTRACK 1013512 MISC http://www.nta-monitor.com/news/vpn-flaws/nortel/nortel-client/ XF nortel-contivity-information-disclosure(19791) Nortel VPN client 5.01 stores the cleartext password in the memory of the Extranet.exe process, which could allow local users to obtain sensitive information.

CVE-2005-0845

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:08.007-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050323 [SIG^2 G-TEC] SurgeMail Webmail Attachment Upload and XSS CONFIRM http://netwinsite.com/cgi/dnewsweb.cgi?cmd=article&group=netwin.surgemail&item=8814&utag= MISC http://www.security.org.sg/vuln/surgemail22g3.html Directory traversal vulnerability in the Webmail interface in SurgeMail 2.2g3 allows remote authenticated users to write arbitrary files or directories via a .. (dot dot) in the attach_id parameter.

cpe:/a:netwin:surgemail:2.2g3

CVE-2005-0846

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:09.040-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050323 [SIG^2 G-TEC] SurgeMail Webmail Attachment Upload and XSS CONFIRM http://netwinsite.com/cgi/dnewsweb.cgi?cmd=article&group=netwin.surgemail&item=8814&utag= MISC http://www.security.org.sg/vuln/surgemail22g3.html Multiple cross-site scripting (XSS) vulnerabilities in the email auto-reply message in SurgeMail 2.2g3 allow remote attackers to inject arbitrary web script or HTML via the (1) message subject or (2) message header field.

cpe:/a:code_ocean:ocean_ftp_server:1.0

CVE-2005-0847

2005-05-02T00:00:00.000-04:00

2017-10-18T21:29:02.033-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 12859 XF ocean-ftp-connection-dos(19777) EXPLOIT-DB 893 Code Ocean FTP server 1.0 allows remote attackers to cause a denial of service via a large number of connections.

cpe:/a:funlabs:4x4_off-road_adventure_iii cpe:/a:funlabs:cabelas_big_game_hunter_2004_season cpe:/a:funlabs:cabelas_big_game_hunter_2005 cpe:/a:funlabs:cabelas_dangerous_hunts cpe:/a:funlabs:cabelas_deer_hunt_2005_season cpe:/a:funlabs:revolution cpe:/a:funlabs:secret_service_in_harms_way cpe:/a:funlabs:shadow_force_razor_unit cpe:/a:funlabs:us_most_wanted_nowhere_to_hide

CVE-2005-0848

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:26.187-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/funlabsboom-adv.txt SECTRACK 1013492 XF funlabs-games-upd-dos(19762) Multiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt, Revolution, Secret Service, Shadow Force, and US Most Wanted, allow remote attackers to cause a denial of service via an empty UDP packet to the server, which cannot detect that a new packet has arrived using the socket ioctl.

CVE-2005-0849

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:29.957-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-10T23:43:00.000-04:00

MISC http://aluigi.altervista.org/adv/funlabsboom-adv.txt SECTRACK 1013492 Multiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt, Revolution, Secret Service, Shadow Force, and US Most Wanted, allow remote attackers to cause a denial of service (crash from invalid memory access) via a malformed join packet with values that cause the server to copy more memory than was actually provided in the packet.

cpe:/a:filezilla:filezilla_server:0.7 cpe:/a:filezilla:filezilla_server:0.7.1 cpe:/a:filezilla:filezilla_server:0.8.1 cpe:/a:filezilla:filezilla_server:0.8.2 cpe:/a:filezilla:filezilla_server:0.8.3 cpe:/a:filezilla:filezilla_server:0.8.4 cpe:/a:filezilla:filezilla_server:0.8.5 cpe:/a:filezilla:filezilla_server:0.8.6a cpe:/a:filezilla:filezilla_server:0.8.7 cpe:/a:filezilla:filezilla_server:0.8.8 cpe:/a:filezilla:filezilla_server:0.8.9 cpe:/a:filezilla:filezilla_server:0.9.0 cpe:/a:filezilla:filezilla_server:0.9.1b cpe:/a:filezilla:filezilla_server:0.9.2 cpe:/a:filezilla:filezilla_server:0.9.3 cpe:/a:filezilla:filezilla_server:0.9.4d cpe:/a:filezilla:filezilla_server:0.9.4e cpe:/a:filezilla:filezilla_server:0.9.5

CVE-2005-0850

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:30.130-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-10T23:58:00.000-04:00

CONFIRM http://sourceforge.net/project/shownotes.php?group_id=21558&release_id=314473 BID 12865 FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS device name such as CON, NUL, COM1, LPT1, and others.

CVE-2005-0851

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:30.333-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-11T00:00:00.000-04:00

CONFIRM http://sourceforge.net/project/shownotes.php?group_id=21558&release_id=314473 BID 12865 FileZilla FTP server before 0.9.6, when using MODE Z (zlib compression), allows remote attackers to cause a denial of service (infinite loop) via certain file uploads or directory listings.

CVE-2005-0852

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:30.520-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-11T04:52:00.000-04:00

BUGTRAQ 20050322 Possible windows+python bug BID 12870 Microsoft Windows XP SP1 allows local users to cause a denial of service (system crash) via an empty datagram to a raw IP over IP socket (IP protocol 4), as originally demonstrated using code in Python 2.3.

cpe:/a:betaparticle:betaparticle_blog:2.0 cpe:/a:betaparticle:betaparticle_blog:3.0

CVE-2005-0853

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:01.530-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 12861 XF betaparticle-web-root-information-disclosure(19779) XF bpblog-blog-info-disclosure(47419) EXPLOIT-DB 7499 betaparticle blog (bp blog) stores the database under the web root, which allows remote attackers to obtain sensitive information via a direct request to (1) dbBlogMX.mdb for versions before 3.0, or (2) Blog.mdb for versions 3.0 and later. NOTE: it was later reported that vector 2 also affects versions 6.0 through 9.0.

cpe:/a:betaparticle:betaparticle_blog:2.0 cpe:/a:betaparticle:betaparticle_blog:3.0

CVE-2005-0854

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:26.297-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://blog.betaparticle.com/template_permalink.asp?id=68 BID 12861 XF betaparticle-blog-authentication-bypass(19781) betaparticle blog (bp blog), posisbly before version 4, allows remote attackers to bypass authentication and (1) upload files via a direct request to upload.asp or (2) delete files via a direct request to myFiles.asp.

cpe:/a:coolforum:coolforum:0.8.1_beta

CVE-2005-0855

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:31.050-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-06-11T05:06:00.000-04:00

SECTRACK 1013474 CoolForum 0.8.1 beta and earlier allows remote attackers to obtain sensitive path information via direct requests to (1) entete.php, (2) profile_accueil.php, (3) profile_mdp.php, (4) profile_notify.php, (5) profile_options.php, (6) profile_perso.php, (7) profile_pm.php, or (8) readannonce.php, which leaks the full pathname in a PHP error message.

cpe:/a:coolforum:coolforum:0.8.1_beta

CVE-2005-0856

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:31.207-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-11T05:08:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1013474 CoolForum 0.8.1 beta and earlier allows remote attackers to manipulate SQL commands via certain requests to (1) alert.php or (2) viewip.php, possibly due to a SQL injection vulnerability.

cpe:/a:coolforum:coolforum:0.8

CVE-2005-0857

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:26.343-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013474 BID 12852 XF coolforum-avatar-xss(19758) Cross-site scripting (XSS) vulnerability in avatar.php for CoolForum 0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the img parameter.

cpe:/a:coolforum:coolforum:0.8

CVE-2005-0858

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:26.407-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1013474 BID 12852 XF coolforum-adminentete-sql-injection(19759) XF coolforum-register-sql-injection(19761) Multiple SQL injection vulnerabilities in CoolForum 0.8 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the pseudo parameter to entete.php or (2) the login parameter to register.php.

cpe:/a:czaries_network:czarnews:1.13b

CVE-2005-0859

2005-05-02T00:00:00.000-04:00

2017-10-18T21:29:02.097-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1013486 BID 12857 BID 18411 XF czarnews-multiple-scripts-file-include(19765) XF czarnews-news-config-file-include(27733) EXPLOIT-DB 2009 PHP remote file inclusion vulnerability in CzarNews 1.13b allows remote attackers to execute arbitrary PHP code via the tpath parameter to (1) headlines.php or (2) news.php. NOTE: some sources have reported the "dir" parameter as being affected; however, this is likely a cut-and-paste error from the wrong section of the original vulnerability report. Also, the news.php version was later reported to be in 1.12 through 1.14.

cpe:/a:the_rusted_gate:trg_news:3.0

CVE-2005-0860

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:31.833-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-11T05:30:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1013487 BID 12855 PHP remote file inclusion vulnerability in TRG News Script 3.0 allows remote attackers to execute arbitrary PHP code via the dir parameter to (1) article.php, (2) authorall.php, (3) comment.php, (4) display.php, or (5) displayall.php.

cpe:/a:delegate:delegate:8.11.0

CVE-2005-0861

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:26.530-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MISC http://www.delegate.org/mail-lists/delegate-en/2840 XF delegate-bo(19775) Multiple buffer overflows in DeleGate before 8.11.1 may allow attackers to cause a denial of service or execute arbitrary code, possibly due to "overflows on arrays."

cpe:/a:phpopenchat:phpopenchat:2.3.4 cpe:/a:phpopenchat:phpopenchat:3.0.1

CVE-2005-0862

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:21.093-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1013434 BUGTRAQ 20070410 PhpOpenChat <= 3.0.1 (poc.php) Multiple Remote File Include Vulnerabilities BID 12817 MISC http://www.zone-h.org/advisories/read/id=7310 XF phpopenchat-file-include(19721) Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter to (1) poc_loginform.php or (2) phpbb/poc.php, the poc_root_path parameter to (3) phpbb/poc.php, (4) phpnuke/ENGLISH_poc.php, (5) phpnuke/poc.php, or (6) yabbse/poc.php, or (7) the sourcedir parameter to yabbse/poc.php.

cpe:/a:phpopenchat:phpopenchat:3.0.0 cpe:/a:phpopenchat:phpopenchat:3.0.1 cpe:/a:phpopenchat:phpopenchat:3.0.2

CVE-2005-0863

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:26.640-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 12841 XF phpopenchat-regulars-register-xss(19748) Cross-site scripting (XSS) vulnerability in PHPOpenChat v3.x allows remote attackers to inject arbitrary web script or HTML via (1) the chatter parameter to regulars.php or (2) the chatter, chatter1, chatter2, chatter3, or chatter4 parameters to register.php.

cpe:/h:securecomputing:samsung_adsl_modem:smdk8947v1.2

CVE-2005-0864

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:32.457-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-13T08:58:00.000-04:00

MISC http://exploitlabs.com/files/advisories/EXPL-A-2005-002-samsung-adsl.txt BID 12864 MISC http://zone-h.org/en/advisories/read/id=7339/ The Boa web server, as used in Samsung ADSL Modem SMDK8947v1.2 and possibly other products, allows remote attackers to read arbitrary files via a full pathname in the HTTP request.

cpe:/h:securecomputing:samsung_adsl_modem:smdk8947v1.2

CVE-2005-0865

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:32.630-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-13T09:02:00.000-04:00

ALLOWS_OTHER_ACCESS

MISC http://exploitlabs.com/files/advisories/EXPL-A-2005-002-samsung-adsl.txt SECTRACK 1013615 BID 12864 MISC http://zone-h.org/en/advisories/read/id=7339/ Samsung ADSL Modem SMDK8947v1.2 uses default passwords for the (1) root, (2) admin, or (3) user users, which allows remote attackers to gain privileges via Telnet or an HTTP request to adsl.cgi.

cpe:/a:cdrtools:cdrecord:2.0

CVE-2005-0866

2005-05-02T00:00:00.000-04:00

2018-10-03T17:30:00.230-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=291376 UBUNTU USN-100-1 cdrecord before 4:2.0, when DEBUG is enabled, allows local users to overwrite arbitrary files via a symlink attack on temporary files.

cpe:/o:linux:linux_kernel:2.6.0

CVE-2005-0867

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:21.653-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SUSE SUSE-SA:2005:018 REDHAT RHSA-2005:366 FEDORA FLSA:157459-3 Integer overflow in Linux kernel 2.6 allows local users to overwrite kernel memory by writing to a sysfs file.

cpe:/a:bosanova:launcher400 cpe:/a:ibm:client_access cpe:/a:mochasoft:tn5250 cpe:/a:powerterm:interconnect

CVE-2005-0868

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:10.260-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050323 Backdoors in AS/400 emulations allow the server to attack connected PC workstations MISC http://www.venera.com/downloads/Attack_5250_terminal_emulations_from_iSeries_server.pdf AS/400 Telnet 5250 terminal emulation clients, as implemented by (1) IBM client access, (2) Bosanova, (3) PowerTerm, (4) Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO (Start PC Organizer) command followed by STRPCCMD (Start PC command), as demonstrated by creating a backdoor account using REXEC.

cpe:/a:phpsysinfo:phpsysinfo:2.3

CVE-2005-0869

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:26.687-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050323 [SECURITYREASON.COM] phpSysInfo 2.3 Multiple vulnerabilities XF phpsysinfo-path-disclosure(19808) phpSysInfo 2.3 allows remote attackers to obtain sensitive information via a direct request to (1) class.OpenBSD.inc.php, (2) class.NetBSD.inc.php, (3) class.FreeBSD.inc.php, (4) class.Darwin.inc.php, (5) XPath.class.php, (6) system_header.php, or (7) system_footer.php, which reveal the path in a PHP error message.

cpe:/a:phpsysinfo:phpsysinfo:2.3

CVE-2005-0870

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:26.750-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=301118 BUGTRAQ 20050323 [SECURITYREASON.COM] phpSysInfo 2.3 Multiple vulnerabilities DEBIAN DSA-724 DEBIAN DSA-897 DEBIAN DSA-898 DEBIAN DSA-899 MANDRIVA MDKSA-2005:212 BUGTRAQ 20051115 Advisory 22/2005: Multiple vulnerabilities in phpSysInfo BID 12887 BID 15414 XF phpsysinfo-sensor-program-xss(19807) Multiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) sensor_program parameter to index.php, (2) text[language], (3) text[template], or (4) hide_picklist parameter to system_footer.php.

cpe:/a:phpbb_group:phpbb:1.0.1

CVE-2005-0871

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:26.797-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050324 Multiple vulnerabilities in Topic Calendar 1.0.1 for phpBB SECTRACK 1013554 XF topic-calendar-path-disclosure(19824) calendar_scheduler.php in Topic Calendar 1.0.1 module for phpBB, when running on a Microsoft IIS server, allows remote attackers to obtain sensitive information via invalid parameters, which reveal the path in an error message.

cpe:/a:phpbb_group:phpbb:1.0.1

CVE-2005-0872

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:26.843-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050324 Multiple vulnerabilities in Topic Calendar 1.0.1 for phpBB SECTRACK 1013554 XF topic-calendar-start-xss(19821) Cross-site scripting (XSS) vulnerability in calendar_scheduler.php in the Topic Calendar 1.0.1 module for phpBB allows remote attackers to inject arbitrary web script or HTML via the start parameter.

cpe:/a:oracle:10g_reports_server:9.0.4.3.3

CVE-2005-0873

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:15.713-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050324 Oracle Reports Server 10g Vulnerable to XSS CERT-VN VU#210524 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html CONFIRM http://www.oracle.com/technology/deploy/security/pdf/public_vuln_to_advisory_mapping.html BID 12892 BID 15134 CERT TA05-292A Multiple cross-site scripting (XSS) vulnerabilities in test.jsp in Oracle Reports Server 10g (9.0.4.3.3) allow remote attackers to inject arbitrary web script or HTML via the (1) desname or (2) repprod parameter.

cpe:/a:cerulean_studios:trillian:2.0

CVE-2005-0874

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:16.933-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050324 LogicLibrary BugScan VSR,Trillian 2.0, 3.0 and 3.1 SECTRACK 1013557 Multiple buffer overflows in the (1) AIM, (2) MSN, (3) RSS, and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial of service (application crash) via a long string in an HTTP 1.1 response header.

cpe:/a:cerulean_studios:trillian:2.0 cpe:/a:cerulean_studios:trillian:3.0 cpe:/a:cerulean_studios:trillian:3.1

CVE-2005-0875

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:18.027-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050324 LogicLibrary BugScan VSR,Trillian 2.0, 3.0 and 3.1 Multiple buffer overflows in the Yahoo plug-in for Trillian 2.0, 3.0, and 3.1 allow remote web servers to cause a denial of service (application crash) via a long string in an HTTP 1.1 response header.

cpe:/a:dnsmasq:dnsmasq:2.14 cpe:/a:dnsmasq:dnsmasq:2.15 cpe:/a:dnsmasq:dnsmasq:2.16 cpe:/a:dnsmasq:dnsmasq:2.17 cpe:/a:dnsmasq:dnsmasq:2.18 cpe:/a:dnsmasq:dnsmasq:2.19 cpe:/a:dnsmasq:dnsmasq:2.20

CVE-2005-0876

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:26.907-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 12897 CONFIRM http://www.thekelleys.org.uk/dnsmasq/CHANGELOG XF dnsmasq-dhcp-offbyone-bo(19825) Off-by-one buffer overflow in Dnsmasq before 2.21 may allow attackers to execute arbitrary code via the DHCP lease file.

cpe:/a:dnsmasq:dnsmasq:2.0 cpe:/a:dnsmasq:dnsmasq:2.1 cpe:/a:dnsmasq:dnsmasq:2.2 cpe:/a:dnsmasq:dnsmasq:2.3 cpe:/a:dnsmasq:dnsmasq:2.4 cpe:/a:dnsmasq:dnsmasq:2.5 cpe:/a:dnsmasq:dnsmasq:2.6 cpe:/a:dnsmasq:dnsmasq:2.7 cpe:/a:dnsmasq:dnsmasq:2.8 cpe:/a:dnsmasq:dnsmasq:2.9 cpe:/a:dnsmasq:dnsmasq:2.10 cpe:/a:dnsmasq:dnsmasq:2.11 cpe:/a:dnsmasq:dnsmasq:2.12 cpe:/a:dnsmasq:dnsmasq:2.13 cpe:/a:dnsmasq:dnsmasq:2.14 cpe:/a:dnsmasq:dnsmasq:2.15 cpe:/a:dnsmasq:dnsmasq:2.16 cpe:/a:dnsmasq:dnsmasq:2.17 cpe:/a:dnsmasq:dnsmasq:2.18 cpe:/a:dnsmasq:dnsmasq:2.19 cpe:/a:dnsmasq:dnsmasq:2.20

CVE-2005-0877

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:26.953-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 12897 CONFIRM http://www.thekelleys.org.uk/dnsmasq/CHANGELOG XF dnsmasq-dns-cache-poisoning(19826) Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq.

cpe:/a:mercuryboard:mercuryboard_message_board:1.0 cpe:/a:mercuryboard:mercuryboard_message_board:1.0.1 cpe:/a:mercuryboard:mercuryboard_message_board:1.0.2 cpe:/a:mercuryboard:mercuryboard_message_board:1.1 cpe:/a:mercuryboard:mercuryboard_message_board:1.1.1 cpe:/a:mercuryboard:mercuryboard_message_board:1.1.2

CVE-2005-0878

2005-03-23T00:00:00.000-05:00

2017-07-10T21:32:27.017-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 12872 XF mercuryboard-title-pm-xss(19797) Cross-site scripting (XSS) vulnerability in MercuryBoard before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the title field of a PM (private message).

cpe:/a:vortex_portal:vortex_portal:2.0

CVE-2005-0879

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:27.063-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050323 Vortex Portal SECTRACK 1013545 BID 12878 XF vortexportal-act-file-include(19809) PHP remote file include vulnerability in (1) content.php and (2) index.php for Vortex Portal allows remote attackers to execute arbitrary PHP code via a URL in the act parameter.

cpe:/a:vortex_portal:vortex_portal

CVE-2005-0880

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:27.127-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050323 Vortex Portal XF vortex-portal-path-disclosure(19811) content.php in Vortex Portal allows remote attackers to obtain sensitive information via an invalid act parameter, which leaks the full pathname in a PHP error message.

cpe:/a:interspire:articlelive:2005

CVE-2005-0881

2005-03-23T00:00:00.000-05:00

2017-07-10T21:32:27.173-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050823 Re: Interspire ArticleLive 2005 (php version) is vulnerable to XSS BUGTRAQ 20050323 Interspire ArticleLive 2005 (php version) is vulnerable to XSS BID 12879 XF articlelive-articleid-xss(19817) Cross-site scripting (XSS) vulnerability in articles.newcomment for Interspire ArticleLive 2005 allows remote attackers to inject arbitrary web script or HTML via the Articleld parameter.

cpe:/a:birdblog:birdblog:1.0.0 cpe:/a:birdblog:birdblog:1.1.0

CVE-2005-0882

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:27.233-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://birdblog.sourceforge.net/ChangeLog CONFIRM http://cvs.sourceforge.net/viewcvs.py/birdblog/birdblog/admin/admincore.php?r1=1.4&r2=1.5 SECTRACK 1013548 BID 12880 XF birdblog-admincore-sql-injection(19799) SQL injection vulnerability in admincore.php in BirdBlog before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) userpw parameters.

cpe:/a:digitalhive:digitalhive:2.0

CVE-2005-0883

2005-03-23T00:00:00.000-05:00

2017-07-10T21:32:27.280-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013516 BID 12883 XF digitalhive-basephp-xss(19803) Multiple cross-site scripting (XSS) vulnerabilities in base.php for DigitalHive 2.0 allow remote attackers to inject arbitrary web script or HTML via (1) the mt parameter to the membres.php page or (2) the -afs-1- query string to the msg.php page.

cpe:/a:digitalhive:digitalhive:2.0

CVE-2005-0884

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:27.327-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1013516 XF digitalhive-reinstall(19802) DigitalHive 2.0 allows remote attackers to re-install the product by directly accessing the install script.

cpe:/a:xmb_forum:xmb:1.9.1

CVE-2005-0885

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:35.987-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-13T10:51:00.000-04:00

SECTRACK 1013515 BID 12886 Multiple cross-site scripting (XSS) vulnerabilities in XMB Forum 1.9.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Mood or (2) "Send To" fields.

cpe:/a:invision_power_services:invision_board:1.0 cpe:/a:invision_power_services:invision_board:1.0.1 cpe:/a:invision_power_services:invision_board:1.1.1 cpe:/a:invision_power_services:invision_board:1.1.2 cpe:/a:invision_power_services:invision_board:1.2 cpe:/a:invision_power_services:invision_board:1.3 cpe:/a:invision_power_services:invision_board:1.3.1_final cpe:/a:invision_power_services:invision_board:1.3_final cpe:/a:invision_power_services:invision_board:2.0 cpe:/a:invision_power_services:invision_board:2.0.1 cpe:/a:invision_power_services:invision_board:2.0.2 cpe:/a:invision_power_services:invision_board:2.0_alpha_3 cpe:/a:invision_power_services:invision_board:2.0_pdr3 cpe:/a:invision_power_services:invision_board:2.0_pf1 cpe:/a:invision_power_services:invision_board:2.0_pf2

CVE-2005-0886

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:36.143-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-13T11:01:00.000-04:00

BID 12888 Cross-site scripting (XSS) vulnerability in Invision Power Board 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP POST request.

cpe:/a:michael_dean:double_choco_latte:0.9.3 cpe:/a:michael_dean:double_choco_latte:0.9.4 cpe:/a:michael_dean:double_choco_latte:0.9.4.2 cpe:/a:michael_dean:double_choco_latte:0.9.4.3

CVE-2005-0887

2005-03-24T00:00:00.000-05:00

2017-07-10T21:32:27.390-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1013559 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=315144 XF dcl-file-include(19806) Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction variable in (1) functions.inc.php or (2) main.php, which causes code to be injected into an eval statement.

cpe:/a:michael_dean:double_choco_latte:0.9.4.3

CVE-2005-0888

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:27.453-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013559 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=315160 XF dcl-xss(19805) Multiple cross-site scripting (XSS) vulnerabilities in functions.inc.php for Double Choco Latte 0.9.4.3 allow remote attackers to inject arbitrary web script or HTML via the (1) class or (2) method name.

cpe:/a:dream4:koobi_cms:4.2.3

CVE-2005-0889

2005-03-24T00:00:00.000-05:00

2008-09-05T16:47:36.643-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-13T11:16:00.000-04:00

SECTRACK 1013558 BID 12895 Cross-site scripting (XSS) vulnerability in index.php for Dream4 Koobi CMS 4.2.3 allows remote attackers to inject arbitrary web script or HTML via the area parameter.

cpe:/a:dream4:koobi_cms:4.2.3

CVE-2005-0890

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:36.800-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-13T11:07:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1013558 BID 12896 SQL injection vulnerability in Dream4 Koobi CMS 4.2.3 allows remote attackers to execute arbitrary SQL commands via the area parameter.

cpe:/a:gtk:gtk%2b:2.0.2 cpe:/a:gtk:gtk%2b:2.0.6 cpe:/a:gtk:gtk%2b:2.2.1 cpe:/a:gtk:gtk%2b:2.2.3

CVE-2005-0891

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:21.967-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLSA-2005:958 MANDRIVA MDKSA-2005:214 REDHAT RHSA-2005:343 REDHAT RHSA-2005:344 FEDORA FLSA-2005:155510 BID 12950 Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image.

cpe:/a:smail:smail:3.2.0.120

CVE-2005-0892

2005-03-28T00:00:00.000-05:00

2016-10-17T23:15:20.183-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20050325 smail remote and local root holes DEBIAN DSA-722 Buffer overflow in smail 3.2.0.120 allows remote attackers or local users to execute arbitrary code via a long string in the MAIL FROM command and possibly other SMTP commands.

cpe:/a:smail:smail:3.2.0.120

CVE-2005-0893

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:21.277-04:00

7.6

NETWORK

HIGH

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20050325 smail remote and local root holes modes.c in smail 3.2.0.120 implements signal handlers with certain unsafe library calls, which may allow attackers to execute arbitrary code via signal handler race conditions, possibly using xmalloc.

cpe:/a:openmosixview:openmosixview:1.5

CVE-2005-0894

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:22.603-04:00

3.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050325 RX250305 - OpenMosixView : Multiple Race conditions - advisory and exploit BID 12902 OpenmosixCollector and OpenMosixView in OpenMosixView 1.5 allow local users to overwrite or delete arbitrary files via a symlink attack on (1) temporary files in the openmosixcollector directory or (2) nodes.tmp.

cpe:/h:netcomm:nb1300 cpe:/h:netcomm:nb1300:4.4.1

CVE-2005-0895

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:23.637-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050325 Netcomm 1300NB DSL Modem Denial of Service BID 12901 Netcomm 1300NB DSL Modem allows remote attackers to cause a denial of service (device hang) via a large number of ping packets.

cpe:/a:accomplishtechnology:phpmydirectory:10.1.3

CVE-2005-0896

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:24.777-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050325 phpMyDirectory 10.1.3-rel Cross site scripting BID 12900 Multiple cross-site scripting (XSS) vulnerabilities in review.php in phpMyDirectory 10.1.3-rel allow remote attackers to inject arbitrary web script or HTML via the (1) subcat, (2) page, or (3) subsubcat parameter.

cpe:/a:magicscripts:e-store_kit-2:paypal

CVE-2005-0897

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:25.793-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050325 File inclusion and XSS vulnerability in E-Store Kit-2 PayPal Edition BID 12910 PHP remote file inclusion vulnerability in catalog.php in E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary PHP code by modifying the menu and main parameters to reference a URL on a remote web server that contains the code.

cpe:/a:magicscripts:e-store_kit-2:paypal

CVE-2005-0898

2005-03-26T00:00:00.000-05:00

2016-10-17T23:15:26.917-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050325 File inclusion and XSS vulnerability in E-Store Kit-2 PayPal Edition BID 12909 Cross-site scripting (XSS) vulnerability in downloadform.php in E-Store Kit-2 PayPal Edition allows remote attackers to inject arbitrary web script or HTML via the txn_id parameter.

cpe:/o:ibm:os_400:5.2

CVE-2005-0899

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:27.967-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050325 AS/400 LDAP user accounts disclosure AS/400 running OS400 5.2 installs and enables LDAP by default, which allows remote authenticated users to obtain OS/400 user profiles by performing a search.

cpe:/a:nukebookmarks:nukebookmarks:0.6

CVE-2005-0900

2005-03-26T00:00:00.000-05:00

2016-10-17T23:15:28.980-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050325 ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6 CONFIRM http://nukebookmarks.sourceforge.net/ MISC http://zone-h.org/advisories/read/id=7356 marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to obtain sensitive information via an invalid (1) file or (2) category parameter, which reveal the path in an error message.

cpe:/a:nukebookmarks:nukebookmarks:0.6

CVE-2005-0901

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:30.183-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050325 ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6 CONFIRM http://nukebookmarks.sourceforge.net/ MISC http://zone-h.org/advisories/read/id=7356 Multiple cross-site scripting (XSS) vulnerabilities in NukeBookmarks 0.6 for PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via the (1) catname, (2) markname, (3) comment, or (4) category parameter.

cpe:/a:nukebookmarks:nukebookmarks:0.6

CVE-2005-0902

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:31.200-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050325 ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6 CONFIRM http://nukebookmarks.sourceforge.net/ MISC http://zone-h.org/advisories/read/id=7356 SQL injection vulnerability in marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the category parameter.

cpe:/a:apple:quicktime_pictureviewer:6.5.1

CVE-2005-0903

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:32.327-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050326 QuickTime malformed JPEG buffer overflow BID 12905 Buffer overflow in QuickTime PictureViewer 6.5.1 allows remote attackers to cause a denial of service (application crash) via a JPEG file with crafted Huffman Table (marker DHT) data.

cpe:/o:microsoft:windows_xp::sp1

CVE-2005-0904

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:27.500-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1013552 MSKB 889323 XF windows-desktop-tsshutdnexe-dos(19819) Remote Desktop in Windows XP SP1 does not verify the "Force shutdown from a remote system" setting, which allows remote attackers to shut down the system by executing TSShutdn.exe.

cpe:/a:maxthon:maxthon:1.2

CVE-2005-0905

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:33.543-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://forum.maxthon.com/forum/index.php?showtopic=18207 FULLDISC 20050325 Maxthon browser search bar information disclosure MISC http://www.raffon.net/advisories/maxthon/searchbarid.html BID 12898 Maxthon 1.2.0 allows remote malicious web sites to obtain potentially sensitive data from the search bar via the m2_search_text property.

cpe:/a:instance_four:tincat:release_2 cpe:/a:sacred:sacred:1.8.2.6 cpe:/a:ubi_soft:the_settlersheritage_of_kings:1.0_2

CVE-2005-0906

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:39.317-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-13T12:41:00.000-04:00

ALLOWS_USER_ACCESS

MISC http://aluigi.altervista.org/adv/tincat2bof-adv.txt BUGTRAQ 20050328 Buffer-overflow in Tincat 2 minor than 2.0.28 (Sacred, Settlers 5 and others) BID 12912 Buffer overflow in a player logging function in the Tincat network library 2.x before 2.0.28, as used in games such as Sacred and The Settlers: Heritage of Kings, allows remote attackers to execute arbitrary code.

cpe:/a:valdersoft:shopping_cart:3.0

CVE-2005-0907

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:39.473-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-13T12:02:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1013565 BUGTRAQ 20050327 Multiple sql injection, and xss vulnerabilities in Vladersoft Shopping Cart v.3.0 Multiple SQL injection vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to category.php, (2) the id parameter to item.php, (3) the lang parameter to index.php, (4) the searchQuery parameter to search_result.php, (5) or the searchTopCategoryID parameter to search_result.php.

cpe:/a:valdersoft:valdersoft_shopping_cart:3.0

CVE-2005-0908

2005-03-28T00:00:00.000-05:00

2008-09-05T16:47:39.627-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-13T12:15:00.000-04:00

SECTRACK 1013565 BUGTRAQ 20050327 Multiple sql injection, and xss vulnerabilities in Vladersoft Shopping Cart v.3.0 Multiple cross-site scripting (XSS) vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the lang parameter to index.php or (2) the searchTopCategoryID parameter to search_result.php.

cpe:/a:tkais_shoutbox:tkais_shoutbox

CVE-2005-0909

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:34.623-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20050328 THai's Shoutbox correction name BID 12914 PHP remote file inclusion vulnerability in shoutact.php for TKai's Shoutbox allows remote attackers to execute arbitrary PHP code via the query parameter.

cpe:/a:e-xoops:e-xoops

CVE-2005-0910

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:39.940-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-13T12:39:00.000-04:00

SECTRACK 1013566 Multiple cross-site scripting (XSS) vulnerabilities in exoops allow remote attackers to inject arbitrary web script or HTML via (1) the sortdays parameter to viewforum.php or (2) the viewcat parameter to index.php.

cpe:/a:e-xoops:e-xoops

CVE-2005-0911

2005-03-28T00:00:00.000-05:00

2008-09-05T16:47:40.097-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-13T12:26:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1013566 Multiple SQL injection vulnerabilities in exoops may allow remote attackers to execute arbitrary SQL commands via (1) the viewcat parameter to index.php or (2) the artid parameter in the viewarticle action for index.php.

cpe:/a:deplate:deplate:0.7.1

CVE-2005-0912

2005-03-24T00:00:00.000-05:00

2008-09-05T16:47:40.253-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-13T12:42:00.000-04:00

SECTRACK 1013555 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=315034 Unknown vulnerabilities in deplate before 0.7.2 have unknown impact, possibly involving elements.rb.

cpe:/a:smarty:smarty:2.6.2 cpe:/a:smarty:smarty:2.6.3 cpe:/a:smarty:smarty:2.6.4 cpe:/a:smarty:smarty:2.6.5 cpe:/a:smarty:smarty:2.6.6 cpe:/a:smarty:smarty:2.6.7

CVE-2005-0913

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:27.563-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://news.php.net/php.smarty.dev/2673 GENTOO GLSA-200503-35 SECTRACK 1013556 BID 12941 XF smarty-regexreplace-security-bpass(19880) Unknown vulnerability in the regex_replace modifier (modifier.regex_replace.php) in Smarty before 2.6.8 allows attackers to execute arbitrary PHP code.

cpe:/a:cpg-nuke:cpg_dragonfly_cms:9.0.2_.0

CVE-2005-0914

2005-03-26T00:00:00.000-05:00

2008-09-05T16:47:40.580-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-13T12:54:00.000-04:00

MISC http://security.talte.net/content/view/252/46/ SECTRACK 1013573 Multiple cross-site scripting (XSS) vulnerabilities in CPG Dragonfly 9.0.2.0 allow remote attackers to inject arbitrary web script or HTML via (1) the profile parameter to index.php or (2) the cat parameter.

cpe:/a:webmasters-debutants:wd_guestbook:2.8

CVE-2005-0915

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:40.737-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-13T12:45:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1013570 Webmasters-Debutants WD Guestbook 2.8 allows remote attackers to bypass authentication and perform certain administrator actions via a direct HTTP POST request to (1) ajout_admin2.php or (2) suppr.php.

cpe:/o:linux:linux_kernel:2.6.11

CVE-2005-0916

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:40.910-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-13T12:53:00.000-04:00

MISC http://groups-beta.google.com/group/linux.kernel/browse_thread/thread/13b43bd5783842f6/7ce3c5a514a497ab?q=io_queue_init&rnum=3#7ce3c5a514a497ab CONFIRM http://linux.bkbits.net:8080/linux-2.6/cset%404248c8c0es30_4YVdwa6vteKi7h_nw SUSE SUSE-SA:2005:050 BID 12987 AIO in the Linux kernel 2.6.11 on the PPC64 or IA64 architectures with CONFIG_HUGETLB_PAGE enabled allows local users to cause a denial of service (system panic) via a process that executes the io_queue_init function but exits without running io_queue_release, which causes exit_aio and is_hugepage_only_range to fail.

cpe:/a:powerdev:encapsbb:0.3.2_fixed

CVE-2005-0917

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:41.097-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-13T12:59:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1013569 PHP remote file inclusion vulnerability in index_header.php for EncapsBB 0.3.2_fixed, and possibly other versions, allows remote attackers to execute arbitrary PHP code via the root parameter.

cpe:/a:adobe:svg_viewer:1.0 cpe:/a:adobe:svg_viewer:2.0 cpe:/a:adobe:svg_viewer:3.0 cpe:/a:adobe:svg_viewer:3.01 cpe:/a:adobe:svg_viewer:3.02

CVE-2005-0918

2005-05-05T00:00:00.000-04:00

2008-09-05T16:47:41.270-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-12T13:05:00.000-04:00

SECTRACK 1013890 CONFIRM http://www.adobe.com/support/techdocs/323585.html MISC http://www.hyperdose.com/advisories/H2005-07.txt The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page immediately stops loading, which indicates whether the file exists or not.

cpe:/a:adventia:adventia_chat:3.1 cpe:/a:adventia:adventia_server_pro:3.0

CVE-2005-0919

2005-03-29T00:00:00.000-05:00

2017-07-10T21:32:27.627-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://exploitlabs.com/files/advisories/EXPL-A-2005-003-adventiachat.txt FULLDISC 20050329 Adventia Chat SECTRACK 1013588 BID 12927 BID 12940 XF adventia-chat-field-xss(21317) Adventia Chat 3.1 and Server Pro 3.0 allows remote attackers to inject arbitrary web script or HTML into the chat space, which leaves other users vulnerable to cross-site scripting (XSS) attacks.

CVE-2005-0920

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:41.597-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-13T12:57:00.000-04:00

ALLOWS_OTHER_ACCESS

CONFIRM http://sourceforge.net/project/shownotes.php?release_id=315830 BID 12925 Multiple SQL injection vulnerabilities in Bugtracker.NET 2.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors.

cpe:/a:microsoft:outlook_connector:2002::ibm_lotus_domino

CVE-2005-0921

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:41.753-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-13T12:59:00.000-04:00

MSKB 896093 BID 12913 Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy.

cpe:/a:symantec:norton_antivirus:2.1::ms_exchange cpe:/a:symantec:norton_antivirus:2005 cpe:/a:symantec:norton_internet_security:2004::professional cpe:/a:symantec:norton_internet_security:2005 cpe:/a:symantec:norton_system_works:2004_professional cpe:/a:symantec:norton_system_works:2005_premier

CVE-2005-0922

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:41.927-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-13T13:09:00.000-04:00

CONFIRM http://securityresponse.symantec.com/avcenter/security/Content/2005.03.28.html SECTRACK 1013585 SECTRACK 1013586 SECTRACK 1013587 CERT-VN VU#146020 BID 12923 Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (system hang or crash) by triggering a scan of a certain file type.

CVE-2005-0923

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:42.097-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-13T13:11:00.000-04:00

CONFIRM http://securityresponse.symantec.com/avcenter/security/Content/2005.03.28.html SECTRACK 1013585 SECTRACK 1013586 SECTRACK 1013587 CERT-VN VU#713620 BID 12924 The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (CPU consumption and system crash) by renaming a file on a network share.

cpe:/a:adventia:e-data:2.0

CVE-2005-0924

2005-03-29T00:00:00.000-05:00

2017-07-10T21:32:27.687-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://exploitlabs.com/files/advisories/EXPL-A-2005-004-edata.txt FULLDISC 20050329 E-Data SECTRACK 1013589 BID 12927 XF edata-new-user-xss(19889) Cross-site scripting (XSS) vulnerability in Adventia E-Data 2.0 allows remote attackers to inject arbitrary web script or HTML via a query keyword.

CVE-2005-0925

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:38.530-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050329 [PersianHacker.NET 200503-11]Ublog reload 1.0.4 and prior SECTRACK 1013603 MISC http://www.persianhacker.net/news/news-2945.html BID 12931 Cross-site scripting (XSS) vulnerability in login.asp for Ublog Reload 1.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

CVE-2005-0926

2005-05-02T00:00:00.000-04:00

2008-09-10T15:37:28.087-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

2005-06-13T13:18:00.000-04:00

ALLOWS_USER_ACCESS

CONFIRM http://sylpheed.good-day.net/changelog.html.en Buffer overflow in Sylpheed before 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attachments with MIME-encoded file names.

cpe:/a:web-app.org:webapp:0.9.9 cpe:/a:web-app.org:webapp:0.9.9.1 cpe:/a:web-app.org:webapp:0.9.9.2

CVE-2005-0927

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:42.753-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-06-13T13:16:00.000-04:00

CONFIRM http://sourceforge.net/project/shownotes.php?release_id=316038 CONFIRM http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=195 Unknown vulnerability in subs.pl for WebAPP 0.9.9 through 0.9.9.2 has unknown impact and attack vectors, probably involving shell metacharacters or .. sequences.

cpe:/a:photopost:photopost_php_pro:5.02

CVE-2005-0928

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:39.717-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050328 Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software. SECTRACK 1013581 Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 5.x allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) password, (3) ppuser, (4) sort, or (5) si parameters to showgallery.php, the (6) ppuser, (7) sort, or (8) si parameters to showmembers.php, or (9) the photo parameter to slideshow.php.

CVE-2005-0929

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:40.890-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050328 Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software. BUGTRAQ 20050328 Re: Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software. SECTRACK 1013581 SQL injection vulnerability in PhotoPost PHP Pro 5.x may allow remote attackers to execute arbitrary SQL commands via (1) the sl parameter to showmembers.php or (2) the photo parameter to showphoto.php.

cpe:/a:chatness:chatness:2.5 cpe:/a:chatness:chatness:2.5.1

CVE-2005-0930

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:43.237-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-13T13:31:00.000-04:00

SECTRACK 1013604 MISC http://www.persianhacker.net/news/news-2946.html BUGTRAQ 20050329 [PersianHacker.NET 200503-12]Chatness 2.5.1 and prior XSS Vulnerabilities BID 12929 Cross-site scripting (XSS) vulnerability in message.php in Chatness 2.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the user field or (2) the message parameter to message.php.

cpe:/a:jimmy:the_includer:1.0 cpe:/a:jimmy:the_includer:1.1

CVE-2005-0931

2005-03-29T00:00:00.000-05:00

2008-09-05T16:47:43.393-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-13T13:42:00.000-04:00

ALLOWS_OTHER_ACCESS

BID 12926 PHP remote file inclusion vulnerability in The Includer 1.0 and 1.1 allows remote attackers to execute arbitrary PHP code.

cpe:/a:coinsoft_technologies:phpcoin:1.2 cpe:/a:coinsoft_technologies:phpcoin:1.2.1 cpe:/a:coinsoft_technologies:phpcoin:1.2.1b

CVE-2005-0932

2005-05-02T00:00:00.000-04:00

2011-03-07T21:20:49.797-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-13T13:36:00.000-04:00

ALLOWS_OTHER_ACCESS

MISC http://www.gulftech.org/?node=research&article_id=00065-03292005 BID 12917 Multiple SQL injection vulnerabilities in phpCOIN 1.2.1b and earlier allow remote attackers to execute arbitrary SQL commands (1) via the search engine, (2) the username or email fields in the "forgotten password" feature, or (3) the domain name in a package order.

cpe:/a:coinsoft_technologies:phpcoin:1.2 cpe:/a:coinsoft_technologies:phpcoin:1.2.1 cpe:/a:coinsoft_technologies:phpcoin:1.2.1b

CVE-2005-0933

2005-05-02T00:00:00.000-04:00

2011-03-07T21:20:49.877-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-13T13:39:00.000-04:00

MISC http://www.gulftech.org/?node=research&article_id=00065-03292005 BID 12917 Directory traversal vulnerability in auxpage.php for phpCOIN 1.2.1b and earlier allows remote attackers to read arbitrary files via the page parameter.

cpe:/a:wackowiki:wackowiki:r4

CVE-2005-0934

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:43.863-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-13T13:38:00.000-04:00

CONFIRM http://wackowiki.com/WackoDownload/InEnglish#h4828-4 Multiple cross-site scripting (XSS) vulnerabilities in WackoWiki R4 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.

cpe:/a:esmi:paypal_storefront:1.7

CVE-2005-0935

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:42.170-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050330 Multiple sql injection, and xss vulnerabilities in Pay pal Storefront SECTRACK 1013563 MISC http://www.hackerscenter.com/Archive/view.asp?id=1774 BID 12903 Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL commands via the (1) idpages parameter to pages.php or the (2) id2 parameter to products1.php.

cpe:/a:esmi:paypal_storefront:1.7

CVE-2005-0936

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:43.420-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050330 Multiple sql injection, and xss vulnerabilities in Pay pal Storefront SECTRACK 1013563 MISC http://www.hackerscenter.com/Archive/view.asp?id=1774 BID 12904 Cross-site scripting vulnerability in products1h.php in ESMI PayPal Storefront allows remote attackers to inject arbitrary web script or HTML via the id parameter.

cpe:/o:linux:linux_kernel:2.5.0 cpe:/o:linux:linux_kernel:2.5.1 cpe:/o:linux:linux_kernel:2.5.2 cpe:/o:linux:linux_kernel:2.5.3 cpe:/o:linux:linux_kernel:2.5.4 cpe:/o:linux:linux_kernel:2.5.5 cpe:/o:linux:linux_kernel:2.5.6 cpe:/o:linux:linux_kernel:2.5.7 cpe:/o:linux:linux_kernel:2.5.8 cpe:/o:linux:linux_kernel:2.5.9 cpe:/o:linux:linux_kernel:2.5.10 cpe:/o:linux:linux_kernel:2.5.11 cpe:/o:linux:linux_kernel:2.5.12 cpe:/o:linux:linux_kernel:2.5.13 cpe:/o:linux:linux_kernel:2.5.14 cpe:/o:linux:linux_kernel:2.5.15 cpe:/o:linux:linux_kernel:2.5.16 cpe:/o:linux:linux_kernel:2.5.17 cpe:/o:linux:linux_kernel:2.5.18 cpe:/o:linux:linux_kernel:2.5.19 cpe:/o:linux:linux_kernel:2.5.20 cpe:/o:linux:linux_kernel:2.5.21 cpe:/o:linux:linux_kernel:2.5.22 cpe:/o:linux:linux_kernel:2.5.23 cpe:/o:linux:linux_kernel:2.5.24 cpe:/o:linux:linux_kernel:2.5.25 cpe:/o:linux:linux_kernel:2.5.26 cpe:/o:linux:linux_kernel:2.5.27 cpe:/o:linux:linux_kernel:2.5.28 cpe:/o:linux:linux_kernel:2.5.29 cpe:/o:linux:linux_kernel:2.5.30 cpe:/o:linux:linux_kernel:2.5.31 cpe:/o:linux:linux_kernel:2.5.32 cpe:/o:linux:linux_kernel:2.5.33 cpe:/o:linux:linux_kernel:2.5.34 cpe:/o:linux:linux_kernel:2.5.35 cpe:/o:linux:linux_kernel:2.5.36 cpe:/o:linux:linux_kernel:2.5.37 cpe:/o:linux:linux_kernel:2.5.38 cpe:/o:linux:linux_kernel:2.5.39 cpe:/o:linux:linux_kernel:2.5.40 cpe:/o:linux:linux_kernel:2.5.41 cpe:/o:linux:linux_kernel:2.5.42 cpe:/o:linux:linux_kernel:2.5.43 cpe:/o:linux:linux_kernel:2.5.44 cpe:/o:linux:linux_kernel:2.5.45 cpe:/o:linux:linux_kernel:2.5.46 cpe:/o:linux:linux_kernel:2.5.47 cpe:/o:linux:linux_kernel:2.5.48 cpe:/o:linux:linux_kernel:2.5.49 cpe:/o:linux:linux_kernel:2.5.50 cpe:/o:linux:linux_kernel:2.5.51 cpe:/o:linux:linux_kernel:2.5.52 cpe:/o:linux:linux_kernel:2.5.53 cpe:/o:linux:linux_kernel:2.5.54 cpe:/o:linux:linux_kernel:2.5.55 cpe:/o:linux:linux_kernel:2.5.56 cpe:/o:linux:linux_kernel:2.5.57 cpe:/o:linux:linux_kernel:2.5.58 cpe:/o:linux:linux_kernel:2.5.59 cpe:/o:linux:linux_kernel:2.5.60 cpe:/o:linux:linux_kernel:2.5.61 cpe:/o:linux:linux_kernel:2.5.62 cpe:/o:linux:linux_kernel:2.5.63 cpe:/o:linux:linux_kernel:2.5.64 cpe:/o:linux:linux_kernel:2.5.65 cpe:/o:linux:linux_kernel:2.5.66 cpe:/o:linux:linux_kernel:2.5.67 cpe:/o:linux:linux_kernel:2.5.68 cpe:/o:linux:linux_kernel:2.5.69 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.6:rc1 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.7:rc1 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8:rc1 cpe:/o:linux:linux_kernel:2.6.8:rc2 cpe:/o:linux:linux_kernel:2.6.8:rc3 cpe:/o:linux:linux_kernel:2.6.9:2.6.20 cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.10:rc2 cpe:/o:linux:linux_kernel:2.6.11 cpe:/o:linux:linux_kernel:2.6.11:rc2 cpe:/o:linux:linux_kernel:2.6.11:rc3 cpe:/o:linux:linux_kernel:2.6.11:rc4 cpe:/o:linux:linux_kernel:2.6.11.5 cpe:/o:linux:linux_kernel:2.6.11.6 cpe:/o:linux:linux_kernel:2.6_test9_cvs

CVE-2005-0937

2005-02-22T00:00:00.000-05:00

2018-10-19T11:31:22.403-04:00

1.2

LOCAL

HIGH

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://linux.bkbits.net:8080/linux-2.6/cset@421cfc11zFsK9gxvSJ2t__FCmuUd3Q MISC http://lkml.org/lkml/2005/2/22/123 REDHAT RHSA-2005:420 FEDORA FLSA:157459-3 Some futex functions in futex.c for Linux kernel 2.6.x perform get_user calls while holding the mmap_sem semaphore, which could allow local users to cause a deadlock condition in do_page_fault by triggering get_user faults while another thread is executing mmap or other functions.

cpe:/a:uapplication:ublog_reload:1.0 cpe:/a:uapplication:ublog_reload:1.0.1 cpe:/a:uapplication:ublog_reload:1.0.2 cpe:/a:uapplication:ublog_reload:1.0.3 cpe:/a:uapplication:ublog_reload:1.0.4

CVE-2005-0938

2005-05-02T00:00:00.000-04:00

2016-10-17T23:15:44.547-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050329 [PersianHacker.NET 200503-11]Ublog reload 1.0.4 and prior SECTRACK 1013603 Ublog Reload 1.0 through 1.0.4 stores ublogreload.mdb under the web root, which allows remote attackers to read usernames and hashed passwords via a direct request to ublogreload.mdb.

CVE-2005-0940

2005-05-02T00:00:00.000-04:00

2008-09-10T15:37:29.853-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0490. Reason: This candidate was inadvertently referenced in a vendor advisory due to a typo. Notes: All CVE users should reference CVE-2005-0490 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:openoffice:openoffice:1.0.1 cpe:/a:openoffice:openoffice:1.0.2 cpe:/a:openoffice:openoffice:1.1.0 cpe:/a:openoffice:openoffice:1.1.1 cpe:/a:openoffice:openoffice:1.1.2 cpe:/a:openoffice:openoffice:1.1.3 cpe:/a:openoffice:openoffice:1.1.4

CVE-2005-0941

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:01.797-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

GENTOO GLSA-200504-13 SUSE SUSE-SR:2005:021 CONFIRM http://www.openoffice.org/issues/show_bug.cgi?id=46388 REDHAT RHSA-2005:375 BUGTRAQ 20050412 OpenOffice DOC document Heap Overflow BID 13092 The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow.

CVE-2005-0942

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:27.750-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20041222 Sybase ASE 12.5.2 vulnerabilities BUGTRAQ 20050405 Sybase ASE Multiple Security Issues (#NISR05042005) MISC http://www.ngssoftware.com/advisories/sybase-ase.txt BUGTRAQ 20050321 Details of Sybase ASE bugs withheld BID 12080 CONFIRM http://www.sybase.com/detail?id=1034520 CONFIRM http://www.sybase.com/detail?id=1034752 XF sybase-adaptive-server(19354) The XP Server process (xp_server) in Sybase Adaptive Server Enterprise (ASE) XP Server 12.x before 12.5.3 ESD#1 allows attackers to cause a denial of service (process crash) via malformed data sent to the XP Server TCP port.

cpe:/a:cisco:vpn_3002_hardware_client cpe:/h:cisco:vpn_3015_concentrator cpe:/h:cisco:vpn_3020_concentrator cpe:/h:cisco:vpn_3030_concentator cpe:/h:cisco:vpn_3060_concentrator cpe:/h:cisco:vpn_3080_concentrator cpe:/o:cisco:vpn_3000_concentrator_series_software:2.0 cpe:/o:cisco:vpn_3000_concentrator_series_software:2.5.2.a cpe:/o:cisco:vpn_3000_concentrator_series_software:2.5.2.b cpe:/o:cisco:vpn_3000_concentrator_series_software:2.5.2.c cpe:/o:cisco:vpn_3000_concentrator_series_software:2.5.2.d cpe:/o:cisco:vpn_3000_concentrator_series_software:2.5.2.f cpe:/o:cisco:vpn_3000_concentrator_series_software:3.0 cpe:/o:cisco:vpn_3000_concentrator_series_software:3.0.3.a cpe:/o:cisco:vpn_3000_concentrator_series_software:3.0.3.b cpe:/o:cisco:vpn_3000_concentrator_series_software:3.0.4 cpe:/o:cisco:vpn_3000_concentrator_series_software:3.1 cpe:/o:cisco:vpn_3000_concentrator_series_software:3.1%28rel%29 cpe:/o:cisco:vpn_3000_concentrator_series_software:3.1.1 cpe:/o:cisco:vpn_3000_concentrator_series_software:3.1.2 cpe:/o:cisco:vpn_3000_concentrator_series_software:3.1.4 cpe:/o:cisco:vpn_3000_concentrator_series_software:3.5%28rel%29 cpe:/o:cisco:vpn_3000_concentrator_series_software:3.5.1 cpe:/o:cisco:vpn_3000_concentrator_series_software:3.5.2 cpe:/o:cisco:vpn_3000_concentrator_series_software:3.5.3 cpe:/o:cisco:vpn_3000_concentrator_series_software:3.5.4 cpe:/o:cisco:vpn_3000_concentrator_series_software:3.5.5 cpe:/o:cisco:vpn_3000_concentrator_series_software:3.6 cpe:/o:cisco:vpn_3000_concentrator_series_software:3.6.1 cpe:/o:cisco:vpn_3000_concentrator_series_software:3.6.3 cpe:/o:cisco:vpn_3000_concentrator_series_software:3.6.5 cpe:/o:cisco:vpn_3000_concentrator_series_software:3.6.7 cpe:/o:cisco:vpn_3000_concentrator_series_software:3.6.7.a cpe:/o:cisco:vpn_3000_concentrator_series_software:3.6.7.b cpe:/o:cisco:vpn_3000_concentrator_series_software:3.6.7.c cpe:/o:cisco:vpn_3000_concentrator_series_software:3.6.7.d cpe:/o:cisco:vpn_3000_concentrator_series_software:3.6.7.f cpe:/o:cisco:vpn_3000_concentrator_series_software:3.6.7d cpe:/o:cisco:vpn_3000_concentrator_series_software:4.0 cpe:/o:cisco:vpn_3000_concentrator_series_software:4.0.1 cpe:/o:cisco:vpn_3000_concentrator_series_software:4.0.5.b cpe:/o:cisco:vpn_3000_concentrator_series_software:4.1 cpe:/o:cisco:vpn_3000_concentrator_series_software:4.1.5.b cpe:/o:cisco:vpn_3000_concentrator_series_software:4.1.7.a cpe:/o:cisco:vpn_3005_concentrator_software:4.0.1

CVE-2005-0943

2005-03-30T00:00:00.000-05:00

2018-10-30T12:26:19.357-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CISCO 20050330 Cisco VPN 3000 Concentrator Vulnerable to Crafted SSL Attack BID 12948 XF cisco-vpn-3000-dos(19903) Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service (device reload or drop user connection) via a crafted HTTPS packet.

cpe:/a:microsoft:jet:4.0.8618.0

CVE-2005-0944

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:22.857-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MISC http://blogs.securiteam.com/?p=535 BUGTRAQ 20050331 [HV-HIGH] Microsoft Jet DB engine vulnerabilities MISC http://www.hexview.com/docs/20050331-1.txt CERT-VN VU#176380 BUGTRAQ 20060804 Will Microsoft patch remarkable old Msjet40.dll issue? BUGTRAQ 20060808 Re: Will Microsoft patch remarkable old Msjet40.dll issue? Unknown vulnerability in Microsoft Jet DB engine (msjet40.dll) 4.00.8618.0, related to insufficient data validation, allows remote attackers to execute arbitrary code via a crafted mdb file.

cpe:/a:asp_press:acs_blog:1.1.1

CVE-2005-0945

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:27.877-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050328 Multiple XSS vulnerabilities in ACS Blog SECTRACK 1013584 XF acsblog-tags-xss(19864) Cross-site scripting (XSS) vulnerability in ACS Blog 1.1.1 allows remote attackers to inject arbitrary web script or HTML via onmouseover or onload events in (1) img, (2) link, or (3) mail tags.

cpe:/a:coinsoft_technologies:phpcoin:1.2 cpe:/a:coinsoft_technologies:phpcoin:1.2.1 cpe:/a:coinsoft_technologies:phpcoin:1.2.1b

CVE-2005-0946

2005-03-29T00:00:00.000-05:00

2016-10-17T23:15:49.517-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050329 Multiple phpCoin Vulnerabilities MISC http://www.gulftech.org/?node=research&article_id=00065-03292005 BID 12917 SQL injection vulnerability in phpCoin 1.2.1b and earlier allows remote attackers to execute arbitrary SQL commands via the (1) term/keywords field on the search page, (2) username or (3) e-mail field on the forgot password page, or (4) domain name on the ordering new package page.

cpe:/a:coinsoft_technologies:phpcoin:1.2 cpe:/a:coinsoft_technologies:phpcoin:1.2.1 cpe:/a:coinsoft_technologies:phpcoin:1.2.1b

CVE-2005-0947

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:27.923-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050329 Multiple phpCoin Vulnerabilities MISC http://www.gulftech.org/?node=research&article_id=00065-03292005 BID 12917 XF phpcoin-auxpage-file-include(19896) Directory traversal vulnerability in auxpage.php in phpCoin 1.2.1b and earlier allows remote attackers to read and execute arbitrary files via a .. (dot dot) in the page parameter.

cpe:/a:iatek:portalapp

CVE-2005-0948

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:27.983-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050329 Multiple sql injection, and xss vulnerabilities in PortalApp SECTRACK 1013591 BID 12936 XF portalapp-adclick-sql-injection(19892) SQL injection vulnerability in ad_click.asp for PortalApp allows remote attackers to execute arbitrary SQL commands via the banner_id parameter.

cpe:/a:iatek:portalapp

CVE-2005-0949

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:28.047-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050329 Multiple sql injection, and xss vulnerabilities in PortalApp SECTRACK 1013591 BID 12936 XF portalapp-contentasp-xss(19891) Multiple cross-site scripting (XSS) vulnerabilities in content.asp in Iatek PortalApp allow remote attackers to inject arbitrary web script or HTML via the (1) contenttype or (2) keywords parameter.

cpe:/a:faststone:4in1_browser:1.2

CVE-2005-0950

2005-03-29T00:00:00.000-05:00

2017-07-10T21:32:28.110-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050329 directory traversal in FastStone 4in1 Browser 1.2 SECTRACK 1013596 MISC http://www.autistici.org/fdonato/advisory/FastStone4in1Browser1.2-adv.txt BID 12937 XF faststone-dotdot-directory-traversal(19900) Directory traversal vulnerability in FastStone 4in1 Browser 1.2 allows remote attackers to read arbitrary files via a (1) ... (triple dot) or (2) ..\ (dot dot backslash) in the URL.

CVE-2005-0951

2005-05-02T00:00:00.000-04:00

2008-09-10T15:37:32.680-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: this candidate was created as a result of an analysis error for a researcher advisory for an issue that already existed. It stated an incorrect parameter, which was not part of the vulnerability at all. Notes: CVE users should not reference this candidate at all.

cpe:/a:php_arena:pafiledb:3.1

CVE-2005-0952

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:23.467-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050330 PaFileDB Version 3.1 and below are exploitable via a XSS and a SQL injection vulnerability BUGTRAQ 20061008 XSS IN paFileDB 3.1 XF pafiledb-action-xss(29394) Cross-site scripting vulnerability in pafiledb.php in PaFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

cpe:/a:bzip:bzip2:0.9 cpe:/a:bzip:bzip2:0.9.5_a cpe:/a:bzip:bzip2:0.9.5_b cpe:/a:bzip:bzip2:0.9.5_c cpe:/a:bzip:bzip2:0.9.5_d cpe:/a:bzip:bzip2:0.9_a cpe:/a:bzip:bzip2:0.9_b cpe:/a:bzip:bzip2:0.9_c cpe:/a:bzip:bzip2:1.0 cpe:/a:bzip:bzip2:1.0.1 cpe:/a:bzip:bzip2:1.0.2

CVE-2005-0953

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:25.670-04:00

3.7

LOCAL

HIGH

NONE

PARTIAL

http://nvd.nist.gov NETBSD NetBSD-SA2008-004 SGI 20060301-01-U CONFIRM http://docs.info.apple.com/article.html?artnum=307041 APPLE APPLE-SA-2007-11-14 BUGTRAQ 20050330 bzip2 TOCTOU file-permissions vulnerability SUNALERT 103118 SUNALERT 200191 DEBIAN DSA-730 FEDORA FLSA:158801 MANDRIVA MDKSA-2006:026 OPENPKG OpenPKG-SA-2007.002 REDHAT RHSA-2005:474 BUGTRAQ 20070109 rPSA-2007-0004-1 bzip2 BID 12954 BID 26444 CERT TA07-319A VUPEN ADV-2007-3525 VUPEN ADV-2007-3868 XF bzip2-toctou-symlink(19926) Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete.

cpe:/a:microsoft:ie:6.0.2900 cpe:/a:microsoft:windows_explorer cpe:/o:microsoft:windows_xp:::home cpe:/o:microsoft:windows_xp:::media_center cpe:/o:microsoft:windows_xp::gold:professional cpe:/o:microsoft:windows_xp::sp1:home

CVE-2005-0954

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:28.313-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050331 WindowsXP malformed .wmf files DoS MISC http://www.securiteam.com/windowsntfocus/5CP081FFFY.html BID 9892 XF winxp-explorer-wmf-dos(15507) Windows Explorer and Internet Explorer in Windows 2000 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a malformed Windows Metafile (WMF) file.

cpe:/a:interakt:mx_shop:1.1.1

CVE-2005-0955

2005-05-02T00:00:00.000-04:00

2016-10-17T23:16:00.110-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050331 MX Shop 1.1.1 and MX Kart 1.1.2 are vulnerable to multiple SQL injection vulnerabilities BID 12957 SQL injection vulnerability in InterAKT MX Shop 1.1.1 allows remote attackers to execute arbitrary SQL commands via the id_ctg parameter.

cpe:/a:interakt:mx_kart:1.1.2

CVE-2005-0956

2005-05-02T00:00:00.000-04:00

2016-10-17T23:16:01.313-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050331 MX Shop 1.1.1 and MX Kart 1.1.2 are vulnerable to multiple SQL injection vulnerabilities Multiple SQL injection vulnerabilities in index.php in InterAKT MX Kart 1.1.2 allow remote attackers to execute arbitrary SQL commands via the (1) idp, (2) id_ctg, or (3) id_man parameter.

cpe:/a:bay_technical_associates:rpc3_telnet:f_3.05

CVE-2005-0957

2005-03-31T00:00:00.000-05:00

2017-07-10T21:32:28.377-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050331 Bay Technical Associates telnet server logon bypass BID 12955 XF rpc3-logon-bypass-authentication(19921) Bay Technical Associates RPC-3 Telnet Host 3.05 allows remote attackers to bypass authentication by pressing the escape and enter keys at the username prompt.

cpe:/a:yepyep:mtftpd:0.1a cpe:/a:yepyep:mtftpd:0.2 cpe:/a:yepyep:mtftpd:0.3

CVE-2005-0958

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:47.817-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-13T14:54:00.000-04:00

ALLOWS_USER_ACCESS

MISC http://unl0ck.org/files/papers/mtftpd.txt MISC http://www.securiteam.com/exploits/5KP0W0AF5K.html BID 12947 MISC http://www.tripbit.org/advisories/TA-040305.txt Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enabled, allows remote attackers to execute arbitrary code via the CWD command.

cpe:/a:yepyep:mtftpd:0.1a cpe:/a:yepyep:mtftpd:0.2 cpe:/a:yepyep:mtftpd:0.3

CVE-2005-0959

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:47.970-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-13T14:54:00.000-04:00

ALLOWS_USER_ACCESS

BID 12947 Buffer overflow in the mt_do_dir function in YepYep mtftpd 0.0.3 may allow attackers to execute arbitrary code via a long path.

cpe:/o:openbsd:openbsd:3.5 cpe:/o:openbsd:openbsd:3.6

CVE-2005-0960

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:48.143-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-13T14:59:00.000-04:00

SECTRACK 1013611 OPENBSD 20050330 [3.6] 013: RELIABILITY FIX: March 30, 2005 OPENBSD 20050330 [3.5] 030: RELIABILITY FIX: March 30, 2005 BID 12951 Multiple vulnerabilities in the SACK functionality in (1) tcp_input.c and (2) tcp_usrreq.c OpenBSD 3.5 and 3.6 allow remote attackers to cause a denial of service (memory exhaustion or system crash).

cpe:/a:horde:application_framework:3.0.4_rc1

CVE-2005-0961

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:48.300-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-13T15:19:00.000-04:00

CONFIRM http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.515.2.49&r2=1.515.2.93&ty=h CONFIRM http://lists.horde.org/archives/announce/2005/000176.html SUSE SUSE-SR:2005:016 Cross-site scripting (XSS) vulnerability in Horde 3.0.4 before 3.0.4-RC2 allows remote attackers to inject arbitrary web script or HTML via the parent frame title.

cpe:/a:lighthouse_development:squirrelcart:1.5.5

CVE-2005-0962

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:28.423-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 12944 XF squirrelcart-index-sql-injection(19904) SQL injection vulnerability in index.php for Lighthouse Squirrelcart allows remote attackers to execute arbitrary SQL commands via the (1) crn parameter in a show action or (2) rn parameter in a show_detail action.

cpe:/a:toshiba:acpi_flash_bios:1.6

CVE-2005-0963

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:28.467-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050329 Portcullis Security Advisory 05-011 ACPI 1.6 BIOS BUGTRAQ 20050331 Re: Portcullis Security Advisory 05-011 ACPI 1.6 BIOS BUGTRAQ 20050331 RE: Portcullis Security Advisory 05-011 ACPI 1.6 BIOS XF toshiba-acpi-bios-dos(19895) An error in the Toshiba ACPI BIOS 1.6 causes the BIOS to only examine the first slot in the Master Boot Record (MBR) table for an active partition, which prevents the system from booting even though the MBR is not malformed. NOTE: it has been debated as to whether or not this issue poses a security vulnerability, since administrative privileges would be required, and other DoS attacks are possible with such privileges.

cpe:/a:kerio:personal_firewall:4.0.6 cpe:/a:kerio:personal_firewall:4.0.7 cpe:/a:kerio:personal_firewall:4.0.8 cpe:/a:kerio:personal_firewall:4.0.9 cpe:/a:kerio:personal_firewall:4.0.10 cpe:/a:kerio:personal_firewall:4.0.16 cpe:/a:kerio:personal_firewall:4.1 cpe:/a:kerio:personal_firewall:4.1.1 cpe:/a:kerio:personal_firewall:4.1.2

CVE-2005-0964

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:28.530-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1013607 CONFIRM http://www.kerio.com/security_advisory.html#0503 BID 12946 XF kerio-firewall-rule-security-bypass(19893) Unknown vulnerability in Kerio Personal Firewall 4.1.2 and earlier allows local users to bypass firewall rules via a malicious process that impersonates a legitimate process that has fewer restrictions.

cpe:/a:rob_flynn:gaim:1.2.0

CVE-2005-0965

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:28.310-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://gaim.sourceforge.net/security/index.php?id=13 BUGTRAQ 20050401 multiple remote denial of service vulnerabilities in Gaim MANDRAKE MDKSA-2005:071 SUSE SUSE-SA:2005:036 REDHAT RHSA-2005:365 FEDORA FLSA:158543 BID 12999 The gaim_markup_strip_html function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application crash) via a string that contains malformed HTML, which causes an out-of-bounds read.

cpe:/a:rob_flynn:gaim:1.2.0

CVE-2005-0966

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:28.733-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://gaim.sourceforge.net/security/index.php?id=14 BUGTRAQ 20050401 multiple remote denial of service vulnerabilities in Gaim CONFIRM http://sourceforge.net/project/shownotes.php?group_id=235&release_id=317750 MANDRAKE MDKSA-2005:071 SUSE SUSE-SA:2005:036 REDHAT RHSA-2005:365 FEDORA FLSA:158543 BID 13003 XF gaim-irc-plugin-bo(19937) XF gaim-ircmsginvite-dos(19939) The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows (1) remote attackers to inject arbitrary Gaim markup via irc_msg_kick, irc_msg_mode, irc_msg_part, irc_msg_quit, (2) remote attackers to inject arbitrary Pango markup and pop up empty dialog boxes via irc_msg_invite, or (3) malicious IRC servers to cause a denial of service (application crash) by injecting certain Pango markup into irc_msg_badmode, irc_msg_banned, irc_msg_unknown, irc_msg_nochan functions.

cpe:/a:rob_flynn:gaim:1.2.0

CVE-2005-0967

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:29.420-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://gaim.sourceforge.net/security/?id=15 SECTRACK 1013645 CONFIRM http://sourceforge.net/tracker/?func=detail&aid=1172115&group_id=235&atid=100235 MANDRAKE MDKSA-2005:071 SUSE SUSE-SA:2005:036 REDHAT RHSA-2005:365 FEDORA FLSA:158543 BID 13004 Gaim 1.2.0 allows remote attackers to cause a denial of service (application crash) via a malformed file transfer request to a Jabber user, which leads to an out-of-bounds read.

cpe:/a:ca:etrust_intrusion_detection:3.0

CVE-2005-0968

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:49.393-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-13T15:56:00.000-04:00

IDEFENSE 20050405 Computer Associates eTrust Intrusion Detection System CPImportKey DoS Vulnerability Computer Associates (CA) eTrust Intrusion Detection 3.0 allows remote attackers to cause a denial of service via large size values that are not properly validated before calling the CPImportKey function in the Crypto API.

CVE-2005-0969

2005-05-12T00:00:00.000-04:00

2008-09-05T16:47:49.550-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-12T16:08:00.000-04:00

ALLOWS_OTHER_ACCESS

APPLE APPLE-SA-2005-04-15 Heap-based buffer overflow in the syscall emulation functionality in Mac OS X before 10.3.9 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via crafted parameters.

CVE-2005-0970

2005-05-02T00:00:00.000-04:00

2009-10-14T00:00:00.000-04:00

7.6

NETWORK

HIGH

NONE

COMPLETE

http://nvd.nist.gov

2005-06-13T15:57:00.000-04:00

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2005-04-15 Mac OS X 10.3.9 and earlier allows users to install, create, and execute setuid/setgid scripts, contrary to the intended design, which may allow attackers to conduct unauthorized activities with escalated privileges via vulnerable scripts.

CVE-2005-0971

2005-05-12T00:00:00.000-04:00

2008-09-05T16:47:50.003-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-12T16:12:00.000-04:00

ALLOWS_USER_ACCESS

APPLE APPLE-SA-2005-04-15 CERT-VN VU#212190 Stack-based buffer overflow in the semop system call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments.

cpe:/o:apple:mac_os_x:10.0 cpe:/o:apple:mac_os_x:10.0.1 cpe:/o:apple:mac_os_x:10.0.2 cpe:/o:apple:mac_os_x:10.0.3 cpe:/o:apple:mac_os_x:10.0.4 cpe:/o:apple:mac_os_x:10.1 cpe:/o:apple:mac_os_x:10.1.1 cpe:/o:apple:mac_os_x:10.1.2 cpe:/o:apple:mac_os_x:10.1.3 cpe:/o:apple:mac_os_x:10.1.4 cpe:/o:apple:mac_os_x:10.1.5 cpe:/o:apple:mac_os_x:10.2 cpe:/o:apple:mac_os_x:10.2.1 cpe:/o:apple:mac_os_x:10.2.2 cpe:/o:apple:mac_os_x:10.2.3 cpe:/o:apple:mac_os_x:10.2.4 cpe:/o:apple:mac_os_x:10.2.5 cpe:/o:apple:mac_os_x:10.2.6 cpe:/o:apple:mac_os_x:10.2.7 cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3 cpe:/o:apple:mac_os_x:10.3.1 cpe:/o:apple:mac_os_x:10.3.2 cpe:/o:apple:mac_os_x:10.3.3 cpe:/o:apple:mac_os_x:10.3.4 cpe:/o:apple:mac_os_x:10.3.5 cpe:/o:apple:mac_os_x:10.3.6 cpe:/o:apple:mac_os_x:10.3.7 cpe:/o:apple:mac_os_x:10.3.8 cpe:/o:apple:mac_os_x_server:10.0 cpe:/o:apple:mac_os_x_server:10.1 cpe:/o:apple:mac_os_x_server:10.1.1 cpe:/o:apple:mac_os_x_server:10.1.2 cpe:/o:apple:mac_os_x_server:10.1.3 cpe:/o:apple:mac_os_x_server:10.1.4 cpe:/o:apple:mac_os_x_server:10.1.5 cpe:/o:apple:mac_os_x_server:10.2 cpe:/o:apple:mac_os_x_server:10.2.1 cpe:/o:apple:mac_os_x_server:10.2.2 cpe:/o:apple:mac_os_x_server:10.2.3 cpe:/o:apple:mac_os_x_server:10.2.4 cpe:/o:apple:mac_os_x_server:10.2.5 cpe:/o:apple:mac_os_x_server:10.2.6 cpe:/o:apple:mac_os_x_server:10.2.7 cpe:/o:apple:mac_os_x_server:10.2.8 cpe:/o:apple:mac_os_x_server:10.3 cpe:/o:apple:mac_os_x_server:10.3.1 cpe:/o:apple:mac_os_x_server:10.3.2 cpe:/o:apple:mac_os_x_server:10.3.3 cpe:/o:apple:mac_os_x_server:10.3.4 cpe:/o:apple:mac_os_x_server:10.3.5 cpe:/o:apple:mac_os_x_server:10.3.6 cpe:/o:apple:mac_os_x_server:10.3.7 cpe:/o:apple:mac_os_x_server:10.3.8

CVE-2005-0972

2005-05-12T00:00:00.000-04:00

2008-09-05T16:47:50.220-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-05-12T16:14:00.000-04:00

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2005-04-15 CERT-VN VU#185702 Integer overflow in the searchfs system call in Mac OS X 10.3.9 and earlier allows local users to execute arbitrary code via crafted parameters.

CVE-2005-0973

2005-05-12T00:00:00.000-04:00

2008-09-05T16:47:50.487-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-12T16:14:00.000-04:00

APPLE APPLE-SA-2005-04-15 Unknown vulnerability in the setsockopt system call in Mac OS X 10.3.9 and earlier allows local users to cause a denial of service (memory exhaustion) via crafted arguments.

CVE-2005-0974

2005-05-12T00:00:00.000-04:00

2008-09-05T16:47:50.707-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-05-12T16:17:00.000-04:00

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2005-04-15 APPLE APPLE-SA-2005-05-19 CERT-VN VU#713614 Unknown vulnerability in the nfs_mount call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments.

cpe:/o:apple:mac_os_x:10.3 cpe:/o:apple:mac_os_x:10.3.1 cpe:/o:apple:mac_os_x:10.3.2 cpe:/o:apple:mac_os_x:10.3.3 cpe:/o:apple:mac_os_x:10.3.4 cpe:/o:apple:mac_os_x:10.3.5 cpe:/o:apple:mac_os_x:10.3.6 cpe:/o:apple:mac_os_x_server:10.3 cpe:/o:apple:mac_os_x_server:10.3.1 cpe:/o:apple:mac_os_x_server:10.3.2 cpe:/o:apple:mac_os_x_server:10.3.3 cpe:/o:apple:mac_os_x_server:10.3.4 cpe:/o:apple:mac_os_x_server:10.3.5 cpe:/o:apple:mac_os_x_server:10.3.6 cpe:/o:apple:mac_os_x_server:10.3.7 cpe:/o:opendarwin:darwin_kernel:7.1

CVE-2005-0975

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:28.657-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://felinemenace.org/advisories/macosx.txt APPLE APPLE-SA-2005-04-15 BUGTRAQ 20050119 Darwin Kernel Vulnerability SECTRACK 1012941 SECTRACK 1013735 CIAC P-185 BID 12314 VUPEN ADV-2005-0041 XF macos-machloader-dos(18979) Integer signedness error in the parse_machfile function in the mach-o loader (mach_loader.c) for the Darwin Kernel as used in Mac OS X 10.3.7, and other versions before 10.3.9, allows local users to cause a denial of service (CPU consumption) via a crafted mach-o header.

cpe:/a:apple:safari:1.2 cpe:/a:hmdt:shiira:0.93 cpe:/a:omnigroup:omniweb:5.1

CVE-2005-0976

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:51.113-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-13T16:01:00.000-04:00

APPLE APPLE-SA-2005-04-15 MISC http://remahl.se/david/vuln/001/ AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XMLHttpRequest Javascript component, as demonstrated using automatically mounted disk images and file:// URLs.

cpe:/o:linux:linux_kernel:2.6.8.1.5 cpe:/o:linux:linux_kernel:2.6.8.1.5::386 cpe:/o:linux:linux_kernel:2.6.8.1.5::686 cpe:/o:linux:linux_kernel:2.6.8.1.5::686_smp cpe:/o:linux:linux_kernel:2.6.8.1.5::amd64 cpe:/o:linux:linux_kernel:2.6.8.1.5::amd64_k8 cpe:/o:linux:linux_kernel:2.6.8.1.5::amd64_k8_smp cpe:/o:linux:linux_kernel:2.6.8.1.5::amd64_xeon cpe:/o:linux:linux_kernel:2.6.8.1.5::k7 cpe:/o:linux:linux_kernel:2.6.8.1.5::k7_smp cpe:/o:linux:linux_kernel:2.6.8.1.5::power3 cpe:/o:linux:linux_kernel:2.6.8.1.5::power3_smp cpe:/o:linux:linux_kernel:2.6.8.1.5::power4 cpe:/o:linux:linux_kernel:2.6.8.1.5::power4_smp cpe:/o:linux:linux_kernel:2.6.8.1.5::powerpc cpe:/o:linux:linux_kernel:2.6.8.1.5::powerpc_smp

CVE-2005-0977

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:29.907-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://linux.bkbits.net:8080/linux-2.6/cset@420551fbRlv9-QG6Gw9Lw_bKVfPSsg CONFIRM http://lkml.org/lkml/2005/2/5/111 REDHAT RHSA-2005:366 FEDORA FLSA:157459-3 BID 12970 UBUNTU USN-103-1 The shmem_nopage function in shmem.c for the tmpfs driver in Linux kernel 2.6 does not properly verify the address argument, which allows local users to cause a denial of service (kernel crash) via an invalid address.

cpe:/a:ivt:bluesoleil:1.4

CVE-2005-0978

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:28.717-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050401 DMA[2005-0401a] - 'IVT BlueSoleil Directory Transversal' MISC http://www.digitalmunition.com/DMA%5B2005-0401a%5D.txt BID 12961 XF bluesoleil-object-push-directory-traversal(19930) Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote attackers to upload arbitrary files via a .. (dot dot) in a PUSH command.

cpe:/a:netmanage:rumba:7.3 cpe:/a:netmanage:rumba:7.4

CVE-2005-0979

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:28.767-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050401 Buffer Overflow within the RUMBA product BID 12965 XF rumba-profile-values-bo(19934) Multiple buffer overflows in RUMBA 7.3 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via crafted values in a profile file, as demonstrated using a long SysName field.

cpe:/a:alstrasoft:epay:2.0::enterprise

CVE-2005-0980

2005-05-02T00:00:00.000-04:00

2016-10-17T23:16:11.160-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050402 AlstraSoft EPay Pro v2.0 has file include and multiple xss BID 12973 PHP remote file inclusion vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary PHP code by modifying the view parameter to reference a URL on a remote web server that contains the code.

cpe:/a:alstrasoft:epay:2.0::enterprise

CVE-2005-0981

2005-05-02T00:00:00.000-04:00

2016-10-17T23:16:12.597-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050402 AlstraSoft EPay Pro v2.0 has file include and multiple xss BID 12974 Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Pro 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) payment or (2) send parameter.

cpe:/a:yet_another_forum.net:yet_another_forum.net:0.9.9

CVE-2005-0982

2005-05-02T00:00:00.000-04:00

2016-10-17T23:16:13.643-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050402 Yet Another Forum.net XSS vulnerabilities SECTRACK 1013632 Multiple cross-site scripting (XSS) vulnerabilities in Yet Another Forum.net 0.9.9 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) location, or (3) Subject field.

cpe:/a:activision:call_of_duty:1.4 cpe:/a:activision:call_of_duty:1.5b cpe:/a:activision:call_of_duty_united_offensive:1.41 cpe:/a:activision:call_of_duty_united_offensive:1.51b cpe:/a:activision:return_to_castle_wolfenstein:1.0 cpe:/a:activision:return_to_castle_wolfenstein:1.1 cpe:/a:id_software:quake_3_arena:1.1.7 cpe:/a:id_software:quake_3_arena:1.16 cpe:/a:id_software:quake_3_arena:1.31 cpe:/a:id_software:quake_3_arena_server:1.29f cpe:/a:id_software:quake_3_arena_server:1.29g cpe:/a:id_software:quake_3_engine cpe:/a:id_software:wolfenstein_enemy_territory:1.0.2 cpe:/a:id_software:wolfenstein_enemy_territory:2.56 cpe:/a:lucasarts:star_wars_jedi_knight_ii_jedi_outcast:1.0.4 cpe:/a:lucasarts:star_wars_jedi_knight_jedi_academy:1.0.11 cpe:/a:raven_software:soldier_of_fortune_2:1.0.2 cpe:/a:raven_software:soldier_of_fortune_2:1.0.3

CVE-2005-0983

2005-05-02T00:00:00.000-04:00

2016-10-17T23:16:14.770-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/q3msgboom-adv.txt MISC http://bani.anime.net/banimod/forums/viewtopic.php?p=27322 BUGTRAQ 20050402 In-game players kicking in the Quake 3 engine BID 12976 Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data.

cpe:/a:lucasarts:star_wars_jedi_knight_jedi_academy:1.0.11

CVE-2005-0984

2005-05-02T00:00:00.000-04:00

2016-10-17T23:16:15.910-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/jamsgbof-adv.txt BUGTRAQ 20050402 In-game server buffer-overflow in Jedi Academy 1.011 BID 12977 Buffer overflow in the G_Printf function in Star Wars Jedi Knight: Jedi Academy 1.011 and earlier allows remote attackers to execute arbitrary code via a long message using commands such as (1) say and (2) tell.

CVE-2005-0985

2005-12-31T00:00:00.000-05:00

2008-09-05T16:47:52.613-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2006-08-08T10:55:00.000-04:00

CONFIRM http://docs.info.apple.com/article.html?artnum=301324 Unspecified vulnerability in the Mac OS X kernel before 10.3.8 allows local users to cause a denial of service (temporary hang) via unspecified attack vectors related to the fan control unit (FCU) driver.

cpe:/a:ibm:lotus_domino_server:6.0.3 cpe:/a:ibm:lotus_domino_server:6.5.1

CVE-2005-0986

2005-05-02T00:00:00.000-04:00

2011-03-07T21:20:55.250-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://news.zdnet.co.uk/software/applications/0,39020384,39194293,00.htm IDEFENSE 20050406 IBM Lotus Domino Server Web Service DoS Vulnerability VUPEN ADV-2005-0322 MISC http://www-1.ibm.com/support/docview.wss?uid=swg21202446 NLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other versions allows remote attackers to cause a denial of service (deep recursion and nHTTP.exe process crash) via a long GET request containing UNICODE decimal value 430 characters, which causes the stack to be exhausted. NOTE: IBM has reported that it is unable to replicate this issue.

cpe:/a:irc_services:nickserv_listlinks:5.0.0 cpe:/a:irc_services:nickserv_listlinks:5.0.1 cpe:/a:irc_services:nickserv_listlinks:5.0.2 cpe:/a:irc_services:nickserv_listlinks:5.0.3 cpe:/a:irc_services:nickserv_listlinks:5.0.4 cpe:/a:irc_services:nickserv_listlinks:5.0.5 cpe:/a:irc_services:nickserv_listlinks:5.0.6 cpe:/a:irc_services:nickserv_listlinks:5.0.7 cpe:/a:irc_services:nickserv_listlinks:5.0.8 cpe:/a:irc_services:nickserv_listlinks:5.0.9 cpe:/a:irc_services:nickserv_listlinks:5.0.10 cpe:/a:irc_services:nickserv_listlinks:5.0.11 cpe:/a:irc_services:nickserv_listlinks:5.0.12 cpe:/a:irc_services:nickserv_listlinks:5.0.13 cpe:/a:irc_services:nickserv_listlinks:5.0.14 cpe:/a:irc_services:nickserv_listlinks:5.0.15 cpe:/a:irc_services:nickserv_listlinks:5.0.16 cpe:/a:irc_services:nickserv_listlinks:5.0.17 cpe:/a:irc_services:nickserv_listlinks:5.0.18 cpe:/a:irc_services:nickserv_listlinks:5.0.19 cpe:/a:irc_services:nickserv_listlinks:5.0.20 cpe:/a:irc_services:nickserv_listlinks:5.0.21 cpe:/a:irc_services:nickserv_listlinks:5.0.22 cpe:/a:irc_services:nickserv_listlinks:5.0.23 cpe:/a:irc_services:nickserv_listlinks:5.0.24 cpe:/a:irc_services:nickserv_listlinks:5.0.25 cpe:/a:irc_services:nickserv_listlinks:5.0.26 cpe:/a:irc_services:nickserv_listlinks:5.0.27 cpe:/a:irc_services:nickserv_listlinks:5.0.28 cpe:/a:irc_services:nickserv_listlinks:5.0.29 cpe:/a:irc_services:nickserv_listlinks:5.0.30 cpe:/a:irc_services:nickserv_listlinks:5.0.31 cpe:/a:irc_services:nickserv_listlinks:5.0.32 cpe:/a:irc_services:nickserv_listlinks:5.0.33 cpe:/a:irc_services:nickserv_listlinks:5.0.34 cpe:/a:irc_services:nickserv_listlinks:5.0.35 cpe:/a:irc_services:nickserv_listlinks:5.0.36 cpe:/a:irc_services:nickserv_listlinks:5.0.37 cpe:/a:irc_services:nickserv_listlinks:5.0.38 cpe:/a:irc_services:nickserv_listlinks:5.0.39 cpe:/a:irc_services:nickserv_listlinks:5.0.40 cpe:/a:irc_services:nickserv_listlinks:5.0.41 cpe:/a:irc_services:nickserv_listlinks:5.0.42 cpe:/a:irc_services:nickserv_listlinks:5.0.43 cpe:/a:irc_services:nickserv_listlinks:5.0.44 cpe:/a:irc_services:nickserv_listlinks:5.0.45 cpe:/a:irc_services:nickserv_listlinks:5.0.46 cpe:/a:irc_services:nickserv_listlinks:5.0.47 cpe:/a:irc_services:nickserv_listlinks:5.0.48 cpe:/a:irc_services:nickserv_listlinks:5.0.49

CVE-2005-0987

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:52.923-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-13T21:03:00.000-04:00

SECTRACK 1013622 CONFIRM http://www.ircservices.esper.net/Changes.txt Unknown vulnerability in IRC Services NickServ LISTLINKS before 5.0.50 allows remote attackers to obtain the links of a nick.

cpe:/a:gnu:gzip:1.2.4 cpe:/a:gnu:gzip:1.2.4a cpe:/a:gnu:gzip:1.3.3 cpe:/o:freebsd:freebsd:4.0 cpe:/o:freebsd:freebsd:4.0:alpha cpe:/o:freebsd:freebsd:4.0:releng cpe:/o:freebsd:freebsd:4.1 cpe:/o:freebsd:freebsd:4.1.1 cpe:/o:freebsd:freebsd:4.1.1:release cpe:/o:freebsd:freebsd:4.1.1:stable cpe:/o:freebsd:freebsd:4.2 cpe:/o:freebsd:freebsd:4.2:stable cpe:/o:freebsd:freebsd:4.3 cpe:/o:freebsd:freebsd:4.3:release cpe:/o:freebsd:freebsd:4.3:release_p38 cpe:/o:freebsd:freebsd:4.3:releng cpe:/o:freebsd:freebsd:4.3:stable cpe:/o:freebsd:freebsd:4.4 cpe:/o:freebsd:freebsd:4.4:release_p42 cpe:/o:freebsd:freebsd:4.4:releng cpe:/o:freebsd:freebsd:4.4:stable cpe:/o:freebsd:freebsd:4.5 cpe:/o:freebsd:freebsd:4.5:release cpe:/o:freebsd:freebsd:4.5:release_p32 cpe:/o:freebsd:freebsd:4.5:releng cpe:/o:freebsd:freebsd:4.5:stable cpe:/o:freebsd:freebsd:4.6 cpe:/o:freebsd:freebsd:4.6:release cpe:/o:freebsd:freebsd:4.6:release_p20 cpe:/o:freebsd:freebsd:4.6:releng cpe:/o:freebsd:freebsd:4.6:stable cpe:/o:freebsd:freebsd:4.6.2 cpe:/o:freebsd:freebsd:4.7 cpe:/o:freebsd:freebsd:4.7:release cpe:/o:freebsd:freebsd:4.7:release_p17 cpe:/o:freebsd:freebsd:4.7:releng cpe:/o:freebsd:freebsd:4.7:stable cpe:/o:freebsd:freebsd:4.8 cpe:/o:freebsd:freebsd:4.8:pre-release cpe:/o:freebsd:freebsd:4.8:release_p6 cpe:/o:freebsd:freebsd:4.8:releng cpe:/o:freebsd:freebsd:4.9 cpe:/o:freebsd:freebsd:4.9:pre-release cpe:/o:freebsd:freebsd:4.9:releng cpe:/o:freebsd:freebsd:4.10 cpe:/o:freebsd:freebsd:4.10:release cpe:/o:freebsd:freebsd:4.10:release_p8 cpe:/o:freebsd:freebsd:4.10:releng cpe:/o:freebsd:freebsd:4.11:release_p3 cpe:/o:freebsd:freebsd:4.11:releng cpe:/o:freebsd:freebsd:4.11:stable cpe:/o:freebsd:freebsd:5.0 cpe:/o:freebsd:freebsd:5.0:alpha cpe:/o:freebsd:freebsd:5.0:release_p14 cpe:/o:freebsd:freebsd:5.0:releng cpe:/o:freebsd:freebsd:5.1 cpe:/o:freebsd:freebsd:5.1:alpha cpe:/o:freebsd:freebsd:5.1:release cpe:/o:freebsd:freebsd:5.1:release_p5 cpe:/o:freebsd:freebsd:5.1:releng cpe:/o:freebsd:freebsd:5.2 cpe:/o:freebsd:freebsd:5.2.1:release cpe:/o:freebsd:freebsd:5.2.1:releng cpe:/o:freebsd:freebsd:5.3 cpe:/o:freebsd:freebsd:5.3:release cpe:/o:freebsd:freebsd:5.3:releng cpe:/o:freebsd:freebsd:5.3:stable cpe:/o:freebsd:freebsd:5.4:pre-release cpe:/o:freebsd:freebsd:5.4:release cpe:/o:freebsd:freebsd:5.4:releng cpe:/o:gentoo:linux cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux:4.0::advanced_server cpe:/o:redhat:enterprise_linux:4.0::enterprise_server cpe:/o:redhat:enterprise_linux:4.0::workstation cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:enterprise_linux_desktop:4.0 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1 cpe:/o:trustix:secure_linux:2.2 cpe:/o:turbolinux:turbolinux_appliance_server:1.0_hosting cpe:/o:turbolinux:turbolinux_appliance_server:1.0_workgroup cpe:/o:turbolinux:turbolinux_desktop:10.0 cpe:/o:turbolinux:turbolinux_home cpe:/o:turbolinux:turbolinux_server:7.0 cpe:/o:turbolinux:turbolinux_server:8.0 cpe:/o:turbolinux:turbolinux_server:10.0 cpe:/o:turbolinux:turbolinux_workstation:7.0 cpe:/o:turbolinux:turbolinux_workstation:8.0 cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc cpe:/o:ubuntu:ubuntu_linux:5.04::amd64 cpe:/o:ubuntu:ubuntu_linux:5.04::i386 cpe:/o:ubuntu:ubuntu_linux:5.04::powerpc

CVE-2005-0988

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:02.233-04:00

3.7

LOCAL

HIGH

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2005.58 APPLE APPLE-SA-2006-08-01 REDHAT RHSA-2005:357 SLACKWARE SSA:2006-262 SUNALERT 101816 DEBIAN DSA-752 BUGTRAQ 20050404 gzip TOCTOU file-permissions vulnerability BID 12996 BID 19289 CERT TA06-214A VUPEN ADV-2006-3101 Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.

cpe:/a:mozilla:firefox:1.0.1 cpe:/a:mozilla:firefox:1.0.2 cpe:/a:mozilla:mozilla:1.7.6 cpe:/a:netscape:navigator:7.2

CVE-2005-0989

2005-05-02T00:00:00.000-04:00

2018-05-02T21:29:28.960-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SCO SCOSA-2005.49 SECTRACK 1013635 SECTRACK 1013643 GENTOO GLSA-200504-18 CONFIRM http://www.mozilla.org/security/announce/mfsa2005-33.html SUSE SUSE-SA:2006:004 REDHAT RHSA-2005:383 REDHAT RHSA-2005:384 REDHAT RHSA-2005:386 REDHAT RHSA-2005:601 BID 12988 BID 15495 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=288688 The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method.

cpe:/a:gnu:sharutils:4.2.1

CVE-2005-0990

2005-05-02T00:00:00.000-04:00

2018-10-03T17:30:01.123-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=302412 REDHAT RHSA-2005:377 BID 12981 MISC https://bugzilla.ubuntu.com/show_bug.cgi?id=8459 XF sharutils-temp-file-symlink(19957) UBUNTU USN-104-1 unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file.

CVE-2005-0991

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:53.910-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-13T21:29:00.000-04:00

BID 12992 AIXAPAR IY59205 AIXAPAR IY59206 AIXAPAR IY59207 RC.BOOT in IBM AIX 5.1, 5.2, and 5.3 does not "use a secure location for temporary files," which allows local users to have an unknown impact, probably by overwriting files.

cpe:/a:phpmyadmin:phpmyadmin:2.0 cpe:/a:phpmyadmin:phpmyadmin:2.0.1 cpe:/a:phpmyadmin:phpmyadmin:2.0.2 cpe:/a:phpmyadmin:phpmyadmin:2.0.3 cpe:/a:phpmyadmin:phpmyadmin:2.0.4 cpe:/a:phpmyadmin:phpmyadmin:2.0.5 cpe:/a:phpmyadmin:phpmyadmin:2.1 cpe:/a:phpmyadmin:phpmyadmin:2.1.1 cpe:/a:phpmyadmin:phpmyadmin:2.1.2 cpe:/a:phpmyadmin:phpmyadmin:2.2 cpe:/a:phpmyadmin:phpmyadmin:2.2.2 cpe:/a:phpmyadmin:phpmyadmin:2.2.3 cpe:/a:phpmyadmin:phpmyadmin:2.2.4 cpe:/a:phpmyadmin:phpmyadmin:2.2.5 cpe:/a:phpmyadmin:phpmyadmin:2.2.6 cpe:/a:phpmyadmin:phpmyadmin:2.2_pre1 cpe:/a:phpmyadmin:phpmyadmin:2.2_pre2 cpe:/a:phpmyadmin:phpmyadmin:2.2_rc1 cpe:/a:phpmyadmin:phpmyadmin:2.2_rc2 cpe:/a:phpmyadmin:phpmyadmin:2.2_rc3 cpe:/a:phpmyadmin:phpmyadmin:2.3.1 cpe:/a:phpmyadmin:phpmyadmin:2.3.2 cpe:/a:phpmyadmin:phpmyadmin:2.4.0 cpe:/a:phpmyadmin:phpmyadmin:2.5.0 cpe:/a:phpmyadmin:phpmyadmin:2.5.1 cpe:/a:phpmyadmin:phpmyadmin:2.5.2 cpe:/a:phpmyadmin:phpmyadmin:2.5.3 cpe:/a:phpmyadmin:phpmyadmin:2.5.4 cpe:/a:phpmyadmin:phpmyadmin:2.5.5 cpe:/a:phpmyadmin:phpmyadmin:2.5.5_pl1 cpe:/a:phpmyadmin:phpmyadmin:2.5.5_rc1 cpe:/a:phpmyadmin:phpmyadmin:2.5.5_rc2 cpe:/a:phpmyadmin:phpmyadmin:2.5.6_rc1 cpe:/a:phpmyadmin:phpmyadmin:2.5.7 cpe:/a:phpmyadmin:phpmyadmin:2.5.7_pl1 cpe:/a:phpmyadmin:phpmyadmin:2.6.0_pl1 cpe:/a:phpmyadmin:phpmyadmin:2.6.0_pl2 cpe:/a:phpmyadmin:phpmyadmin:2.6.0_pl3 cpe:/a:phpmyadmin:phpmyadmin:2.6.1 cpe:/a:phpmyadmin:phpmyadmin:2.6.1_pl1 cpe:/a:phpmyadmin:phpmyadmin:2.6.1_pl3 cpe:/a:phpmyadmin:phpmyadmin:2.6.1_rc1

CVE-2005-0992

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:28.907-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050404 phpMyAdmin Cross-site Scripting Vulnerability MISC http://www.arrelnet.com/advisories/adv20050403.html GENTOO GLSA-200504-08 CONFIRM http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-3 BID 12982 XF phpmyadmin-convcharset-xss(19940) Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin before 2.6.2-rc1 allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter.

cpe:/o:sco:openserver:5.0.6 cpe:/o:sco:openserver:5.0.7

CVE-2005-0993

2005-05-02T00:00:00.000-04:00

2016-10-17T23:16:18.050-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050404 possible privilege escalation on Sco OpenServer 5.0.7 BID 12986 Buffer overflow in nwprint in SCO OpenServer 5.0.7 allows local users to execute arbitrary code via a long command line argument.

cpe:/a:early_impact:productcart:2.7

CVE-2005-0994

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:54.470-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-13T21:54:00.000-04:00

ALLOWS_OTHER_ACCESS

BID 12990 Multiple SQL injection vulnerabilities in ProductCart 2.7 allow remote attackers to execute arbitrary SQL commands via (1) the Category or resultCnt parameters to advSearch_h.asp, and possibly (2) the offset parameter to tarinasworld_butterflyjournal.asp. NOTE: it is possible that item (2) is the result of a typo or editing error from the original research report.

cpe:/a:early_impact:productcart:2.7

CVE-2005-0995

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:54.627-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-13T22:01:00.000-04:00

BID 12990 Multiple cross-site scripting (XSS) vulnerabilities in ProductCart 2.7 allow remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter to advSearch_h.asp, (2) the redirectUrl parameter to NewCust.asp, (3) the country parameter to storelocator_submit.asp, or (4) the error parameter to techErr.asp. NOTE: it has been reported that storelocator_submit.asp does not exist in ProductCart.

cpe:/a:francisco_burzi:php-nuke:7.6

CVE-2005-0996

2005-05-02T00:00:00.000-04:00

2016-10-17T23:16:19.207-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050403 [SECURITYREASON.COM] phpnuke 7.6 Multiple vulnerabilities in Downloads Module cXIb8O3.13 Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the email or url parameters in the Add function, (2) the min parameter in the viewsdownload function, or (3) the min parameter in the search function.

cpe:/a:francisco_burzi:php-nuke:7.6

CVE-2005-0997

2005-05-02T00:00:00.000-04:00

2016-10-17T23:16:20.597-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050403 [SECURITYREASON.COM] phpnuke 7.6 Multiple vulnerabilities in Web_Links Module cXIb8O3.14 Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 7.6 allow remote attackers to execute arbitrary SQL commands via (1) the email or url parameters in the Add function, (2) the url parameter in the modifylinkrequestS function, (3) the orderby or min parameters in the viewlink function, (4) the orderby, min, or show parameters in the search function, or (5) the ratenum parameter in the MostPopular function.

cpe:/a:francisco_burzi:php-nuke:7.6

CVE-2005-0998

2005-05-02T00:00:00.000-04:00

2016-10-17T23:16:21.833-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050403 [SECURITYREASON.COM] phpnuke 7.6 Multiple vulnerabilities in Web_Links Module cXIb8O3.14 The Web_Links module for PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via an invalid show parameter, which triggers a division by zero PHP error that leaks the full pathname of the server.

CVE-2005-0999

2005-05-02T00:00:00.000-04:00

2016-10-17T23:16:22.957-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050406 [waraxe-2005-SA#041] - Critical Sql Injection in PhpNuke 6.x-7.6 MISC http://www.waraxe.us/advisory-41.html SQL injection vulnerability in the Top module for PHP-Nuke 6.x through 7.6 allows remote attackers to execute arbitrary SQL commands via the querylang parameter.

cpe:/a:francisco_burzi:php-nuke:7.6

CVE-2005-1000

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:28.970-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050404 [SECURITYREASON.COM] PhpNuke 7.6=>x Multiple vulnerabilities cXIb8O3.12 BUGTRAQ 20050403 Full path disclosure and XSS in PHPNuke XF phpnuke-modulesphp-xss(19952) Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the bid parameter to the EmailStats op in banners.pgp, (2) the ratenum parameter in the TopRated and MostPopular actions in the Web_Links module, (3) the ttitle parameter in the viewlinkdetails, viewlinkeditorial, viewlinkcomments, and ratelink actions in the Web_Links module, or (4) the username parameter in the Your_Account module.

cpe:/a:francisco_burzi:php-nuke:7.6

CVE-2005-1001

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:29.047-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050404 [SECURITYREASON.COM] PhpNuke 7.6=>x Multiple vulnerabilities cXIb8O3.12 XF phpnuke-modulesphp-path-disclosure(19953) PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to (1) the Surveys module with the file parameter set to comments or (2) 3D-Fantasy/theme.php, which leaks the full pathname of the web server in a PHP error message.

cpe:/a:logics_software:log-ft

CVE-2005-1002

2005-05-02T00:00:00.000-04:00

2016-10-17T23:16:25.287-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050405 Logics Software BS2000 Host to Web Client ALL PLATFORMS BID 12998 logwebftbs2000.exe in Logics Software File Transfer (LOG-FT) allows remote attackers to read arbitrary files via modified (1) VAR_FT_LANG and (2) VAR_FT_TMPL parameters.

cpe:/a:profitcode:payprocart:3.0

CVE-2005-1003

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:29.110-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050404 Authenticaion bypass, Directory transversal and XSS SECTRACK 1013640 XF payprocart-dotdot-directory-traversal(19954) Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote attackers to include arbitrary PHP files via .. (dot dot) sequences in the modID parameter.

cpe:/a:profitcode:payprocart:3.0

CVE-2005-1004

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:29.157-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050404 Authenticaion bypass, Directory transversal and XSS SECTRACK 1013640 XF Payprocart-usrdetails-xss(19955) Cross-site scripting (XSS) vulnerability in usrdetails.php in ProfitCode PayProCart 3.0 allows remote attackers to inject arbitrary web script or HTML via the sgnuptype parameter.

cpe:/a:profitcode:payprocart:3.0

CVE-2005-1005

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:29.203-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050404 Authenticaion bypass, Directory transversal and XSS SECTRACK 1013640 XF payprocart-index-bypass-authentication(19956) ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as demonstrated via a direct request to adminshop/index.php with hex-encoded .. sequences in the ftoedit parameter.

cpe:/h:sonicwall:soho:5.1.7.0

CVE-2005-1006

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:29.280-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050404 SonicWALL SOHO/10 - XSS vulnerability SECTRACK 1013638 MISC http://www.oliverkarow.de/research/SonicWall.txt BID 12984 XF sonicwall-http-get-requests-xss(19958) XF sonicwall-username-code-execution(19960) Multiple cross-site scripting (XSS) vulnerabilities in SonicWALL SOHO 5.1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) the user login name, which is not filtered when the administrator views the log file.

cpe:/a:stalker:communigate_pro:4.3c1 cpe:/a:stalker:communigate_pro:4.3c2

CVE-2005-1007

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:29.327-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.stalker.com/CommuniGatePro/History.html XF communigatepro-list-dos(19961) Unknown vulnerability in the LIST functionality in CommuniGate Pro before 4.3c3 allows remote attackers to cause a denial of service (server crash) via certain multipart messages.

cpe:/a:asp-dev:xm_forum:rc3

CVE-2005-1008

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:56.643-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-14T09:23:00.000-04:00

SECTRACK 1013614 BID 12958 Cross-site scripting (XSS) vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via a "javascript:" URL in an IMG tag.

cpe:/a:bakbone:netvault:7.0 cpe:/a:bakbone:netvault:7.1

CVE-2005-1009

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:29.390-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1013625 MISC http://www.class101.org/netv-locsbof.pdf MISC http://www.class101.org/netv-remhbof.pdf MISC http://www.hat-squad.com/en/000164.html MISC http://www.hat-squad.com/en/000165.html BUGTRAQ 20050401 [Hat-Squad Advisory] Bakbone NetVault Heap overflow Vulnerabilities BID 12967 XF netvault-configurecfg-bo(19932) Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or (2) local users to execute arbitrary code via a long Name entry in the configure.cfg file.

cpe:/a:comersus_open_technologies:comersus_cart:6.0.3

CVE-2005-1010

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:29.437-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013634 BID 13000 XF comersus-username-xss(19962) Cross-site scripting (XSS) vulnerability in Comersus Cart 6 allows remote attackers to inject arbitrary web script or HTML via the account username.

cpe:/a:iatek:siteenable

CVE-2005-1011

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:57.097-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-14T09:57:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1013631 BID 12985 MISC http://www.zone-h.com/en/advisories/read/id=7367/ SQL injection vulnerability in content.asp in SiteEnable allows remote attackers to execute arbitrary SQL commands via the sortby parameter.

cpe:/a:iatek:siteenable

CVE-2005-1012

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:29.500-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013631 MISC http://www.zone-h.com/en/advisories/read/id=7367/ XF portalapp-contentasp-xss(19891) Cross-site scripting (XSS) vulnerability in Iatek SiteEnable allows remote attackers to inject arbitrary web script or HTML via (1) the contenttype parameter to content.asp, (2) the title, or (3) the description.

cpe:/a:mailenable:mailenable_enterprise:1.00 cpe:/a:mailenable:mailenable_enterprise:1.01 cpe:/a:mailenable:mailenable_enterprise:1.02 cpe:/a:mailenable:mailenable_enterprise:1.03 cpe:/a:mailenable:mailenable_enterprise:1.04 cpe:/a:mailenable:mailenable_professional:1.5 cpe:/a:mailenable:mailenable_professional:1.51 cpe:/a:mailenable:mailenable_professional:1.52 cpe:/a:mailenable:mailenable_professional:1.53 cpe:/a:mailenable:mailenable_professional:1.54

CVE-2005-1013

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:29.563-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050405 MailEnable Smtpd remote Dos [x0n3-h4ck] SECTRACK 1013637 CONFIRM http://www.mailenable.com/hotfix/ MISC http://www.securiteam.com/windowsntfocus/5HP031PFFG.html BID 12994 XF mailenable-smtp-dos(19948) XF mailenable-ehlo-dos(19973) The SMTP service in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to cause a denial of service (server crash) via an EHLO command with a Unicode string.

cpe:/a:mailenable:mailenable_enterprise:1.0 cpe:/a:mailenable:mailenable_enterprise:1.01 cpe:/a:mailenable:mailenable_enterprise:1.02 cpe:/a:mailenable:mailenable_enterprise:1.03 cpe:/a:mailenable:mailenable_enterprise:1.04 cpe:/a:mailenable:mailenable_professional:1.5 cpe:/a:mailenable:mailenable_professional:1.51 cpe:/a:mailenable:mailenable_professional:1.52 cpe:/a:mailenable:mailenable_professional:1.53 cpe:/a:mailenable:mailenable_professional:1.54

CVE-2005-1014

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:29.627-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

FULLDISC 20050405 MailEnable Imapd remote BoF + Exploit [x0n3-h4ck] SECTRACK 1013637 CONFIRM http://www.mailenable.com/hotfix/ BID 12995 XF mailenable-imap-dos(19947) Buffer overflow in the IMAP service for MailEnable Enterprise 1.04 and earlier and Professional 1.54 allows remote attackers to execute arbitrary code via a long AUTHENTICATE command.

cpe:/a:mailenable:imapd

CVE-2005-1015

2005-05-02T00:00:00.000-04:00

2008-09-05T16:47:57.753-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-06-14T09:52:00.000-04:00

ALLOWS_ADMIN_ACCESS

FULLDISC 20050406 Re: MailEnable Imapd remote BoF + Exploit [x0n3-h4ck] Buffer overflow in MailEnable Imapd (MEIMAP.exe) allows remote attackers to execute arbitrary code via a long LOGIN command.

cpe:/a:maxwebportal:maxwebportal:1.33

CVE-2005-1016

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:29.673-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013617 MISC http://www.hackerscenter.com/archive/view.asp?id=1807 BID 12968 XF maxwebportal-linksaddform-xss(19929) Cross-site scripting (XSS) vulnerability in links_add_form.asp for MaxWebPortal 1.33 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URL in a banner URL.

cpe:/a:maxwebportal:maxwebportal:1.33

CVE-2005-1017

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:29.733-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1013617 MISC http://www.hackerscenter.com/archive/view.asp?id=1807 BID 12968 XF maxwebportal-eventsfunctions-sql-injection(19928) SQL injection vulnerability in the Update_Events function in events_functions.asp in MaxWebPortal 1.33 and earlier allows remote attackers to execute arbitrary SQL commands via the EVENT_ID parameter, as demonstrated using events.asp.

cpe:/a:ca:brightstor_arcserve_backup:11.1::windows

CVE-2005-1018

2005-05-02T00:00:00.000-04:00

2016-10-17T23:16:31.553-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050414 Computer Associates BrightStor ARCserve Backup and BrightStor Enterprise Backup UniversalAgent buffer overflow vulnerability IDEFENSE 20050411 Computer Associates BrightStor ARCserve Backup UniversalAgent Buffer Overflow BUGTRAQ 20050217 RE: BrightStor ARCserve Backup buffer overflow PoC (fixes available) BID 13102 Buffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup allows remote authenticated users to cause a denial of service or execute arbitrary code via an agent request to TCP port 6050 with a large argument before the option field.

cpe:/a:aeon:aeon:0.1.8 cpe:/a:aeon:aeon:0.1.9 cpe:/a:aeon:aeon:0.2 cpe:/a:aeon:aeon:0.2a

CVE-2005-1019

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:29.780-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20050404 Local buffer overflow on Aeon<=0.2a MISC http://security-tmp.h14.ru/exploits/23laeon.c.txt XF aeon-getconfig-bo(19951) Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable.

cpe:/o:cisco:ios:12.0 cpe:/o:cisco:ios:12.0%2823%29s4 cpe:/o:cisco:ios:12.0%2823%29s5 cpe:/o:cisco:ios:12.0%2824%29s1 cpe:/o:cisco:ios:12.0%2824%29s4 cpe:/o:cisco:ios:12.0%2824%29s5 cpe:/o:cisco:ios:12.0%2824.2%29s cpe:/o:cisco:ios:12.0%2826%29s1 cpe:/o:cisco:ios:12.0%2827%29s cpe:/o:cisco:ios:12.0%2827%29sv cpe:/o:cisco:ios:12.0%2827%29sv1 cpe:/o:cisco:ios:12.0da cpe:/o:cisco:ios:12.0db cpe:/o:cisco:ios:12.0dc cpe:/o:cisco:ios:12.0s cpe:/o:cisco:ios:12.0sc cpe:/o:cisco:ios:12.0sl cpe:/o:cisco:ios:12.0sp cpe:/o:cisco:ios:12.0st cpe:/o:cisco:ios:12.0sv cpe:/o:cisco:ios:12.0sx cpe:/o:cisco:ios:12.0sy cpe:/o:cisco:ios:12.0sz cpe:/o:cisco:ios:12.0t cpe:/o:cisco:ios:12.0w5 cpe:/o:cisco:ios:12.0wc cpe:/o:cisco:ios:12.0wt cpe:/o:cisco:ios:12.0wx cpe:/o:cisco:ios:12.0xa cpe:/o:cisco:ios:12.0xb cpe:/o:cisco:ios:12.0xc cpe:/o:cisco:ios:12.0xd cpe:/o:cisco:ios:12.0xe cpe:/o:cisco:ios:12.0xf cpe:/o:cisco:ios:12.0xg cpe:/o:cisco:ios:12.0xh cpe:/o:cisco:ios:12.0xi cpe:/o:cisco:ios:12.0xj cpe:/o:cisco:ios:12.0xk cpe:/o:cisco:ios:12.0xl cpe:/o:cisco:ios:12.0xm cpe:/o:cisco:ios:12.0xn cpe:/o:cisco:ios:12.0xp cpe:/o:cisco:ios:12.0xq cpe:/o:cisco:ios:12.0xr cpe:/o:cisco:ios:12.0xs cpe:/o:cisco:ios:12.0xt cpe:/o:cisco:ios:12.0xu cpe:/o:cisco:ios:12.0xv cpe:/o:cisco:ios:12.0xw cpe:/o:cisco:ios:12.1 cpe:/o:cisco:ios:12.1%2811%29e cpe:/o:cisco:ios:12.1%2811b%29e cpe:/o:cisco:ios:12.1%2811b%29e12 cpe:/o:cisco:ios:12.1%2811b%29e14 cpe:/o:cisco:ios:12.1%2813%29e9 cpe:/o:cisco:ios:12.1%2819%29e1 cpe:/o:cisco:ios:12.1%2820%29e cpe:/o:cisco:ios:12.1%2820%29e1 cpe:/o:cisco:ios:12.1%2820%29e2 cpe:/o:cisco:ios:12.1%2820%29ea1 cpe:/o:cisco:ios:12.1%2820%29ec cpe:/o:cisco:ios:12.1%2820%29ec1 cpe:/o:cisco:ios:12.1%2820%29eo cpe:/o:cisco:ios:12.1%2820%29ew cpe:/o:cisco:ios:12.1%2820%29ew1 cpe:/o:cisco:ios:12.1aa cpe:/o:cisco:ios:12.1ax cpe:/o:cisco:ios:12.1ay cpe:/o:cisco:ios:12.1az cpe:/o:cisco:ios:12.1cx cpe:/o:cisco:ios:12.1da cpe:/o:cisco:ios:12.1db cpe:/o:cisco:ios:12.1dc cpe:/o:cisco:ios:12.1e cpe:/o:cisco:ios:12.1ea cpe:/o:cisco:ios:12.1eb cpe:/o:cisco:ios:12.1ec cpe:/o:cisco:ios:12.1eo cpe:/o:cisco:ios:12.1eu cpe:/o:cisco:ios:12.1ev cpe:/o:cisco:ios:12.1ew cpe:/o:cisco:ios:12.1ex cpe:/o:cisco:ios:12.1ey cpe:/o:cisco:ios:12.1m cpe:/o:cisco:ios:12.1t cpe:/o:cisco:ios:12.1xa cpe:/o:cisco:ios:12.1xb cpe:/o:cisco:ios:12.1xc cpe:/o:cisco:ios:12.1xd cpe:/o:cisco:ios:12.1xe cpe:/o:cisco:ios:12.1xf cpe:/o:cisco:ios:12.1xg cpe:/o:cisco:ios:12.1xh cpe:/o:cisco:ios:12.1xi cpe:/o:cisco:ios:12.1xj cpe:/o:cisco:ios:12.1xk cpe:/o:cisco:ios:12.1xl cpe:/o:cisco:ios:12.1xm cpe:/o:cisco:ios:12.1xp cpe:/o:cisco:ios:12.1xq cpe:/o:cisco:ios:12.1xr cpe:/o:cisco:ios:12.1xs cpe:/o:cisco:ios:12.1xt cpe:/o:cisco:ios:12.1xu cpe:/o:cisco:ios:12.1xv cpe:/o:cisco:ios:12.1xw cpe:/o:cisco:ios:12.1xx cpe:/o:cisco:ios:12.1xy cpe:/o:cisco:ios:12.1xz cpe:/o:cisco:ios:12.1ya cpe:/o:cisco:ios:12.1yb cpe:/o:cisco:ios:12.1yc cpe:/o:cisco:ios:12.1yd cpe:/o:cisco:ios:12.1ye cpe:/o:cisco:ios:12.1yf cpe:/o:cisco:ios:12.1yh cpe:/o:cisco:ios:12.1yi cpe:/o:cisco:ios:12.1yj cpe:/o:cisco:ios:12.2 cpe:/o:cisco:ios:12.2%281%29xa cpe:/o:cisco:ios:12.2%281%29xd cpe:/o:cisco:ios:12.2%281%29xd1 cpe:/o:cisco:ios:12.2%281%29xd3 cpe:/o:cisco:ios:12.2%281%29xd4 cpe:/o:cisco:ios:12.2%281%29xe cpe:/o:cisco:ios:12.2%281%29xe2 cpe:/o:cisco:ios:12.2%281%29xe3 cpe:/o:cisco:ios:12.2%281%29xh cpe:/o:cisco:ios:12.2%281%29xq cpe:/o:cisco:ios:12.2%281%29xs cpe:/o:cisco:ios:12.2%281%29xs1 cpe:/o:cisco:ios:12.2%282%29t4 cpe:/o:cisco:ios:12.2%282%29xa cpe:/o:cisco:ios:12.2%282%29xa1 cpe:/o:cisco:ios:12.2%282%29xa5 cpe:/o:cisco:ios:12.2%282%29xb cpe:/o:cisco:ios:12.2%282%29xb3 cpe:/o:cisco:ios:12.2%282%29xb4 cpe:/o:cisco:ios:12.2%282%29xf cpe:/o:cisco:ios:12.2%282%29xg cpe:/o:cisco:ios:12.2%282%29xh cpe:/o:cisco:ios:12.2%282%29xh2 cpe:/o:cisco:ios:12.2%282%29xh3 cpe:/o:cisco:ios:12.2%282%29xi cpe:/o:cisco:ios:12.2%282%29xi1 cpe:/o:cisco:ios:12.2%282%29xi2 cpe:/o:cisco:ios:12.2%282%29xj cpe:/o:cisco:ios:12.2%282%29xj1 cpe:/o:cisco:ios:12.2%282%29xk cpe:/o:cisco:ios:12.2%282%29xk2 cpe:/o:cisco:ios:12.2%282%29xn cpe:/o:cisco:ios:12.2%282%29xt cpe:/o:cisco:ios:12.2%282%29xt3 cpe:/o:cisco:ios:12.2%282%29xu cpe:/o:cisco:ios:12.2%282%29xu2 cpe:/o:cisco:ios:12.2%284%29ja cpe:/o:cisco:ios:12.2%284%29ja1 cpe:/o:cisco:ios:12.2%288%29ja cpe:/o:cisco:ios:12.2%2811%29ja cpe:/o:cisco:ios:12.2%2811%29ja1 cpe:/o:cisco:ios:12.2%2811%29t cpe:/o:cisco:ios:12.2%2812g%29 cpe:/o:cisco:ios:12.2%2812h%29 cpe:/o:cisco:ios:12.2%2814%29sy cpe:/o:cisco:ios:12.2%2814%29sy1 cpe:/o:cisco:ios:12.2%2814%29sz cpe:/o:cisco:ios:12.2%2814%29za cpe:/o:cisco:ios:12.2%2814%29za2 cpe:/o:cisco:ios:12.2%2814.5%29 cpe:/o:cisco:ios:12.2%2814.5%29t cpe:/o:cisco:ios:12.2%2815%29zn cpe:/o:cisco:ios:12.2%2815.1%29s cpe:/o:cisco:ios:12.2%2816%29b cpe:/o:cisco:ios:12.2%2816.1%29b cpe:/o:cisco:ios:12.2%2817a%29sxa cpe:/o:cisco:ios:12.2%2818%29ew cpe:/o:cisco:ios:12.2%2818%29ewa cpe:/o:cisco:ios:12.2%2818%29s cpe:/o:cisco:ios:12.2%2818%29se cpe:/o:cisco:ios:12.2%2818%29sv cpe:/o:cisco:ios:12.2%2818%29sw cpe:/o:cisco:ios:12.2%2820%29ew cpe:/o:cisco:ios:12.2%2820%29s cpe:/o:cisco:ios:12.2%2820%29s1 cpe:/o:cisco:ios:12.2%2821%29 cpe:/o:cisco:ios:12.2%2821a%29 cpe:/o:cisco:ios:12.2%2823%29 cpe:/o:cisco:ios:12.2b cpe:/o:cisco:ios:12.2bc cpe:/o:cisco:ios:12.2bw cpe:/o:cisco:ios:12.2bx cpe:/o:cisco:ios:12.2by cpe:/o:cisco:ios:12.2bz cpe:/o:cisco:ios:12.2cx cpe:/o:cisco:ios:12.2cy cpe:/o:cisco:ios:12.2cz cpe:/o:cisco:ios:12.2da cpe:/o:cisco:ios:12.2dd cpe:/o:cisco:ios:12.2dx cpe:/o:cisco:ios:12.2ew cpe:/o:cisco:ios:12.2ewa cpe:/o:cisco:ios:12.2ja cpe:/o:cisco:ios:12.2jk cpe:/o:cisco:ios:12.2mb cpe:/o:cisco:ios:12.2mc cpe:/o:cisco:ios:12.2mx cpe:/o:cisco:ios:12.2s cpe:/o:cisco:ios:12.2se cpe:/o:cisco:ios:12.2su cpe:/o:cisco:ios:12.2sv cpe:/o:cisco:ios:12.2sw cpe:/o:cisco:ios:12.2sx cpe:/o:cisco:ios:12.2sxa cpe:/o:cisco:ios:12.2sxb cpe:/o:cisco:ios:12.2sxd cpe:/o:cisco:ios:12.2sy cpe:/o:cisco:ios:12.2sz cpe:/o:cisco:ios:12.2t cpe:/o:cisco:ios:12.2x cpe:/o:cisco:ios:12.2xa cpe:/o:cisco:ios:12.2xb cpe:/o:cisco:ios:12.2xc cpe:/o:cisco:ios:12.2xd cpe:/o:cisco:ios:12.2xe cpe:/o:cisco:ios:12.2xf cpe:/o:cisco:ios:12.2xg cpe:/o:cisco:ios:12.2xh cpe:/o:cisco:ios:12.2xi cpe:/o:cisco:ios:12.2xj cpe:/o:cisco:ios:12.2xk cpe:/o:cisco:ios:12.2xl cpe:/o:cisco:ios:12.2xm cpe:/o:cisco:ios:12.2xn cpe:/o:cisco:ios:12.2xq cpe:/o:cisco:ios:12.2xr cpe:/o:cisco:ios:12.2xs cpe:/o:cisco:ios:12.2xt cpe:/o:cisco:ios:12.2xu cpe:/o:cisco:ios:12.2xw cpe:/o:cisco:ios:12.2xz cpe:/o:cisco:ios:12.2ya cpe:/o:cisco:ios:12.2yb cpe:/o:cisco:ios:12.2yc cpe:/o:cisco:ios:12.2yd cpe:/o:cisco:ios:12.2ye cpe:/o:cisco:ios:12.2yf cpe:/o:cisco:ios:12.2yg cpe:/o:cisco:ios:12.2yh cpe:/o:cisco:ios:12.2yj cpe:/o:cisco:ios:12.2yk cpe:/o:cisco:ios:12.2yl cpe:/o:cisco:ios:12.2ym cpe:/o:cisco:ios:12.2yn cpe:/o:cisco:ios:12.2yo cpe:/o:cisco:ios:12.2yp cpe:/o:cisco:ios:12.2yq cpe:/o:cisco:ios:12.2yr cpe:/o:cisco:ios:12.2ys cpe:/o:cisco:ios:12.2yt cpe:/o:cisco:ios:12.2yu cpe:/o:cisco:ios:12.2yv cpe:/o:cisco:ios:12.2yw cpe:/o:cisco:ios:12.2yx cpe:/o:cisco:ios:12.2yy cpe:/o:cisco:ios:12.2yz cpe:/o:cisco:ios:12.2za cpe:/o:cisco:ios:12.2zb cpe:/o:cisco:ios:12.2zc cpe:/o:cisco:ios:12.2zd cpe:/o:cisco:ios:12.2ze cpe:/o:cisco:ios:12.2zf cpe:/o:cisco:ios:12.2zg cpe:/o:cisco:ios:12.2zh cpe:/o:cisco:ios:12.2zi cpe:/o:cisco:ios:12.2zj cpe:/o:cisco:ios:12.2zk cpe:/o:cisco:ios:12.2zl cpe:/o:cisco:ios:12.2zm cpe:/o:cisco:ios:12.2zn cpe:/o:cisco:ios:12.2zo cpe:/o:cisco:ios:12.2zp cpe:/o:cisco:ios:12.2zq cpe:/o:cisco:ios:12.3 cpe:/o:cisco:ios:12.3%282%29t3 cpe:/o:cisco:ios:12.3%282%29xc1 cpe:/o:cisco:ios:12.3%282%29xc2 cpe:/o:cisco:ios:12.3%284%29t cpe:/o:cisco:ios:12.3%284%29t1 cpe:/o:cisco:ios:12.3%284%29t2 cpe:/o:cisco:ios:12.3%284%29t3 cpe:/o:cisco:ios:12.3%284%29xd cpe:/o:cisco:ios:12.3%284%29xd1 cpe:/o:cisco:ios:12.3%285%29 cpe:/o:cisco:ios:12.3%285a%29 cpe:/o:cisco:ios:12.3%285a%29b cpe:/o:cisco:ios:12.3%285b%29 cpe:/o:cisco:ios:12.3%286%29 cpe:/o:cisco:ios:12.3b cpe:/o:cisco:ios:12.3bc cpe:/o:cisco:ios:12.3bw cpe:/o:cisco:ios:12.3j cpe:/o:cisco:ios:12.3ja cpe:/o:cisco:ios:12.3t cpe:/o:cisco:ios:12.3xa cpe:/o:cisco:ios:12.3xb cpe:/o:cisco:ios:12.3xc cpe:/o:cisco:ios:12.3xd cpe:/o:cisco:ios:12.3xe cpe:/o:cisco:ios:12.3xf cpe:/o:cisco:ios:12.3xg cpe:/o:cisco:ios:12.3xh cpe:/o:cisco:ios:12.3xi cpe:/o:cisco:ios:12.3xj cpe:/o:cisco:ios:12.3xk cpe:/o:cisco:ios:12.3xl cpe:/o:cisco:ios:12.3xm cpe:/o:cisco:ios:12.3xn cpe:/o:cisco:ios:12.3xq cpe:/o:cisco:ios:12.3xr cpe:/o:cisco:ios:12.3xs cpe:/o:cisco:ios:12.3xt cpe:/o:cisco:ios:12.3xu cpe:/o:cisco:ios:12.3xv cpe:/o:cisco:ios:12.3xw cpe:/o:cisco:ios:12.3xx cpe:/o:cisco:ios:12.3xy cpe:/o:cisco:ios:12.3xz cpe:/o:cisco:ios:12.3ya cpe:/o:cisco:ios:12.3yc cpe:/o:cisco:ios:12.3yd cpe:/o:cisco:ios:12.3ye cpe:/o:cisco:ios:12.3yf cpe:/o:cisco:ios:12.3yg cpe:/o:cisco:ios:12.3yh cpe:/o:cisco:ios:12.3yj cpe:/o:cisco:ios:12.3yl

CVE-2005-1020

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:02.403-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CISCO 20050406 Vulnerabilities in Cisco IOS Secure Shell Server BID 13043 SECTRACK 1013655 XF cisco-ios-sshv2-tacacs-authentication-dos(19987) XF cisco-ios-authentication-send-dos(19989) XF cisco-ios-ssh-message-log-dos(19990) Secure Shell (SSH) 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of service (device reload) (1) via a username that contains a domain name when using a TACACS+ server to authenticate, (2) when a new SSH session is in the login phase and a currently logged in user issues a send command, or (3) when IOS is logging messages and an SSH session is terminated while the server is sending data.

cpe:/o:cisco:ios:12.0s cpe:/o:cisco:ios:12.0sx cpe:/o:cisco:ios:12.1ax cpe:/o:cisco:ios:12.1az cpe:/o:cisco:ios:12.1db cpe:/o:cisco:ios:12.1dc cpe:/o:cisco:ios:12.1e cpe:/o:cisco:ios:12.1ea cpe:/o:cisco:ios:12.1eb cpe:/o:cisco:ios:12.1ec cpe:/o:cisco:ios:12.1eu cpe:/o:cisco:ios:12.1ew cpe:/o:cisco:ios:12.1ex cpe:/o:cisco:ios:12.1t cpe:/o:cisco:ios:12.1xd cpe:/o:cisco:ios:12.1xe cpe:/o:cisco:ios:12.1xf cpe:/o:cisco:ios:12.1xg cpe:/o:cisco:ios:12.1xh cpe:/o:cisco:ios:12.1xi cpe:/o:cisco:ios:12.1xl cpe:/o:cisco:ios:12.1xm cpe:/o:cisco:ios:12.1xp cpe:/o:cisco:ios:12.1xq cpe:/o:cisco:ios:12.1xr cpe:/o:cisco:ios:12.1xt cpe:/o:cisco:ios:12.1xu cpe:/o:cisco:ios:12.1xv cpe:/o:cisco:ios:12.1ya cpe:/o:cisco:ios:12.1yb cpe:/o:cisco:ios:12.1yc cpe:/o:cisco:ios:12.1yd cpe:/o:cisco:ios:12.1ye cpe:/o:cisco:ios:12.1yf cpe:/o:cisco:ios:12.1yh cpe:/o:cisco:ios:12.1yi cpe:/o:cisco:ios:12.2 cpe:/o:cisco:ios:12.2b cpe:/o:cisco:ios:12.2dd cpe:/o:cisco:ios:12.2dx cpe:/o:cisco:ios:12.2eu cpe:/o:cisco:ios:12.2ew cpe:/o:cisco:ios:12.2ewa cpe:/o:cisco:ios:12.2ex cpe:/o:cisco:ios:12.2s cpe:/o:cisco:ios:12.2se cpe:/o:cisco:ios:12.2sea cpe:/o:cisco:ios:12.2seb cpe:/o:cisco:ios:12.2su cpe:/o:cisco:ios:12.2sv cpe:/o:cisco:ios:12.2sx cpe:/o:cisco:ios:12.2sxa cpe:/o:cisco:ios:12.2sxb cpe:/o:cisco:ios:12.2sxd cpe:/o:cisco:ios:12.2sy cpe:/o:cisco:ios:12.2sz cpe:/o:cisco:ios:12.2t cpe:/o:cisco:ios:12.2xa cpe:/o:cisco:ios:12.2xc cpe:/o:cisco:ios:12.2xf cpe:/o:cisco:ios:12.2xn cpe:/o:cisco:ios:12.2xs cpe:/o:cisco:ios:12.2ye cpe:/o:cisco:ios:12.2yk cpe:/o:cisco:ios:12.2yo cpe:/o:cisco:ios:12.2yx cpe:/o:cisco:ios:12.2yz cpe:/o:cisco:ios:12.2za cpe:/o:cisco:ios:12.3t cpe:/o:cisco:ios:12.3xd cpe:/o:cisco:ios:12.3xe cpe:/o:cisco:ios:12.3xf cpe:/o:cisco:ios:12.3xg cpe:/o:cisco:ios:12.3xh cpe:/o:cisco:ios:12.3xi cpe:/o:cisco:ios:12.3xj cpe:/o:cisco:ios:12.3xk cpe:/o:cisco:ios:12.3xl cpe:/o:cisco:ios:12.3xm cpe:/o:cisco:ios:12.3xq cpe:/o:cisco:ios:12.3xr cpe:/o:cisco:ios:12.3xs cpe:/o:cisco:ios:12.3xu cpe:/o:cisco:ios:12.3xw cpe:/o:cisco:ios:12.3xx cpe:/o:cisco:ios:12.3xy cpe:/o:cisco:ios:12.3ya cpe:/o:cisco:ios:12.3yd cpe:/o:cisco:ios:12.3yf cpe:/o:cisco:ios:12.3yg cpe:/o:cisco:ios:12.3yh cpe:/o:cisco:ios:12.3yj cpe:/o:cisco:ios:12.3yk

CVE-2005-1021

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:02.547-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CISCO 20050406 Vulnerabilities in Cisco IOS Secure Shell Server BID 13042 SECTRACK 1013655 XF cisco-ios-memory-leak-dos(19991) Memory leak in Secure Shell (SSH) in Cisco IOS 12.0 through 12.3, when authenticating against a TACACS+ server, allows remote attackers to cause a denial of service (memory consumption) via an incorrect username or password.

cpe:/a:macromedia:coldfusion:6.1

CVE-2005-1022

2005-05-02T00:00:00.000-04:00

2016-10-17T23:16:34.240-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050407 Macromedia Security Bulletin - ColdFusion MX 6.1 CONFIRM http://www.macromedia.com/devnet/security/security_zone/mpsb05-02.html ColdFusion 6.1 Updater 1 places Java .class files under the web root in the /WEB-INF/cfclasses directory, which allows remote attackers to obtain sensitive information.

CVE-2005-1023

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:30.030-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050403 Full path disclosure and XSS in PHPNuke MISC http://www.securityreason.com/adv/PHPNuke%206.x-7.6-p1.txt XF phpnuke-modulesphp-xss(19952) Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x to 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) min parameter to the Search module, (2) the categories parameter to the FAQ module, or (3) the ltr parameter to the Encyclopedia module. NOTE: the bid parameter issue in banners.php is already an item in CVE-2005-1000.

CVE-2005-1024

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:30.093-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050403 Full path disclosure and XSS in PHPNuke MISC http://www.securityreason.com/adv/PHPNuke%206.x-7.6-p1.txt XF phpnuke-modulesphp-path-disclosure(19953) XF phpnuke-myheadlines-path-disclosure(44980) modules.php in PHP-Nuke 6.x to 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) my_headlines, (2) userinfo, or (3) search, which reveals the path in a PHP error message.

cpe:/h:ibm:iseries_as_400:4.3

CVE-2005-1025

2005-05-02T00:00:00.000-04:00

2016-10-17T23:16:37.883-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050404 Disclosure of AS/400 user accounts via the FTP server MISC http://www.venera.com/downloads/AS400_user_accounts_ftp_disclosure.pdf The FTP server in AS/400 4.3, when running in IFS mode, allows remote attackers to obtain sensitive information via a symlink attack using RCMD and the ADDLNK utility, as demonstrated using the QSYS.LIB library.

cpe:/a:dlman_pro:dlman_pro:0.9.8 cpe:/a:linkz_pro:linkz_pro:1.0.3_beta2

CVE-2005-1026

2005-05-02T00:00:00.000-04:00

2016-10-17T23:16:39.087-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050404 SQL INJECTION in LinksLinks Pro. PHPBB Mod. BUGTRAQ 20050404 SQL INJECTION in DLMan Pro. PHPBB Mod. BID 13028 BID 13030 CONFIRM http://www.snailsource.com/forum/dlman.php?func=file_info&file_id=77 Multiple SQL injection vulnerabilities in SnailSource phpBB 2.0.x mods allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to dlman.php in DLMan Pro or (2) id parameter to links.php in Linkz Pro (aka LinksLinks Pro).

CVE-2005-1027

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:30.140-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050404 [SECURITYREASON.COM] Full path disclosure and XSS in PHPNuke part 3 BUGTRAQ 20030511 PHPNuke "Your Account" XSS Vulnerability BID 7570 XF phpnuke-modules-xss(11994) Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x through 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter in the Your_Account module, (2) avatarcategory parameter in the Your_Account module, or (3) lid parameter in the Downloads module.

cpe:/a:phpnuke:php-nuke:6.0 cpe:/a:phpnuke:php-nuke:6.5 cpe:/a:phpnuke:php-nuke:6.6 cpe:/a:phpnuke:php-nuke:6.7 cpe:/a:phpnuke:php-nuke:6.8 cpe:/a:phpnuke:php-nuke:6.9 cpe:/a:phpnuke:php-nuke:7.0 cpe:/a:phpnuke:php-nuke:7.1 cpe:/a:phpnuke:php-nuke:7.2 cpe:/a:phpnuke:php-nuke:7.3 cpe:/a:phpnuke:php-nuke:7.4 cpe:/a:phpnuke:php-nuke:7.5 cpe:/a:phpnuke:php-nuke:7.6

CVE-2005-1028

2005-05-02T00:00:00.000-04:00

2019-07-16T08:20:01.417-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2019-07-01T12:47:01.743-04:00

BUGTRAQ 20050404 [SECURITYREASON.COM] Full path disclosure and XSS in PHPNuke part 3 PHP-Nuke 6.x through 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) index.php with the forum_admin parameter set, (2) the Surveys module, or (3) the Your_Account module, which reveals the path in a PHP error message.

cpe:/a:active_web_softwares:active_auction_house:7.1::pro

CVE-2005-1029

2005-04-06T00:00:00.000-04:00

2017-07-10T21:32:30.203-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050406 Active Auction House has multiple Sql injection, error and XSS BID 13032 BID 13034 BID 13035 SECTRACK 1013649 XF aah-multiple-scripts-sql-injection(19977) Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) SortDir, or (3) Sortby parameter to default.asp, (4) itemID parameter to ItemInfo.asp, or (5) Email field to sendpassword.asp.

cpe:/a:active_web_softwares:active_auction_house:7.1::pro

CVE-2005-1030

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:30.267-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050406 Active Auction House has multiple Sql injection, error and XSS BID 13036 BID 13038 BID 13039 SECTRACK 1013649 XF aah-multiple-scripts-xss(19975) Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary web script or HTML via the (1) ReturnURL, (2) password, (3) username parameter, (4) ReturnURL parameter to account.asp, (5) Table, (6) Title parameter to sendpassword.asp, or (7) itemid to watchthisitem.asp.

cpe:/a:e-xoops:e-xoops:1.05r3 cpe:/a:runcms:runcms:1.1 cpe:/a:runcms:runcms:1.1a

CVE-2005-1031

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:30.327-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050406 runcms/e-xoops 1.1A and below file upload vulnerability CONFIRM http://www.runcms.org/public/modules/news/ BID 13027 XF exoops-runcms-upload-files(20001) RUNCMS 1.1A, and possibly other products based on e-Xoops (exoops), when "Allow custom avatar upload" is enabled, does not properly verify uploaded files, which allows remote attackers to upload arbitrary files.

CVE-2005-1032

2005-04-06T00:00:00.000-04:00

2008-09-10T15:37:47.773-04:00

** REJECT ** cart.php in LiteCommerce might allow remote attackers to obtain sensitive information via invalid (1) category_id or (2) product_id parameters. NOTE: this issue was originally claimed to be due to SQL injection, but the original researcher is known to be frequently inaccurate with respect to bug type and severity. The vendor has disputed this issue, saying "These reports are credited to malicious person we refused to hire. We have not taken legal action against him only because he is located in India. The vulnerabilites reported can not be reproduced, hence information you provide is contrary to fact." Further investigation by CVE personnel shows that an invalid SQL syntax error could be generated, but it only reveals portions of underlying database structure, which is already available in documentation from the vendor, and it does not appear to lead to path disclosure. Therefore, this issue is not a vulnerability or an exposure, and it probably should be REJECTED.

cpe:/a:devellion:cubecart:2.0.6

CVE-2005-1033

2005-05-02T00:00:00.000-04:00

2016-10-17T23:16:46.617-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050406 [NOBYTES.COM: #6] CubeCart 2.0.6 - Information Disclosure SECTRACK 1013660 CubeCart 2.0.6 allows remote attackers to obtain sensitive information via an invalid (1) language parameter to index.php, (2) PHPSESSID parameter to index.php, (3) product parameter to tellafriend.php, (4) add parameter to view_cart.php, or (5) product parameter to view_product.php, which reveals the path in a PHP error message.

cpe:/a:netwin:surgeftp:2.2k3 cpe:/a:netwin:surgeftp:2.2m1

CVE-2005-1034

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:30.407-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050407 [SIG^2 G-TEC] SurgeFTP LEAK Command Denial-Of-Service Vulnerability SECTRACK 1013664 MISC http://www.security.org.sg/vuln/surgeftp22m1.html BID 13054 XF surgeftp-leak-ftp-dos(20011) SurgeFTP 2.2m1 allows remote attackers to cause a denial of service (application hang) via the LEAK command.

cpe:/a:pavuk:pavuk:0.9.31 cpe:/a:pavuk:pavuk:0.9_pl28 cpe:/a:pavuk:pavuk:0.9_pl30b cpe:/a:pavuk:pavuk:0.9pl28i cpe:/a:pavuk:pavuk:0.928r1 cpe:/a:pavuk:pavuk:0.928r2

CVE-2005-1035

2005-04-05T00:00:00.000-04:00

2008-09-05T16:48:01.940-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-14T10:54:00.000-04:00

CONFIRM http://sourceforge.net/project/shownotes.php?release_id=313436 Multiple buffer overflows in Pavuk before 0.9.32 have unknown attack vectors and impact.

cpe:/o:freebsd:freebsd:5.0 cpe:/o:freebsd:freebsd:5.1 cpe:/o:freebsd:freebsd:5.2 cpe:/o:freebsd:freebsd:5.2.1 cpe:/o:freebsd:freebsd:5.3 cpe:/o:freebsd:freebsd:5.4

CVE-2005-1036

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:02.110-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-06-14T10:51:00.000-04:00

ALLOWS_ADMIN_ACCESS

FREEBSD FreeBSD-SA-05:03 FreeBSD 5.x to 5.4 on AMD64 does not properly initialize the IO permission bitmap used to allow user access to certain hardware, which allows local users to bypass intended access restrictions to cause a denial of service, obtain sensitive information, and possibly gain privileges.

cpe:/o:ibm:aix:5.3.0

CVE-2005-1037

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:02.267-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-06-14T10:53:00.000-04:00

ALLOWS_ADMIN_ACCESS

MISC http://www.niscc.gov.uk/niscc/docs/br-20050405-00278.html?lang=en AIXAPAR IY68825 Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges.

cpe:/a:paul_vixie:vixie_cron:4.1 cpe:/o:redhat:enterprise_linux:4.0::advanced_server cpe:/o:redhat:enterprise_linux:4.0::enterprise_server cpe:/o:redhat:enterprise_linux:4.0::workstation

CVE-2005-1038

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:02.623-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SGI 20060401-01-U CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2006-118.htm SUSE SUSE-SR:2007:007 REDHAT RHSA-2005:361 REDHAT RHSA-2006:0117 BUGTRAQ 20050406 crontab from vixie-cron allows read other users crontabs BID 13024 crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235.

cpe:/a:gnu:coreutils:5.2.1

CVE-2005-1039

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:02.580-04:00

3.7

LOCAL

HIGH

NONE

PARTIAL

http://nvd.nist.gov

2005-06-14T10:51:00.000-04:00

BID 13053 Race condition in Core Utilities (coreutils) 5.2.1, when (1) mkdir, (2) mknod, or (3) mkfifo is running with the -m switch, allows local users to modify permissions of other files.

cpe:/o:novell:linux_desktop:9

CVE-2005-1040

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:02.737-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-06-14T10:53:00.000-04:00

ALLOWS_ADMIN_ACCESS

SUSE SUSE-SR:2005:010 Multiple unknown vulnerabilities in netapplet in Novell Linux Desktop 9 allow local users to gain root privileges, related to "User input [being] passed to network scripts without verification."

cpe:/o:linux:linux_kernel:2.6.20.1

CVE-2005-1041

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:30.360-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov MLIST [bk-commits-head] 20050319 [PATCH] Fix crash while reading /proc/net/route REDHAT RHSA-2005:366 SUSE SUSE-SA:2005:068 FEDORA FLSA:157459-3 BID 13267 The fib_seq_start function in fib_hash.c in Linux kernel allows local users to cause a denial of service (system crash) via /proc/net/route.

CVE-2005-1042

2005-05-02T00:00:00.000-04:00

2018-10-30T12:25:35.387-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://cvs.php.net/diff.php/php-src/ext/exif/exif.c?r1=1.118.2.33&r2=1.118.2.34&ty=u APPLE APPLE-SA-2005-06-08 GENTOO GLSA-200504-15 MANDRAKE MDKSA-2005:072 REDHAT RHSA-2005:405 REDHAT RHSA-2005:406 CONFIRM https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=154021 UBUNTU USN-112-1 Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that leads to a negative byte count.

cpe:/a:php:php:4.3.0 cpe:/a:php:php:4.3.1 cpe:/a:php:php:4.3.2 cpe:/a:php:php:4.3.3 cpe:/a:php:php:4.3.4 cpe:/a:php:php:4.3.5 cpe:/a:php:php:4.3.6 cpe:/a:php:php:4.3.7 cpe:/a:php:php:4.3.8 cpe:/a:php:php:4.3.9 cpe:/a:php:php:4.3.10 cpe:/a:sgi:propack:3.0 cpe:/o:apple:mac_os_x:10.3.9 cpe:/o:apple:mac_os_x:10.4 cpe:/o:apple:mac_os_x:10.4.1 cpe:/o:apple:mac_os_x_server:10.3.9 cpe:/o:apple:mac_os_x_server:10.4 cpe:/o:apple:mac_os_x_server:10.4.1 cpe:/o:conectiva:linux:9.0 cpe:/o:conectiva:linux:10.0 cpe:/o:peachtree:peachtree_linux:release_1 cpe:/o:suse:suse_linux:1.0 cpe:/o:suse:suse_linux:2.0 cpe:/o:suse:suse_linux:3.0 cpe:/o:suse:suse_linux:4.0 cpe:/o:suse:suse_linux:4.2 cpe:/o:suse:suse_linux:4.3 cpe:/o:suse:suse_linux:4.4 cpe:/o:suse:suse_linux:4.4.1 cpe:/o:suse:suse_linux:5.0 cpe:/o:suse:suse_linux:5.1 cpe:/o:suse:suse_linux:5.2 cpe:/o:suse:suse_linux:5.3 cpe:/o:suse:suse_linux:6.0 cpe:/o:suse:suse_linux:6.1 cpe:/o:suse:suse_linux:6.1:alpha cpe:/o:suse:suse_linux:6.2 cpe:/o:suse:suse_linux:6.3 cpe:/o:suse:suse_linux:6.3::ppc cpe:/o:suse:suse_linux:6.3:alpha cpe:/o:suse:suse_linux:6.4 cpe:/o:suse:suse_linux:6.4::i386 cpe:/o:suse:suse_linux:6.4::ppc cpe:/o:suse:suse_linux:6.4:alpha cpe:/o:suse:suse_linux:7.0 cpe:/o:suse:suse_linux:7.0::i386 cpe:/o:suse:suse_linux:7.0::ppc cpe:/o:suse:suse_linux:7.0::sparc cpe:/o:suse:suse_linux:7.0:alpha cpe:/o:suse:suse_linux:7.1 cpe:/o:suse:suse_linux:7.1::spa cpe:/o:suse:suse_linux:7.1::sparc cpe:/o:suse:suse_linux:7.1::x86 cpe:/o:suse:suse_linux:7.1:alpha cpe:/o:suse:suse_linux:7.2 cpe:/o:suse:suse_linux:7.2::i386 cpe:/o:suse:suse_linux:7.3 cpe:/o:suse:suse_linux:7.3::i386 cpe:/o:suse:suse_linux:7.3::ppc cpe:/o:suse:suse_linux:7.3::sparc cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.0::i386 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.1::x86_64 cpe:/o:suse:suse_linux:9.2 cpe:/o:suse:suse_linux:9.2::x86_64 cpe:/o:suse:suse_linux:9.3

CVE-2005-1043

2005-04-14T00:00:00.000-04:00

2018-10-30T12:25:35.387-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://cvs.php.net/diff.php/php-src/ext/exif/exif.c?r1=1.118.2.29&r2=1.118.2.30&ty=u APPLE APPLE-SA-2005-06-08 GENTOO GLSA-200504-15 MANDRAKE MDKSA-2005:072 REDHAT RHSA-2005:406 CONFIRM https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=154025 UBUNTU USN-112-1 exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes significant stack recursion.

CVE-2005-1044

2005-05-02T00:00:00.000-04:00

2008-09-10T15:37:49.977-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0941. Reason: This candidate is a duplicate of CVE-2005-0941. Notes: All CVE users should reference CVE-2005-0941 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:centrinity:centrinity_firstclass_desktop_client:8.0

CVE-2005-1045

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:30.470-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050408 OpenText FirstClass 8.0 Client Arbitrary File Execution SECTRACK 1013665 BID 13079 XF firstclass-bookmark-command-execution(20032) OpenText FirstClass 8.0 client does not properly sanitize strings before passing them to the Windows ShellExecute API, which allows remote attackers to execute arbitrary commands via a UNC path in a bookmark.

cpe:/o:kde:kde:3.4.0

CVE-2005-1046

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:30.780-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MISC http://bugs.kde.org/show_bug.cgi?id=102328 SUNALERT 103170 SUNALERT 201320 DEBIAN DSA-714 CONFIRM http://www.kde.org/info/security/advisory-20050421-1.txt SUSE SUSE-SA:2005:022 REDHAT RHSA-2005:393 FEDORA FLSA:178606 BID 13096 VUPEN ADV-2005-0331 VUPEN ADV-2007-4241 Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file.

cpe:/a:phpbb_group:phpbb:2.0.0 cpe:/a:phpbb_group:phpbb:2.0.1 cpe:/a:phpbb_group:phpbb:2.0.2 cpe:/a:phpbb_group:phpbb:2.0.3 cpe:/a:phpbb_group:phpbb:2.0.4 cpe:/a:phpbb_group:phpbb:2.0.5 cpe:/a:phpbb_group:phpbb:2.0.6 cpe:/a:phpbb_group:phpbb:2.0.6c cpe:/a:phpbb_group:phpbb:2.0.6d cpe:/a:phpbb_group:phpbb:2.0.7 cpe:/a:phpbb_group:phpbb:2.0.7a cpe:/a:phpbb_group:phpbb:2.0.8 cpe:/a:phpbb_group:phpbb:2.0.8a cpe:/a:phpbb_group:phpbb:2.0.9 cpe:/a:phpbb_group:phpbb:2.0.10 cpe:/a:phpbb_group:phpbb:2.0.11 cpe:/a:phpbb_group:phpbb:2.0.12 cpe:/a:phpbb_group:phpbb:2.0.13 cpe:/a:phpbb_group:phpbb:2.0.14 cpe:/a:phpbb_group:phpbb:2.0_beta1 cpe:/a:phpbb_group:phpbb:2.0_rc1 cpe:/a:phpbb_group:phpbb:2.0_rc2 cpe:/a:phpbb_group:phpbb:2.0_rc3 cpe:/a:phpbb_group:phpbb:2.0_rc4

CVE-2005-1047

2005-04-07T00:00:00.000-04:00

2016-10-17T23:16:51.197-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050408 phpBB Upload Script "up.php" Arbitrary File Upload SECTRACK 1013671 Meilad File upload script (up.php) mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded, which allows remote authenticated users to execute arbitrary commands by uploading PHP files, then directly requesting them from the uploads directory.

cpe:/a:postnuke_software_foundation:postnuke:0.760_rc3

CVE-2005-1048

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:30.530-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050408 Sql injection, xss and path disclosure vulnerabilities in PostNuke 0.760-RC3 MISC http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2679 SECTRACK 1013670 XF postnuke-sid-sql-injection(20019) SQL injection vulnerability in modules.php in PostNuke 0.760 RC3 allows remote attackers to execute arbitrary SQL statements via the sid parameter. NOTE: the vendor reports that they could not reproduce the issues for 760 RC3, or for .750.

cpe:/a:postnuke_software_foundation:postnuke:0.760_rc3

CVE-2005-1049

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:30.593-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://cvs.postnuke.com/viewcvs.cgi/Historic_PostNuke_Library/postnuke-devel/html/user.php.diff?r1=1.18&r2=1.19 BUGTRAQ 20050408 Sql injection, xss and path disclosure vulnerabilities in PostNuke 0.760-RC3 MISC http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2679 SECTRACK 1013670 BID 13075 BID 13076 XF postnuke-adminphp-userphp-xss(20018) Multiple cross-site scripting vulnerabilities in PostNuke 0.760-RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) module parameter to admin.php or (2) op parameter to user.php. NOTE: the vendor reports that certain issues could not be reproduced for 760 RC3, or for .750. However, the op/user.php issue exists when the pnAntiCracker setting is disabled.

cpe:/a:postnuke_software_foundation:postnuke:0.760_rc3

CVE-2005-1050

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:30.657-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://digitalparadox.org/advisories/postnuke.txt BUGTRAQ 20050408 Sql injection, xss and path disclosure vulnerabilities in PostNuke 0.760-RC3 SECTRACK 1013670 XF postnuke-modules-full-path-disclosure(20020) The modload op in the Reviews module for PostNuke 0.760-RC3 allows remote attackers to obtain sensitive information via an invalid id parameter, which reveals the path in a PHP error message.

cpe:/a:punbb:punbb:1.0 cpe:/a:punbb:punbb:1.0.1 cpe:/a:punbb:punbb:1.0_alpha cpe:/a:punbb:punbb:1.0_beta1 cpe:/a:punbb:punbb:1.0_beta2 cpe:/a:punbb:punbb:1.0_beta3 cpe:/a:punbb:punbb:1.0_rc1 cpe:/a:punbb:punbb:1.0_rc2 cpe:/a:punbb:punbb:1.1 cpe:/a:punbb:punbb:1.1.1 cpe:/a:punbb:punbb:1.1.2 cpe:/a:punbb:punbb:1.1.3 cpe:/a:punbb:punbb:1.1.4 cpe:/a:punbb:punbb:1.1.5 cpe:/a:punbb:punbb:1.2.1 cpe:/a:punbb:punbb:1.2.2 cpe:/a:punbb:punbb:1.2.3 cpe:/a:punbb:punbb:1.2.4

CVE-2005-1051

2005-05-02T00:00:00.000-04:00

2016-10-17T23:16:56.480-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050408 PunBB <= 1.2.4 - change email to become admin exploit BID 13071 SQL injection vulnerability in profile.php in PunBB 1.2.4 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a change_email action.

cpe:/a:microsoft:outlook:2003 cpe:/a:microsoft:outlook_web_access:2003

CVE-2005-1052

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:30.703-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov IDEFENSE 20050408 Microsoft Multiple E-Mail Client Address Spoofing Vulnerability XF owa-email-spoofing(20026) Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From field in an e-mail message, which could allow remote attackers to spoof e-mail addresses.

cpe:/a:moderngigabyte:modernbill:4.3.0

CVE-2005-1053

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:30.750-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050410 Multiple ModernBill 4.3.0 And Earlier Vulnerabilities SECTRACK 1013672 XF modernbill-orderwiz-xss(20035) Multiple cross-site scripting (XSS) vulnerabilities in orderwiz.php in ModernBill 4.3.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) c_code or (2) aid parameters.

cpe:/a:moderngigabyte:modernbill:4.3.0

CVE-2005-1054

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:30.813-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050410 Multiple ModernBill 4.3.0 And Earlier Vulnerabilities SECTRACK 1013672 XF modernbill-news-file-include(20036) PHP remote file inclusion vulnerability in news.php in ModernBill 4.3.0 and earlier allows remote attackers to execute arbitrary PHP code by modifying the DIR parameter to reference a URL on a remote web server that contains the code.

cpe:/a:towerblog:towerblog:0.2 cpe:/a:towerblog:towerblog:0.4_r1 cpe:/a:towerblog:towerblog:0.6 cpe:/a:towerblog:towerblog:0.6_r1

CVE-2005-1055

2005-04-10T00:00:00.000-04:00

2017-07-10T21:32:30.860-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050410 TowerBlog <= 0.6 Admin Account View [x0n3-h4ck] SECTRACK 1013675 XF towerblog-datlogin-information-disclosure(20039) TowerBlog 0.6 and earlier stores the login data file under the web root, which allows remote attackers to obtain the MD5 checksums of the username and password via a direct request to the _dat/login file.

cpe:/a:hp:openview_network_node_manager:6.2 cpe:/a:hp:openview_network_node_manager:6.4 cpe:/a:hp:openview_network_node_manager:6.31 cpe:/a:hp:openview_network_node_manager:7.01 cpe:/a:hp:openview_network_node_manager:7.50

CVE-2005-1056

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:30.923-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1013651 HP HPSBMA01125 BID 13029 XF openview-network-node-manager-dos(19993) Unknown vulnerability in HP OpenView Network Node Manager (NMM) 6.2 through 6.4, and 7.01 through 7.50, allows remote attackers to cause a denial of service.

cpe:/o:cisco:ios:12.2t cpe:/o:cisco:ios:12.3 cpe:/o:cisco:ios:12.3t

CVE-2005-1057

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:02.967-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CISCO 20050406 Vulnerabilities in the Internet Key Exchange Xauth Implementation Cisco IOS 12.2T, 12.3 and 12.3T, when using Easy VPN Server XAUTH version 6 authentication, allows remote attackers to bypass authentication via a "malformed packet."

cpe:/o:cisco:ios:12.2t cpe:/o:cisco:ios:12.3 cpe:/o:cisco:ios:12.3t

CVE-2005-1058

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:03.107-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CISCO 20050406 Vulnerabilities in the Internet Key Exchange Xauth Implementation Cisco IOS 12.2T, 12.3 and 12.3T, when processing an ISAKMP profile that specifies XAUTH authentication after Phase 1 negotiation, may not process certain attributes in the ISAKMP profile that specifies XAUTH, which allows remote attackers to bypass XAUTH and move to Phase 2 negotiations.

cpe:/h:linksys:wet11 cpe:/h:linksys:wet11:1.4.3 cpe:/h:linksys:wet11:1.5.4

CVE-2005-1059

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:30.970-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20050407 Cisco Linksys WET11 Password Resetting Vulnerability BID 13051 XF linksys-wet11-security-bypass(20008) Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original password via the data parameter to changepw.html.

cpe:/o:novell:netware:6.0 cpe:/o:novell:netware:6.0:sp1 cpe:/o:novell:netware:6.0:sp2 cpe:/o:novell:netware:6.0:sp3 cpe:/o:novell:netware:6.5 cpe:/o:novell:netware:6.5:sp1 cpe:/o:novell:netware:6.5:sp1.1a cpe:/o:novell:netware:6.5:sp1.1b cpe:/o:novell:netware:6.5:sp2 cpe:/o:novell:netware:6.5:sp3

CVE-2005-1060

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:31.030-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 13067 XF novell-netware-tcpipnlm-dos(20024) Unknown vulnerability in the TCP/IP functionality (TCPIP.NLM) in Novell Netware 6.x allows remote attackers to cause a denial of service (ABEND by Page Fault Processor Exception) via certain packets.

cpe:/a:logwatch:logwatch:2.6.2 cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:linux_advanced_workstation:2.1::itanium

CVE-2005-1061

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:06.237-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-14T11:46:00.000-04:00

REDHAT RHSA-2005:364 CONFIRM https://bugzilla.redhat.com/bugzilla-old/show_bug.cgi?id=137502 The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via certain strings in the secure file that are later used as part of a regular expression, which causes the parser to crash, aka "logwatch log processing regular expression DoS."

cpe:/a:kerio:kerio_mailserver:6.0.0 cpe:/a:kerio:kerio_mailserver:6.0.1 cpe:/a:kerio:kerio_mailserver:6.0.2 cpe:/a:kerio:kerio_mailserver:6.0.3 cpe:/a:kerio:kerio_mailserver:6.0.4 cpe:/a:kerio:kerio_mailserver:6.0.5 cpe:/a:kerio:kerio_mailserver:6.0.6 cpe:/a:kerio:kerio_mailserver:6.0.7 cpe:/a:kerio:kerio_mailserver:6.0.8 cpe:/a:kerio:personal_firewall:4.0.7 cpe:/a:kerio:personal_firewall:4.0.8 cpe:/a:kerio:personal_firewall:4.0.9 cpe:/a:kerio:personal_firewall:4.0.10 cpe:/a:kerio:personal_firewall:4.0.11 cpe:/a:kerio:personal_firewall:4.0.12 cpe:/a:kerio:personal_firewall:4.0.13 cpe:/a:kerio:personal_firewall:4.0.14 cpe:/a:kerio:personal_firewall:4.0.15 cpe:/a:kerio:personal_firewall:4.0.16 cpe:/a:kerio:personal_firewall:4.1.0 cpe:/a:kerio:personal_firewall:4.1.1 cpe:/a:kerio:personal_firewall:4.1.2 cpe:/a:kerio:winroute_firewall:6.0.0 cpe:/a:kerio:winroute_firewall:6.0.1 cpe:/a:kerio:winroute_firewall:6.0.2 cpe:/a:kerio:winroute_firewall:6.0.3 cpe:/a:kerio:winroute_firewall:6.0.4 cpe:/a:kerio:winroute_firewall:6.0.5 cpe:/a:kerio:winroute_firewall:6.0.6 cpe:/a:kerio:winroute_firewall:6.0.7 cpe:/a:kerio:winroute_firewall:6.0.8 cpe:/a:kerio:winroute_firewall:6.0.9 cpe:/a:kerio:winroute_firewall:6.0.10

CVE-2005-1062

2005-05-02T00:00:00.000-04:00

2011-03-07T21:21:01.907-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-14T11:57:00.000-04:00

ALLOWS_OTHER_ACCESS

MISC http://research.tic.udc.es/scg/advisories/20050429-1.txt CONFIRM http://www.kerio.com/security_advisory.html BUGTRAQ 20050429 [CAN-2005-1062] Administration protocol abuse allows local/remote password cracking The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods.

cpe:/a:kerio:kerio_mailserver:6.0 cpe:/a:kerio:kerio_mailserver:6.0.1 cpe:/a:kerio:kerio_mailserver:6.0.2 cpe:/a:kerio:kerio_mailserver:6.0.3 cpe:/a:kerio:kerio_mailserver:6.0.4 cpe:/a:kerio:kerio_mailserver:6.0.5 cpe:/a:kerio:personal_firewall:4.0.6 cpe:/a:kerio:personal_firewall:4.0.7 cpe:/a:kerio:personal_firewall:4.0.8 cpe:/a:kerio:personal_firewall:4.0.9 cpe:/a:kerio:personal_firewall:4.0.10 cpe:/a:kerio:personal_firewall:4.0.16 cpe:/a:kerio:personal_firewall:4.1 cpe:/a:kerio:personal_firewall:4.1.1 cpe:/a:kerio:personal_firewall:4.1.2 cpe:/a:kerio:winroute_firewall:6.0 cpe:/a:kerio:winroute_firewall:6.0.1 cpe:/a:kerio:winroute_firewall:6.0.2 cpe:/a:kerio:winroute_firewall:6.0.3 cpe:/a:kerio:winroute_firewall:6.0.4 cpe:/a:kerio:winroute_firewall:6.0.5 cpe:/a:kerio:winroute_firewall:6.0.6 cpe:/a:kerio:winroute_firewall:6.0.7 cpe:/a:kerio:winroute_firewall:6.0.8 cpe:/a:kerio:winroute_firewall:6.0.9

CVE-2005-1063

2005-04-29T00:00:00.000-04:00

2008-09-05T16:48:06.627-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-14T11:56:00.000-04:00

CONFIRM http://www.kerio.com/security_advisory.html BUGTRAQ 20050429 [CAN-2005-1063] Administration protocol abuse leads to Service and System Denial of Service The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to cause a denial of service (CPU consumption) via certain attacks that force the product to "compute unexpected conditions" and "perform cryptographic operations."

cpe:/a:rsnapshot:filesystem_snapshot_utility:1.0.10 cpe:/a:rsnapshot:filesystem_snapshot_utility:1.1 cpe:/a:rsnapshot:filesystem_snapshot_utility:1.1.1 cpe:/a:rsnapshot:filesystem_snapshot_utility:1.1.2 cpe:/a:rsnapshot:filesystem_snapshot_utility:1.1.3 cpe:/a:rsnapshot:filesystem_snapshot_utility:1.1.4 cpe:/a:rsnapshot:filesystem_snapshot_utility:1.1.5 cpe:/a:rsnapshot:filesystem_snapshot_utility:1.1.6 cpe:/a:rsnapshot:filesystem_snapshot_utility:1.2

CVE-2005-1064

2005-04-10T00:00:00.000-04:00

2016-10-17T23:17:01.527-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20050410 rsnapshot Security Advisory 001 SECTRACK 1013674 GENTOO GLSA-200504-12 CONFIRM http://www.rsnapshot.org/security/2005/001.html The copy_symlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points to rather than the symlink itself, which allows local users to obtain access to arbitrary files.

cpe:/o:novell:linux_desktop:9

CVE-2005-1065

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:07.003-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-14T12:00:00.000-04:00

SUSE SUSE-SR:2005:010 BID 13072 tetex in Novell Linux Desktop 9 allows local users to determine the existence of arbitrary files via a symlink attack in the /var/cache/fonts directory.

cpe:/a:university_of_washington:pine:4.62

CVE-2005-1066

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:07.157-04:00

1.2

LOCAL

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-14T12:09:00.000-04:00

BUGTRAQ 20050411 rpdump TOCTOU file-permissions vulnerability Race condition in rpdump in Pine 4.62 and earlier allows local users to overwrite arbitrary files via a symlink attack.

cpe:/a:access_user_class:access_user_class:1.6

CVE-2005-1067

2005-04-08T00:00:00.000-04:00

2008-09-05T16:48:07.313-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-14T12:20:00.000-04:00

ALLOWS_OTHER_ACCESS

CONFIRM http://freshmeat.net/projects/access_user/?branch_id=53852&release_id=192770 Vulnerability in Access_user Class before 1.75 allows local users to gain access as other users via the password "new".

CVE-2005-1068

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:31.093-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013659 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=318346 BID 13041 XF scssboard-url-tag-xss(20021) Cross-site scripting (XSS) vulnerability in sCssBoard 1.11 and earlier allows remote attackers to execute arbitrary Javascript via [url] tags.

CVE-2005-1069

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:31.140-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1013659 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=318346 XF scssboard-profile-unknown(20022) Unknown vulnerability in sCssBoard 1.11 and earlier has unknown impact, related to "an exploit on the Profile page."

CVE-2005-1070

2005-04-11T00:00:00.000-04:00

2017-07-10T21:32:31.187-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050411 Invision board 1.3.1 and below are vulnerable to a sql injection vulnerability [PATCH INCLUDED] BID 13097 SECTRACK 1013676 XF invision-memberlist-sql-injection(20059) SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to execute arbitrary SQL commands via the st parameter.

CVE-2005-1071

2005-04-12T00:00:00.000-04:00

2016-10-17T23:17:02.917-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050412 Sql injection in jPortal version 2.3.1 (module banner) SQL injection vulnerability in banner.inc.php in JPortal Web Portal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the haslo parameter.

CVE-2005-1072

2005-04-08T00:00:00.000-04:00

2008-09-05T16:48:08.097-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-14T12:45:00.000-04:00

CONFIRM http://www.punbb.org/ Cross-site scripting (XSS) vulnerability in PunBB before 1.2.5 allows remote attackers to inject arbitrary web script or HTML.

cpe:/a:radscripts:radbids:2::gold

CVE-2005-1073

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:31.233-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050409 Directory transversal, sql injection and xss vulnerabilities in RadBids Gold v2 BID 13080 XF radbids-gold-php-xss(20038) Directory traversal vulnerability in index.php for RadScripts RadBids Gold 2 allows remote attackers to read arbitrary files via the read parameter.

cpe:/a:radscripts:radbids:2::gold

CVE-2005-1074

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:31.297-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050409 Directory transversal, sql injection and xss vulnerabilities in RadBids Gold v2 BID 13080 XF radbids-gold-index-sql-injection(20040) SQL injection vulnerability in index.php for RadScripts RadBids Gold 2 allows remote attackers to execute arbitrary SQL commands via the mode parameter.

cpe:/a:radscripts:radbids:2::gold

CVE-2005-1075

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:31.343-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050409 Directory transversal, sql injection and xss vulnerabilities in RadBids Gold v2 BID 13080 XF radbids-gold-php-xss(20038) Multiple cross-site scripting (XSS) vulnerabilities in RadScripts RadBids Gold 2 allow remote attackers to inject arbitrary web script or HTML via (1) the farea parameter to faq.php or the (2) cat, (3) order, or (4) area parameters to index.php.

cpe:/a:webct:webct:campus_4.1

CVE-2005-1076

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:08.750-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-14T13:03:00.000-04:00

BUGTRAQ 20050411 WebCT 4.1 vulnerable to XSS attacks BID 13101 Cross-site scripting (XSS) vulnerability in the discussion board functionality for WebCT Campus Edition 4.1 allows remote attackers to inject arbitrary web script or HTML via the message field.

cpe:/a:xampp:apache_distribution:0.1::solaris cpe:/a:xampp:apache_distribution:0.2::solaris cpe:/a:xampp:apache_distribution:0.3::solaris cpe:/a:xampp:apache_distribution:1.4.1 cpe:/a:xampp:apache_distribution:1.4.2 cpe:/a:xampp:apache_distribution:1.4.3 cpe:/a:xampp:apache_distribution:1.4.4 cpe:/a:xampp:apache_distribution:1.4.5 cpe:/a:xampp:apache_distribution:1.4.6 cpe:/a:xampp:apache_distribution:1.4.7 cpe:/a:xampp:apache_distribution:1.4.8 cpe:/a:xampp:apache_distribution:1.4.9 cpe:/a:xampp:apache_distribution:1.4.10 cpe:/a:xampp:apache_distribution:1.4.10a cpe:/a:xampp:apache_distribution:1.4.11 cpe:/a:xampp:apache_distribution:1.4.12 cpe:/a:xampp:apache_distribution:1.4.13

CVE-2005-1077

2005-04-12T00:00:00.000-04:00

2016-10-17T23:17:04.183-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20050412 XAMPP BID 13126 BID 13127 BID 13128 Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.4.x allow remote attackers to inject arbitrary web script or HTML via (1) cds.php, (2) Guestbook-EN.pl, or (3) phonebook.php.

CVE-2005-1078

2005-04-12T00:00:00.000-04:00

2016-10-17T23:17:05.497-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20050412 XAMPP BID 13131 XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges.

CVE-2005-1079

2005-05-02T00:00:00.000-04:00

2016-10-17T23:17:06.810-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050413 zOOM Media Gallery - Simple SQL Injection discovery MISC http://www.securiteam.com/unixfocus/5LP0G0AFFY.html SQL injection vulnerability in index.php for zOOm Media Gallery 2.1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter.

cpe:/a:sun:sdk:1.4.2 cpe:/a:sun:sdk:1.5

CVE-2005-1080

2005-05-02T00:00:00.000-04:00

2017-01-02T21:59:00.407-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0158.html BUGTRAQ 20050412 7a69Adv#23 - Jar tool directory transversal vulnerability MLIST [oss-security] 20100608 jar, fastjar directory traversal vulnerabilities MLIST [oss-security] 20100608 Re: jar, fastjar directory traversal vulnerabilities REDHAT RHSA-2015:0806 REDHAT RHSA-2015:0807 REDHAT RHSA-2015:0808 REDHAT RHSA-2015:0809 REDHAT RHSA-2015:0854 REDHAT RHSA-2015:0857 REDHAT RHSA-2015:0858 REDHAT RHSA-2015:1006 REDHAT RHSA-2015:1007 REDHAT RHSA-2015:1020 REDHAT RHSA-2015:1021 REDHAT RHSA-2015:1091 MANDRIVA MDVSA-2015:212 MISC http://www.securiteam.com/securitynews/5IP0C0AFGW.html BID 13083 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=594497 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=601823 Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in filenames in a .jar file.

cpe:/a:azerbaijan_development_group:azdgdating:1.1.0::platinum

CVE-2005-1081

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:31.390-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050409 AzDGDatingPlatinum multiple vulnerabilities BID 13082 XF azdgdating-platinum-viewphp-xss(20052) Cross-site scripting (XSS) vulnerability in view.php in AzDGDatingPlatinum 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

cpe:/a:azerbaijan_development_group:azdgdating:1.1.0::platinum

CVE-2005-1082

2005-04-09T00:00:00.000-04:00

2018-10-19T11:31:31.563-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050409 AzDGDatingPlatinum multiple vulnerabilities BUGTRAQ 20060628 AzDGDatingPlatinum<<--v1.1.0 "view.php" SQL Injection BID 13082 XF azdgdating-platinum-sql-injection(20051) XF azdgdatingplatinum-view-sql-injection(27436) Multiple SQL injection vulnerabilities in AzDGDatingPlatinum 1.1.0 allows remote attackers to execute arbitrary SQL commands via (1) the id parameter to view.php or (2) the from parameter to members/index.php.

cpe:/a:aewebworks:aedating:3.2

CVE-2005-1083

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:09.877-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-14T13:36:00.000-04:00

index.php in aeDating 3.2 allows remote attackers to include arbitrary files via the skin parameter.

cpe:/a:aewebworks:aedating:3.2

CVE-2005-1084

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:10.033-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-14T13:37:00.000-04:00

ALLOWS_OTHER_ACCESS

SQL injection vulnerability in sdating.php in aeDating 3.2 allows remote attackers to execute arbitrary SQL commands files via the event parameter.

CVE-2005-1085

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:10.190-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-14T13:38:00.000-04:00

Cross-site scripting (XSS) vulnerability in the control panel in aeDating 3.2 allows remote attackers to inject arbitrary web script or HTML.

cpe:/a:an:an-httpd:1.42n

CVE-2005-1086

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:31.500-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1013666 MISC http://www.security.org.sg/vuln/anhttpd142n.html BID 13066 XF an-httpd-cmdisdll-bo(20029) Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with a long User-Agent header.

cpe:/a:an:an-httpd:1.42n

CVE-2005-1087

2005-04-07T00:00:00.000-04:00

2017-07-10T21:32:31.547-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013666 MISC http://www.security.org.sg/vuln/anhttpd142n.html XF an-httpd-logfile-character-injection(20031) CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.

cpe:/a:dameware_development:mini_remote_control:3.70 cpe:/a:dameware_development:mini_remote_control:3.71 cpe:/a:dameware_development:mini_remote_control:3.72 cpe:/a:dameware_development:mini_remote_control:3.73 cpe:/a:dameware_development:mini_remote_control:3.74 cpe:/a:dameware_development:mini_remote_control:4.0 cpe:/a:dameware_development:mini_remote_control:4.1 cpe:/a:dameware_development:mini_remote_control:4.2 cpe:/a:dameware_development:mini_remote_control:4.3 cpe:/a:dameware_development:mini_remote_control:4.4 cpe:/a:dameware_development:mini_remote_control:4.5 cpe:/a:dameware_development:mini_remote_control:4.6 cpe:/a:dameware_development:mini_remote_control:4.7 cpe:/a:dameware_development:mini_remote_control:4.8 cpe:/a:dameware_development:nt_utilities:3.0.0.0 cpe:/a:dameware_development:nt_utilities:3.1.0.0 cpe:/a:dameware_development:nt_utilities:3.2.0.0 cpe:/a:dameware_development:nt_utilities:3.21.0.0 cpe:/a:dameware_development:nt_utilities:3.41.0.0 cpe:/a:dameware_development:nt_utilities:3.42.0.0 cpe:/a:dameware_development:nt_utilities:3.43.0.0 cpe:/a:dameware_development:nt_utilities:3.44.0.0 cpe:/a:dameware_development:nt_utilities:3.45.0.0 cpe:/a:dameware_development:nt_utilities:3.46.0.0 cpe:/a:dameware_development:nt_utilities:3.48.0.0 cpe:/a:dameware_development:nt_utilities:3.49 cpe:/a:dameware_development:nt_utilities:3.50 cpe:/a:dameware_development:nt_utilities:3.51 cpe:/a:dameware_development:nt_utilities:3.60.0.0 cpe:/a:dameware_development:nt_utilities:3.61.0.0 cpe:/a:dameware_development:nt_utilities:3.62.0.0 cpe:/a:dameware_development:nt_utilities:3.63.0.0 cpe:/a:dameware_development:nt_utilities:3.64.0.0 cpe:/a:dameware_development:nt_utilities:3.65.0.0 cpe:/a:dameware_development:nt_utilities:3.66.0.0 cpe:/a:dameware_development:nt_utilities:3.67 cpe:/a:dameware_development:nt_utilities:3.68.0.0 cpe:/a:dameware_development:nt_utilities:3.69 cpe:/a:dameware_development:nt_utilities:3.70 cpe:/a:dameware_development:nt_utilities:3.71.0.0 cpe:/a:dameware_development:nt_utilities:3.72.0.0 cpe:/a:dameware_development:nt_utilities:3.73.0.0 cpe:/a:dameware_development:nt_utilities:3.74.0.0 cpe:/a:dameware_development:nt_utilities:4.0 cpe:/a:dameware_development:nt_utilities:4.1 cpe:/a:dameware_development:nt_utilities:4.2 cpe:/a:dameware_development:nt_utilities:4.3 cpe:/a:dameware_development:nt_utilities:4.4 cpe:/a:dameware_development:nt_utilities:4.5 cpe:/a:dameware_development:nt_utilities:4.6 cpe:/a:dameware_development:nt_utilities:4.7 cpe:/a:dameware_development:nt_utilities:4.8

CVE-2005-1088

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:31.610-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1013653 CONFIRM http://www.dameware.com/support/security/bulletin.asp?ID=SB5 BID 13023 XF dameware-elevated-privileges(19997) Unknown vulnerability in DameWare NT Utilities 4.8 and earlier, and Mini Remote Control 4.8 and earlier, allows local users to gain additional rights.

cpe:/a:dc%2b%2b:dc%2b%2b:0.673

CVE-2005-1089

2005-04-11T00:00:00.000-04:00

2008-09-05T16:48:10.907-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-14T14:20:00.000-04:00

CONFIRM http://dcplusplus.sourceforge.net/index.php?t=8&s=1 Unknown vulnerability in DC++ before 0.674 allows attackers to append data to arbitrary files.

cpe:/a:maxthon:maxthon:1.2.0 cpe:/a:maxthon:maxthon:1.2.1

CVE-2005-1090

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:31.673-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.raffon.net/advisories/maxthon/multvulns.html BID 13074 XF maxthon-directory-traversal(20033) Directory traversal vulnerability in the readFile and writeFile API for Maxthon 1.2.0 and 1.2.1 allows remote attackers to read or write arbitrary files.

CVE-2005-1091

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:11.220-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-14T14:05:00.000-04:00

ALLOWS_OTHER_ACCESS

MISC http://www.raffon.net/advisories/maxthon/multvulns.html BID 13073 Maxthon 1.2.0 and 1.2.1 allows remote attackers to bypass the security ID and use restricted plugin API functions via script that includes the max.src file into the source page.

cpe:/a:light_speed_technology:deluxeftp:6.0.1 cpe:/a:light_speed_technology:deluxeftp:7.0.1_beta

CVE-2005-1092

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:11.360-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-06-14T14:18:00.000-04:00

ALLOWS_ADMIN_ACCESS

MISC http://lostmon.blogspot.com/2005/04/deluxeftp-plain-text-passwords.html BID 13105 Lightspeed DeluxeFTP 6.01 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges.

cpe:/a:popup_plus_plugin:popup_plus_plugin_for_miranda_im:2.0.3.8

CVE-2005-1093

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:31.733-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://forums.miranda-im.org/showthread.php?p=9624 MISC http://forums.miranda-im.org/showthread.php?t=1070 MISC http://sec.org.il/coverages.php?c=89 SECTRACK 1013661 CONFIRM http://www.miranda-im.org/ BID 13048 XF popupplus-message-bo(20013) Buffer overflow in the PopUp Plus 2.0.3.8 plugin for Miranda IM, with "Use SmileyAdd Setting" enabled, allows remote attackers to execute arbitrary code.

CVE-2005-1094

2005-04-08T00:00:00.000-04:00

2017-07-10T21:32:31.780-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1013657 XF ftpnow-sites-information-disclosure(20025) FTP Now 2.6.14 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges.

cpe:/a:ocean12_technologies:membership_manager_pro

CVE-2005-1095

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:31.827-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013667 MISC http://www.hackerscenter.com/archive/view.asp?id=1865 BID 13046 XF ocean12-membershipmgr-mainasp-xss(20014) Cross-site scripting (XSS) vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to inject arbitrary web script or HTML via the page parameter.

cpe:/a:ocean12_technologies:membership_manager_pro

CVE-2005-1096

2005-04-06T00:00:00.000-04:00

2017-07-10T21:32:31.890-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1013667 MISC http://www.hackerscenter.com/archive/view.asp?id=1865 BID 13049 XF ocean12-membershipmgr-mainasp-sql-injection(20015) SQL injection vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to execute arbitrary SQL commands via the UserID parameter.

cpe:/a:rebrand:p2p_share_spy:2.2

CVE-2005-1097

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:12.157-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-14T14:40:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1013673 Rebrand P2P Share Spy 2.2 stores the user password in plaintext in the txtPassword value in the registry, which allows local users to gain privileges.

cpe:/a:runtime_software:getdataback_for_ntfs:2.31

CVE-2005-1098

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:31.937-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013644 XF getdataback-ntfs-information-disclosure(19967) GetDataBack for NTFS 2.31 stores the username and license key in plaintext in the Name value in the License registry key, which may allow local users to obtain sensitive information.

cpe:/a:salim_gasmi:gld:1.0 cpe:/a:salim_gasmi:gld:1.1 cpe:/a:salim_gasmi:gld:1.2 cpe:/a:salim_gasmi:gld:1.3 cpe:/a:salim_gasmi:gld:1.3.1 cpe:/a:salim_gasmi:gld:1.4

CVE-2005-1099

2005-04-12T00:00:00.000-04:00

2017-07-10T21:32:31.983-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20050412 GLD (Greylisting daemon for Postfix) multiple vulnerabilities. BUGTRAQ 20050413 Gld 1.5 released (security fix) GENTOO GLSA-200504-10 SECTRACK 1013678 CONFIRM http://www.gasmi.net/down/gld-history XF gld-serverc-bo(20066) Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is listening on a network interface, allow remote attackers to execute arbitrary code.

cpe:/a:salim_gasmi:gld:1.3 cpe:/a:salim_gasmi:gld:1.4

CVE-2005-1100

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:32.047-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050412 GLD (Greylisting daemon for Postfix) multiple vulnerabilities. GENTOO GLSA-200504-10 SECTRACK 1013678 XF gld-cnfc-format-string(20067) Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is passed directly to syslog.

cpe:/a:ibm:lotus_domino_server:6.0.5 cpe:/a:ibm:lotus_domino_server:6.5.4

CVE-2005-1101

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:32.093-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050412 Remote Buffer Overflow in Lotus Domino MISC http://www.ngssoftware.com/advisories/lotus-01.txt CONFIRM http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202431 XF lotus-timedate-bo(20042) Multiple buffer overflows in Lotus Domino Server 6.0.5 and 6.5.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via large amounts of data in certain (1) time or (2) date fields.

cpe:/a:wordpress:wordpress:1.5

CVE-2005-1102

2005-05-02T00:00:00.000-04:00

2016-10-17T23:17:12.797-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=88926 BUGTRAQ 20050412 WordPress XSS and HTML injection GENTOO GLSA-200506-04 MISC http://wordpress.org/support/topic.php?id=30721 Multiple cross-site scripting (XSS) vulnerabilities in template-functions-post.php in WordPress 1.5 and earlier allow remote attackers to execute arbitrary commands via the (1) content or (2) title of the post.

cpe:/a:sygate_technologies:security_agent:3.5_build_2576 cpe:/a:sygate_technologies:security_agent:3.5_build_2577 cpe:/a:sygate_technologies:security_agent:4.0 cpe:/a:sygate_technologies:security_agent:4.1

CVE-2005-1103

2005-04-12T00:00:00.000-04:00

2016-10-17T23:17:13.873-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050412 IRM 011: Sygate,Security Agent (Sygate Secure Enterprise) Fail Open Sygate Security Agent (SSA) in Sygate Secure Enterprise 3.5 through 4.1 does not prevent the security policy from being updated by unprivileged users, which allows local users to modify the policy by exporting the policy file, changing it, and importing it back into SSA.

cpe:/a:centra:centra:7

CVE-2005-1104

2005-05-02T00:00:00.000-04:00

2016-10-17T23:17:15.420-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050412 Centra 7 XSS Exploit Multiple cross-site scripting (XSS) vulnerabilities in Centra 7 allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) first name, or (3) last name fields.

cpe:/a:sun:javamail:1.3.2

CVE-2005-1105

2005-05-02T00:00:00.000-04:00

2016-10-17T23:17:16.530-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050412 JavaMail allows directory traversal in attachments Directory traversal vulnerability in the MimeBodyPart.getFileName method in JavaMail 1.3.2 allows remote attackers to write arbitrary files via a .. (dot dot) in the filename in the Content-Disposition header.

cpe:/a:apple:quicktime_pictureviewer:6.5.2

CVE-2005-1106

2005-05-02T00:00:00.000-04:00

2016-10-17T23:17:17.593-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050413 QuickTime for Windows malformed GIF DoS PictureViewer in QuickTime for Windows 6.5.2 allows remote attackers to cause a denial of service (application crash) via a GIF image with the maximum depth start value, possibly triggering an integer overflow.

cpe:/a:mcafee:internet_security_suite:2005

CVE-2005-1107

2005-04-18T00:00:00.000-04:00

2008-09-05T16:48:13.767-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-06-14T15:25:00.000-04:00

ALLOWS_ADMIN_ACCESS

IDEFENSE 20050418 McAfee Internet Security Suite 2005 Insecure File Permission Vulnerability McAfee Internet Security Suite 2005 uses insecure default ACLs for installed files, which allows local users to gain privileges or disable protection by modifying certain files.

cpe:/a:junkbuster:internet_junkbuster:2.0.2_r2

CVE-2005-1108

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:32.157-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://bugs.gentoo.org/show_bug.cgi?id=88537 DEBIAN DSA-713 GENTOO GLSA-200504-11 BID 13147 XF junkbuster-ijuntrustedurl-gain-access(20093) The ij_untrusted_url function in JunkBuster 2.0.2-r2, with single-threaded mode enabled, allows remote attackers to overwrite the referrer field via a crafted HTTP request.

cpe:/a:junkbuster:internet_junkbuster:2.0.1 cpe:/a:junkbuster:internet_junkbuster:2.0.2 cpe:/a:junkbuster:internet_junkbuster:2.0.2_r2

CVE-2005-1109

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:32.220-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MISC http://bugs.gentoo.org/show_bug.cgi?id=88537 DEBIAN DSA-713 GENTOO GLSA-200504-11 BID 13146 XF junkbuster-heap-corruption(20094) The filtering of URLs in JunkBuster before 2.0.2-r3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via heap corruption.

cpe:/a:sumus:sumus:0.2.2

CVE-2005-1110

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:32.267-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050414 sumus[v0.2.2]: (httpd) remote buffer overflow exploit. SECTRACK 1013717 XF sumus-respondehttppendiente-bo(20110) Stack-based buffer overflow in the RespondeHTTPPendiente function in the HTTP server for SUMUS 0.2.2 allows remote attackers to execute arbitrary code via a large packet sent to TCP port 81.

cpe:/a:gnu:cpio:1.0 cpe:/a:gnu:cpio:1.1 cpe:/a:gnu:cpio:1.2 cpe:/a:gnu:cpio:1.3 cpe:/a:gnu:cpio:2.4-2 cpe:/a:gnu:cpio:2.5 cpe:/a:gnu:cpio:2.5.90 cpe:/a:gnu:cpio:2.6

CVE-2005-1111

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:03.170-04:00

3.7

LOCAL

HIGH

NONE

PARTIAL

http://nvd.nist.gov FREEBSD FreeBSD-SA-06:03 SCO SCOSA-2006.2 SCO SCOSA-2005.32 SUSE SUSE-SR:2006:010 BUGTRAQ 20050413 cpio TOCTOU file-permissions vulnerability DEBIAN DSA-846 REDHAT RHSA-2005:378 REDHAT RHSA-2005:806 BID 13159 UBUNTU USN-189-1 Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete.

cpe:/a:ibm:websphere_application_server:5.0 cpe:/a:ibm:websphere_application_server:5.0.1 cpe:/a:ibm:websphere_application_server:5.0.2 cpe:/a:ibm:websphere_application_server:5.0.2.1 cpe:/a:ibm:websphere_application_server:5.0.2.3 cpe:/a:ibm:websphere_application_server:5.0.2.4 cpe:/a:ibm:websphere_application_server:5.0.2.5 cpe:/a:ibm:websphere_application_server:5.0.2.6 cpe:/a:ibm:websphere_application_server:5.0.2.7 cpe:/a:ibm:websphere_application_server:5.0.2.8 cpe:/a:ibm:websphere_application_server:5.0.2.9 cpe:/a:ibm:websphere_application_server:5.1.0 cpe:/a:ibm:websphere_application_server:5.1.0.2 cpe:/a:ibm:websphere_application_server:5.1.0.4 cpe:/a:ibm:websphere_application_server:5.1.0.5 cpe:/a:ibm:websphere_application_server:5.1.1 cpe:/a:ibm:websphere_application_server:5.1.1.1 cpe:/a:ibm:websphere_application_server:5.1.1.2 cpe:/a:ibm:websphere_application_server:5.1.1.3 cpe:/a:ibm:websphere_application_server:6.0

CVE-2005-1112

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:32.313-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050413 IBM WebSphere Widespread configuration JSP disclosure SECTRACK 1013697 BID 13160 XF ibm-websphere-information-disclosure(20099) IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via an HTTP request with an invalid Host header, which causes the page to be processed by the web server instead of the JSP engine.

cpe:/a:phpbb_group:phpbb_plus:1.3 cpe:/a:phpbb_group:phpbb_plus:1.51 cpe:/a:phpbb_group:phpbb_plus:1.52

CVE-2005-1113

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:32.377-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050413 Multiple Sql injection and XSS vulnerabilities in phpBB Plus and below and some of its modules XF phpbb-multiple-modules-xss(20085) Multiple cross-site scripting (XSS) vulnerabilities in PhpBB Plus 1.52 and earlier allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) groupcp.php, (2) index.php, (3) portal.php, (4) viewforum.php, or (5) viewtopic.php, (6) the c parameter to index.php, or (7) the article parameter to portal.php.

cpe:/a:phpbb_group:phpbb:2.0.0 cpe:/a:phpbb_group:phpbb:2.0.1 cpe:/a:phpbb_group:phpbb:2.0.2 cpe:/a:phpbb_group:phpbb:2.0.3 cpe:/a:phpbb_group:phpbb:2.0.4 cpe:/a:phpbb_group:phpbb:2.0.5 cpe:/a:phpbb_group:phpbb:2.0.6 cpe:/a:phpbb_group:phpbb:2.0.6c cpe:/a:phpbb_group:phpbb:2.0.6d cpe:/a:phpbb_group:phpbb:2.0.7 cpe:/a:phpbb_group:phpbb:2.0.7a cpe:/a:phpbb_group:phpbb:2.0.8 cpe:/a:phpbb_group:phpbb:2.0.8a cpe:/a:phpbb_group:phpbb:2.0.9 cpe:/a:phpbb_group:phpbb:2.0.10 cpe:/a:phpbb_group:phpbb:2.0.11 cpe:/a:phpbb_group:phpbb:2.0.12 cpe:/a:phpbb_group:phpbb:2.0.13 cpe:/a:smartor:photo_album:2.0.53

CVE-2005-1114

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:32.423-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050413 Multiple Sql injection and XSS vulnerabilities in phpBB Plus and below and some of its modules MISC http://www.digitalparadox.org/advisories/phpbbp.txt BID 13155 XF phpbb-multiple-modules-sql-injection(20086) Multiple SQL injection vulnerabilities in album_search.php in Photo Album 2.0.53 for phpBB allow remote attackers to execute arbitrary SQL commands via the (1) mode or (2) search parameters.

cpe:/a:phpbb_group:phpbb:2.0.0 cpe:/a:phpbb_group:phpbb:2.0.1 cpe:/a:phpbb_group:phpbb:2.0.2 cpe:/a:phpbb_group:phpbb:2.0.3 cpe:/a:phpbb_group:phpbb:2.0.4 cpe:/a:phpbb_group:phpbb:2.0.5 cpe:/a:phpbb_group:phpbb:2.0.6 cpe:/a:phpbb_group:phpbb:2.0.6c cpe:/a:phpbb_group:phpbb:2.0.6d cpe:/a:phpbb_group:phpbb:2.0.7 cpe:/a:phpbb_group:phpbb:2.0.7a cpe:/a:phpbb_group:phpbb:2.0.8 cpe:/a:phpbb_group:phpbb:2.0.8a cpe:/a:phpbb_group:phpbb:2.0.9 cpe:/a:phpbb_group:phpbb:2.0.10 cpe:/a:phpbb_group:phpbb:2.0.11 cpe:/a:phpbb_group:phpbb:2.0.12 cpe:/a:phpbb_group:phpbb:2.0.13 cpe:/a:smartor:photo_album:2.0.53

CVE-2005-1115

2005-05-02T00:00:00.000-04:00

2016-10-17T23:17:25.157-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050413 Multiple Sql injection and XSS vulnerabilities in phpBB Plus and below and some of its modules BID 13157 BID 13158 Multiple cross-site scripting (XSS) vulnerabilities in Photo Album 2.0.53 module for phpBB allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) album_cat.php or (2) album_comment.php.

cpe:/a:phpbb_group:phpbb

CVE-2005-1116

2005-05-02T00:00:00.000-04:00

2016-10-17T23:17:26.377-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050413 Multiple Sql injection and XSS vulnerabilities in phpBB Plus and below and some of its modules Cross-site scripting (XSS) vulnerability in the Calendar module for phpBB allow remote attackers to inject arbitrary web script or HTML via the start parameter to calendar_scheduler.php.

cpe:/a:all4www:all4www-homepagecreator:1.0a

CVE-2005-1117

2005-05-02T00:00:00.000-04:00

2016-10-17T23:17:27.593-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050414 All4WWW-Homepagecreator Remote Command Execution BID 13169 PHP remote file inclusion vulnerability in index.php in All4WWW-Homepagecreator 1.0a allows remote attackers to execute arbitrary PHP code by modifying the site parameter to reference a URL on a remote web server that contains the code.

cpe:/a:rsa:authentication_agent_for_web:5.2

CVE-2005-1118

2005-04-14T00:00:00.000-04:00

2017-07-10T21:32:32.500-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013724 CERT-VN VU#366372 MISC http://www.oliverkarow.de/research/rsaxss.txt BID 13168 XF rsa-auth-postdata-xss(20098) Cross-site scripting (XSS) vulnerability in IISWebAgentIF.dll in the RSA Authentication Agent for Web 5.2 allows remote attackers to inject arbitrary web script or HTML via the postdata parameter.

cpe:/a:todd_miller:sudo:1.5.6 cpe:/a:todd_miller:sudo:1.5.7 cpe:/a:todd_miller:sudo:1.5.8 cpe:/a:todd_miller:sudo:1.5.9 cpe:/a:todd_miller:sudo:1.6 cpe:/a:todd_miller:sudo:1.6.1 cpe:/a:todd_miller:sudo:1.6.2 cpe:/a:todd_miller:sudo:1.6.3 cpe:/a:todd_miller:sudo:1.6.3_p1 cpe:/a:todd_miller:sudo:1.6.3_p2 cpe:/a:todd_miller:sudo:1.6.3_p3 cpe:/a:todd_miller:sudo:1.6.3_p4 cpe:/a:todd_miller:sudo:1.6.3_p5 cpe:/a:todd_miller:sudo:1.6.3_p6 cpe:/a:todd_miller:sudo:1.6.3_p7 cpe:/a:todd_miller:sudo:1.6.4 cpe:/a:todd_miller:sudo:1.6.4_p1 cpe:/a:todd_miller:sudo:1.6.4_p2 cpe:/a:todd_miller:sudo:1.6.5 cpe:/a:todd_miller:sudo:1.6.5_p1 cpe:/a:todd_miller:sudo:1.6.5_p2 cpe:/a:todd_miller:sudo:1.6.6 cpe:/a:todd_miller:sudo:1.6.7 cpe:/a:todd_miller:sudo:1.6.7_p5 cpe:/a:todd_miller:sudo:1.6.8 cpe:/a:todd_miller:sudo:1.6.8_p1 cpe:/a:todd_miller:sudo:1.6.8_p8

CVE-2005-1119

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:15.830-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-14T15:59:00.000-04:00

BID 13171 Sudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack on temporary files.

cpe:/a:ilohamail:ilohamail:0.7.0 cpe:/a:ilohamail:ilohamail:0.7.1 cpe:/a:ilohamail:ilohamail:0.7.2 cpe:/a:ilohamail:ilohamail:0.7.3 cpe:/a:ilohamail:ilohamail:0.7.4 cpe:/a:ilohamail:ilohamail:0.7.4.2 cpe:/a:ilohamail:ilohamail:0.7.5 cpe:/a:ilohamail:ilohamail:0.7.6 cpe:/a:ilohamail:ilohamail:0.7.7 cpe:/a:ilohamail:ilohamail:0.7.8 cpe:/a:ilohamail:ilohamail:0.7.9 cpe:/a:ilohamail:ilohamail:0.8.6 cpe:/a:ilohamail:ilohamail:0.8.7 cpe:/a:ilohamail:ilohamail:0.8.8 cpe:/a:ilohamail:ilohamail:0.8.9 cpe:/a:ilohamail:ilohamail:0.8.10 cpe:/a:ilohamail:ilohamail:0.8.11 cpe:/a:ilohamail:ilohamail:0.8.12 cpe:/a:ilohamail:ilohamail:0.8.13 cpe:/a:ilohamail:ilohamail:0.8.14_rc1 cpe:/a:ilohamail:ilohamail:0.8.14_rc2

CVE-2005-1120

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:32.547-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013701 DEBIAN DSA-1010 BID 13175 XF ilohamail-mail-attached-file-xss(20095) Multiple cross-site scripting (XSS) vulnerabilities in IlohaMail 0.8.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the e-mail (1) body, (2) filename, or (3) MIME type.

cpe:/a:igor_khasilev:oops_proxy_server:1.4.22 cpe:/a:igor_khasilev:oops_proxy_server:1.5.19 cpe:/a:igor_khasilev:oops_proxy_server:1.5.53 cpe:/o:gentoo:linux

CVE-2005-1121

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:32.610-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://rst.void.ru/papers/advisory24.txt GENTOO GLSA-200505-02 DEBIAN DSA-726 BID 13172 XF oops-format-string(20191) Format string vulnerability in the my_xlog function in lib.c for Oops! Proxy Server 1.5.23 and earlier, as called by the auth functions in the passwd_mysql and passwd_pgsql modules, may allow attackers to execute arbitrary code via a URL.

cpe:/a:monkey-project:monkey_http_daemon:0.1.1 cpe:/a:monkey-project:monkey_http_daemon:0.5.2 cpe:/a:monkey-project:monkey_http_daemon:0.6.0 cpe:/a:monkey-project:monkey_http_daemon:0.6.1 cpe:/a:monkey-project:monkey_http_daemon:0.6.2 cpe:/a:monkey-project:monkey_http_daemon:0.6.3 cpe:/a:monkey-project:monkey_http_daemon:0.7.0 cpe:/a:monkey-project:monkey_http_daemon:0.7.1 cpe:/a:monkey-project:monkey_http_daemon:0.7.2 cpe:/a:monkey-project:monkey_http_daemon:0.8.0 cpe:/a:monkey-project:monkey_http_daemon:0.8.1 cpe:/a:monkey-project:monkey_http_daemon:0.8.2 cpe:/a:monkey-project:monkey_http_daemon:0.8.3 cpe:/a:monkey-project:monkey_http_daemon:0.8.4 cpe:/a:monkey-project:monkey_http_daemon:0.8.4:2 cpe:/a:monkey-project:monkey_http_daemon:0.8.5 cpe:/a:monkey-project:monkey_http_daemon:0.9.0

CVE-2005-1122

2005-04-14T00:00:00.000-04:00

2012-10-24T00:00:00.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-14T16:15:00.000-04:00

ALLOWS_USER_ACCESS

MISC http://bugs.gentoo.org/show_bug.cgi?id=87916 GENTOO GLSA-200504-14 Format string vulnerability in cgi.c for Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP GET request containing double-encoded format string specifiers (aka "double expansion error").

CVE-2005-1123

2005-05-02T00:00:00.000-04:00

2012-10-24T11:15:31.660-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-14T16:14:00.000-04:00

MISC http://bugs.gentoo.org/show_bug.cgi?id=87916 GENTOO GLSA-200504-14 Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service (memory corruption) via a request for a zero byte file.

cpe:/o:sun:solaris:9.0::sparc cpe:/o:sun:sunos:5.7 cpe:/o:sun:sunos:5.8

CVE-2005-1124

2005-05-02T00:00:00.000-04:00

2018-10-30T12:26:22.763-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-14T16:13:00.000-04:00

ALLOWS_OTHER_ACCESS

SUNALERT 57734 Unknown vulnerability in the libgss Generic Security Services Library in Solaris 7, 8, and 9 allows local users to gain privileges by loading their own GSS-API.

cpe:/a:avaya:libsafe:2.0.1 cpe:/a:avaya:libsafe:2.0.2 cpe:/a:avaya:libsafe:2.0.3 cpe:/a:avaya:libsafe:2.0.4 cpe:/a:avaya:libsafe:2.0.5 cpe:/a:avaya:libsafe:2.0.6 cpe:/a:avaya:libsafe:2.0.7 cpe:/a:avaya:libsafe:2.0.8 cpe:/a:avaya:libsafe:2.0.9 cpe:/a:avaya:libsafe:2.0.10 cpe:/a:avaya:libsafe:2.0.11 cpe:/a:avaya:libsafe:2.0.12 cpe:/a:avaya:libsafe:2.0.13 cpe:/a:avaya:libsafe:2.0.14 cpe:/a:avaya:libsafe:2.0.15 cpe:/a:avaya:libsafe:2.0.16

CVE-2005-1125

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:17.017-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

2005-06-14T16:21:00.000-04:00

MISC http://www.overflow.pl/adv/libsafebypass.txt BUGTRAQ 20050415 [Overflow.pl] Libsafe - Safety Check Bypass Vulnerability BID 13190 Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before the _libsafe_die function call is completed.

CVE-2005-1126

2005-04-15T00:00:00.000-04:00

2017-07-10T21:32:32.687-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FREEBSD FreeBSD-SA-05:04 APPLE APPLE-SA-2005-10-31 BID 15252 VUPEN ADV-2005-2256 XF freebsd-ifconf-information-disclosure(20114) The SIOCGIFCONF ioctl (ifconf function) in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not properly clear a buffer before using it, which allows local users to obtain portions of sensitive kernel memory.

cpe:/a:postgrey:postgrey:1.16 cpe:/a:postgrey:postgrey:1.17 cpe:/a:postgrey:postgrey:1.18

CVE-2005-1127

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:32.750-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MLIST [postgrey] 20050414 Problem with crashing postgrey MLIST [postgrey] 20050414 Re: Problem with crashing postgrey MLIST [postgrey] 20050414 ANNOUNCE: Postgrey 1.21 (SECURITY) FULLDISC 20050415 Use of function "log" in Perl module Net::Server DEBIAN DSA-1121 DEBIAN DSA-1122 GENTOO GLSA-200608-18 MANDRIVA MDKSA-2006:131 BID 13193 XF postgrey-logging-dos(20108) Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.18 and earlier, and possibly other products, allows remote attackers to cause a denial of service (crash) via format string specifiers that are not properly handled before being sent to syslog, as demonstrated using sender addresses to Postgrey.

cpe:/a:virtual_hosting_control_system:virtual_hosting_control_system:2.2 cpe:/a:virtual_hosting_control_system:virtual_hosting_control_system:2.4

CVE-2005-1128

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:17.737-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-14T16:37:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1013703 Multiple SQL injection vulnerabilities in VHCS 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via certain inputs from HTTP POST queries.

CVE-2005-1129

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:32.797-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050412 eGroupWare Leaks Files BID 13137 XF egroupware-email-information-disclosure(20088) eGroupWare 1.0.6 and earlier, when an e-mail is composed with an attachment but not sent, will send that attachment in the next e-mail, which may cause sensitive information to be sent to the wrong recipient.

cpe:/a:desert_dog_software:pinnacle_cart

CVE-2005-1130

2005-04-12T00:00:00.000-04:00

2017-07-10T21:32:32.860-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://systemsecure.org/board/index.php?showtopic=8 BID 13138 XF pinnaclecart-index-xss(20092) Cross-site scripting (XSS) vulnerability in index.php in Pinnacle Cart allows remote attackers to inject arbitrary web script or HTML via the pg parameter.

cpe:/a:symantec_veritas:i3_focalpoint_server:7.1

CVE-2005-1131

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:18.237-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-06-14T16:45:00.000-04:00

VULNWATCH 20040413 Patch available for critical Veritas i3 Server vulnerability SECTRACK 1013694 MISC http://seer.support.veritas.com/docs/276119.htm BID 13142 Unknown vulnerability in Veritas i3 Focalpoint Server 7.1 and earlier has unknown attack vectors and unknown but "critical" impact.

cpe:/h:lg_electronics:lg_mobile_phone:u8120

CVE-2005-1132

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:32.907-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1013777 BUGTRAQ 20050413 LG U8120 Mobile Phone Denial of Service BID 13154 XF lg-u8120-mobile-phone-dos(20091) LG U8120 mobile phone allows remote attackers to cause a denial of service (device crash) via a malformed MIDI file.

cpe:/h:ibm:iseries_as_400

CVE-2005-1133

2005-05-02T00:00:00.000-04:00

2016-10-17T23:17:30.267-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050414 Enumeration of AS/400 users and their status via POP3 BID 13156 The POP3 server in IBM iSeries AS/400 returns different error messages when the user exists or not, which allows remote attackers to determine valid user IDs on the server.

cpe:/a:s9y:serendipity:0.3 cpe:/a:s9y:serendipity:0.4 cpe:/a:s9y:serendipity:0.5 cpe:/a:s9y:serendipity:0.5_pl1 cpe:/a:s9y:serendipity:0.6 cpe:/a:s9y:serendipity:0.6_pl1 cpe:/a:s9y:serendipity:0.6_pl2 cpe:/a:s9y:serendipity:0.6_pl3 cpe:/a:s9y:serendipity:0.6_rc1 cpe:/a:s9y:serendipity:0.6_rc2 cpe:/a:s9y:serendipity:0.7 cpe:/a:s9y:serendipity:0.7_beta1 cpe:/a:s9y:serendipity:0.7_beta2 cpe:/a:s9y:serendipity:0.7_beta3 cpe:/a:s9y:serendipity:0.7_beta4 cpe:/a:s9y:serendipity:0.7_rc1 cpe:/a:s9y:serendipity:0.8_beta5 cpe:/a:s9y:serendipity:0.8_beta6

CVE-2005-1134

2005-04-13T00:00:00.000-04:00

2017-07-10T21:32:32.970-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050413 serendipity SQL Injection vulnerability SECTRACK 1013699 CONFIRM http://www.s9y.org/5.html CONFIRM http://www.s9y.org/63.html#A9 BID 13161 XF serendipity-urlid-entryid-sql-injection(20119) SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) url_id or (2) entry_id parameters.

cpe:/a:alexander_palmo:simple_php_blog:0.4.0

CVE-2005-1135

2005-05-02T00:00:00.000-04:00

2016-10-17T23:17:31.610-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://echo.or.id/adv/adv12-y3dips-2005.txt BUGTRAQ 20050415 [ECHO_ADV_12$2005] Vulnerabilities in sphpblog BID 13170 MISC http://www.waraxe.us/ftopict-651.html Cross-site scripting (XSS) vulnerability in search.php for Simple PHP Blog (sphpBlog) 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter.

cpe:/a:sphpblog:sphpblog:0.4_.0

CVE-2005-1136

2005-04-14T00:00:00.000-04:00

2016-10-17T23:17:32.797-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://echo.or.id/adv/adv12-y3dips-2005.txt BUGTRAQ 20050415 [ECHO_ADV_12$2005] Vulnerabilities in sphpblog MISC http://www.waraxe.us/ftopict-651.html Simple PHP Blog (sphpBlog) 0.4.0 stores the (1) password.txt and (2) config.txt files under the web document root, which allows remote attackers to obtain sensitive information and crack passwords via a direct request to these files.

cpe:/a:alexander_palmo:simple_php_blog:0.4.0

CVE-2005-1137

2005-05-02T00:00:00.000-04:00

2016-10-17T23:17:34.047-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://echo.or.id/adv/adv12-y3dips-2005.txt BUGTRAQ 20050415 [ECHO_ADV_12$2005] Vulnerabilities in sphpblog Simple PHP Blog (sphpBlog) 0.4.0 allows remote attackers to obtain sensitive information via a direct request to sb_functions.php, which leaks the full pathname in a PHP error message.

cpe:/a:kerio:kerio_mailserver:5.0 cpe:/a:kerio:kerio_mailserver:5.1 cpe:/a:kerio:kerio_mailserver:5.1.1 cpe:/a:kerio:kerio_mailserver:5.6.3 cpe:/a:kerio:kerio_mailserver:5.6.4 cpe:/a:kerio:kerio_mailserver:5.6.5 cpe:/a:kerio:kerio_mailserver:5.7.0 cpe:/a:kerio:kerio_mailserver:5.7.1 cpe:/a:kerio:kerio_mailserver:5.7.2 cpe:/a:kerio:kerio_mailserver:5.7.3 cpe:/a:kerio:kerio_mailserver:5.7.4 cpe:/a:kerio:kerio_mailserver:5.7.5 cpe:/a:kerio:kerio_mailserver:5.7.6 cpe:/a:kerio:kerio_mailserver:5.7.7 cpe:/a:kerio:kerio_mailserver:5.7.8 cpe:/a:kerio:kerio_mailserver:5.7.9 cpe:/a:kerio:kerio_mailserver:5.7.10 cpe:/a:kerio:kerio_mailserver:6.0 cpe:/a:kerio:kerio_mailserver:6.0.1 cpe:/a:kerio:kerio_mailserver:6.0.2 cpe:/a:kerio:kerio_mailserver:6.0.3 cpe:/a:kerio:kerio_mailserver:6.0.4 cpe:/a:kerio:kerio_mailserver:6.0.5

CVE-2005-1138

2005-04-18T00:00:00.000-04:00

2008-09-05T16:48:19.393-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-14T17:15:00.000-04:00

SECTRACK 1013708 CONFIRM http://www.kerio.com/kms_history.html Unknown vulnerability in WebMail in Kerio MailServer before 6.0.9 allows remote attackers to cause a denial of service (CPU consumption) via certain e-mail messages.

cpe:/a:opera_software:opera_web_browser:8_beta_3

CVE-2005-1139

2005-04-14T00:00:00.000-04:00

2017-07-10T21:32:33.017-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://www.geotrust.com/resources/advisory/sslorg/index.htm MISC http://www.geotrust.com/resources/advisory/sslorg/sslorg-advisory.htm SUSE SUSE-SA:2005:031 BID 13176 XF opera-ssl-spoofing(40503) Opera 8 Beta 3, when using first-generation vetted digital certificates, displays the Organizational information of an SSL certificate, which is easily spoofed and can facilitate phishing attacks.

cpe:/a:mywebland:mybloggie:2.1.1

CVE-2005-1140

2005-04-15T00:00:00.000-04:00

2008-09-05T16:48:19.767-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-14T17:30:00.000-04:00

BUGTRAQ 20050415 myBloggie 2.1.1 BID 13192 Cross-site scripting (XSS) vulnerability in myBloggie 2.1.1 allows remote attackers to inject arbitrary web script or HTML via the comments.

cpe:/a:gocr:optical_character_recognition_utility:0.3.2 cpe:/a:gocr:optical_character_recognition_utility:0.3.4 cpe:/a:gocr:optical_character_recognition_utility:0.37 cpe:/a:gocr:optical_character_recognition_utility:0.39 cpe:/a:gocr:optical_character_recognition_utility:0.40

CVE-2005-1141

2005-04-15T00:00:00.000-04:00

2016-10-17T23:17:35.157-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050415 [Overflow.pl] GOCR - Multiple vulnerabilities MISC http://www.overflow.pl/adv/gocr.txt Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, which leads to a heap-based buffer overflow.

CVE-2005-1142

2005-04-15T00:00:00.000-04:00

2016-10-17T23:17:36.253-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050415 [Overflow.pl] GOCR - Multiple vulnerabilities MISC http://www.overflow.pl/adv/gocr.txt Heap-based buffer overflow in the readpgm function in pnm.c for GOCR 0.40, when it is not using netpbm, allows remote attackers to execute arbitrary code via a P3 format PNM file with more data than implied by its width and height values.

cpe:/a:easyphpcalendar:easyphpcalendar

CVE-2005-1143

2005-04-12T00:00:00.000-04:00

2008-09-05T16:48:20.267-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-14T17:54:00.000-04:00

CONFIRM http://docs.easyphpcalendar.com/Change%20Log/changeLog.htm SECTRACK 1013704 MISC http://www.snkenjoi.com/secadv/secadv4.txt Cross-site scripting (XSS) vulnerability in index.php in EasyPHPCalendar before 6.2.8 allows remote attackers to inject arbitrary web script or HTML via the yr parameter.

cpe:/a:easyphpcalendar:easyphpcalendar:6.2.7

CVE-2005-1144

2005-04-12T00:00:00.000-04:00

2008-09-05T16:48:20.423-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-14T18:04:00.000-04:00

CONFIRM http://docs.easyphpcalendar.com/Change%20Log/changeLog.htm SECTRACK 1013704 MISC http://www.snkenjoi.com/secadv/secadv4.txt popup.php in EasyPHPCalendar before 6.2.8 allows remote attackers to obtain sensitive information via an invalid ev parameter, which reveals the full pathname of the web server in a PHP error message.

cpe:/a:calendarscript:calendarscript:3.20

CVE-2005-1145

2005-04-12T00:00:00.000-04:00

2008-09-05T16:48:20.580-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-14T18:11:00.000-04:00

SECTRACK 1013705 MISC http://www.snkenjoi.com/secadv/secadv3.txt ** DISPUTED ** NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in calendar.pl in CalendarScript 3.20 allows remote attackers to inject arbitrary web script or HTML via the template parameter, a different vulnerability than CVE-2005-1146.

cpe:/a:calendarscript:calendarscript:3.20

CVE-2005-1146

2005-04-12T00:00:00.000-04:00

2017-07-10T21:32:33.077-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013705 MISC http://www.snkenjoi.com/secadv/secadv3.txt XF calendarscript-calendarpl-xss(20103) ** DISPUTED ** NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in the login command in calendar.pl in CalendarScript 3.21 allows remote attackers to inject arbitrary web script or HTML via the username parameter, a different vulnerability than CVE-2005-1145.

CVE-2005-1147

2005-04-12T00:00:00.000-04:00

2017-07-10T21:32:33.127-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013705 MISC http://www.snkenjoi.com/secadv/secadv3.txt XF calendarscript-path-disclosure(20102) calendar.pl in CalendarScript 3.20 allows remote attackers to obtain sensitive information via invalid (1) calendar or (2) template parameters, which leaks the full pathname and debug information.

cpe:/a:calendarscript:calendarscript:3.20 cpe:/a:calendarscript:calendarscript:3.21

CVE-2005-1148

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:33.220-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013705 MISC http://www.snkenjoi.com/secadv/secadv3.txt XF calendarscript-path-disclosure(20102) calendar.pl in CalendarScript 3.21 allows remote attackers to obtain sensitive information via invalid (1) year or (2) month parameters, which leaks the full pathname and debug information.

CVE-2005-1149

2005-04-13T00:00:00.000-04:00

2008-09-05T16:48:21.220-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-14T18:35:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1013681 BID 13148 SQL injection vulnerability in admin/login.asp in aspclick.it ACNews 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters.

cpe:/a:sun:java_system_web_server:6.0 cpe:/a:sun:java_system_web_server:6.0:sp1 cpe:/a:sun:java_system_web_server:6.0:sp2 cpe:/a:sun:java_system_web_server:6.0:sp3 cpe:/a:sun:java_system_web_server:6.0:sp4 cpe:/a:sun:java_system_web_server:6.0:sp5 cpe:/a:sun:java_system_web_server:6.0:sp6 cpe:/a:sun:java_system_web_server:6.0:sp7

CVE-2005-1150

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:21.377-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-14T18:39:00.000-04:00

SUNALERT 57760 Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier, when running on Windows systems, allows attackers to cause a denial of service (hang).

cpe:/a:debian:qpopper:4.0.4 cpe:/a:debian:qpopper:4.0.5

CVE-2005-1151

2005-05-25T00:00:00.000-04:00

2008-09-05T16:48:21.547-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-05-26T09:02:00.000-04:00

ALLOWS_ADMIN_ACCESS

MISC http://bugs.gentoo.org/show_bug.cgi?id=90622 DEBIAN DSA-728 GENTOO GLSA-200505-17 qpopper 4.0.5 and earlier does not properly drop privileges before processing certain user-supplied files, which allows local users to overwrite or create arbitrary files as root.

cpe:/a:debian:qpopper:4.0.4 cpe:/a:debian:qpopper:4.0.5

CVE-2005-1152

2005-05-25T00:00:00.000-04:00

2008-09-05T16:48:21.703-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-26T09:03:00.000-04:00

MISC http://bugs.gentoo.org/attachment.cgi?id=58329&action=view MISC http://bugs.gentoo.org/show_bug.cgi?id=90622 DEBIAN DSA-728 GENTOO GLSA-200505-17 popauth.c in qpopper 4.0.5 and earlier does not properly set the umask, which may cause qpopper to create files with group or world-writable permissions.

CVE-2005-1153

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:03.467-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2005.49 GENTOO GLSA-200504-18 CONFIRM http://www.mozilla.org/security/announce/mfsa2005-35.html REDHAT RHSA-2005:383 REDHAT RHSA-2005:384 REDHAT RHSA-2005:386 BID 15495 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=289204 Firefox before 1.0.3 and Mozilla Suite before 1.7.7, when blocking a popup, allows remote attackers to execute arbitrary code via a javascript: URL that is executed when the user selects the "Show javascript" option.

CVE-2005-1154

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:03.687-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2005.49 GENTOO GLSA-200504-18 CONFIRM http://www.mozilla.org/security/announce/mfsa2005-36.html REDHAT RHSA-2005:383 REDHAT RHSA-2005:384 REDHAT RHSA-2005:386 BID 13230 BID 15495 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=289675 Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter function for a variable in the target domain, which is executed when the user visits that domain, aka "Cross-site scripting through global scope pollution."

CVE-2005-1155

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:03.780-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SCO SCOSA-2005.49 GENTOO GLSA-200504-18 CERT-VN VU#973309 MISC http://www.mikx.de/firelinking/ CONFIRM http://www.mozilla.org/security/announce/mfsa2005-37.html REDHAT RHSA-2005:383 REDHAT RHSA-2005:384 REDHAT RHSA-2005:386 BID 13216 BID 15495 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=290036 The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary code via a <LINK rel="icon"> tag with a javascript: URL in the href attribute, aka "Firelinking."

CVE-2005-1156

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:03.857-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2005.49 SECTRACK 1013745 GENTOO GLSA-200504-18 MISC http://www.mikx.de/firesearching/ CONFIRM http://www.mozilla.org/security/announce/mfsa2005-38.html REDHAT RHSA-2005:383 REDHAT RHSA-2005:384 REDHAT RHSA-2005:386 BID 13211 BID 15495 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=290037 XF mozilla-plugin-xss(20125) Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to execute arbitrary script and code via a new search plugin using sidebar.addSearchEngine, aka "Firesearching 1."

CVE-2005-1157

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:03.937-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2005.49 MISC http://www.mikx.de/firesearching/ CONFIRM http://www.mozilla.org/security/announce/mfsa2005-38.html REDHAT RHSA-2005:383 REDHAT RHSA-2005:384 REDHAT RHSA-2005:386 BID 13211 BID 15495 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=290037 XF mozilla-plugin-xss(20125) Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search plugins with malicious ones using sidebar.addSearchEngine and the same filename as the target engine, which may not be displayed in the GUI, which could then be used to execute malicious script, aka "Firesearching 2."

CVE-2005-1158

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:04.013-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.mozilla.org/security/announce/mfsa2005-39.html REDHAT RHSA-2005:383 BID 13231 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=290079 Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the _search target of the Firefox sidebar.

CVE-2005-1159

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:04.123-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SCO SCOSA-2005.49 SECTRACK 1013742 SECTRACK 1013743 GENTOO GLSA-200504-18 CONFIRM http://www.mozilla.org/security/announce/mfsa2005-40.html SUSE SUSE-SA:2006:004 REDHAT RHSA-2005:383 REDHAT RHSA-2005:384 REDHAT RHSA-2005:386 REDHAT RHSA-2005:601 BID 13232 BID 15495 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=290162 XF mozilla-installtrigger-command-execution(20123) The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 do not properly verify the types of objects being accessed, which causes the Javascript interpreter to continue execution at the wrong memory address, which may allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code by passing objects of the wrong type.

CVE-2005-1160

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:04.217-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SCO SCOSA-2005.49 GENTOO GLSA-200504-18 CONFIRM http://www.mozilla.org/security/announce/mfsa2005-41.html SUSE SUSE-SA:2006:004 REDHAT RHSA-2005:383 REDHAT RHSA-2005:384 REDHAT RHSA-2005:386 REDHAT RHSA-2005:601 BID 13233 BID 15495 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=289074 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=289083 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=289961 The privileged "chrome" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain privileges by overriding certain properties or methods of DOM nodes, as demonstrated using multiple attacks involving the eval function or the Script object.

cpe:/a:oneworldstore:oneworldstore

CVE-2005-1161

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:33.640-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050414 Multiple multiple sql injection/errors and xss vulnerabilities in OneWorldStore SECTRACK 1013720 CONFIRM http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab BID 13181 BID 13182 BID 13183 XF oneworldstore-product-category-sql-injection(20097) Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) owAddItem.asp or (2) owProductDetail.asp, (3) idCategory parameter to owListProduct.asp, or (4) bSpecials parameter to owListProduct.asp.

cpe:/a:oneworldstore:oneworldstore

CVE-2005-1162

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:33.703-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050414 Multiple multiple sql injection/errors and xss vulnerabilities in OneWorldStore SECTRACK 1013720 CONFIRM http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab BID 13184 BID 13185 BID 13186 XF oneworldstore-xss(20096) Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary web script or HTML via the (1) sEmail parameter to owContactUs.asp, (2) bSub parameter to owListProduct.asp, or the (3) Name, (4) Email, or (5) Comment fields in owProductDetail.asp.

cpe:/a:yager_development:yager_game:5.0 cpe:/a:yager_development:yager_game:5.20 cpe:/a:yager_development:yager_game:5.24

CVE-2005-1163

2005-05-02T00:00:00.000-04:00

2017-07-11T21:29:01.550-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/yagerbof-adv.txt BUGTRAQ 20050414 Multiple vulnerabilities in Yager 5.24 BID 13177 BID 13178 XF yager-nickname-bo(20100) XF yager-datablock-bo(20101) Multiple buffer overflows in Yager 5.24 and earlier allow remote attackers to execute arbitrary code via (1) a crafted nickname or (2) a packet with a large amount of data.

cpe:/a:yager_development:yager_game:5.0 cpe:/a:yager_development:yager_game:5.20 cpe:/a:yager_development:yager_game:5.24

CVE-2005-1164

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:33.813-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/yagerbof-adv.txt BUGTRAQ 20050414 Multiple vulnerabilities in Yager 5.24 BID 13179 XF yager-freeze-datablock-dos(20104) Yager 5.24 and earlier allows remote attackers to cause a denial of service (application hang) via a packet with a game header that provides less data than indicated by the length.

CVE-2005-1165

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:33.860-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/adv/yagerbof-adv.txt BUGTRAQ 20050414 Multiple vulnerabilities in Yager 5.24 XF yager-corrupt-data-dos(20105) Yager 5.24 and earlier allows remote attackers to cause a denial of service (application crash) via certain malformed data.

cpe:/a:dameware_development:dameware_nt_utilities:4.9 cpe:/a:dameware_development:miniremote_control:4.9

CVE-2005-1166

2005-05-02T00:00:00.000-04:00

2016-10-17T23:17:43.830-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050415 Dameware NT Utilities and MiniRemote Control <= 4.9 vulnerability SECTRACK 1013725 MISC http://www.shellsec.net/leer_advisory.php?id=7 The DNTUS26 process in Dameware NT Utilities and the DWRCS process in MiniRemote Control 4.9 and earlier stores the username and password in cleartext in memory, which could allow attackers to obtain sensitive information.

cpe:/a:musicmatch:jukebox:10.00.2047

CVE-2005-1167

2005-05-02T00:00:00.000-04:00

2016-10-17T23:17:45.190-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050415 Improper log file storage in Musicmatch software MISC http://www.hyperdose.com/advisories/H2005-02.txt Musicmatch 10.00.2047 and earlier store log files in the Program Files directory instead of the user profile, which may allow local users to obtain sensitive information.

cpe:/a:musicmatch:jukebox:9.0.5059 cpe:/a:musicmatch:jukebox:10.00.2047

CVE-2005-1168

2005-05-02T00:00:00.000-04:00

2016-10-17T23:17:46.393-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050415 Arbitrary file overwrite possible by Musicmatch ActiveX control BID 13167 DiagCollectionControl.dll in Musicmatch 10.00.2047 and earlier allows remote attackers to overwrite arbitrary files via the bstrSavePath argument.

cpe:/a:mafia:mafia_blog:4_beta

CVE-2005-1169

2005-05-02T00:00:00.000-04:00

2016-10-17T23:17:47.690-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://chrisnowak.org/projects/mafia/ BUGTRAQ 20050415 Mafia Blog BID 13194 Mafia Blog .4 BETA does not properly protect the admin directory, which allows remote attackers to execute arbitrary PHP code by using writeinfo.php to inject the code into info.php.

cpe:/a:datenbank_module:datenbank_module

CVE-2005-1170

2005-05-02T00:00:00.000-04:00

2016-10-17T23:17:48.893-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050416 phpBB datenbank mod has XSS/SQL Injection in the id variable SQL injection vulnerability in mod.php in the datenbank module for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:datenbank_module:datenbank_module

CVE-2005-1171

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:33.923-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050416 phpBB datenbank mod has XSS/SQL Injection in the id variable BID 13210 XF phpbb-modphp-xss(20146) Cross-site scripting (XSS) vulnerability in mod.php in the datenbank module for phpBB allows remote attackers to inject arbitrary web script or HTML via the id parameter.

cpe:/a:coppermine:coppermine_photo_gallery:1.0_rc3 cpe:/a:coppermine:coppermine_photo_gallery:1.1_.0 cpe:/a:coppermine:coppermine_photo_gallery:1.1_beta_2 cpe:/a:coppermine:coppermine_photo_gallery:1.2 cpe:/a:coppermine:coppermine_photo_gallery:1.2.1 cpe:/a:coppermine:coppermine_photo_gallery:1.2.2_b cpe:/a:coppermine:coppermine_photo_gallery:1.3

CVE-2005-1172

2005-05-02T00:00:00.000-04:00

2016-10-17T23:17:51.270-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://coppermine.sourceforge.net/board/index.php?topic=17134 BUGTRAQ 20050418 Vulnerability in Coppermine Photo Gallery 1.3.* BID 13218 Cross-site scripting (XSS) vulnerability in init.inc.php in Coppermine Photo Gallery 1.3.x allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For parameter.

cpe:/a:pmsoftware:simple_web_server:1.0

CVE-2005-1173

2005-05-02T00:00:00.000-04:00

2016-10-17T23:17:52.693-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050418 ERNW Security Advisory 01/2005 Buffer overflow in PMSoftware Simple Web Server 1.0 allows remote attackers to execute arbitrary code via a long GET request.

cpe:/a:mit:kerberos:5-1.3 cpe:/a:mit:kerberos:5-1.3.1 cpe:/a:mit:kerberos:5-1.3.2 cpe:/a:mit:kerberos:5-1.3.3 cpe:/a:mit:kerberos:5-1.3.4 cpe:/a:mit:kerberos:5-1.3.5 cpe:/a:mit:kerberos:5-1.3.6 cpe:/a:mit:kerberos:5-1.4 cpe:/a:mit:kerberos:5-1.4.1

CVE-2005-1174

2005-07-18T00:00:00.000-04:00

2018-10-03T17:30:03.483-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SGI 20050703-01-U APPLE APPLE-SA-2005-08-17 APPLE APPLE-SA-2005-08-15 BUGTRAQ 20050712 MITKRB5-SA-2005-002: buffer overflow, heap corruption in KDC SECTRACK 1014460 SUNALERT 101809 CONFIRM http://web.mit.edu/kerberos/advisories/2005-002-patch_1.4.1.txt DEBIAN DSA-757 CERT-VN VU#259798 SUSE SUSE-SR:2005:017 REDHAT RHSA-2005:567 BID 14240 TRUSTIX 2005-0036 TURBO TLSA-2005-78 VUPEN ADV-2005-1066 VUPEN ADV-2006-2074 AIXAPAR IY85474 XF kerberos-kdc-krb5-tcp-connection-dos(21327) UBUNTU USN-224-1 MIT Kerberos 5 (krb5) 1.3 through 1.4.1 Key Distribution Center (KDC) allows remote attackers to cause a denial of service (application crash) via a certain valid TCP connection that causes a free of unallocated memory.

CVE-2005-1175

2005-07-18T00:00:00.000-04:00

2018-10-03T17:30:06.530-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SGI 20050703-01-U APPLE APPLE-SA-2005-08-17 APPLE APPLE-SA-2005-08-15 BUGTRAQ 20050712 MITKRB5-SA-2005-002: buffer overflow, heap corruption in KDC SECTRACK 1014460 SUNALERT 101809 CONFIRM http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-002-kdc.txt DEBIAN DSA-757 CERT-VN VU#885830 SUSE SUSE-SR:2005:017 REDHAT RHSA-2005:562 REDHAT RHSA-2005:567 BID 14236 TRUSTIX 2005-0036 TURBO TLSA-2005-78 VUPEN ADV-2005-1066 VUPEN ADV-2006-2074 AIXAPAR IY85474 XF kerberos-kdc-krb5-udp-tcp-bo(21328) UBUNTU USN-224-1 Heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain valid TCP or UDP request.

cpe:/o:ibm:aix:5.2.0.50 cpe:/o:ibm:aix:5.2.0.54 cpe:/o:ibm:aix:5.3.0.10 cpe:/o:ibm:aix:5.3.0.20

CVE-2005-1176

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:34.140-04:00

1.2

LOCAL

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov AIXAPAR IY70032 AIXAPAR IY70034 XF aix-jfs2-race-condition(20604) Race condition in JFS2 on AIX 5.2 and 5.3, when deleting a file while I/O is still occurring for that file, may write data to a different file, which could leak sensitive information.

cpe:/a:usermin:usermin:0.4 cpe:/a:usermin:usermin:0.5 cpe:/a:usermin:usermin:0.6 cpe:/a:usermin:usermin:0.7 cpe:/a:usermin:usermin:0.8 cpe:/a:usermin:usermin:0.9 cpe:/a:usermin:usermin:0.91 cpe:/a:usermin:usermin:0.92 cpe:/a:usermin:usermin:0.93 cpe:/a:usermin:usermin:0.94 cpe:/a:usermin:usermin:0.95 cpe:/a:usermin:usermin:0.96 cpe:/a:usermin:usermin:0.97 cpe:/a:usermin:usermin:0.98 cpe:/a:usermin:usermin:0.99 cpe:/a:usermin:usermin:1.000 cpe:/a:usermin:usermin:1.010 cpe:/a:usermin:usermin:1.020 cpe:/a:usermin:usermin:1.030 cpe:/a:usermin:usermin:1.040 cpe:/a:usermin:usermin:1.051 cpe:/a:usermin:usermin:1.060 cpe:/a:usermin:usermin:1.070 cpe:/a:usermin:usermin:1.080 cpe:/a:usermin:usermin:1.090 cpe:/a:usermin:usermin:1.100 cpe:/a:usermin:usermin:1.110 cpe:/a:usermin:usermin:1.120 cpe:/a:usermin:usermin:1.130 cpe:/a:usermin:usermin:1.140 cpe:/a:webmin:webmin:0.4 cpe:/a:webmin:webmin:0.5 cpe:/a:webmin:webmin:0.6 cpe:/a:webmin:webmin:0.7 cpe:/a:webmin:webmin:0.80 cpe:/a:webmin:webmin:0.90 cpe:/a:webmin:webmin:0.91 cpe:/a:webmin:webmin:0.92 cpe:/a:webmin:webmin:0.93 cpe:/a:webmin:webmin:0.94 cpe:/a:webmin:webmin:0.95 cpe:/a:webmin:webmin:0.96 cpe:/a:webmin:webmin:0.97 cpe:/a:webmin:webmin:0.98 cpe:/a:webmin:webmin:0.99 cpe:/a:webmin:webmin:1.0.00 cpe:/a:webmin:webmin:1.0.10 cpe:/a:webmin:webmin:1.0.20 cpe:/a:webmin:webmin:1.0.30 cpe:/a:webmin:webmin:1.0.40 cpe:/a:webmin:webmin:1.0.51 cpe:/a:webmin:webmin:1.0.60 cpe:/a:webmin:webmin:1.0.70 cpe:/a:webmin:webmin:1.0.80 cpe:/a:webmin:webmin:1.0.90 cpe:/a:webmin:webmin:1.1.00 cpe:/a:webmin:webmin:1.1.10 cpe:/a:webmin:webmin:1.1.20 cpe:/a:webmin:webmin:1.1.30 cpe:/a:webmin:webmin:1.1.40

CVE-2005-1177

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:34.203-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1013723 CONFIRM http://www.webmin.com/changes.html CONFIRM http://www.webmin.com/uchanges.html XF webmin-config-file-permissions(20607) Unknown vulnerability in (1) Webmin and (2) Usermin before 1.200 causes Webmin to change permissions and ownership of configuration files, with unknown impact.

cpe:/a:oracle:forms:3.0 cpe:/a:oracle:forms:4.5 cpe:/a:oracle:forms:5.0 cpe:/a:oracle:forms:6.0 cpe:/a:oracle:forms:6i cpe:/a:oracle:forms:9i cpe:/a:oracle:forms:10g

CVE-2005-1178

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:34.250-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://www.red-database-security.com/wp/sql_injection_forms_us.pdf MISC http://www.securiteam.com/securitynews/5HP0I0UFFI.html XF oracle-forms-query-where-popup-sql-injection(20080) SQL injection vulnerability in Oracle Forms 10g allows remote attackers to execute arbitrary SQL commands via the Query/Where feature.

cpe:/h:xerox:workcentre:32_color_1.2.81 cpe:/h:xerox:workcentre:40_color_1.2.81 cpe:/h:xerox:workcentre_165:7.47.30.000::pro cpe:/h:xerox:workcentre_165:7.47.33.008::pro cpe:/h:xerox:workcentre_175:7.47.30.000::pro cpe:/h:xerox:workcentre_175:7.47.33.008::pro cpe:/h:xerox:workcentre_2128:0.001.04.044::pro_color cpe:/h:xerox:workcentre_2636:0.001.04.044::pro_color cpe:/h:xerox:workcentre_32_color:01.00.060 cpe:/h:xerox:workcentre_32_color:01.02.053.1 cpe:/h:xerox:workcentre_32_color:01.02.058.4 cpe:/h:xerox:workcentre_32_color:01.02.077.1 cpe:/h:xerox:workcentre_35:3.028.11.000::pro cpe:/h:xerox:workcentre_35:3.97.20.032::pro cpe:/h:xerox:workcentre_3545:0.001.04.044::pro_color cpe:/h:xerox:workcentre_40_color:01.00.060 cpe:/h:xerox:workcentre_40_color:01.02.053.1 cpe:/h:xerox:workcentre_40_color:01.02.058.4 cpe:/h:xerox:workcentre_40_color:01.02.65.1 cpe:/h:xerox:workcentre_40_color:01.02.077.1 cpe:/h:xerox:workcentre_45:3.028.11.000::pro cpe:/h:xerox:workcentre_45:3.97.20.032::pro cpe:/h:xerox:workcentre_55:3.028.11.000::pro cpe:/h:xerox:workcentre_55:3.97.20.032::pro cpe:/h:xerox:workcentre_65:1.001.00.060::pro cpe:/h:xerox:workcentre_65:1.001.02.084::pro cpe:/h:xerox:workcentre_75:1.001.00.060::pro cpe:/h:xerox:workcentre_75:1.001.02.084::pro cpe:/h:xerox:workcentre_90:1.001.00.060::pro cpe:/h:xerox:workcentre_90:1.001.02.084::pro cpe:/h:xerox:workcentre_m165:6.47.30.000 cpe:/h:xerox:workcentre_m165:6.47.33.008 cpe:/h:xerox:workcentre_m165:8.47.30.000 cpe:/h:xerox:workcentre_m165:8.47.33.008 cpe:/h:xerox:workcentre_m175:6.47.30.000 cpe:/h:xerox:workcentre_m175:6.47.33.008 cpe:/h:xerox:workcentre_m175:8.47.30.000 cpe:/h:xerox:workcentre_m175:8.47.33.008 cpe:/h:xerox:workcentre_m35:2.28.11.000 cpe:/h:xerox:workcentre_m35:2.97.20.032 cpe:/h:xerox:workcentre_m35:4.84.16.000 cpe:/h:xerox:workcentre_m35:4.97.20.025 cpe:/h:xerox:workcentre_m35:4.97.20.032 cpe:/h:xerox:workcentre_m45:2.28.11.000 cpe:/h:xerox:workcentre_m45:2.97.20.032 cpe:/h:xerox:workcentre_m45:4.84.16.000 cpe:/h:xerox:workcentre_m45:4.97.20.025 cpe:/h:xerox:workcentre_m45:4.97.20.032 cpe:/h:xerox:workcentre_m55:2.28.11.000 cpe:/h:xerox:workcentre_m55:2.97.20.032 cpe:/h:xerox:workcentre_m55:4.84.16.000 cpe:/h:xerox:workcentre_m55:4.97.20.025 cpe:/h:xerox:workcentre_m55:4.97.20.032

CVE-2005-1179

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:34.297-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 13196 CONFIRM http://www.xerox.com/downloads/usa/en/c/cert_XRX05_005.pdf XF xerox-workcentre-snmp-auth-bypass(20192) Unknown vulnerability in Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11.000 through 3.97.20.032, Pro 65/75/90 1.001.00.060 through 1.001.02.084, and others, related to SNMP authentication, allows remote attackers to modify system configuration, a different vulnerability than CVE-2005-0703.

cpe:/a:francisco_burzi:php-nuke:7.5 cpe:/a:francisco_burzi:php-nuke:7.6

CVE-2005-1180

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:34.360-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050415 Http Response Splitting Vulnerability In PHP-NUKE 7.6 and below MISC http://www.digitalparadox.org/advisories/pnuke.txt XF php-nuke-http-response-splitting(20116) HTTP Response Splitting vulnerability in the Surveys module in PHP-Nuke 7.6 allows remote attackers to spoof web content and poison web caches via hex-encoded CRLF ("%0d%0a") sequences in the forwarder parameter.

cpe:/a:ariadne:ariadne_cms:2.4

CVE-2005-1181

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:34.407-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1013721 XF ariadne-loaderphp-file-include(20611) ** DISPUTED ** NOTE: this issue has been disputed by the vendor. PHP remote code injection vulnerability in loader.php for Ariadne CMS 2.4 allows remote attackers to execute arbitrary PHP code by modifying the ariadne parameter to reference a URL on a remote web server that contains the code. NOTE: the vendor has disputed this issue, saying that loader.php first requires the "ariadne.inc" file, which defines the $ariadne variable, and thus it cannot be modified by an attacker. In addition, CVE personnel have partially verified the dispute via source code inspection of Ariadne 2.4 as available on July 5, 2005.

cpe:/o:ibm:os_400:r510 cpe:/o:ibm:os_400:r520 cpe:/o:ibm:os_400:r530

CVE-2005-1182

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:34.453-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www-1.ibm.com/support/docview.wss?uid=nas29afd3991f5f290b086256fdb0053b293 XF ibm-irc-dos(20612) Unknown vulnerability in Incoming Remote Command (iSeries Access for Windows Remote Command service) in IBM OS/400 R510, R520, and R530 allows attackers to cause a denial of service (IRC shutdown) via certain inputs.

cpe:/a:mvnforum:mvnforum:1.0_rc4

CVE-2005-1183

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:34.500-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 13213 XF mvnforum-search-xss(20613) Cross-site scripting (XSS) vulnerability in mvnForum 1.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the Search parameter.

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2000::sp1 cpe:/o:microsoft:windows_2000::sp2 cpe:/o:microsoft:windows_2000::sp3 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server:datacenter_64-bit:sp1 cpe:/o:microsoft:windows_2003_server:enterprise::64-bit cpe:/o:microsoft:windows_2003_server:enterprise:sp1 cpe:/o:microsoft:windows_2003_server:enterprise_64-bit cpe:/o:microsoft:windows_2003_server:enterprise_64-bit:sp1 cpe:/o:microsoft:windows_2003_server:r2::64-bit cpe:/o:microsoft:windows_2003_server:r2::datacenter_64-bit cpe:/o:microsoft:windows_2003_server:r2:sp1 cpe:/o:microsoft:windows_2003_server:standard::64-bit cpe:/o:microsoft:windows_2003_server:standard:sp1 cpe:/o:microsoft:windows_2003_server:standard_64-bit cpe:/o:microsoft:windows_2003_server:web cpe:/o:microsoft:windows_2003_server:web:sp1 cpe:/o:microsoft:windows_98se cpe:/o:microsoft:windows_nt:4.0::enterprise_server cpe:/o:microsoft:windows_nt:4.0::server cpe:/o:microsoft:windows_nt:4.0::terminal_server cpe:/o:microsoft:windows_nt:4.0::workstation cpe:/o:microsoft:windows_nt:4.0:sp1:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp1:server cpe:/o:microsoft:windows_nt:4.0:sp1:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp1:workstation cpe:/o:microsoft:windows_nt:4.0:sp2:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp2:server cpe:/o:microsoft:windows_nt:4.0:sp2:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp2:workstation cpe:/o:microsoft:windows_nt:4.0:sp3:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp3:server cpe:/o:microsoft:windows_nt:4.0:sp3:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp3:workstation cpe:/o:microsoft:windows_nt:4.0:sp4:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp4:server cpe:/o:microsoft:windows_nt:4.0:sp4:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp4:workstation cpe:/o:microsoft:windows_nt:4.0:sp5:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp5:server cpe:/o:microsoft:windows_nt:4.0:sp5:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp5:workstation cpe:/o:microsoft:windows_nt:4.0:sp6:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp6:server cpe:/o:microsoft:windows_nt:4.0:sp6:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp6:workstation cpe:/o:microsoft:windows_nt:4.0:sp6a:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp6a:server cpe:/o:microsoft:windows_nt:4.0:sp6a:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp6a:workstation cpe:/o:microsoft:windows_xp:::home cpe:/o:microsoft:windows_xp::gold:professional cpe:/o:microsoft:windows_xp::sp1:home cpe:/o:microsoft:windows_xp::sp2:home

CVE-2005-1184

2005-05-02T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20050416 TCP/IP Stack Vulnerability FULLDISC 20050418 Re: TCP/IP Stack Vulnerability FULLDISC 20050418 Re: TCP/IP Stack Vulnerability BID 13215 XF multiple-tcpip-dos(40502) The TCP/IP stack in multiple operating systems allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the correct sequence number but the wrong Acknowledgement number, which generates a large number of "keep alive" packets. NOTE: some followups indicate that this issue could not be replicated.

cpe:/a:musicmatch:jukebox:10.00.2047

CVE-2005-1185

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:34.627-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050414 Trojan file issue in Musicmatch software SECTRACK 1013718 MISC http://www.hyperdose.com/advisories/H2005-05.txt XF jukebox-mmfwlaunch-gain-privileges(20129) Unquoted Windows search path vulnerability in Musicmatch Jukebox 10.00.2047 and earlier allows local users to gain privileges via a malicious C:\program.exe file, which is run by MMFWLaunch.exe when it attempts to execute launch.exe.

cpe:/a:musicmatch:jukebox:10.00.2047

CVE-2005-1186

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:34.673-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050414 Trusted Site Cross Site Scripting Elevation of Privilege in Musicmatch SECTRACK 1013718 MISC http://www.hyperdose.com/advisories/H2005-04.txt XF jukebox-mmfwlaunch-gain-privileges(20129) Musicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites zone in Internet Explorer, which allows systems in the domain to conduct unauthorized activities, as demonstrated using cross-site scripting (XSS) attacks.

cpe:/a:x-ways_software_technology_ag:winhex:12.05_sr-14

CVE-2005-1187

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:34.720-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1013727 MISC http://www.unl0ck.org/files/papers/winhex.txt XF winhex-filename-bo(20139) Heap-based buffer overflow in WinHex 12.05 SR-14, and possibly other versions, may allow attackers to execute arbitrary code via a long file name argument. NOTE: since this overflow is in the command line of an unprivileged program, it is highly likely that this is not a vulnerability.

cpe:/a:comersus_open_technologies:comersus_cart:3.90 cpe:/a:comersus_open_technologies:comersus_cart:4.00 cpe:/a:comersus_open_technologies:comersus_cart:4.14 cpe:/a:comersus_open_technologies:comersus_cart:4.20b cpe:/a:comersus_open_technologies:comersus_cart:4.23 cpe:/a:comersus_open_technologies:comersus_cart:4.27 cpe:/a:comersus_open_technologies:comersus_cart:4.28 cpe:/a:comersus_open_technologies:comersus_cart:4.29 cpe:/a:comersus_open_technologies:comersus_cart:4.36 cpe:/a:comersus_open_technologies:comersus_cart:4.47 cpe:/a:comersus_open_technologies:comersus_cart:4.051

CVE-2005-1188

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:34.767-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://lostmon.blogspot.com/2005/04/comersus-asp-shopping-cart-variable.html SECTRACK 1013747 BID 13125 XF comersus-comersussearchitem-xss(20147) Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to inject arbitrary web script or HTML via the curPage parameter.

cpe:/a:webcamxp:webcamxp_pro:2.16.467

CVE-2005-1189

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:34.827-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013753 XF webcamxp-chat-xss(20166) Cross-site scripting (XSS) vulnerability in WebcamXP PRO v2.16.468 and earlier allows remote attackers to inject arbitrary web script or HTML via the chat name, as demonstrated by using an IFRAME to redirect users to other sites.

cpe:/a:webcamxp:webcamxp_pro:2.16.468

CVE-2005-1190

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:34.877-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1013753 XF webcamxp-chatname-dos(20615) WebcamXP PRO v2.16.468 and earlier allows remote attackers to cause a denial of service via a long chat name, which takes up too much display space and prevents the chat frame from being properly rendered.

CVE-2005-1191

2005-05-02T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://security.greymagic.com/security/advisories/gm015-ie BUGTRAQ 20050419 File Selection May Lead to Command Execution (GM#015-IE) BID 13248 VUPEN ADV-2005-0509 MS MS05-024 XF windows-web-view-command-execution(20380) The Web View DLL (webvw.dll), as used in Windows Explorer on Windows 2000 systems, does not properly filter an apostrophe ("'") in the author name in a document, which allows attackers to execute arbitrary script via extra attributes when Web View constructs a mailto: link for the preview pane when the user selects the file.

cpe:/o:hp:hp-ux:11.00 cpe:/o:hp:hp-ux:11.04 cpe:/o:hp:hp-ux:11.11 cpe:/o:hp:hp-ux:11.22 cpe:/o:hp:hp-ux:11.23

CVE-2005-1192

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:04.560-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SREASON 262 BID 13367 HP SSRT5954 Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows remote attackers to cause a denial of service via certain packets, related to the PMTU, a different vulnerability than CVE-2004-1060.

cpe:/a:phpbb_group:phpbb:2.0.0 cpe:/a:phpbb_group:phpbb:2.0.1 cpe:/a:phpbb_group:phpbb:2.0.2 cpe:/a:phpbb_group:phpbb:2.0.3 cpe:/a:phpbb_group:phpbb:2.0.4 cpe:/a:phpbb_group:phpbb:2.0.5 cpe:/a:phpbb_group:phpbb:2.0.6 cpe:/a:phpbb_group:phpbb:2.0.6c cpe:/a:phpbb_group:phpbb:2.0.6d cpe:/a:phpbb_group:phpbb:2.0.7 cpe:/a:phpbb_group:phpbb:2.0.7a cpe:/a:phpbb_group:phpbb:2.0.8 cpe:/a:phpbb_group:phpbb:2.0.8a cpe:/a:phpbb_group:phpbb:2.0.9 cpe:/a:phpbb_group:phpbb:2.0.10 cpe:/a:phpbb_group:phpbb:2.0.11 cpe:/a:phpbb_group:phpbb:2.0.12 cpe:/a:phpbb_group:phpbb:2.0.13 cpe:/a:phpbb_group:phpbb:2.0.14 cpe:/a:phpbb_group:phpbb:2.0_beta1 cpe:/a:phpbb_group:phpbb:2.0_rc1 cpe:/a:phpbb_group:phpbb:2.0_rc2 cpe:/a:phpbb_group:phpbb:2.0_rc3 cpe:/a:phpbb_group:phpbb:2.0_rc4

CVE-2005-1193

2005-05-16T00:00:00.000-04:00

2017-07-10T21:32:34.983-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://castlecops.com/t123194-.html FULLDISC 20050508 phpbb 2.0.15 released - patches high critical vuln BUGTRAQ 20050507 phpbb 2.0.15 released - patches high critical vuln SECTRACK 1013918 SECTRACK 1014117 CERT-VN VU#113196 CONFIRM http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=288194 BID 13545 XF phpbb-url-bbcode-file-include(20574) The bbencode_second_pass and make_clickable functions in bbcode.php for phpBB before 2.0.15, as used in viewtopic.php, privmsg.php, and other scripts, allow remote attackers to execute arbitrary script via a BBcode tag with a (1) javascript:, (2) applet:, (3) about:, (4) activex:, (5) chrome:, or (6) script: URI scheme, as demonstrated using the URL tag.

cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:3.0::advanced_servers cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation cpe:/o:redhat:enterprise_linux:4.0::advanced_server cpe:/o:redhat:enterprise_linux:4.0::enterprise_server cpe:/o:redhat:enterprise_linux:4.0::workstation cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:enterprise_linux_desktop:4.0 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64

CVE-2005-1194

2005-05-04T00:00:00.000-04:00

2017-10-10T21:30:04.637-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov REDHAT RHSA-2005:381 BID 13506 Stack-based buffer overflow in the ieee_putascii function for nasm 0.98 and earlier allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than CVE-2004-1287.

cpe:/a:mplayer:mplayer:1.0_pre6 cpe:/a:xine:xine-lib:1_beta1 cpe:/a:xine:xine-lib:1_beta2 cpe:/a:xine:xine-lib:1_beta3 cpe:/a:xine:xine-lib:1_beta4 cpe:/a:xine:xine-lib:1_beta5 cpe:/a:xine:xine-lib:1_beta6 cpe:/a:xine:xine-lib:1_beta7 cpe:/a:xine:xine-lib:1_beta8 cpe:/a:xine:xine-lib:1_beta9 cpe:/a:xine:xine-lib:1_beta10 cpe:/a:xine:xine-lib:1_beta11 cpe:/a:xine:xine-lib:1_rc2 cpe:/a:xine:xine-lib:1_rc3a cpe:/a:xine:xine-lib:1_rc3b cpe:/a:xine:xine-lib:1_rc3c

CVE-2005-1195

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:35.047-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://cvs.sourceforge.net/viewcvs.py/xine/xine-lib/src/input/librtsp/rtsp.c?r1=1.18&r2=1.19&diff_format=u CONFIRM http://cvs.sourceforge.net/viewcvs.py/xine/xine-lib/src/input/mms.c?r1=1.55&r2=1.56&diff_format=u BUGTRAQ 20050421 xine security announcement: multiple heap overflows in MMS and Real RTSP streaming clients SECTRACK 1013771 GENTOO GLSA-200504-19 CONFIRM http://www.mplayerhq.hu/homepage/design7/news.html#vuln10 CONFIRM http://www.mplayerhq.hu/homepage/design7/news.html#vuln11 BUGTRAQ 20050421 [PLSN-0003] - Remote exploits in MPlayer BID 13271 XF mplayer-rtsp-stream-bo(20171) XF mplayer-mmst-stream-bo(20175) Multiple heap-based buffer overflows in the code used to handle (1) MMS over TCP (MMST) streams or (2) RealMedia RTSP streams in xine-lib before 1.0, and other products that use xine-lib such as MPlayer 1.0pre6 and earlier, allow remote malicious servers to execute arbitrary code.

cpe:/a:phpbb_group:phpbb

CVE-2005-1196

2005-05-02T00:00:00.000-04:00

2016-10-17T23:17:59.677-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050418 phpBB - Knowledge Base MOD - SQL-Injection and Full Path Disclosure SQL injection vulnerability in kb.php in the Knowledge Base module for phpBB allows remote attackers to obtain sensitive information and execute SQL commands via the cat parameter.

cpe:/a:oracle:database_server:10.1.0.2 cpe:/a:oracle:database_server:10.1.0.3 cpe:/a:oracle:database_server:10.1.0.3.1 cpe:/a:oracle:database_server:10.1.0.4

CVE-2005-1197

2005-05-02T00:00:00.000-04:00

2016-10-17T23:18:00.990-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050418 [AppSecInc Team SHATTER Security Advisory] SQL Injection in CREATE_SCN_CHANGE_SET procedure CERT-VN VU#948486 CONFIRM http://www.oracle.com/technology/deploy/security/pdf/cpuapr2005.pdf CERT TA05-117A SQL injection vulnerability in the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure in Oracle Database Server 10g allows remote attackers to execute arbitrary SQL commands via the CHANGE_SET_NAME parameter.

cpe:/a:anaconda_partners:foundation_directory

CVE-2005-1198

2005-05-02T00:00:00.000-04:00

2016-10-17T23:18:02.257-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050419 Directoy Traversal Attack in apexec.pl (.%00./-Bug) Directory traversal vulnerability in apexec.pl for Anaconda Foundation Directory allows remote attackers to read arbitrary files via hex-encoded null characters (%00) in the middle of ".." sequences in the template parameter.

cpe:/a:infopop:ultimate_bulletin_board:6.0

CVE-2005-1199

2005-05-02T00:00:00.000-04:00

2016-10-17T23:18:03.380-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050419 UBB Thread printthread.php SQL Injection BID 13253 SQL injection vulnerability in printthread.php in UBB.Threads allows remote attackers to execute arbitrary SQL commands via the main parameter.

cpe:/a:azbb:az_bulletin_board:1.0.07a cpe:/a:azbb:az_bulletin_board:1.0.07b cpe:/a:azbb:az_bulletin_board:1.0.07c

CVE-2005-1200

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:35.093-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://azbb.cyaccess.com/azbb.php?1091778548 BUGTRAQ 20050420 Multiple Security Issues Found In AZBB MISC http://www.gulftech.org/?node=research&article_id=00068-04192005 XF az-bulletin-board-file-include(20181) PHP remote file inclusion vulnerability in main_index.php in AZ Bulletin Board (AZbb) 1.0.07a through 1.0.07c allows remote attackers to execute arbitrary PHP code by modifying the (1) dir_src or (2) abs_layer parameter to reference a URL on a remote web server that contains the code.

CVE-2005-1201

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:35.157-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://azbb.cyaccess.com/azbb.php?1091778548 BUGTRAQ 20050420 Multiple Security Issues Found In AZBB MISC http://www.gulftech.org/?node=research&article_id=00068-04192005 XF az-bulletin-board-file-modification(20180) XF az-bulletin-board-file-existence(20183) Multiple directory traversal vulnerabilities in AZ Bulletin board (AZbb) before 1.0.08 allow (1) remote authenticated users with administrative privileges to delete arbitrary files via a .. (dot dot) in the URL to admin_avatar.php or admin_attachment.php or (2) remote attackers to enumerate files via a .. (dot dot) in the attachment parameter to attachment.php, which displays a different message when a file exists or does not exist.

cpe:/a:egroupware:egroupware:1.0 cpe:/a:egroupware:egroupware:1.0.1 cpe:/a:egroupware:egroupware:1.0.3 cpe:/a:egroupware:egroupware:1.0.6

CVE-2005-1202

2005-05-02T00:00:00.000-04:00

2016-10-17T23:18:07.477-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050420 Multiple eGroupware Vulnerabilities GENTOO GLSA-200504-24 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=320768 MISC http://www.gulftech.org/?node=research&article_id=00069-04202005 BID 13212 Multiple cross-site scripting (XSS) vulnerabilities in eGroupware before 1.0.0.007 allow remote attackers to inject arbitrary web script or HTML via the (1) ab_id, (2) page, (3) type, or (4) lang parameter to index.php or (5) category_id parameter.

cpe:/a:egroupware:egroupware:1.0 cpe:/a:egroupware:egroupware:1.0.1 cpe:/a:egroupware:egroupware:1.0.3 cpe:/a:egroupware:egroupware:1.0.6

CVE-2005-1203

2005-05-02T00:00:00.000-04:00

2016-10-17T23:18:08.663-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050420 Multiple eGroupware Vulnerabilities GENTOO GLSA-200504-24 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=320768 MISC http://www.gulftech.org/?node=research&article_id=00069-04202005 BID 13212 Multiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.007 allow remote attackers to execute arbitrary SQL commands via the (1) filter or (2) cats_app parameter.

cpe:/a:nelso_software:desktop_rover:3.0

CVE-2005-1204

2005-05-02T00:00:00.000-04:00

2016-10-17T23:18:09.930-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050420 Neslo Desktop Rover Remote DoS Vulnerability MISC http://www.evilpacket.net/advisories/EP-000-0003.html Desktop Rover 3.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application crash) via a crafted packet to TCP port 61427, which causes an invalid memory access.

cpe:/o:microsoft:windows_2003_server:enterprise::64-bit cpe:/o:microsoft:windows_2003_server:r2::64-bit cpe:/o:microsoft:windows_2003_server:standard::64-bit cpe:/o:microsoft:windows_2003_server:web

CVE-2005-1205

2005-06-14T00:00:00.000-04:00

2018-10-12T17:36:25.407-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov IDEFENSE 20050614 Multiple Vendor Telnet Client Information Disclosure Vulnerability SECTRACK 1014203 CERT-VN VU#800829 BID 13940 MS MS05-033 The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_2003_server:sp1 cpe:/o:microsoft:windows_xp::sp1:tablet_pc cpe:/o:microsoft:windows_xp::sp2:tablet_pc

CVE-2005-1206

2005-06-14T00:00:00.000-04:00

2018-10-12T17:36:26.390-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CERT-VN VU#489397 CERT TA05-165A MS MS05-027 Buffer overflow in the Server Message Block (SMB) functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server 2003 and SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka the "Server Message Block Vulnerability."

cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_xp::gold

CVE-2005-1207

2005-06-14T00:00:00.000-04:00

2018-10-12T17:36:27.220-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MS MS05-028 Buffer overflow in the Web Client service in Microsoft Windows XP and Windows Server 2003 allows remote authenticated users to execute arbitrary code via a crafted WebDAV request containing special parameters.

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2003_server:64-bit cpe:/o:microsoft:windows_2003_server:datacenter_64-bit:sp1 cpe:/o:microsoft:windows_2003_server:datacenter_64-bit:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:enterprise::64-bit cpe:/o:microsoft:windows_2003_server:enterprise:sp1 cpe:/o:microsoft:windows_2003_server:enterprise:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:enterprise_64-bit cpe:/o:microsoft:windows_2003_server:enterprise_64-bit:sp1 cpe:/o:microsoft:windows_2003_server:enterprise_64-bit:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_2003_server:r2::64-bit cpe:/o:microsoft:windows_2003_server:r2::datacenter_64-bit cpe:/o:microsoft:windows_2003_server:r2:sp1 cpe:/o:microsoft:windows_2003_server:r2:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:standard::64-bit cpe:/o:microsoft:windows_2003_server:standard:sp1 cpe:/o:microsoft:windows_2003_server:standard:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:standard_64-bit cpe:/o:microsoft:windows_2003_server:web cpe:/o:microsoft:windows_2003_server:web:sp1 cpe:/o:microsoft:windows_2003_server:web:sp1_beta_1 cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_xp:::64-bit cpe:/o:microsoft:windows_xp:::embedded cpe:/o:microsoft:windows_xp:::home cpe:/o:microsoft:windows_xp:::media_center cpe:/o:microsoft:windows_xp::gold cpe:/o:microsoft:windows_xp::gold:professional cpe:/o:microsoft:windows_xp::sp1:64-bit cpe:/o:microsoft:windows_xp::sp1:embedded cpe:/o:microsoft:windows_xp::sp1:home cpe:/o:microsoft:windows_xp::sp1:media_center cpe:/o:microsoft:windows_xp::sp1:tablet_pc cpe:/o:microsoft:windows_xp::sp2:home cpe:/o:microsoft:windows_xp::sp2:media_center cpe:/o:microsoft:windows_xp::sp2:tablet_pc

CVE-2005-1208

2005-06-14T00:00:00.000-04:00

2018-10-12T17:36:27.673-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

VULNWATCH 20050614 eEye Advisory - EEYEB-20050316 - HTML Help File Parsing Buffer Overflow CERT-VN VU#851869 BID 13953 CERT TA05-165A MS MS05-026 Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a "ms-its:" URL in Internet Explorer.

cpe:/a:microsoft:ie:6.0.2900

CVE-2005-1211

2005-06-14T00:00:00.000-04:00

2018-10-12T17:36:28.687-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1014201 CERT-VN VU#189754 BID 13941 CERT TA05-165A MS MS05-025 Buffer overflow in the PNG image rendering component of Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a crafted PNG file.

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2000::sp1 cpe:/o:microsoft:windows_2000::sp2 cpe:/o:microsoft:windows_2000::sp3 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2000::sp4::fr cpe:/o:microsoft:windows_2000_terminal_services cpe:/o:microsoft:windows_2000_terminal_services::sp1 cpe:/o:microsoft:windows_2000_terminal_services::sp2 cpe:/o:microsoft:windows_2000_terminal_services::sp3 cpe:/o:microsoft:windows_2003_server:64-bit cpe:/o:microsoft:windows_2003_server:datacenter_64-bit:sp1 cpe:/o:microsoft:windows_2003_server:datacenter_64-bit:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:enterprise::64-bit cpe:/o:microsoft:windows_2003_server:enterprise:sp1 cpe:/o:microsoft:windows_2003_server:enterprise:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:enterprise_64-bit cpe:/o:microsoft:windows_2003_server:enterprise_64-bit:sp1 cpe:/o:microsoft:windows_2003_server:enterprise_64-bit:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_2003_server:r2::64-bit cpe:/o:microsoft:windows_2003_server:r2::datacenter_64-bit cpe:/o:microsoft:windows_2003_server:r2:sp1 cpe:/o:microsoft:windows_2003_server:r2:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:standard::64-bit cpe:/o:microsoft:windows_2003_server:standard:sp1 cpe:/o:microsoft:windows_2003_server:standard:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:standard_64-bit cpe:/o:microsoft:windows_2003_server:web cpe:/o:microsoft:windows_2003_server:web:sp1 cpe:/o:microsoft:windows_2003_server:web:sp1_beta_1 cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_98se cpe:/o:microsoft:windows_me cpe:/o:microsoft:windows_me:::second_edition cpe:/o:microsoft:windows_xp:::64-bit cpe:/o:microsoft:windows_xp:::embedded cpe:/o:microsoft:windows_xp:::home cpe:/o:microsoft:windows_xp:::media_center cpe:/o:microsoft:windows_xp::gold cpe:/o:microsoft:windows_xp::gold:professional cpe:/o:microsoft:windows_xp::sp1:64-bit cpe:/o:microsoft:windows_xp::sp1:embedded cpe:/o:microsoft:windows_xp::sp1:home cpe:/o:microsoft:windows_xp::sp1:media_center cpe:/o:microsoft:windows_xp::sp1:tablet_pc cpe:/o:microsoft:windows_xp::sp2:home cpe:/o:microsoft:windows_xp::sp2:media_center cpe:/o:microsoft:windows_xp::sp2:tablet_pc

CVE-2005-1212

2005-06-14T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

IDEFENSE 20050614 Microsoft Windows Interactive Training Buffer Overflow Vulnerability SECTRACK 1014194 BID 13944 MS MS05-031 Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark link file (.cbo, cbl, or .cbm extension) with a long User field.

cpe:/a:microsoft:outlook_express:5.5:sp2 cpe:/a:microsoft:outlook_express:6.0 cpe:/a:microsoft:outlook_express:6.0:sp1

CVE-2005-1213

2005-06-14T00:00:00.000-04:00

2018-10-12T17:36:30.487-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1014200 IDEFENSE 20050614 Microsoft Outlook Express NNTP Response Parsing Buffer Overflow Vulnerability CERT-VN VU#130614 BID 13951 MS MS05-030 Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to execute arbitrary code via a LIST response with a long second field.

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2000::sp1 cpe:/o:microsoft:windows_2000::sp2 cpe:/o:microsoft:windows_2000::sp3 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2000::sp4::fr cpe:/o:microsoft:windows_2000_terminal_services cpe:/o:microsoft:windows_2000_terminal_services::sp1 cpe:/o:microsoft:windows_2000_terminal_services::sp2 cpe:/o:microsoft:windows_2000_terminal_services::sp3 cpe:/o:microsoft:windows_2003_server:64-bit cpe:/o:microsoft:windows_2003_server:datacenter_64-bit:sp1 cpe:/o:microsoft:windows_2003_server:datacenter_64-bit:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:enterprise::64-bit cpe:/o:microsoft:windows_2003_server:enterprise:sp1 cpe:/o:microsoft:windows_2003_server:enterprise:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:enterprise_64-bit cpe:/o:microsoft:windows_2003_server:enterprise_64-bit:sp1 cpe:/o:microsoft:windows_2003_server:enterprise_64-bit:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_2003_server:r2::64-bit cpe:/o:microsoft:windows_2003_server:r2::datacenter_64-bit cpe:/o:microsoft:windows_2003_server:r2:sp1 cpe:/o:microsoft:windows_2003_server:r2:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:standard::64-bit cpe:/o:microsoft:windows_2003_server:standard:sp1 cpe:/o:microsoft:windows_2003_server:standard:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:standard_64-bit cpe:/o:microsoft:windows_2003_server:web cpe:/o:microsoft:windows_2003_server:web:sp1 cpe:/o:microsoft:windows_2003_server:web:sp1_beta_1 cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_98se cpe:/o:microsoft:windows_me cpe:/o:microsoft:windows_me:::second_edition cpe:/o:microsoft:windows_xp:::64-bit cpe:/o:microsoft:windows_xp:::embedded cpe:/o:microsoft:windows_xp:::home cpe:/o:microsoft:windows_xp:::media_center cpe:/o:microsoft:windows_xp::gold cpe:/o:microsoft:windows_xp::gold:professional cpe:/o:microsoft:windows_xp::sp1:64-bit cpe:/o:microsoft:windows_xp::sp1:embedded cpe:/o:microsoft:windows_xp::sp1:home cpe:/o:microsoft:windows_xp::sp1:media_center cpe:/o:microsoft:windows_xp::sp1:tablet_pc cpe:/o:microsoft:windows_xp::sp2:home cpe:/o:microsoft:windows_xp::sp2:media_center cpe:/o:microsoft:windows_xp::sp2:tablet_pc

CVE-2005-1214

2005-06-14T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BID 13948 MS MS05-032 Microsoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary code by disguising security prompts on a malicious Web page.

cpe:/a:microsoft:isa_server:2000

CVE-2005-1215

2005-06-14T00:00:00.000-04:00

2018-10-12T17:36:32.127-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1014193 BID 13956 MS MS05-034 Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers.

cpe:/a:microsoft:isa_server:2000

CVE-2005-1216

2005-06-14T00:00:00.000-04:00

2018-10-12T17:36:32.580-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1014193 CERT-VN VU#367077 BID 13954 MS MS05-034 Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA Server that uses the NetBIOS (all) predefined packet filter.

CVE-2005-1218

2005-08-10T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050715 Any info on potential 0day RDP vuln? MISC http://security-protocols.com/modules.php?name=News&file=article&sid=2783 CERT-VN VU#490628 CONFIRM http://www.microsoft.com/technet/security/advisory/904797.mspx BID 14259 CERT TA05-221A MS MS05-041 MLIST [Dailydave] 20050714 SPIKE actually scores. The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial of service (crash) via crafted Remote Desktop Protocol (RDP) requests.

cpe:/a:microsoft:image_color_management::gold:windows

CVE-2005-1219

2005-07-12T00:00:00.000-04:00

2018-10-12T17:36:35.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CERT-VN VU#720742 BID 14214 CERT TA05-193A MS MS05-036 Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags.

cpe:/a:knusperleicht:shoutbox_script:3.0.2

CVE-2005-1220

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:35.220-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050419 Shoutbox SCRIPT <= 3.0.2 Administrative MD5 Username and Password Retrieval [x0n3-h4ck] XF knusperleicht-settings-info-disclosure(20177) Shoutbox SCRIPT 3.0.2 and earlier allows remote attackers to obtain sensitive information via a direct request to db/settings.dat, which displays usernames and password hashes.

cpe:/a:ecommerce-carts:ecommpro:3.0

CVE-2005-1221

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:35.280-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050419 Ecommerce-Carts SQL injection vulnerability ( IHSTeam ) MISC http://www.ihssecurity.com/download/advisory/ecomerce-cart.txt XF ecomm-pro-sql-injection(20200) SQL injection vulnerability in login.asp for Ecommerce-Carts EcommPro 3.0 allows remote attackers to execute arbitrary SQL commands via the password field.

cpe:/a:netref:netref:4.2

CVE-2005-1222

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:35.327-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050419 Annuaire Netref v4.2 [ fwrite php ] vulnerability XF netref-catforgen-code-execution(20198) cat_for_gen.php in Annuaire Netref 4.2 allows remote attackers to execute arbitrary PHP code by setting the ad_direct parameter to reference cat_for_gen.php, then including the code in the m_for_racine parameter, which is then written to cat_for_gen.php.

cpe:/a:ocean12_technologies:calendar_manager_pro:1.01

CVE-2005-1223

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:35.377-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050420 [HSC Security Group] Ocean12 Calendar manager 1.01 SQL injection SECTRACK 1013762 XF ocean12-calendar-manager-sql-injection(20174) Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL commands via the Admin_id field.

cpe:/a:duware:duportal:3.4 cpe:/a:duware:duportal:pro_3.4 cpe:/a:duware:duportal:sql_3.4

CVE-2005-1224

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:31.937-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050420 DUportal Pro 3.4 has MANY Sql injection and Sql Errors. MISC http://www.securiteam.com/windowsntfocus/5TP0O0AFFQ.html BUGTRAQ 20061202 [Aria-Security Team] DuWare DuPortal SQL Injection Vuln BID 13285 XF duportal-multiple-sql-injection(20197) XF duportal-default-cat-sql-injection(30671) Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) nChannel parameter to default.asp, cat.asp, or detail.asp, (2) the iChannel parameter to search.asp, default.asp, result.asp, cat.asp, or detail.asp (3) the iCat parameter to cat.asp or detail.asp, (4) the iData parameter to detail.asp or result.asp, the (5) POL_ID, (6) POL_PARENT, (7) POL_CATEGORY, (8) CHA_NAME, or (9) CHA_ID parameters to inc_vote.asp, or the (10) tfm_order or (11) tfm_orderby parameters to toppages.asp, a different set of vulnerabilities than CVE-2005-1236.

cpe:/a:coppermine:coppermine_photo_gallery:1.3.2

CVE-2005-1225

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:35.547-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050420 [waraxe-2005-SA#042] - Multiple vulnerabilities in Coppermine Photo Gallery 1.3.2 MISC http://www.waraxe.us/advisory-42.html XF coppermine-initincphp-sql-injection(20205) SQL injection vulnerability in Coppermine Photo Gallery 1.3.2 allows remote attackers to execute arbitrary SQL commands via the favs parameter to (1) init.inc.php or (2) zipdownload.php.

cpe:/a:coppermine:coppermine_photo_gallery:1.3.2

CVE-2005-1226

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:35.593-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050420 [waraxe-2005-SA#042] - Multiple vulnerabilities in Coppermine Photo Gallery 1.3.2 MISC http://www.waraxe.us/advisory-42.html XF coppermine-password-plaintext(20206) Coppermine Photo Gallery 1.3.2 stores passwords in plaintext, which allows remote attackers to obtain sensitive information.

cpe:/a:phprojekt:phprojekt:4.2

CVE-2005-1227

2005-04-20T00:00:00.000-04:00

2017-07-10T21:32:35.657-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050420 Secure Science Corporation Application Software Advisory 055 XF phprojekt-url-tag-xss(20212) Cross-site scripting (XSS) vulnerability in PHProjekt 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the chatroom text submission form.

cpe:/a:gnu:gzip:1.2.4 cpe:/a:gnu:gzip:1.3.3

CVE-2005-1228

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:05.717-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SCO SCOSA-2005.58 CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=305255 APPLE APPLE-SA-2006-08-01 BUGTRAQ 20050420 gzip directory traversal vulnerability REDHAT RHSA-2005:357 SLACKWARE SSA:2006-262 SUNALERT 101816 DEBIAN DSA-752 BID 19289 CERT TA06-214A VUPEN ADV-2006-3101 XF gzip-n-directory-traversal(20199) Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrary directories via a .. (dot dot) in the original filename within a compressed file.

cpe:/a:gnu:cpio:2.6

CVE-2005-1229

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:35.780-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FREEBSD FreeBSD-SA-06:03 SCO SCOSA-2006.2 SCO SCOSA-2005.32 SUSE SUSE-SR:2006:010 BUGTRAQ 20050420 cpio directory traversal vulnerability DEBIAN DSA-846 MANDRIVA MDKSA-2007:233 BID 13291 UBUNTU USN-189-1 XF cpio-directory-traversal(20204) Directory traversal vulnerability in cpio 2.6 and earlier allows remote attackers to write to arbitrary directories via a .. (dot dot) in a cpio file.

cpe:/a:magnus_lundvall:yawcam:0.2.5

CVE-2005-1230

2005-05-02T00:00:00.000-04:00

2016-10-17T23:18:24.993-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050421 directory traversal in Yawcam 0.2.5 MISC http://www.autistici.org/fdonato/advisory/Yawcam0.2.5-adv.txt Directory traversal vulnerability in Yawcam 0.2.5 allows remote attackers to read arbitrary files via "..\" (dot dot backslash) sequences in a GET request.

cpe:/a:jaws:jaws:0.3 cpe:/a:jaws:jaws:0.4 cpe:/a:jaws:jaws:0.5_beta2

CVE-2005-1231

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:35.877-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-11T09:55:00.000-04:00

FULLDISC 20050418 XSS bug in JAWS gadget Glossary (0.4-latestbeta (beta 2)) MISC http://www.securiteam.com/unixfocus/5RP0M0AFFS.html BID 13254 Cross-site scripting (XSS) vulnerability in the NewTerm function in GlossaryModel.php in JAWS 0.4 allows remote attackers to inject arbitrary web script or HTML via the (1) term or (2) description.

cpe:/a:sun:java_system_web_proxy_server:3.6:sp6

CVE-2005-1232

2005-05-02T00:00:00.000-04:00

2016-11-28T14:06:29.613-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SUNALERT 57763 BID 82356 Buffer overflow in Sun Java System Web Proxy Server (aka Sun ONE Proxy Server) 3.6 SP6 allows remote attackers to execute arbitrary code via unknown vectors.

cpe:/a:php_labs:profile

CVE-2005-1233

2005-04-20T00:00:00.000-04:00

2017-07-10T21:32:35.827-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013756 BID 13276 BID 13282 MISC http://www.snkenjoi.com/secadv/secadv7.txt VUPEN ADV-2005-0370 XF profile-indexphp-xss(20169) Cross-site scripting (XSS) vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary web script or HTML via the (1) dir or (2) file parameters.

cpe:/a:phpbb_group:phpbb-auction:1.0m cpe:/a:phpbb_group:phpbb-auction:1.2m

CVE-2005-1234

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:32.577-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013779 MISC http://www.aria-security.net/advisory/phpauction.txt CONFIRM http://www.phpbb-auction.com/sutra5600.html BUGTRAQ 20060725 PHP-Auction SQL injection BID 13283 BID 13284 MISC http://www.snkenjoi.com/secadv/secadv9.txt XF phpbb-auction-sql-injection(20203) Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via the (1) u parameter to auction_rating.php or (2) ar parameter to action_offer.php.

cpe:/a:phpbb_group:phpbb-auction:1.0m cpe:/a:phpbb_group:phpbb-auction:1.2m

CVE-2005-1235

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:36.517-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-11T09:52:00.000-04:00

SECTRACK 1013779 CONFIRM http://www.phpbb-auction.com/sutra5600.html MISC http://www.snkenjoi.com/secadv/secadv9.txt auction_my_auctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain sensitive information via an invalid mode parameter, which leaks the full path in a PHP error message.

cpe:/a:duware:duportal:3.1.2 cpe:/a:duware:duportal:3.1.2_sql

CVE-2005-1236

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:36.673-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-11T09:40:00.000-04:00

ALLOWS_OTHER_ACCESS

MISC http://www.digitalparadox.org/advisories/dup.txt BID 13288 Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrary SQL commands via the (1) iChannel parameter to channel.asp or search.asp, (2) iData parameter to detail.asp or inc_rating.asp, (3) iCat parameter to detail.asp or type.asp, (4) DAT_PARENT parameter to inc_poll_voting.asp, or (5) iRate parameter to inc_rating.asp, a different set of vulnerabilities than CVE-2005-1224.

cpe:/a:china-on-site:flexphpnews:0.0.3

CVE-2005-1237

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:05.797-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

VIM 20070411 Rediscovery: Flexphpnews news.php/newsid SQL injection BID 13297 BID 23247 VUPEN ADV-2005-0373 XF flexphpnews-newsphp-sql-injection(20214) XF flexphpnew-news-sql-injection(33362) EXPLOIT-DB 3631 SQL injection vulnerability in news.php in FlexPHPNews 0.0.3 allows remote attackers to execute arbitrary SQL commands via the newsid parameter.

cpe:/h:ibm:iseries_as_400

CVE-2005-1238

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:36.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050420 Canonicalization and directory traversal in iSeries FTP security products MISC http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf XF multiple-vendor-security-bypass(20260) By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request.

cpe:/a:raz-lee:security%2b%2b%2b

CVE-2005-1239

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:36.047-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050420 Canonicalization and directory traversal in iSeries FTP security products BID 13310 MISC http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf XF multiple-vendor-security-bypass(20260) Directory traversal vulnerability in the third party tool from Raz-Lee, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request.

cpe:/a:castlehill:secure_net

CVE-2005-1240

2005-04-20T00:00:00.000-04:00

2017-07-10T21:32:36.093-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050420 Canonicalization and directory traversal in iSeries FTP security products MISC http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf XF multiple-vendor-security-bypass(20260) Directory traversal vulnerability in the third party tool from Castlehill, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request.

cpe:/a:powertech:powerlock_networksecurity:4.7.1

CVE-2005-1241

2005-04-20T00:00:00.000-04:00

2017-07-10T21:32:36.157-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050420 Canonicalization and directory traversal in iSeries FTP security products BID 13312 MISC http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf XF multiple-vendor-security-bypass(20260) Directory traversal vulnerability in the third party tool from Powertech, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request.

cpe:/a:bsafe:global_security

CVE-2005-1242

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:36.203-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050420 Canonicalization and directory traversal in iSeries FTP security products MISC http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf XF multiple-vendor-security-bypass(20260) Directory traversal vulnerability in the third party tool from Bsafe, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request.

cpe:/a:safestone_technologies:axcessit

CVE-2005-1243

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:36.250-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050420 Canonicalization and directory traversal in iSeries FTP security products MISC http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf XF multiple-vendor-security-bypass(20260) Directory traversal vulnerability in the third party tool from SafeStone, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request.

cpe:/a:netiq:pssecure:7.5

CVE-2005-1244

2005-04-20T00:00:00.000-04:00

2017-07-10T21:32:36.313-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1013810 BUGTRAQ 20050420 Canonicalization and directory traversal in iSeries FTP security products MISC http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf XF multiple-vendor-security-bypass(20260) ** DISPUTED ** Directory traversal vulnerability in the third party tool from NetIQ, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request. NOTE: the vendor has disputed this issue, saying that "neither NetIQ Security Manager nor our iSeries Security Solutions are vulnerable."

cpe:/a:mediawiki:mediawiki:1.3 cpe:/a:mediawiki:mediawiki:1.3.1 cpe:/a:mediawiki:mediawiki:1.3.2 cpe:/a:mediawiki:mediawiki:1.3.3 cpe:/a:mediawiki:mediawiki:1.3.4 cpe:/a:mediawiki:mediawiki:1.3.5 cpe:/a:mediawiki:mediawiki:1.3.6 cpe:/a:mediawiki:mediawiki:1.3.7 cpe:/a:mediawiki:mediawiki:1.3.8 cpe:/a:mediawiki:mediawiki:1.3.9 cpe:/a:mediawiki:mediawiki:1.3.10 cpe:/a:mediawiki:mediawiki:1.3.11 cpe:/a:mediawiki:mediawiki:1.4_beta1 cpe:/a:mediawiki:mediawiki:1.4_beta2 cpe:/a:mediawiki:mediawiki:1.4_beta3 cpe:/a:mediawiki:mediawiki:1.4_beta4 cpe:/a:mediawiki:mediawiki:1.4_beta5

CVE-2005-1245

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:36.360-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://sourceforge.net/project/shownotes.php?release_id=322146 BID 13301 XF mediawiki-unknown-xss(20210) Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.2, when using HTML Tidy ($wgUseTidy), allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

cpe:/a:vladislav_bogdanov:snmppd:0.4 cpe:/a:vladislav_bogdanov:snmppd:0.4.1 cpe:/a:vladislav_bogdanov:snmppd:0.4.2 cpe:/a:vladislav_bogdanov:snmppd:0.4.3 cpe:/a:vladislav_bogdanov:snmppd:0.4.3_special cpe:/a:vladislav_bogdanov:snmppd:0.4.4 cpe:/a:vladislav_bogdanov:snmppd:0.4.5

CVE-2005-1246

2005-04-24T00:00:00.000-04:00

2008-09-05T16:48:38.280-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-05-11T09:18:00.000-04:00

ALLOWS_ADMIN_ACCESS

VULNWATCH 20050425 [INetCop Security Advisory] Snmppd potentially format string vulnerability. MISC http://x82.inetcop.org/h0me/adv1sor1es/INCSA.2005-0x82-027-SNMPPD.txt Format string vulnerability in the snmppd_log function in snmppd_util.c for snmppd 0.4.5 and earlier may allow remote attackers to cause a denial of service or execute arbitrary code via format string specifiers that are not properly handled in a syslog call.

cpe:/a:novell:nsure_audit:1.0.1

CVE-2005-1247

2004-01-15T00:00:00.000-05:00

2008-09-05T16:48:38.453-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-10T16:39:00.000-04:00

VULNWATCH 20050424 [CIRT.DK - Advisory] Novell Nsure Audit 1.0.1 Denial of Service CONFIRM http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097379.htm MISC http://www.cirt.dk/advisories/cirt-31-advisory.pdf BUGTRAQ 20040115 OpenSSL ASN.1 parsing bugs PoC / brute forcer webadmin.exe in Novell Nsure Audit 1.0.1 allows remote attackers to cause a denial of service via malformed ASN.1 packets in corrupt client certificates to an SSL server, as demonstrated using an exploit for the OpenSSL ASN.1 parsing vulnerability.

cpe:/a:apple:itunes:4.2.72 cpe:/a:apple:itunes:4.5 cpe:/a:apple:itunes:4.6 cpe:/a:apple:itunes:4.7 cpe:/a:apple:itunes:4.7.1

CVE-2005-1248

2005-05-16T00:00:00.000-04:00

2017-10-10T21:30:05.857-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=301596 APPLE APPLE-SA-2005-05-09 SECTRACK 1013927 MISC http://www.ngssoftware.com/advisories/itunes.txt BID 13565 VUPEN ADV-2005-0504 XF apple-itunes-mpeg4-bo(20498) Buffer overflow in Apple iTunes before 4.8 allows remote attackers to execute arbitrary code via a crafted MPEG4 file.

cpe:/a:ipswitch:ipswitch_collaboration_suite

CVE-2005-1249

2005-05-25T00:00:00.000-04:00

2008-11-15T00:46:11.530-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1014047 IDEFENSE 20050524 Ipswitch IMail IMAP LSUB DoS Vulnerability CONFIRM http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html BID 13727 The IMAP daemon (IMAPD32.EXE) in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (CPU consumption) via an LSUB command with a large number of null characters, which causes an infinite loop.

cpe:/a:ipswitch:whatsup:professional_2005_sp1

CVE-2005-1250

2005-06-22T00:00:00.000-04:00

2008-09-05T16:48:38.937-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-23T09:38:00.000-04:00

ALLOWS_OTHER_ACCESS

MISC http://www.corsaire.com/advisories/c050323-001.txt IDEFENSE 20050622 IpSwitch WhatsUp Professional 2005 (SP1) SQL Injection Vulnerability CONFIRM http://www.ipswitch.com/forums/shwmessage.aspx?ForumID=20&MessageID=7699 SQL injection vulnerability in the logon screen of the web front end (NmConsole/Login.asp) for IpSwitch WhatsUp Professional 2005 SP1 allows remote attackers to execute arbitrary SQL commands via the (1) User Name field (sUserName parameter) or (2) Password (sPassword parameter).

cpe:/a:ipswitch:imail:8.13 cpe:/a:ipswitch:imail_server:8.2_hotfix_2

CVE-2005-1252

2005-05-25T00:00:00.000-04:00

2008-11-15T00:46:11.843-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1014047 IDEFENSE 20050524 Ipswitch IMail Web Calendaring Arbitrary File Read Vulnerability CONFIRM http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html BID 13727 Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote attackers to read arbitrary files via "..\" (dot dot backslash) sequences in the query string argument in a GET request to a non-existent .jsp file.

cpe:/a:ipswitch:imail:8.12 cpe:/a:ipswitch:imail:8.13 cpe:/a:ipswitch:imail:server_8.2_hotfix_2

CVE-2005-1254

2005-05-25T00:00:00.000-04:00

2008-11-15T00:46:12.017-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1014047 IDEFENSE 20050524 Ipswitch IMail IMAP SELECT Command DoS Vulnerability CONFIRM http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html BID 13727 Stack-based buffer overflow in the IMAP server for Ipswitch IMail 8.12 and 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to cause a denial of service (crash) via a SELECT command with a large argument.

cpe:/a:ipswitch:imail:8.12 cpe:/a:ipswitch:imail:8.13 cpe:/a:ipswitch:imail_server:8.2_hotfix_2 cpe:/a:ipswitch:ipswitch_collaboration_suite

CVE-2005-1255

2005-05-25T00:00:00.000-04:00

2008-11-15T00:46:12.157-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1014047 IDEFENSE 20050524 Ipswitch IMail IMAP LOGIN Remote Buffer Overflow Vulnerabilities CONFIRM http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html BID 13727 Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allow remote attackers to execute arbitrary code via a LOGIN command with (1) a long username argument or (2) a long username argument that begins with a special character.

cpe:/a:ipswitch:imail:8.13 cpe:/a:ipswitch:imail_server:8.2_hotfix_2 cpe:/a:ipswitch:ipswitch_collaboration_suite

CVE-2005-1256

2005-05-25T00:00:00.000-04:00

2008-11-15T00:46:12.360-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1014047 IDEFENSE 20050524 Ipswitch IMail IMAP STATUS Remote Buffer Overflow Vulnerability CONFIRM http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html BID 13727 Stack-based buffer overflow in the IMAP daemon (IMAPD32.EXE) in IMail 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to execute arbitrary code via a STATUS command with a long mailbox name.

cpe:/a:bzip:bzip2 cpe:/o:ubuntu:ubuntu_linux:4.10 cpe:/o:ubuntu:ubuntu_linux:5.04

CVE-2005-1260

2005-05-19T00:00:00.000-04:00

2018-10-03T17:30:09.793-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SGI 20060301-01-U CONFIRM http://docs.info.apple.com/article.html?artnum=307041 APPLE APPLE-SA-2007-11-14 SUNALERT 103118 SUNALERT 200191 DEBIAN DSA-741 FEDORA FLSA:158801 REDHAT RHSA-2005:474 BID 13657 BID 26444 CERT TA07-319A VUPEN ADV-2007-3525 VUPEN ADV-2007-3868 UBUNTU USN-127-1 bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a "decompression bomb").

cpe:/a:rob_flynn:gaim:0.10 cpe:/a:rob_flynn:gaim:0.10.3 cpe:/a:rob_flynn:gaim:0.50 cpe:/a:rob_flynn:gaim:0.51 cpe:/a:rob_flynn:gaim:0.52 cpe:/a:rob_flynn:gaim:0.53 cpe:/a:rob_flynn:gaim:0.54 cpe:/a:rob_flynn:gaim:0.55 cpe:/a:rob_flynn:gaim:0.56 cpe:/a:rob_flynn:gaim:0.57 cpe:/a:rob_flynn:gaim:0.58 cpe:/a:rob_flynn:gaim:0.59 cpe:/a:rob_flynn:gaim:0.59.1 cpe:/a:rob_flynn:gaim:0.60 cpe:/a:rob_flynn:gaim:0.61 cpe:/a:rob_flynn:gaim:0.62 cpe:/a:rob_flynn:gaim:0.63 cpe:/a:rob_flynn:gaim:0.64 cpe:/a:rob_flynn:gaim:0.65 cpe:/a:rob_flynn:gaim:0.66 cpe:/a:rob_flynn:gaim:0.67 cpe:/a:rob_flynn:gaim:0.68 cpe:/a:rob_flynn:gaim:0.69 cpe:/a:rob_flynn:gaim:0.70 cpe:/a:rob_flynn:gaim:0.71 cpe:/a:rob_flynn:gaim:0.72 cpe:/a:rob_flynn:gaim:0.73 cpe:/a:rob_flynn:gaim:0.74 cpe:/a:rob_flynn:gaim:0.75 cpe:/a:rob_flynn:gaim:0.76 cpe:/a:rob_flynn:gaim:0.77 cpe:/a:rob_flynn:gaim:0.78 cpe:/a:rob_flynn:gaim:0.79 cpe:/a:rob_flynn:gaim:0.80 cpe:/a:rob_flynn:gaim:0.81 cpe:/a:rob_flynn:gaim:0.82 cpe:/a:rob_flynn:gaim:0.82.1 cpe:/a:rob_flynn:gaim:1.0.0 cpe:/a:rob_flynn:gaim:1.0.1 cpe:/a:rob_flynn:gaim:1.0.2 cpe:/a:rob_flynn:gaim:1.0.3 cpe:/a:rob_flynn:gaim:1.1.0 cpe:/a:rob_flynn:gaim:1.1.1 cpe:/a:rob_flynn:gaim:1.1.2 cpe:/a:rob_flynn:gaim:1.1.3 cpe:/a:rob_flynn:gaim:1.1.4 cpe:/a:rob_flynn:gaim:1.2.0 cpe:/a:rob_flynn:gaim:1.2.1

CVE-2005-1261

2005-05-11T00:00:00.000-04:00

2018-10-19T11:31:33.267-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://gaim.sourceforge.net/security/index.php?id=16 REDHAT RHSA-2005:429 REDHAT RHSA-2005:432 FEDORA FLSA:158543 BID 13590 VUPEN ADV-2005-0519 Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message (IM) with a large URL.

CVE-2005-1262

2005-05-11T00:00:00.000-04:00

2018-10-19T11:31:33.703-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://gaim.sourceforge.net/security/index.php?id=17 SUSE SUSE-SA:2005:036 REDHAT RHSA-2005:429 FEDORA FLSA:158543 BID 13591 VUPEN ADV-2005-0519 Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed MSN message.

CVE-2005-1263

2005-05-11T00:00:00.000-04:00

2018-10-19T11:31:34.140-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SGI 20060402-01-U MISC http://www.isec.pl/vulnerabilities/isec-0023-coredump.txt REDHAT RHSA-2005:472 REDHAT RHSA-2005:529 REDHAT RHSA-2005:551 BUGTRAQ 20050511 Linux kernel ELF core dump privilege elevation FEDORA FLSA:157459-3 FEDORA FLSA:157459-1 FEDORA FLSA:157459-2 BID 13589 VUPEN ADV-2005-0524 The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to execute arbitrary code via an ELF binary that, in certain conditions involving the create_elf_tables function, causes a negative length argument to pass a signed integer comparison, leading to a buffer overflow.

CVE-2005-1264

2005-05-17T00:00:00.000-04:00

2018-10-19T11:31:35.797-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

VULNWATCH 20050516 Linux kernel pktcdvd and rawdevice ioctl break user space limit vulnerability VULNWATCH 20050517 Re: Linux kernel pktcdvd and rawdevice ioctl break user space limit vulnerability CONFIRM http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.10 MLIST [linux-kernel] 20050517 [PATCH] Fix root hole in raw device REDHAT RHSA-2005:420 FEDORA FLSA:157459-3 BID 13651 VUPEN ADV-2005-0557 Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589.

cpe:/o:linux:linux_kernel:2.6.10

CVE-2005-1265

2005-06-16T00:00:00.000-04:00

2018-10-19T11:31:36.813-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1014152 DEBIAN DSA-922 REDHAT RHSA-2005:514 FEDORA FLSA:157459-3 BID 13893 UBUNTU USN-137-1 The mmap function in the Linux Kernel 2.6.10 can be used to create memory maps with a start address beyond the end address, which allows local users to cause a denial of service (kernel crash).

cpe:/a:apache:spamassassin:3.0.1 cpe:/a:apache:spamassassin:3.0.2 cpe:/a:apache:spamassassin:3.0.3

CVE-2005-1266

2005-06-15T00:00:00.000-04:00

2017-10-10T21:30:06.403-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://bugs.gentoo.org/show_bug.cgi?id=94722 MLIST [spamassassin-announce] 20050615 Denial of Service Vulnerability in Apache SpamAssassin 3.0.1-3.0.3 GENTOO GLSA-200506-17 DEBIAN DSA-736 MANDRAKE MDKSA-2005:106 REDHAT RHSA-2005:498 BID 13978 CONFIRM http://www.vuxml.org/freebsd/cc4ce06b-e01c-11d9-a8bd-000cf18bbe54.html Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service (CPU consumption and slowdown) via a message with a long Content-Type header without any boundaries.

cpe:/a:lbl:tcpdump:3.4 cpe:/a:lbl:tcpdump:3.4a6 cpe:/a:lbl:tcpdump:3.5 cpe:/a:lbl:tcpdump:3.5.2 cpe:/a:lbl:tcpdump:3.5_alpha cpe:/a:lbl:tcpdump:3.6.2 cpe:/a:lbl:tcpdump:3.6.3 cpe:/a:lbl:tcpdump:3.7 cpe:/a:lbl:tcpdump:3.7.1 cpe:/a:lbl:tcpdump:3.7.2 cpe:/a:lbl:tcpdump:3.8.1 cpe:/a:lbl:tcpdump:3.8.2 cpe:/a:lbl:tcpdump:3.8.3 cpe:/a:lbl:tcpdump:3.9 cpe:/a:lbl:tcpdump:3.9.1 cpe:/o:gentoo:linux cpe:/o:mandrakesoft:mandrake_linux:10.1 cpe:/o:mandrakesoft:mandrake_linux:10.1::x86_64 cpe:/o:mandrakesoft:mandrake_linux:10.2 cpe:/o:mandrakesoft:mandrake_linux:10.2::x86_64 cpe:/o:redhat:fedora_core:core_3.0 cpe:/o:redhat:fedora_core:core_4.0 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1 cpe:/o:trustix:secure_linux:2.2

CVE-2005-1267

2005-06-10T00:00:00.000-04:00

2018-10-19T11:31:37.423-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov DEBIAN DSA-854 FEDORA FEDORA-2005-406 REDHAT RHSA-2005:505 FEDORA FLSA:156139 BID 13906 TRUSTIX 2005-0028 MISC https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=159208 The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet.

cpe:/a:apache:http_server

CVE-2005-1268

2005-08-05T00:00:00.000-04:00

2018-10-19T11:31:38.470-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov TRUSTIX TSLSA-2005-0059 REDHAT RHSA-2005:582 SREASON 604 SUNALERT 102198 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm DEBIAN DSA-805 MANDRAKE MDKSA-2005:129 SUSE SUSE-SR:2005:018 SUSE SUSE-SA:2005:046 HP SSRT051251 BID 14366 VUPEN ADV-2006-0789 MISC https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=163013 MLIST [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html MLIST [httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remote attackers to cause a denial of service (child process crash) via a CRL that causes a buffer overflow of one null byte.

cpe:/a:rob_flynn:gaim:0.10 cpe:/a:rob_flynn:gaim:0.10.3 cpe:/a:rob_flynn:gaim:0.50 cpe:/a:rob_flynn:gaim:0.51 cpe:/a:rob_flynn:gaim:0.52 cpe:/a:rob_flynn:gaim:0.53 cpe:/a:rob_flynn:gaim:0.54 cpe:/a:rob_flynn:gaim:0.55 cpe:/a:rob_flynn:gaim:0.56 cpe:/a:rob_flynn:gaim:0.57 cpe:/a:rob_flynn:gaim:0.58 cpe:/a:rob_flynn:gaim:0.59 cpe:/a:rob_flynn:gaim:0.59.1 cpe:/a:rob_flynn:gaim:0.60 cpe:/a:rob_flynn:gaim:0.61 cpe:/a:rob_flynn:gaim:0.62 cpe:/a:rob_flynn:gaim:0.63 cpe:/a:rob_flynn:gaim:0.64 cpe:/a:rob_flynn:gaim:0.65 cpe:/a:rob_flynn:gaim:0.66 cpe:/a:rob_flynn:gaim:0.67 cpe:/a:rob_flynn:gaim:0.68 cpe:/a:rob_flynn:gaim:0.69 cpe:/a:rob_flynn:gaim:0.70 cpe:/a:rob_flynn:gaim:0.71 cpe:/a:rob_flynn:gaim:0.72 cpe:/a:rob_flynn:gaim:0.73 cpe:/a:rob_flynn:gaim:0.74 cpe:/a:rob_flynn:gaim:0.75 cpe:/a:rob_flynn:gaim:0.76 cpe:/a:rob_flynn:gaim:0.77 cpe:/a:rob_flynn:gaim:0.78 cpe:/a:rob_flynn:gaim:0.79 cpe:/a:rob_flynn:gaim:0.80 cpe:/a:rob_flynn:gaim:0.81 cpe:/a:rob_flynn:gaim:0.82 cpe:/a:rob_flynn:gaim:0.82.1 cpe:/a:rob_flynn:gaim:1.0 cpe:/a:rob_flynn:gaim:1.0.0 cpe:/a:rob_flynn:gaim:1.0.1 cpe:/a:rob_flynn:gaim:1.0.2 cpe:/a:rob_flynn:gaim:1.0.3 cpe:/a:rob_flynn:gaim:1.1.0 cpe:/a:rob_flynn:gaim:1.1.1 cpe:/a:rob_flynn:gaim:1.1.2 cpe:/a:rob_flynn:gaim:1.1.3 cpe:/a:rob_flynn:gaim:1.1.4 cpe:/a:rob_flynn:gaim:1.2.0 cpe:/a:rob_flynn:gaim:1.2.1 cpe:/a:rob_flynn:gaim:1.3.0

CVE-2005-1269

2005-06-16T00:00:00.000-04:00

2018-10-19T11:31:39.657-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://gaim.sourceforge.net/security/?id=18 GENTOO GLSA-200506-11 DEBIAN DSA-734 MANDRAKE MDKSA-2005:099 SUSE SUSE-SA:2005:036 REDHAT RHSA-2005:518 FEDORA FLSA:158543 BID 13931 UBUNTU USN-139-1 Gaim before 1.3.1 allows remote attackers to cause a denial of service (application crash) via a Yahoo! message with non-ASCII characters in a file name.

cpe:/a:gentoo:rootkit_hunter:1.2 cpe:/a:gentoo:rootkit_hunter:1.2.1 cpe:/a:gentoo:rootkit_hunter:1.2.2 cpe:/a:gentoo:rootkit_hunter:1.2.3

CVE-2005-1270

2005-04-26T00:00:00.000-04:00

2017-07-10T21:32:36.500-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov GENTOO GLSA-200504-25 BID 13399 XF rootkit-hunter-checkupdate-symlink(20279) The (1) check_update.sh and (2) rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack.

CVE-2005-1271

2005-05-12T00:00:00.000-04:00

2008-09-10T15:38:40.367-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-1343. Reason: This candidate is a reservation duplicate of CVE-2005-1343. Notes: All CVE users should reference CVE-2005-1343 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:ca:brightstor_arcserve_backup:9.0.1::windows cpe:/a:ca:brightstor_arcserve_backup:9.0_1::oracle cpe:/a:ca:brightstor_arcserve_backup:11.0::oracle cpe:/a:ca:brightstor_arcserve_backup:11.0::windows cpe:/a:ca:brightstor_arcserve_backup:11.1::oracle cpe:/a:ca:brightstor_arcserve_backup:11.1::windows cpe:/a:ca:brightstor_arcserve_backup_agent:9.0.1::exchange cpe:/a:ca:brightstor_arcserve_backup_agent:9.0.1::sap cpe:/a:ca:brightstor_arcserve_backup_agent:9.0.1::sql cpe:/a:ca:brightstor_arcserve_backup_agent:11::exchange cpe:/a:ca:brightstor_arcserve_backup_agent:11.0::sap cpe:/a:ca:brightstor_arcserve_backup_agent:11.0::sql cpe:/a:ca:brightstor_arcserve_backup_agent:11.1::exchange cpe:/a:ca:brightstor_arcserve_backup_agent:11.1::sap cpe:/a:ca:brightstor_arcserve_backup_agent:11.1::sql cpe:/a:ca:brightstor_enterprise_backup:10.0 cpe:/a:ca:brightstor_enterprise_backup:10.5 cpe:/a:ca:brightstor_enterprise_backup_agent:10.0::oracle cpe:/a:ca:brightstor_enterprise_backup_agent:10.0::sap cpe:/a:ca:brightstor_enterprise_backup_agent:10.0::sql cpe:/a:ca:brightstor_enterprise_backup_agent:10.5::oracle cpe:/a:ca:brightstor_enterprise_backup_agent:10.5::sap cpe:/a:ca:brightstor_enterprise_backup_agent:10.5::sql

CVE-2005-1272

2005-08-05T00:00:00.000-04:00

2017-07-10T21:32:36.563-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

IDEFENSE 20050803 CA BrightStor ARCserve Backup Agent for MS SQL Server Buffer Overflow CERT-VN VU#279774 BID 14453 CONFIRM http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33239 XF brightstor-enterprise-backup-bo(21656) Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port (1) 6070 or (2) 6050.

cpe:/a:mysql:maxdb:7.5.00.23 cpe:/a:mysql:maxdb:7.5.00.25

CVE-2005-1274

2005-04-26T00:00:00.000-04:00

2008-09-05T16:48:42.670-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-05-10T16:14:00.000-04:00

ALLOWS_ADMIN_ACCESS

IDEFENSE 20050426 MySQL MaxDB Webtool Remote 'If' Stack Overflow Vulnerability Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via an HTTP unlock request and a long "If" parameter.

CVE-2005-1275

2005-04-25T00:00:00.000-04:00

2017-10-10T21:30:06.733-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://bugs.gentoo.org/show_bug.cgi?id=90423 BUGTRAQ 20050424 [Overflow.pl] ImageMagick ReadPNMImage() Heap Overflow CONFIRM http://www.imagemagick.org/script/changelog.php MANDRAKE MDKSA-2005:107 MISC http://www.overflow.pl/adv/imheapoverflow.txt REDHAT RHSA-2005:413 BID 13351 Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a PNM file with a small colors value.

CVE-2005-1277

2005-06-28T00:00:00.000-04:00

2008-09-10T15:38:41.147-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-1766. Reason: This candidate is a duplicate of CVE-2005-1766. Notes: This duplicate occurred due to insufficient coordination across three separate parties. All CVE users should reference CVE-2005-1766 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:lbl:tcpdump:3.9.1

CVE-2005-1278

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:41.970-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2005.60 REDHAT RHSA-2005:417 REDHAT RHSA-2005:421 BUGTRAQ 20050426 tcpdump[v3.8.x/v3.9.1]: ISIS, BGP, and LDP infinite loop DOS exploits. FEDORA FLSA:156139 BID 13392 The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero length, as demonstrated using a GRE packet.

cpe:/a:lbl:tcpdump:3.8.3

CVE-2005-1279

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:46.297-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2005.60 DEBIAN DSA-850 REDHAT RHSA-2005:417 REDHAT RHSA-2005:421 BUGTRAQ 20050426 tcpdump[v3.8.x/v3.9.1]: ISIS, BGP, and LDP infinite loop DOS exploits. FEDORA FLSA:156139 BID 13389 tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not properly handled by RT_ROUTING_INFO, or (2) LDP packet, which is not properly handled by the ldp_print function.

cpe:/a:lbl:tcpdump:3.9.1

CVE-2005-1280

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:46.737-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2005.60 REDHAT RHSA-2005:417 REDHAT RHSA-2005:421 BUGTRAQ 20050426 tcpdump(/ethereal)[]: (RSVP) rsvp_print() infinite loop DOS. FEDORA FLSA:156139 BID 13390 The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4.

cpe:/a:ethereal_group:ethereal:0.8 cpe:/a:ethereal_group:ethereal:0.8.13 cpe:/a:ethereal_group:ethereal:0.8.14 cpe:/a:ethereal_group:ethereal:0.8.15 cpe:/a:ethereal_group:ethereal:0.8.18 cpe:/a:ethereal_group:ethereal:0.8.19 cpe:/a:ethereal_group:ethereal:0.9 cpe:/a:ethereal_group:ethereal:0.9.1 cpe:/a:ethereal_group:ethereal:0.9.2 cpe:/a:ethereal_group:ethereal:0.9.3 cpe:/a:ethereal_group:ethereal:0.9.4 cpe:/a:ethereal_group:ethereal:0.9.5 cpe:/a:ethereal_group:ethereal:0.9.6 cpe:/a:ethereal_group:ethereal:0.9.7 cpe:/a:ethereal_group:ethereal:0.9.8 cpe:/a:ethereal_group:ethereal:0.9.9 cpe:/a:ethereal_group:ethereal:0.9.10 cpe:/a:ethereal_group:ethereal:0.9.11 cpe:/a:ethereal_group:ethereal:0.9.12 cpe:/a:ethereal_group:ethereal:0.9.13 cpe:/a:ethereal_group:ethereal:0.9.14 cpe:/a:ethereal_group:ethereal:0.9.15 cpe:/a:ethereal_group:ethereal:0.9.16 cpe:/a:ethereal_group:ethereal:0.10 cpe:/a:ethereal_group:ethereal:0.10.1 cpe:/a:ethereal_group:ethereal:0.10.2 cpe:/a:ethereal_group:ethereal:0.10.3 cpe:/a:ethereal_group:ethereal:0.10.4 cpe:/a:ethereal_group:ethereal:0.10.5 cpe:/a:ethereal_group:ethereal:0.10.6 cpe:/a:ethereal_group:ethereal:0.10.7 cpe:/a:ethereal_group:ethereal:0.10.8 cpe:/a:ethereal_group:ethereal:0.10.9 cpe:/a:ethereal_group:ethereal:0.10.10

CVE-2005-1281

2005-04-26T00:00:00.000-04:00

2008-09-05T16:48:43.640-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-10T15:55:00.000-04:00

BUGTRAQ 20050426 tcpdump(/ethereal)[]: (RSVP) rsvp_print() infinite loop DOS. BID 13391 Ethereal 0.10.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4.

cpe:/a:argosoft:argosoft_mail_server:1.8.7.6::pro

CVE-2005-1282

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:36.610-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050422 Multiple vulnerabilities in Argosoft Mail Server 1.8.7.6 BID 13326 XF argosoft-mail-server-html-tag-filter-xss(20225) Multiple cross-site scripting (XSS) vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the src parameter in an IMG tag, (2) User settings, or (3) Address book input boxes in the webmail interface.

cpe:/a:argosoft:argosoft_mail_server:1.8.7.6::pro

CVE-2005-1283

2005-04-22T00:00:00.000-04:00

2017-07-10T21:32:36.657-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050422 Multiple vulnerabilities in Argosoft Mail Server 1.8.7.6 XF argosoft-mail-server-eml-files-dir-traversal(20226) XF argosoft-mail-server-dir-traversal(20229) Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to (1) read arbitrary files via the UIDL parameter to the msg script or (2) copy or move the user's .eml file to arbitrary locations via the delete script, a different vulnerability than CVE-2005-0367.

cpe:/a:argosoft:argosoft_mail_server:1.8.7.6::pro

CVE-2005-1284

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:36.720-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050422 Multiple vulnerabilities in Argosoft Mail Server 1.8.7.6 BID 13323 XF argosoft-mail-server-add-new-mail-account(20228) The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Allow Creation of Accounts From the Web Interface" is disabled, via a direct HTTP POST request.

cpe:/a:woltlab:burning_board:2.3.1

CVE-2005-1285

2005-04-22T00:00:00.000-04:00

2016-10-17T23:18:31.260-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050422 [SePro Bugtraq] WBB - WoltLab Burning Board <= 2.3.1 - XSS SECTRACK 1013790 BID 13325 Cross-site scripting (XSS) vulnerability in thread.php in WoltLab Burning Board 2.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the hilight parameter.

cpe:/a:softwin:bitdefender_antivirus:professional_plus_8 cpe:/a:softwin:bitdefender_antivirus:standard_8

CVE-2005-1286

2005-05-02T00:00:00.000-04:00

2016-10-17T23:18:32.637-04:00

1.2

LOCAL

HIGH

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050422 BitDefender 8 - Race condition vulnerability Unquoted Windows search path vulnerability in BitDefender 8 allows local users to prevent BitDefender from starting by creating a malicious C:\program.exe, possibly due to the lack of quoting of the full pathname when executing a process.

cpe:/a:bk_dev:bk_forum:4

CVE-2005-1287

2005-04-23T00:00:00.000-04:00

2018-10-19T11:31:47.097-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050423 Multiple Sql injection vulnerabilities in BK Forum v.4 SECTRACK 1013793 MISC http://www.digitalparadox.org/advisories/bkdev.txt BUGTRAQ 20060421 BK Forum <<--V.4.0 SQL Injection BUGTRAQ 20060423 BK Forum <= 4.0 Remote SQL Injection Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp.

cpe:/a:asp_press:acs_blog:0.8 cpe:/a:asp_press:acs_blog:0.9 cpe:/a:asp_press:acs_blog:1.0 cpe:/a:asp_press:acs_blog:1.0.1 cpe:/a:asp_press:acs_blog:1.0.2 cpe:/a:asp_press:acs_blog:1.0.3 cpe:/a:asp_press:acs_blog:1.1 cpe:/a:asp_press:acs_blog:1.1.1 cpe:/a:asp_press:acs_blog:1.1.2 cpe:/a:asp_press:acs_blog:1.1b

CVE-2005-1288

2005-05-02T00:00:00.000-04:00

2016-10-17T23:18:35.153-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050423 ACSblog bug SECTRACK 1013795 inc_login_check.asp ACS Blog 0.8 through 1.1.3 allows remote attackers to gain administrator privileges via the "in" value in a cookie.

cpe:/a:e-cart:e-cart:2004_1.1

CVE-2005-1289

2005-05-02T00:00:00.000-04:00

2016-10-17T23:18:36.340-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050423 E-Cart v1.1 Remote Command Execution SECTRACK 1013780 index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art and possibly (2) cat parameters.

CVE-2005-1290

2005-05-02T00:00:00.000-04:00

2016-10-17T23:18:37.730-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050423 -==phpBB 2.0.14 Multiple Vulnerabilities==- MISC http://neosecurityteam.net/Advisories/Advisory-14.txt Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) u parameter to profile.php, (2) highlight parameter to viewtopic.php, or (3) forumname or forumdesc parameters to admin_forums.php.

cpe:/a:cartwiz:asp_cart

CVE-2005-1291

2005-04-23T00:00:00.000-04:00

2017-07-10T21:32:36.767-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050423 Multiple Sql injection and XSS in CartWIZ ASP Cart SECTRACK 1013792 XF cartwiz-multiple-sql-injection(20246) Multiple SQL injection vulnerabilities in CartWIZ ASP Cart allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) addToCart.asp or (2) productDetails.asp, the (3) priceFrom, (4) idCategory, or (5) priceTo parameter to searchResults.asp, or (6) the idParentCategory parameter to productCatalogSubCats.asp.

cpe:/a:elemental_software:cartwiz

CVE-2005-1292

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:36.827-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050423 Multiple Sql injection and XSS in CartWIZ ASP Cart SECTRACK 1013792 XF cartwiz-multiple-script-xss(20249) Multiple cross-site scripting (XSS) vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web script or HTML via the idProduct parameter to (1) tellAFriend.asp or (2) addToWishlist.asp, redirect parameter to (3) access.asp or (4) login.asp, message parameter to (5) login.asp or (6) error.asp, or (7) sku or (8) name parameter to searchResults.asp.

cpe:/a:storeportal:storeportal:2.63

CVE-2005-1293

2005-05-02T00:00:00.000-04:00

2016-10-17T23:18:41.420-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://digitalparadox.org/advisories/storeportal.txt BUGTRAQ 20050424 Multiple SQL Injections in StorePortal 2.63 Multiple SQL injection vulnerabilities in default.asp in StorePortal 2.63 allow remote attackers to execute arbitrary SQL commands via the (1) language, (2) bpic, (3) idcategory, (4) content, (5) keyword, or (6) idproduct parameter.

cpe:/a:nokia:affix:3.2.0

CVE-2005-1294

2005-04-24T00:00:00.000-04:00

2016-10-17T23:18:42.543-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://affix.sourceforge.net/patch_hci_3_2_0 BUGTRAQ 20050424 DMA[2005-0423a] - 'Nokia Affix Bluetooth Integer Underflow' MISC http://www.digitalmunition.com/DMA%5B2005-0423a%5D.txt The affix_sock_register in the Affix Bluetooth Protocol Stack for Linux might allow local users to gain privileges via a socket call with a negative protocol value, which is used as an array index.

cpe:/a:include.cgi:include.cgi

CVE-2005-1295

2005-04-25T00:00:00.000-04:00

2016-10-17T23:18:43.700-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050425 remote command execution in include.cgi script include.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

cpe:/a:include.cgi:include.cgi

CVE-2005-1296

2005-04-25T00:00:00.000-04:00

2016-10-17T23:18:44.840-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20050425 remote command execution in include.cgi script include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.

cpe:/a:include.cgi:include.cgi

CVE-2005-1297

2005-04-25T00:00:00.000-04:00

2016-10-17T23:18:46.340-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050425 remote command execution in include.cgi script Cross-site scripting (XSS) vulnerability in the include.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.

cpe:/a:inserter.cgi:inserter.cgi

CVE-2005-1298

2005-04-25T00:00:00.000-04:00

2016-10-17T23:18:47.513-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050425 remote command execution in inserter.cgi script The inserter.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

CVE-2005-1299

2005-04-25T00:00:00.000-04:00

2016-10-17T23:18:48.687-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20050425 remote command execution in inserter.cgi script The inserter.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.

cpe:/a:inserter.cgi:inserter.cgi

CVE-2005-1300

2005-04-25T00:00:00.000-04:00

2016-10-17T23:18:49.950-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050425 remote command execution in inserter.cgi script Cross-site scripting (XSS) vulnerability in the inserter.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.

cpe:/a:nprotect:netizen:2005.3.17.1

CVE-2005-1301

2005-04-13T00:00:00.000-04:00

2016-10-17T23:18:51.217-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://jvn.jp/jp/JVN%23AF02FB4B/index.html BUGTRAQ 20050425 [SNS Advisory No.80] nProtect:Netizen Arbitrary File Download Vulnerability MISC http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/80_e.html nProtect:Netizen 2005.3.17.1 does not properly verify that the update module is downloaded from an authorized site, which allows remote malicious web sites to write arbitrary files.

cpe:/a:swsoft:confixx:3.0.6 cpe:/a:swsoft:confixx:3.0.8 cpe:/a:swsoft:confixx:pro_3

CVE-2005-1302

2005-05-02T00:00:00.000-04:00

2016-10-17T23:18:52.687-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050425 Sql Injection in Confixx 3.06 & 3.08 & 3.?? ? SREASON 694 BID 13355 SQL injection vulnerability in Confixx 3.08 and earlier allows remote attackers to execute arbitrary SQL commands via the "change user" field.

cpe:/a:citat.pl:citat.pl

CVE-2005-1303

2005-04-24T00:00:00.000-04:00

2016-10-17T23:18:53.827-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050424 remote command execution in citat.pl script The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument.

CVE-2005-1304

2005-05-02T00:00:00.000-04:00

2016-10-17T23:18:54.907-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050424 remote command execution in citat.pl script The citat.pl script allows remote attackers to execute arbitrary files via shell metacharacters in the argument.

cpe:/a:hyper.cgi:hyper.cgi

CVE-2005-1305

2005-05-02T00:00:00.000-04:00

2016-10-17T23:18:56.157-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050424 hyper.cgi script file show bug The hyper.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

cpe:/a:adobe:acrobat:7.0 cpe:/a:adobe:acrobat:7.0.1 cpe:/a:adobe:acrobat_reader:7.0 cpe:/a:adobe:acrobat_reader:7.0.1

CVE-2005-1306

2005-06-15T00:00:00.000-04:00

2008-09-05T16:48:47.687-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-16T16:08:00.000-04:00

CONFIRM http://www.adobe.com/support/techdocs/331710.html BID 13962 The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulnerability."

cpe:/a:adobe:version_cue:gold::mac_os_x cpe:/o:apple:mac_os_x:10.3.6

CVE-2005-1307

2005-05-17T00:00:00.000-04:00

2017-07-10T21:32:36.890-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20041206 Local root exploit on Mac OS X with Adobe Version Cue BUGTRAQ 20050516 Mac OS X - Adobe Version Cue local root exploit [c version exploit] SECTRACK 1012446 CONFIRM http://www.adobe.com/support/techdocs/331621.html MISC http://www.securiteam.com/exploits/5EP0D20FQC.html BID 11833 XF version-cue-gain-privileges(18445) The (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working directory to find and execute the productname.sh script, which allows local users to execute arbitrary code by copying and calling the scripts from a user-controlled directory.

cpe:/a:inter7:sqwebmail:3.4.1 cpe:/a:inter7:sqwebmail:3.5.0 cpe:/a:inter7:sqwebmail:3.5.1 cpe:/a:inter7:sqwebmail:3.5.2 cpe:/a:inter7:sqwebmail:3.5.3 cpe:/a:inter7:sqwebmail:3.6.0 cpe:/a:inter7:sqwebmail:3.6.1 cpe:/a:inter7:sqwebmail:4.0.4_2004-05-24 cpe:/a:inter7:sqwebmail:4.0.5

CVE-2005-1308

2005-04-15T00:00:00.000-04:00

2008-09-05T16:48:48.017-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-10T14:30:00.000-04:00

ALLOWS_OTHER_ACCESS

BID 13374 SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script or HTML.

cpe:/a:eaden_mckee:bblog:0.7.4

CVE-2005-1309

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:48.203-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-10T14:29:00.000-04:00

SECTRACK 1013811 MISC http://sourceforge.net/tracker/index.php?func=detail&aid=1188735&group_id=81992&atid=564683 Cross-site scripting (XSS) vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML via the (1) entry title field or (2) comment body text.

cpe:/a:eaden_mckee:bblog:0.7.4

CVE-2005-1310

2005-04-23T00:00:00.000-04:00

2008-09-05T16:48:48.343-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-10T14:20:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1013811 MISC http://sourceforge.net/tracker/index.php?func=detail&aid=1188735&group_id=81992&atid=564683 SQL injection vulnerability in bBlog 0.7.4 allows remote attackers to execute arbitrary SQL commands via the postid parameter.

cpe:/a:yappa-ng:yappa-ng:0.9 cpe:/a:yappa-ng:yappa-ng:1.0 cpe:/a:yappa-ng:yappa-ng:1.1 cpe:/a:yappa-ng:yappa-ng:1.2 cpe:/a:yappa-ng:yappa-ng:1.3 cpe:/a:yappa-ng:yappa-ng:1.4 cpe:/a:yappa-ng:yappa-ng:1.5 cpe:/a:yappa-ng:yappa-ng:1.6 cpe:/a:yappa-ng:yappa-ng:2.0.0 cpe:/a:yappa-ng:yappa-ng:2.0.1 cpe:/a:yappa-ng:yappa-ng:2.1.0 cpe:/a:yappa-ng:yappa-ng:2.2.0 cpe:/a:yappa-ng:yappa-ng:2.2.1 cpe:/a:yappa-ng:yappa-ng:2.2.2 cpe:/a:yappa-ng:yappa-ng:2.3.0 cpe:/a:yappa-ng:yappa-ng:2.3.1

CVE-2005-1311

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:48.500-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-10T14:17:00.000-04:00

CONFIRM http://sourceforge.net/project/shownotes.php?release_id=323206 BID 13372 Cross-site scripting (XSS) vulnerability in Yappa-NG before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

CVE-2005-1312

2005-04-24T00:00:00.000-04:00

2008-09-05T16:48:48.703-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-10T14:23:00.000-04:00

ALLOWS_OTHER_ACCESS

CONFIRM http://sourceforge.net/project/shownotes.php?release_id=323206 BID 13371 PHP remote file inclusion vulnerability in Yappa-NG before 2.3.2 allows remote attackers to execute arbitrary PHP code via unknown vectors.

cpe:/a:horde:passwd:2.0 cpe:/a:horde:passwd:2.1 cpe:/a:horde:passwd:2.2 cpe:/a:horde:passwd:2.2.1

CVE-2005-1313

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:48.890-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-10T14:14:00.000-04:00

CONFIRM http://cvs.horde.org/diff.php/passwd/docs/CHANGES?r1=1.1.1.1.2.28&r2=1.1.1.1.2.33&ty=h MLIST [sork] 20050422 Passwd 2.2.2 (final) Cross-site scripting (XSS) vulnerability in Horde Passwd module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.

cpe:/a:horde:kronolith:1.1.3

CVE-2005-1314

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:49.063-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-10T14:13:00.000-04:00

CONFIRM http://cvs.horde.org/diff.php/kronolith/docs/CHANGES?r1=1.69.2.39&r2=1.69.2.41&ty=h MLIST [kronolith] 20050422 Kronolith 1.1.4 (final) Cross-site scripting (XSS) vulnerability in Horde Kronolith module before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.

cpe:/a:horde:turba:1.2 cpe:/a:horde:turba:1.2.1 cpe:/a:horde:turba:1.2.1_rc1 cpe:/a:horde:turba:1.2.2 cpe:/a:horde:turba:1.2.3 cpe:/a:horde:turba:1.2.3_rc1 cpe:/a:horde:turba:1.2.4

CVE-2005-1315

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:49.217-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-10T14:11:00.000-04:00

CONFIRM http://cvs.horde.org/diff.php/turba/docs/CHANGES?r1=1.61.2.74&r2=1.61.2.77&ty=h MLIST [turba] 20050422 Turba 1.2.5 (final) Cross-site scripting (XSS) vulnerability in Horde Turba module before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.

cpe:/a:horde:accounts:2.1 cpe:/a:horde:accounts:2.1.1

CVE-2005-1316

2005-05-02T00:00:00.000-04:00

2008-09-10T15:38:45.087-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-10T14:10:00.000-04:00

CONFIRM http://cvs.horde.org/diff.php/accounts/docs/CHANGES?r1=1.1.1.1.2.15&r2=1.1.1.1.2.18&ty=h Cross-site scripting (XSS) vulnerability in Horde Accounts module before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.

cpe:/a:horde:chora:1.1 cpe:/a:horde:chora:1.2 cpe:/a:horde:chora:1.2.2

CVE-2005-1317

2005-04-25T00:00:00.000-04:00

2008-09-05T16:48:49.530-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2005-05-10T14:13:00.000-04:00

ALLOWS_OTHER_ACCESS

CONFIRM http://cvs.horde.org/diff.php/chora/docs/CHANGES?r1=1.45.2.34&r2=1.45.2.37&ty=h MLIST 20050422 Chora 1.2.3 (final) Cross-site scripting (XSS) vulnerability in Horde Chora module before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.

cpe:/a:horde:forwards:2.1 cpe:/a:horde:forwards:2.2 cpe:/a:horde:forwards:2.2.1

CVE-2005-1318

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:49.703-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-10T14:08:00.000-04:00

CONFIRM http://cvs.horde.org/diff.php/forwards/docs/CHANGES?r1=1.1.1.1.2.20&r2=1.1.1.1.2.23&ty=h MLIST [sork] 20050422 Forwards 2.2.2 (final) Cross-site scripting (XSS) vulnerability in Horde Forwards E-Mail Forwarding Manager before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.

cpe:/a:horde:imp:3.2.2 cpe:/a:horde:imp:3.2.3 cpe:/a:horde:imp:3.2.4 cpe:/a:horde:imp:3.2.5 cpe:/a:horde:imp:3.2.6 cpe:/a:horde:imp:3.2.7 cpe:/a:horde:imp:3.2.7_rc1

CVE-2005-1319

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:49.857-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-10T14:07:00.000-04:00

CONFIRM http://cvs.horde.org/diff.php/imp/docs/CHANGES?r1=1.389.2.119&r2=1.389.2.125&ty=h MLIST [imp] 20050422 IMP 3.2.8 (final) Cross-site scripting (XSS) vulnerability in Horde IMP Webmail client before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.

cpe:/a:horde:mnemo:1.1 cpe:/a:horde:mnemo:1.1.1 cpe:/a:horde:mnemo:1.1.2 cpe:/a:horde:mnemo:1.1.3

CVE-2005-1320

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:50.030-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-10T14:05:00.000-04:00

CONFIRM http://cvs.horde.org/diff.php/mnemo/docs/CHANGES?r1=1.4.2.31&r2=1.4.2.33&ty=h MLIST [mnemo] 20050422 Mnemo 1.1.4 (final) Cross-site scripting (XSS) vulnerability in Horde Mnemo Note Manager before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.

cpe:/a:horde:vaction:1.0a cpe:/a:horde:vaction:2.1 cpe:/a:horde:vaction:2.2 cpe:/a:horde:vaction:2.2.1

CVE-2005-1321

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:50.187-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-10T14:02:00.000-04:00

CONFIRM http://cvs.horde.org/diff.php/vacation/docs/CHANGES?r1=1.1.1.1.2.21&r2=1.1.1.1.2.26&ty=h MLIST [sork] 20050422 Vacation 2.2.2 (final) Cross-site scripting (XSS) vulnerability in Horde Vacation module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.

cpe:/a:horde:nag:1.1.1 cpe:/a:horde:nag:1.1.2

CVE-2005-1322

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:50.357-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-10T13:56:00.000-04:00

CONFIRM http://cvs.horde.org/diff.php/nag/docs/CHANGES?r1=1.54.2.33&r2=1.54.2.35&ty=h MLIST [nag] 20050422 Nag 1.1.3 (final) Cross-site scripting (XSS) vulnerability in Horde Nag Task List Manager before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.

cpe:/a:intersoft:netterm:4.2.2

CVE-2005-1323

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:36.953-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.securenetterm.com/html/what_s_new.html BUGTRAQ 20050426 ADV: NetTerm's NetFtpd 4.2.2 Buffer Overflow + PoC Exploit BID 13396 VUPEN ADV-2005-0407 XF netterm-netftpd-user-bo(20285) Buffer overflow in NetFtpd for NetTerm 5.1.1 and earlier allows remote attackers to execute arbitrary code via a long USER command.

cpe:/a:matthieu_aubry:phpmyvisites:0.1_beta cpe:/a:matthieu_aubry:phpmyvisites:1.0 cpe:/a:matthieu_aubry:phpmyvisites:1.1 cpe:/a:matthieu_aubry:phpmyvisites:1.2 cpe:/a:matthieu_aubry:phpmyvisites:1.2.1 cpe:/a:matthieu_aubry:phpmyvisites:1.2.2 cpe:/a:matthieu_aubry:phpmyvisites:1.2_beta cpe:/a:matthieu_aubry:phpmyvisites:1.3

CVE-2005-1324

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:37.017-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov VUPEN ADV-2005-0378 XF phpmyvisites-index-xss(20255) Multiple cross-site scripting (XSS) vulnerabilities in index.php for phpMyVisites allow remote attackers to inject arbitrary web script or HTML via the (1) part, (2) per, or (3) site parameters.

cpe:/a:matthieu_aubry:phpmyvisites:1.3

CVE-2005-1325

2005-05-02T00:00:00.000-04:00

2016-10-17T23:18:58.640-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://cvs.sourceforge.net/viewcvs.py/phpmyvisites/phpmyvisites/include/set_lang.php?r1=1.5&r2=1.6 BUGTRAQ 20050426 [exploits] phpMyVisites 1.3 local file retrieval BID 13370 set_lang.php in phpMyVisites 1.3 allows remote attackers to read and include arbitrary files via the mylang parameter.

cpe:/a:voodoo_circle:voodoo_circle:1.0.20 cpe:/a:voodoo_circle:voodoo_circle:1.0.21 cpe:/a:voodoo_circle:voodoo_circle:1.0.22 cpe:/a:voodoo_circle:voodoo_circle:1.0.23 cpe:/a:voodoo_circle:voodoo_circle:1.0.24 cpe:/a:voodoo_circle:voodoo_circle:1.0.25 cpe:/a:voodoo_circle:voodoo_circle:1.0.26 cpe:/a:voodoo_circle:voodoo_circle:1.0.27 cpe:/a:voodoo_circle:voodoo_circle:1.0.28 cpe:/a:voodoo_circle:voodoo_circle:1.0.29 cpe:/a:voodoo_circle:voodoo_circle:1.0.30 cpe:/a:voodoo_circle:voodoo_circle:1.0.31 cpe:/a:voodoo_circle:voodoo_circle:1.0.32

CVE-2005-1326

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:51.000-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-10T00:00:00.000-04:00

CONFIRM http://sourceforge.net/project/shownotes.php?release_id=323254 Buffer overflow in VooDoo cIRCle BOTNET before 1.0.33 allows remote authenticated attackers to cause a denial of service (client crash) via a crafted packet.

cpe:/a:woltlab:burning_board:2.3.1

CVE-2005-1327

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:51.187-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-10T00:00:00.000-04:00

BUGTRAQ 20050424 WoltLab Burning Board <= 2.3.1 PL2 - XSS Vulnerability (24.04.05) BID 13353 Cross-site scripting (XSS) vulnerability in pms.php for Woltlab Burning Board 2.3.1 PL2 and earlier allows remote attackers to inject arbitrary web script or HTML via the folderid parameter.

cpe:/a:oneworldstore:oneworldstore:basic cpe:/a:oneworldstore:oneworldstore:business cpe:/a:oneworldstore:oneworldstore:enterprise cpe:/a:oneworldstore:oneworldstore:free cpe:/a:oneworldstore:oneworldstore:soho

CVE-2005-1328

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:51.327-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-10T00:00:00.000-04:00

MISC http://lostmon.blogspot.com/2005/04/oneworldstore-critical-failure.html SECTRACK 1013782 CONFIRM http://www.oneworldstore.com/support_security_issue_updates.asp#April_20_2005_Lostmon BID 13322 OneWorldStore allows remote attackers to cause a denial of service (application crash) via a direct request to owConnections/chksettings.asp.

CVE-2005-1329

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:51.500-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-10T00:00:00.000-04:00

MISC http://lostmon.blogspot.com/2005/04/oneworldstore-user-information.html SECTRACK 1013796 CONFIRM http://www.oneworldstore.com/support_security_issue_updates.asp#April_24_2005_Lostmon BID 13361 owOfflineCC.asp in OneWorldStore allows remote attackers to obtain sensitive information by modifying the idOrder parameter.

cpe:/o:apple:mac_os_x:10.3.9 cpe:/o:apple:mac_os_x_server:10.3.9

CVE-2005-1330

2005-05-04T00:00:00.000-04:00

2008-09-05T16:48:51.657-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-05-12T14:21:00.000-04:00

APPLE APPLE-SA-2005-05-03 AppKit in Mac OS X 10.3.9 allows attackers to cause a denial of service (Cocoa application crash) via a malformed TIFF image that causes the NXSeek to use an incorrect offset, leading to an unhandled exception.

cpe:/a:apple:applescript:2.0.0 cpe:/o:apple:mac_os_x:10.3 cpe:/o:apple:mac_os_x:10.3.1 cpe:/o:apple:mac_os_x:10.3.2 cpe:/o:apple:mac_os_x:10.3.3 cpe:/o:apple:mac_os_x:10.3.4 cpe:/o:apple:mac_os_x:10.3.5 cpe:/o:apple:mac_os_x:10.3.6 cpe:/o:apple:mac_os_x:10.3.7 cpe:/o:apple:mac_os_x:10.3.8 cpe:/o:apple:mac_os_x:10.3.9 cpe:/o:apple:mac_os_x_server:10.3 cpe:/o:apple:mac_os_x_server:10.3.1 cpe:/o:apple:mac_os_x_server:10.3.2 cpe:/o:apple:mac_os_x_server:10.3.3 cpe:/o:apple:mac_os_x_server:10.3.4 cpe:/o:apple:mac_os_x_server:10.3.5 cpe:/o:apple:mac_os_x_server:10.3.6 cpe:/o:apple:mac_os_x_server:10.3.7 cpe:/o:apple:mac_os_x_server:10.3.8 cpe:/o:apple:mac_os_x_server:10.3.9

CVE-2005-1331

2005-05-04T00:00:00.000-04:00

2011-03-07T21:21:38.047-05:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2005-05-03 MISC http://remahl.se/david/vuln/010/ BID 13480 VUPEN ADV-2005-0455 The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is different than the actual code that would be run, which could allow remote attackers to trick users into executing malicious code via certain URI characters such as NULL, control characters, and homographs.

cpe:/o:apple:mac_os_x:10.3.9 cpe:/o:apple:mac_os_x_server:10.3.9

CVE-2005-1332

2005-05-04T00:00:00.000-04:00

2008-09-05T16:48:52.030-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-12T14:28:00.000-04:00

ALLOWS_USER_ACCESS

CONFIRM http://docs.info.apple.com/article.html?artnum=301381 APPLE APPLE-SA-2005-05-03 MISC http://www.digitalmunition.com/DMA%5B2005-0502a%5D.txt CERT-VN VU#258390 CERT TA05-136A Bluetooth-enabled systems in Mac OS X 10.3.9 enables the Bluetooth file exchange service by default, which allows remote attackers to access files without the user being notified, and local users to access files via the default directory.

cpe:/o:apple:mac_os_x:10.3.9

CVE-2005-1333

2005-05-04T00:00:00.000-04:00

2008-09-05T16:48:52.187-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-12T14:26:00.000-04:00

APPLE APPLE-SA-2005-06-08 APPLE APPLE-SA-2005-05-03 MISC http://www.digitalmunition.com/DMA%5B2005-0502a%5D.txt BID 13491 Directory traversal vulnerability in the Bluetooth file and object exchange (OBEX) services in Mac OS X 10.3.9 allows remote attackers to read arbitrary files.

CVE-2005-1334

2005-06-03T00:00:00.000-04:00

2008-09-10T15:38:47.023-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-1579. Reason: This candidate is a duplicate of CVE-2005-1579. Notes: All CVE users should reference CVE-2005-1579 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/o:apple:mac_os_x:10.3.9 cpe:/o:apple:mac_os_x_server:10.3.9

CVE-2005-1335

2005-05-04T00:00:00.000-04:00

2008-09-05T16:48:52.467-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-05-12T14:31:00.000-04:00

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2005-05-03 CERT-VN VU#331694 CERT TA05-136A Unknown vulnerability in Mac OS X 10.3.9 allows local users to gain privileges via (1) chfn, (2) chpass, and (3) chsh, which "use external helper programs in an insecure manner."

cpe:/o:apple:mac_os_x:10.3.9

CVE-2005-1336

2005-05-04T00:00:00.000-04:00

2008-09-05T16:48:52.640-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-12T14:33:00.000-04:00

APPLE APPLE-SA-2005-05-03 CERT-VN VU#582934 CERT TA05-136A Buffer overflow in the Foundation framework for Mac OS X 10.3.9 allows local users to execute arbitrary code via a long environment variable.

cpe:/o:apple:mac_os_x:10.3.9 cpe:/o:apple:mac_os_x_server:10.3.9

CVE-2005-1337

2005-05-04T00:00:00.000-04:00

2008-09-05T16:48:52.797-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-12T14:38:00.000-04:00

ALLOWS_USER_ACCESS

APPLE APPLE-SA-2005-05-03 MISC http://remahl.se/david/vuln/004/ Apple Help Viewer 2.0.7 and 3.0.0 in Mac OS X 10.3.9 allows remote attackers to read and execute arbitrary scrpts with less restrictive privileges via a help:// URI.

cpe:/o:apple:mac_os_x:10.3.9

CVE-2005-1338

2005-05-04T00:00:00.000-04:00

2008-09-05T16:48:52.967-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-12T14:38:00.000-04:00

ALLOWS_OTHER_ACCESS

APPLE APPLE-SA-2005-05-03 Mac OS X 10.3.9, when using an LDAP server that does not use ldap_extended_operation, may store initial LDAP passwords for new accounts in plaintext.

cpe:/o:apple:mac_os_x:10.3.9 cpe:/o:apple:mac_os_x_server:10.3.9

CVE-2005-1339

2005-05-04T00:00:00.000-04:00

2008-09-05T16:48:53.123-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-12T14:42:00.000-04:00

ALLOWS_OTHER_ACCESS

APPLE APPLE-SA-2005-05-03 lukemftpd in Mac OS X 10.3.9 allows remote authenticated users to escape the chroot environment by logging in with their full name.

cpe:/o:apple:mac_os_x:10.3.9

CVE-2005-1340

2005-05-04T00:00:00.000-04:00

2008-09-05T16:48:53.280-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-12T14:45:00.000-04:00

ALLOWS_OTHER_ACCESS

APPLE APPLE-SA-2005-05-03 The HTTP proxy service in Server Admin for Mac OS X 10.3.9 does not restrict access when it is enabled, which allows remote attackers to use the proxy.

cpe:/a:apple:terminal:1.4.4 cpe:/o:apple:mac_os_x:10.3 cpe:/o:apple:mac_os_x:10.3.1 cpe:/o:apple:mac_os_x:10.3.2 cpe:/o:apple:mac_os_x:10.3.3 cpe:/o:apple:mac_os_x:10.3.4 cpe:/o:apple:mac_os_x:10.3.5 cpe:/o:apple:mac_os_x:10.3.6 cpe:/o:apple:mac_os_x:10.3.7 cpe:/o:apple:mac_os_x:10.3.8 cpe:/o:apple:mac_os_x:10.3.9 cpe:/o:apple:mac_os_x_server:10.3 cpe:/o:apple:mac_os_x_server:10.3.1 cpe:/o:apple:mac_os_x_server:10.3.2 cpe:/o:apple:mac_os_x_server:10.3.3 cpe:/o:apple:mac_os_x_server:10.3.4 cpe:/o:apple:mac_os_x_server:10.3.5 cpe:/o:apple:mac_os_x_server:10.3.6 cpe:/o:apple:mac_os_x_server:10.3.7 cpe:/o:apple:mac_os_x_server:10.3.8 cpe:/o:apple:mac_os_x_server:10.3.9

CVE-2005-1341

2005-05-04T00:00:00.000-04:00

2011-03-07T21:21:38.750-05:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

APPLE APPLE-SA-2005-05-03 MISC http://remahl.se/david/vuln/012/ SECTRACK 1013882 CERT-VN VU#994510 BID 13480 VUPEN ADV-2005-0455 Apple Terminal 1.4.4 allows attackers to execute arbitrary commands via terminal escape sequences.

CVE-2005-1342

2005-05-04T00:00:00.000-04:00

2011-03-07T21:21:38.847-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

APPLE APPLE-SA-2005-05-03 MISC http://remahl.se/david/vuln/011/ CERT-VN VU#356070 BID 13480 CERT TA05-136A VUPEN ADV-2005-0455 The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands.

cpe:/o:apple:mac_os_x:10.3.9 cpe:/o:apple:mac_os_x_server:10.3.9

CVE-2005-1343

2005-05-03T00:00:00.000-04:00

2008-09-05T16:48:53.827-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2005-06-08 APPLE APPLE-SA-2005-05-03 CERT-VN VU#706838 CERT TA05-136A Stack-based buffer overflow in the VPN daemon (vpnd) for Mac OS X before 10.3.9 allows local users to execute arbitrary code via a long -i (Server_id) argument.

cpe:/a:apache:http_server:2.0.52

CVE-2005-1344

2005-05-02T00:00:00.000-04:00

2008-09-10T15:38:47.883-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-10T00:00:00.000-04:00

APPLE APPLE-SA-2005-08-17 APPLE APPLE-SA-2005-08-15 APPLE APPLE-SA-2005-05-03 MISC http://www.lucaercoli.it/advs/htdigest.txt MISC http://www.securiteam.com/unixfocus/5EP061FEKC.html BID 13537 Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is executed from a CGI program. Therefore this may not be a vulnerability.

CVE-2005-1345

2005-05-02T00:00:00.000-04:00

2017-10-10T21:30:06.997-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2005:948 FEDORA FLSA-2006:152809 DEBIAN DSA-721 REDHAT RHSA-2005:415 CONFIRM http://www.squid-cache.org/bugs/show_bug.cgi?id=1255 CONFIRM http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-acl_error Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator.

cpe:/a:symantec:antivirus_scan_engine:4.3.7.27 cpe:/a:symantec:mail_security:4.0.5.66::smtp cpe:/a:symantec:mail_security:4.5.4.743::exchange cpe:/a:symantec:norton_antivirus:2005_11.0.0 cpe:/a:symantec:norton_internet_security:2005_contains_nav_11.0.0 cpe:/a:symantec:norton_system_works:2005_contains_nav_11.0.0 cpe:/a:symantec:symav_filter_domino_nt:3.1.1.87 cpe:/a:symantec:web_security:3.0.1.72

CVE-2005-1346

2005-05-02T00:00:00.000-04:00

2008-09-05T16:48:54.310-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

2005-05-10T00:00:00.000-04:00

CONFIRM http://securityresponse.symantec.com/avcenter/security/Content/2005.04.27.html Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27, SAV/Filter for Domino NT 3.1.1.87, and Mail Security for Exchange 4.5.4.743, when running on Windows, allows remote attackers to cause a denial of service (component crash) and avoid detection via a crafted RAR file.

cpe:/a:adobe:acrobat_reader:3.0 cpe:/a:adobe:acrobat_reader:5.0.10 cpe:/a:adobe:acrobat_reader:6.0

CVE-2005-1347

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:37.077-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1013774 MISC http://www.alphahackers.com/advisories/acrobat6.txt XF acrobat-reader-invalid-id-handle-bo(20216) ** UNVERIFIABLE ** NOTE: this issue describes a problem that can not be independently verified as of 20050421. Adobe Acrobat reader (AcroRd32.exe) 6.0 and earlier allows remote attackers to cause a denial of service ("Invalid-ID-Handle-Error" error) and modify memory beginning at a particular address, possibly allowing the execution of arbitrary code, via a crafted PDF file. NOTE: the vendor has stated that the reporter refused to provide sufficient details to confirm the issue. In addition, due to the lack of details in the original advisory, an independent verification is not possible. Finally, the reliability of the original reporter is unknown. This item has only been assigned a CVE identifier for tracking purposes, and to serve as a concrete example of the newly defined UNVERIFIABLE and PRERELEASE content decisions in CVE, which must be discussed by the Editorial Board. Without additional details or independent verification by reliable sources, it is highly likely that this item will be REJECTED.

cpe:/a:mailenable:mailenable_enterprise:1.04 cpe:/a:mailenable:mailenable_professional:1.54

CVE-2005-1348

2005-05-02T00:00:00.000-04:00

2016-10-17T23:18:59.860-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050424 MailEnable HTTPS Buffer Overflow [x0n3-h4ck] SECTRACK 1013786 MISC http://www.x0n3-h4ck.org/upload/x0n3-h4ck_mailenable_https.pl Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to execute arbitrary code via a long HTTP Authorization header.

cpe:/a:perl:convert_uulib:1.050

CVE-2005-1349

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:37.140-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

GENTOO GLSA-200504-26 MANDRIVA MDKSA-2006:022 BID 13401 XF convert-uulib-bo(20275) Buffer overflow in Convert-UUlib (Convert::UUlib) before 1.051 allows remote attackers to execute arbitrary code via a malformed parameter to a read operation.

cpe:/a:leif_m._wright:ad.cgi

CVE-2005-1350

2005-05-02T00:00:00.000-04:00

2016-10-17T23:19:01.327-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050424 remote command execution in ad.cgi script The ad.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

cpe:/a:leif_m._wright:ad.cgi

CVE-2005-1351

2005-05-02T00:00:00.000-04:00

2016-10-17T23:19:02.547-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050424 remote command execution in ad.cgi script The ad.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.

cpe:/a:leif_m._wright:ad.cgi

CVE-2005-1352

2005-05-02T00:00:00.000-04:00

2016-10-17T23:19:03.640-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050424 remote command execution in ad.cgi script Cross-site scripting (XSS) vulnerability in the ad.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.

cpe:/a:forum.pl:forum.pl

CVE-2005-1353

2005-05-02T00:00:00.000-04:00

2016-10-17T23:19:04.640-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050424 remote command execution in forum.pl script The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument.

cpe:/a:forum.pl:forum.pl

CVE-2005-1354

2005-05-02T00:00:00.000-04:00

2016-10-17T23:19:06.047-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050424 remote command execution in forum.pl script The forum.pl script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.

cpe:/a:includer.cgi:includer.cgi:1.1

CVE-2005-1355

2005-05-02T00:00:00.000-04:00

2016-10-17T23:19:07.157-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050424 remote command execution in includer.cgi script includer.cgi in The Includer allows remote attackers to read arbitrary files via a full pathname in the argument, a similar vulnerability to CVE-2005-0801.

cpe:/a:includer.cgi:includer.cgi

CVE-2005-1356

2005-05-02T00:00:00.000-04:00

2016-10-17T23:19:08.487-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050424 remote command execution in includer.cgi script Cross-site scripting (XSS) vulnerability in includer.cgi script in The Includer allows remote attackers to inject arbitrary web script or HTML via the argument.

cpe:/a:text.cgi:text.cgi

CVE-2005-1357

2005-05-02T00:00:00.000-04:00

2016-10-17T23:19:09.737-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050425 remote command execution in text.cgi script text.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

cpe:/a:text.cgi:text.cgi

CVE-2005-1358

2005-05-02T00:00:00.000-04:00

2016-10-17T23:19:10.877-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050425 remote command execution in text.cgi script text.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.

cpe:/a:text.cgi:text.cgi

CVE-2005-1359

2005-05-02T00:00:00.000-04:00

2016-10-17T23:19:12.440-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050425 remote command execution in text.cgi script Cross-site scripting (XSS) vulnerability in text.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.

cpe:/a:graycms:graycms:1.1

CVE-2005-1360

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:37.187-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050426 GrayCMS php code injection BID 13381 XF graycms-pathprefix-error-include(20278) PHP remote file inclusion vulnerability in error.php in GrayCMS 1.1 allows remote attackers to execute arbitrary PHP code by modifying the path_prefix parameter to reference a URL on a remote web server that contains the code.

cpe:/a:metalinks:metacart_e-shop:8.0

CVE-2005-1361

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:37.233-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050426 Multiple SQL Injections in MetaCart e-Shop V-8 BID 13376 BID 13377 XF metacart-eshop-sql-injection(20283) Multiple SQL injection vulnerabilities in MetaCart e-Shop 8.0 allow remote attackers to execute arbitrary SQL commands via the (1) intProdID parameter in product.asp or (2) strCatalog_NAME parameter to productsByCategory.asp.

cpe:/a:metalinks:metacart2:paypal

CVE-2005-1362

2005-05-02T00:00:00.000-04:00

2016-10-17T23:19:16.050-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050426 Multiple SQL Injections in MetaCart2 for SQL Server Special Edition U.K Multiple SQL injection vulnerabilities in MetaCart 2.0 for Paypal allow remote attackers to execute arbitrary SQL commands via the (1) intProdID parameter to product.asp, (2) intCatalogID or (3) strSubCatalogID parameters to productsByCategory.asp, (4) chkText, (5) strText, (6) chkPrice, (7) intPrice, (8) chkCat, or (9) strCat parameters to searchAction.asp.

cpe:/a:metalinks:metacart2:payflow_link

CVE-2005-1363

2005-05-02T00:00:00.000-04:00

2016-10-17T23:19:17.567-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050426 MetaCart2 for PayFlow Multiple Sql Injection Vulnerabilities Multiple SQL injection vulnerabilities in MetaCart 2.0 for PayFlow allow remote attackers to execute arbitrary commands via (1) intCatalogID, (2) strSubCatalogID, or (3) strSubCatalog_NAME parameter to productsByCategory.asp, (4) curCatalogID, (5) strSubCatalog_NAME, (6) intCatalogID, or (7) page parameter to productsByCategory.asp or (8) intProdID parameter to product.asp.

cpe:/a:metalinks:metabid_auctions

CVE-2005-1364

2005-05-02T00:00:00.000-04:00

2017-07-10T21:32:37.297-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://digitalparadox.org/advisories/metabid.txt BUGTRAQ 20050426 Multiple SQL Injections in MetaBid Auctions BID 13395 XF metabid-item-login-sql-injection(20286) Multiple SQL injection vulnerabilities in MetaBid Auctions allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password fields in logIn.asp, or (3) intAuctionID parameter to item.asp.

cpe:/a:pico_server:pico_server:3.0 cpe:/a:pico_server:pico_server:3.0_beta_3 cpe:/a:pico_server:pico_server:3.1 cpe:/a:pico_server:pico_server:3.2

CVE-2005-1365

2005-05-16T00:00:00.000-04:00

2016-10-17T23:19:19.910-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20050516 Advisory: Pico Server (pServ) Remote Command Injection CONFIRM http://sourceforge.net/project/shownotes.php?release_id=327708 MISC http://www.redteam-pentesting.de/advisories/rt-sa-2005-010.txt BID 13642 Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" (slash) characters and ".." sequences.

cpe:/a:pico_server:pico_server:3.0 cpe:/a:pico_server:pico_server:3.0_beta_3 cpe:/a:pico_server:pico_server:3.1 cpe:/a:pico_server:pico_server:3.2

CVE-2005-1366

2005-05-16T00:00:00.000-04:00

2016-10-17T23:19:21.037-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20050516 Pico Server (pServ) Information Disclosure Of CGI Sources CONFIRM http://sourceforge.net/project/shownotes.php?release_id=327708 MISC http://www.redteam-pentesting.de/advisories/rt-sa-2005-011.txt BID 13638 Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dirname/../cgi-bin" in a URL.

cpe:/a:pico_server:pico_server:3.0 cpe:/a:pico_server:pico_server:3.0_beta_3 cpe:/a:pico_server:pico_server:3.1 cpe:/a:pico_server:pico_server:3.2

CVE-2005-1367

2005-05-16T00:00:00.000-04:00

2016-10-17T23:19:22.393-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20050516 Pico Server (pServ) Local Information Disclosure MISC http://www.redteam-pentesting.de/advisories/rt-sa-2005-012.txt Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web document root.

cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8.1 cpe:/o:linux:linux_kernel:2.6.9:2.6.20 cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.11 cpe:/o:linux:linux_kernel:2.6.11.1 cpe:/o:linux:linux_kernel:2.6.11.2 cpe:/o:linux:linux_kernel:2.6.11.3 cpe:/o:linux:linux_kernel:2.6.11.4 cpe:/o:linux:linux_kernel:2.6.11.5 cpe:/o:linux:linux_kernel:2.6.11.6 cpe:/o:linux:linux_kernel:2.6.11.7 cpe:/o:linux:linux_kernel:2.6_test9_cvs

CVE-2005-1368

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:47.470-04:00

1.2

LOCAL

HIGH

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.8 CONFIRM http://linux.bkbits.net:8080/linux-2.6/cset%40423078fafVa6mAyny23YZ87hDipmTw FEDORA FLSA:157459-3 The key_user_lookup function in security/keys/key.c in Linux kernel 2.6.10 to 2.6.11.8 may allow attackers to cause a denial of service (oops) via SMP.

CVE-2005-1369

2005-05-02T00:00:00.000-04:00

2018-10-19T11:31:47.627-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.8 CONFIRM http://lkml.org/lkml/2005/4/20/159 FEDORA FLSA:157459-3 The (1) it87 and (2) via686a drivers in I2C for Linux 2.6.x before 2.6.11.8, and 2.6.12 before 2.6.12-rc2, create the sysfs "alarms" file with write permissions, which allows local users to cause a denial of service (CPU consumption) by attempting to write to the file, which does not have an associated store function.

cpe:/a:hp:openview_radia_management_portal:1.0 cpe:/a:hp:openview_radia_management_portal:2.0

CVE-2005-1370

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:37.360-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

HP SSRT5958 BUGTRAQ 20050428 High risk flaw in HP OpenView Radia Management Agent SECTRACK 1013829 BID 13414 XF hp-openview-radia-gain-access(20307) Unknown vulnerability in Radia Management Agent (RMA) in HP OpenView Radia Management Portal (RMP) 1.x and 2.x allows remote attackers to execute arbitrary commands via unknown vectors.

cpe:/a:bulletproof:bulletproof_ftp_server:2.4.0.31

CVE-2005-1371

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:37.423-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20050427 Privilege escalation in BulletProof FTP Server v2.4.0.31 BID 13410 VUPEN ADV-2005-0419 XF bpftp-gain-privilege(20301) BPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before opening files through the Help menu, which allows local users to gain privileges.

cpe:/a:bakbone:netvault:7.1.1 cpe:/a:bakbone:netvault:7.3

CVE-2005-1372

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:37.483-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050427 Privilege escalation in BakBone NetVault 7.1 BID 13408 VUPEN ADV-2005-0420 XF bakbone-netvault-gain-privileges(20302) nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu.

cpe:/a:dream4:koobi_cms:4.2.3

CVE-2005-1373

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:37.530-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050427 SQL-injections in koobi-cms BID 13412 BID 13413 XF koobi-parameter-search-sql-injection(20293) Multiple SQL injection vulnerabilities in index.php in Dream4 Koobi CMS 4.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) q or (2) p parameters.

cpe:/a:claroline:claroline:1.5.3 cpe:/a:claroline:claroline:1.6_beta cpe:/a:claroline:claroline:1.6_rc1

CVE-2005-1374

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:37.593-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050427 ZRCSA-200501 - Multiple vulnerabilities in Claroline SECTRACK 1013822 CONFIRM http://www.claroline.net/news.php#85 BID 13407 XF claroline-multiple-scripts-xss(20295) Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to inject arbitrary web script or HTML via (1) exercise_result.php, (2) exercice_submit.php, (3) agenda.php, (4) learningPathList.php, (5) learningPathAdmin.php, (6) learningPath.php, (7) userLog.php, (8) tool parameter to toolaccess_details.php, (9) data parameter to user_access_details.php, or (10) coursePath parameter to myagenda.php.

cpe:/a:claroline:claroline:1.5.3 cpe:/a:claroline:claroline:1.6_beta cpe:/a:claroline:claroline:1.6_rc1

CVE-2005-1375

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:37.640-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050427 ZRCSA-200501 - Multiple vulnerabilities in Claroline SECTRACK 1013822 CONFIRM http://www.claroline.net/news.php#85 BID 13407 XF claroline-multiple-sql-injection(20298) Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary SQL commands via (1) learningPath.php, (2) learningPathAdmin.php, (3) learnPath_details.php, (4) modules_pool.php, (5) module.php, (6) uInfo parameter in userInfo.php, or (7) exo_id parameter to exercises_details.php.

cpe:/a:claroline:claroline:1.5.3 cpe:/a:claroline:claroline:1.6_beta cpe:/a:claroline:claroline:1.6_rc1

CVE-2005-1376

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:37.703-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050427 ZRCSA-200501 - Multiple vulnerabilities in Claroline SECTRACK 1013822 CONFIRM http://www.claroline.net/news.php#85 BID 13407 XF claroline-document-directory-traversal(20287) Multiple directory traversal vulnerabilities in (1) document.php or (2) insertMyDoc.php in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote project administrators to upload arbitrary files.

cpe:/a:claroline:claroline:1.5.3 cpe:/a:claroline:claroline:1.6_beta cpe:/a:claroline:claroline:1.6_rc1

CVE-2005-1377

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:37.767-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050427 ZRCSA-200501 - Multiple vulnerabilities in Claroline SECTRACK 1013822 CONFIRM http://www.claroline.net/news.php#85 BID 13407 XF claroline-file-include(20300) Multiple PHP remote file inclusion vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary PHP code via unknown vectors.

cpe:/a:oxpus:phpbb_personal_notes_module:1.4.6

CVE-2005-1378

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:37.813-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050427 phpBB Notes Mod SQL Injection Vulnerability SECTRACK 1013827 MISC http://www.gulftech.org/?node=research&article_id=00070-04272005 BID 13417 VUPEN ADV-2005-0416 XF phpbb-notes-module-sql-injection(20303) SQL injection vulnerability in posting_notes.php in the notes module for phpBB allows remote attackers to execute arbitrary SQL commands via the p parameter, which is used in the $post_id variable, and other attack vectors.

cpe:/a:mandrakesoft:mandrake_lam-runtime:7.0.6.2mdk

CVE-2005-1379

2005-05-03T00:00:00.000-04:00

2016-10-17T23:19:34.770-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050428 insecure user account lam-runtime-7.0.6-2mdk rpm BID 13431 The LAM runtime environment package (lam-runtime-7.0.6-2mdk) on Mandrake Linux installs the mpi user without a password, which allows local users to gain privileges.

cpe:/a:bea:weblogic_server:8.1 cpe:/a:bea:weblogic_server:8.1::express cpe:/a:bea:weblogic_server:8.1::win32 cpe:/a:bea:weblogic_server:8.1:sp1 cpe:/a:bea:weblogic_server:8.1:sp1:express cpe:/a:bea:weblogic_server:8.1:sp1:win32 cpe:/a:bea:weblogic_server:8.1:sp2 cpe:/a:bea:weblogic_server:8.1:sp2:express cpe:/a:bea:weblogic_server:8.1:sp2:win32 cpe:/a:bea:weblogic_server:8.1:sp3 cpe:/a:bea:weblogic_server:8.1:sp3:express cpe:/a:bea:weblogic_server:8.1:sp3:win32 cpe:/a:bea:weblogic_server:8.1:sp4 cpe:/a:bea:weblogic_server:8.1:sp4:express cpe:/a:bea:weblogic_server:8.1:sp4:win32

CVE-2005-1380

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:37.877-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050428 Cross Site Scripting in BEA Admin Console SECTRACK 1013817 MISC http://www.red-database-security.com/advisory/bea_css_in_admin_console.html BID 13400 XF weblogic-jndiframesetaction-xss(20276) Cross-site scripting (XSS) vulnerability in BEA Admin Console 8.1 allows remote attackers to execute arbitrary web script or HTML via the server parameter to a JndiFramesetAction action.

cpe:/a:oracle:application_server_web_cache

CVE-2005-1381

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:37.923-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050428 Cross Site Scripting in Oracle Webcache 9i Adminstrator Application MISC http://www.red-database-security.com/advisory/oracle_webcache_CSS_vulnerabilities.html BID 13421 BID 13422 XF oracle9ias-application-cache-xss(20309) Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web script or HTML via the (1) cache_dump_file or (2) PartialPageErrorPage parameter.

cpe:/a:oracle:application_server_web_cache

CVE-2005-1382

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:37.970-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050428 File appending vulnerability in Oracle Webcache 9i MISC http://www.red-database-security.com/advisory/oracle_webcache_append_file_vulnerabilitiy.html BID 13420 XF oracle9ias-application-cache-file-corruption(20310) The webcacheadmin module in Oracle Webcache 9i allows remote attackers to corrupt arbitrary files via a full pathname in the cache_dump_file parameter.

cpe:/a:oracle:application_server:10.1.0.2 cpe:/a:oracle:application_server:10.1.0.3 cpe:/a:oracle:application_server:10.1.0.3.1 cpe:/a:oracle:application_server:10.1.2

CVE-2005-1383

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:38.030-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050428 Webcache Client Requests Bypass OHS mod_access Restrictions MISC http://www.red-database-security.com/advisory/oracle_webcache_bypass.html BID 13418 XF oracle9ias-application-cache-url-bypass(20311) The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attackers to bypass HTTP Server mod_access restrictions via a request to the webcache TCP port 7778.

cpe:/a:coinsoft_technologies:phpcoin:1.2 cpe:/a:coinsoft_technologies:phpcoin:1.2.1 cpe:/a:coinsoft_technologies:phpcoin:1.2.1b

CVE-2005-1384

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:38.077-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://digitalparadox.org/viewadvisories.ah?view=36 BUGTRAQ 20050428 Multiple Sql injections in phpCoin v1.2.2 and below MISC http://pridels0.blogspot.com/2006/03/phpcoin-poc.html SECTRACK 1013834 BID 13433 VUPEN ADV-2005-0423 XF phpcoin-multiple-sql-injection(20308) Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to index.php, (2) phpcoinsessid parameter to login.php, (3) id, (4) dtopic_id, or (5) dcat_id to mod.php.

cpe:/a:apple:safari:1.3

CVE-2005-1385

2005-05-03T00:00:00.000-04:00

2016-10-17T23:19:42.710-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050428 Safari HTTPS Overflow BUGTRAQ 20050429 Re: Safari HTTPS Overflow BUGTRAQ 20050429 Re: Safari HTTPS Overflow SECTRACK 1013835 Safari 1.3 allows remote attackers to cause a denial of service (application crash) via a long https URL that triggers a NULL pointer dereference.

CVE-2005-1386

2005-05-03T00:00:00.000-04:00

2016-10-17T23:19:43.913-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050429 Multiples Full Path Disclosure in php-nuke 7.6 (and below) PHP-Nuke 7.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) ipban.php, (2) db.php, (3) lang-norwegian.php, (4) lang-indonesian.php, (5) lang-greek.php, (6) a request to Web_Links with the portuguese language (lang-portuguese.php), (7) a request to Web_Links with the indonesian language (lang-indonesian.php), (8) a request to the survey module with the indonesian language (lang-indonesian.php), (9) a request to the Reviews module with the portuguese language, or (10) a request to the Journal module with the portuguese language, which reveal the path in an error message.

cpe:/a:kristofer_szymanski:cocktail:3.5.4

CVE-2005-1387

2005-05-03T00:00:00.000-04:00

2016-10-17T23:19:44.977-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20050429 Mac OS X Cocktail 3.5.4 admin password disclosure BID 13449 Cocktail 3.5.4 and possibly earlier in Mac OS X passes the administrative password on the command line to sudo in cleartext, which allows local users to gain sensitive information by running listing processes.

cpe:/a:survivor:survivor:0.9.5a

CVE-2005-1388

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:01.140-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-13T09:07:00.000-04:00

CONFIRM http://www.columbia.edu/acis/dev/projects/survivor/doc/todo.html#changelog BID 13415 Cross-site scripting (XSS) vulnerability in SURVIVOR before 0.9.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

CVE-2005-1389

2005-05-03T00:00:00.000-04:00

2008-09-10T15:38:53.477-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0175. Reason: This candidate is a duplicate of CVE-2005-0175. Notes: All CVE users should reference CVE-2005-0175 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVE-2005-1390

2005-05-03T00:00:00.000-04:00

2008-09-10T15:38:53.727-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0174. Reason: This candidate is a duplicate of CVE-2005-0174. Notes: All CVE users should reference CVE-2005-0174 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:apsis:pound:1.8.2

CVE-2005-1391

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:38.140-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=307852 GENTOO GLSA-200504-29 SECTRACK 1013824 MLIST [pound_list] 20050426 remote buffer overflow in pound 1.8.2 + question abotu Host header DEBIAN DSA-934 BID 13436 VUPEN ADV-2005-0437 XF pound-addport-bo(20316) Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long Host HTTP header.

cpe:/a:phpmyadmin:phpmyadmin:2.6.2

CVE-2005-1392

2005-05-03T00:00:00.000-04:00

2011-03-07T21:21:42.937-05:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

GENTOO GLSA-200504-30 VUPEN ADV-2005-0436 The SQL install script in phpMyAdmin 2.6.2 is created with world-readable permissions, which allows local users to obtain the initial database password by reading the script.

cpe:/a:esri:arcinfo_workstation:9.0

CVE-2005-1393

2005-05-03T00:00:00.000-04:00

2016-10-17T23:19:45.993-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20050430 DMA[2005-0425a] - 'ESRI ArcGIS 9.x multiple local vulnerabilities SECTRACK 1013852 CONFIRM http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=14&MetaID=1015 MISC http://www.digitalmunition.com/DMA%5B2005-0425a%5D.txt Multiple buffer overflows in ArcGIS for ESRI ArcInfo Workstation 9.0 allow local users to execute arbitrary code via long command line arguments to (1) asmaster, (2) asuser, (3) asutility, (4) se, or (5) asrecovery.

cpe:/a:esri:arcgis:9.0 cpe:/a:esri:arcinfo_workstation:9.0

CVE-2005-1394

2005-05-03T00:00:00.000-04:00

2016-10-17T23:19:47.557-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20050430 DMA[2005-0425a] - 'ESRI ArcGIS 9.x multiple local vulnerabilities SECTRACK 1013852 CONFIRM http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=14&MetaID=1015 MISC http://www.digitalmunition.com/DMA%5B2005-0425a%5D.txt Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format string specifiers in the ARCHOME environment variable to (1) wservice or (2) lockmgr.

CVE-2005-1395

2005-05-03T00:00:00.000-04:00

2018-08-13T17:47:22.040-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20050501 DMA[2005-0501a] - 'ARPUS/Ce setuid buffer overflow and file overwrite' SECTRACK 1013855 Buffer overflow in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier may allow local users to gain privileges via a long (1) XAPPLRESLANGPATH or (2) XAPPLRESDIR environment variable, or (3) command line argument.

CVE-2005-1396

2005-05-03T00:00:00.000-04:00

2018-08-13T17:47:22.133-04:00

1.2

LOCAL

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20050501 DMA[2005-0501a] - 'ARPUS/Ce setuid buffer overflow and file overwrite' SECTRACK 1013855 Race condition in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier allows local users to write to arbitrary files via a symlink attack on the ce_edit_log temporary file.

cpe:/a:php-calendar:php-calendar:0.1 cpe:/a:php-calendar:php-calendar:0.2 cpe:/a:php-calendar:php-calendar:0.3 cpe:/a:php-calendar:php-calendar:0.4 cpe:/a:php-calendar:php-calendar:0.5 cpe:/a:php-calendar:php-calendar:0.6 cpe:/a:php-calendar:php-calendar:0.7 cpe:/a:php-calendar:php-calendar:0.8 cpe:/a:php-calendar:php-calendar:0.9 cpe:/a:php-calendar:php-calendar:0.9.1 cpe:/a:php-calendar:php-calendar:0.10

CVE-2005-1397

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:38.203-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://sourceforge.net/project/shownotes.php?release_id=323483 BID 13405 VUPEN ADV-2005-0418 XF php-calendar-searchphp-sql-injection(20297) SQL injection vulnerability in search.php for PHP-Calendar before 0.10.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

cpe:/a:phpcart:phpcart:3.2 cpe:/a:phpcart:phpcart:3.4 cpe:/a:phpcart:phpcart:4.6.4

CVE-2005-1398

2005-05-03T00:00:00.000-04:00

2018-10-19T11:31:47.783-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://lostmon.blogspot.com/2005/04/phpcart-price-manipulation.html BUGTRAQ 20080828 XSS and Data Manipulation attacks found in CMS PHPCart. BID 13406 BID 30887 XF phpcart-phpcart-data-manipulation(44766) phpcart.php in PHPCart 3.2 allows remote attackers to change product price information by modifying the (1) price or (2) postage parameters. NOTE: it was later reported that 3.4 through 4.6.4 are also affected.

cpe:/o:freebsd:freebsd:4.6 cpe:/o:freebsd:freebsd:4.7 cpe:/o:freebsd:freebsd:4.8 cpe:/o:freebsd:freebsd:4.9 cpe:/o:freebsd:freebsd:4.10 cpe:/o:freebsd:freebsd:4.11 cpe:/o:freebsd:freebsd:5.1 cpe:/o:freebsd:freebsd:5.2 cpe:/o:freebsd:freebsd:5.3 cpe:/o:freebsd:freebsd:5.4

CVE-2005-1399

2005-05-06T00:00:00.000-04:00

2008-09-05T16:49:02.810-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-12T12:40:00.000-04:00

ALLOWS_OTHER_ACCESS

FREEBSD FreeBSD-SA-05:06 FreeBSD 4.6 to 4.11 and 5.x to 5.4 uses insecure default permissions for the /dev/iir device, which allows local users to execute restricted ioctl calls to read or modify data on hardware that is controlled by the iir driver.

cpe:/o:freebsd:freebsd:4.7 cpe:/o:freebsd:freebsd:4.8 cpe:/o:freebsd:freebsd:4.9 cpe:/o:freebsd:freebsd:4.10 cpe:/o:freebsd:freebsd:4.11 cpe:/o:freebsd:freebsd:5.1 cpe:/o:freebsd:freebsd:5.2 cpe:/o:freebsd:freebsd:5.3 cpe:/o:freebsd:freebsd:5.4

CVE-2005-1400

2005-05-06T00:00:00.000-04:00

2008-09-05T16:49:02.997-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-12T12:48:00.000-04:00

FREEBSD FreeBSD-SA-05:07 The i386_get_ldt system call in FreeBSD 4.7 to 4.11 and 5.x to 5.4 allows local users to access sensitive kernel memory via arguments with negative or very large values.

cpe:/a:mtp-target:mtp-target:1.2.2

CVE-2005-1401

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:03.157-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-13T09:45:00.000-04:00

ALLOWS_OTHER_ACCESS

MISC http://aluigi.altervista.org/adv/mtpbugs-adv.txt BUGTRAQ 20050501 Clients format string and server crash in Mtp-Target 1.2.2 Format string vulnerability in the client for Mtp-Target 1.2.2 and earlier allows remote attackers to execute arbitrary code via game messages or other text.

cpe:/a:mtp-target:mtp-target:1.2.2

CVE-2005-1402

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:03.327-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-13T09:50:00.000-04:00

MISC http://aluigi.altervista.org/adv/mtpbugs-adv.txt BUGTRAQ 20050501 Clients format string and server crash in Mtp-Target 1.2.2 Integer signedness error in certain older versions of the NeL library, as used in Mtp-Target 1.2.2 and earlier, and possibly other products, allows remote attackers to cause a denial of service (memory consumption or server crash) via a negative value in a STLport call, which is not caught by a signed comparison.

CVE-2005-1403

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:03.467-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2005-05-13T09:54:00.000-04:00

ALLOWS_OTHER_ACCESS

MISC http://lostmon.blogspot.com/2005/04/amazon-webstore-script-injection-and.html SECTRACK 1013836 BID 13427 Multiple cross-site scripting (XSS) vulnerabilities in JustWilliam's Amazon Webstore 04050100 allow remote attackers to inject arbitrary web script or HTML via the (1) image parameter to closeup.php, the (2) currentIsExpanded or (3) searchFor parameters to index.php, (4) the currentNumber parameter to software_CAD_Technical_60002_uk.htm, or (5) a cookie.

cpe:/a:myphp_forum:myphp_forum:1.0 cpe:/a:myphp_forum:myphp_forum:2.0 cpe:/a:myphp_forum:myphp_forum:3.0

CVE-2005-1404

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:03.623-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-13T10:01:00.000-04:00

BID 13430 BUGTRAQ 20050426 myPHP Forum v3 (possible v1 & 2 also) Identification 'spoof' MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the (1) nbuser parameter to post.php or (2) sender parameter to privmsg.php.

cpe:/a:ibm:lotus_notes:6.0 cpe:/a:ibm:lotus_notes:6.0.1 cpe:/a:ibm:lotus_notes:6.0.2 cpe:/a:ibm:lotus_notes:6.0.3 cpe:/a:ibm:lotus_notes:6.0.4 cpe:/a:ibm:lotus_notes:6.5 cpe:/a:ibm:lotus_notes:6.5.1 cpe:/a:ibm:lotus_notes:6.5.2 cpe:/a:ibm:lotus_notes:6.5.3

CVE-2005-1405

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:38.327-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013839 CONFIRM http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202437 XF lotus-sethttpheader-injection(20045) HTTP response splitting vulnerability in the @SetHTTPHeader function in Lotus Domino 6.5.x before 6.5.4 and 6.0.x before 6.0.5 allows attackers to poison the web cache via malicious applications.

cpe:/o:freebsd:freebsd:4.1 cpe:/o:freebsd:freebsd:4.2 cpe:/o:freebsd:freebsd:4.3 cpe:/o:freebsd:freebsd:4.4 cpe:/o:freebsd:freebsd:4.5 cpe:/o:freebsd:freebsd:4.6 cpe:/o:freebsd:freebsd:4.7 cpe:/o:freebsd:freebsd:4.8 cpe:/o:freebsd:freebsd:4.9 cpe:/o:freebsd:freebsd:4.10 cpe:/o:freebsd:freebsd:4.11 cpe:/o:freebsd:freebsd:5.1 cpe:/o:freebsd:freebsd:5.2 cpe:/o:freebsd:freebsd:5.3 cpe:/o:freebsd:freebsd:5.4

CVE-2005-1406

2005-05-06T00:00:00.000-04:00

2011-03-07T21:21:44.000-05:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov FREEBSD FreeBSD-SA-05:08 APPLE APPLE-SA-2005-10-31 BID 13526 BID 15252 VUPEN ADV-2005-2256 The kernel in FreeBSD 4.x to 4.11 and 5.x to 5.4 does not properly clear certain fixed-length buffers when copying variable-length data for use by applications, which could allow those applications to read previously used sensitive memory.

cpe:/a:skype_technologies:skype:1.2.0.0 cpe:/a:skype_technologies:skype:1.2.0.37 cpe:/a:skype_technologies:skype:1.2.0.41 cpe:/a:skype_technologies:skype:1.2.0.46

CVE-2005-1407

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:04.170-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-13T10:08:00.000-04:00

ALLOWS_OTHER_ACCESS

CONFIRM http://www.skype.com/security/ssa-2005-01.html Skype for Windows 1.2.0.0 to 1.2.0.46 allows local users to bypass the identity check for an authorized application, then call arbitrary Skype API functions by modifying or replacing that application.

cpe:/a:apple:keynote:2.0.0 cpe:/a:apple:keynote:2.0.1

CVE-2005-1408

2005-05-26T00:00:00.000-04:00

2018-10-30T12:26:15.840-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-26T14:15:00.000-04:00

APPLE APPLE-SA-2005-05-25 MISC http://remahl.se/david/vuln/016/ SECTRACK 1014053 Apple Keynote 2.0 and 2.0.1 allows remote attackers to read arbitrary files via the keynote: URI handler in a crafted Keynote presentation.

cpe:/a:postgresql:postgresql:7.2.1 cpe:/a:postgresql:postgresql:7.2.2 cpe:/a:postgresql:postgresql:7.2.3 cpe:/a:postgresql:postgresql:7.2.4 cpe:/a:postgresql:postgresql:7.2.5 cpe:/a:postgresql:postgresql:7.2.6 cpe:/a:postgresql:postgresql:7.2.7 cpe:/a:postgresql:postgresql:7.3 cpe:/a:postgresql:postgresql:7.3.1 cpe:/a:postgresql:postgresql:7.3.2 cpe:/a:postgresql:postgresql:7.3.3 cpe:/a:postgresql:postgresql:7.3.4 cpe:/a:postgresql:postgresql:7.3.5 cpe:/a:postgresql:postgresql:7.3.6 cpe:/a:postgresql:postgresql:7.3.7 cpe:/a:postgresql:postgresql:7.3.8 cpe:/a:postgresql:postgresql:7.3.9 cpe:/a:postgresql:postgresql:7.4 cpe:/a:postgresql:postgresql:7.4.1 cpe:/a:postgresql:postgresql:7.4.2 cpe:/a:postgresql:postgresql:7.4.3 cpe:/a:postgresql:postgresql:7.4.4 cpe:/a:postgresql:postgresql:7.4.5 cpe:/a:postgresql:postgresql:7.4.6 cpe:/a:postgresql:postgresql:7.4.7 cpe:/a:postgresql:postgresql:8.0 cpe:/a:postgresql:postgresql:8.0.1 cpe:/a:postgresql:postgresql:8.0.2

CVE-2005-1409

2005-05-03T00:00:00.000-04:00

2018-10-19T11:31:48.127-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MLIST [pgsql-announce] 20050502 IMPORTANT: two new PostgreSQL security problems found SUSE SUSE-SA:2005:036 CONFIRM http://www.postgresql.org/about/news.315 REDHAT RHSA-2005:433 FEDORA FLSA-2006:157366 BID 13476 VUPEN ADV-2005-0453 PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability."

cpe:/a:postgresql:postgresql:7.4 cpe:/a:postgresql:postgresql:7.4.3 cpe:/a:postgresql:postgresql:7.4.5 cpe:/a:postgresql:postgresql:7.4.6 cpe:/a:postgresql:postgresql:7.4.7 cpe:/a:postgresql:postgresql:8.0 cpe:/a:postgresql:postgresql:8.0.1 cpe:/a:postgresql:postgresql:8.0.2 cpe:/o:trustix:secure_linux:2.0

CVE-2005-1410

2005-05-03T00:00:00.000-04:00

2018-10-19T11:31:48.580-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov MLIST [pgsql-announce] 20050502 IMPORTANT: two new PostgreSQL security problems found SUSE SUSE-SA:2005:036 CONFIRM http://www.postgresql.org/about/news.315 REDHAT RHSA-2005:433 FEDORA FLSA-2006:157366 BID 13475 VUPEN ADV-2005-0453 The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as "internal" even when they do not take an internal argument, which allows attackers to cause a denial of service (application crash) and possibly have other impacts via SQL commands that call other functions that accept internal arguments.

cpe:/a:cybration:icuii:7.0

CVE-2005-1411

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:38.390-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1013828 BID 13441 XF icuii-password-disclosure(20321) Cybration ICUII 7.0 stores passwords in plaintext in the world-readable icuii.ini file, which allows local users to gain privileges.

cpe:/a:ecomm:professional_guestbook:3

CVE-2005-1412

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:05.030-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-13T10:29:00.000-04:00

ALLOWS_OTHER_ACCESS

SQL injection vulnerability in verify.asp for Ecomm Professional Guestbook 3.x allows remote attackers to execute arbitrary SQL commands via the AdminPWD parameter.

cpe:/a:envivosoft:envivo_cms:3.54

CVE-2005-1413

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:38.453-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://digitalparadox.org/viewadvisories.ah?view=37 FULLDISC 20070711 durito: enVivo!CMS SQL injection SECTRACK 1013843 MISC http://securityvulns.ru/Rdocument425.html BID 13437 BID 13439 BID 13440 BID 24860 XF envivo-username-password-sql-injection(20313) Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain privileges via the (1) username or (2) password parameters to admin_login.asp, or the (3) searchstring and possibly (4) ID parameters to default.asp.

CVE-2005-1414

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:38.517-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1013823 BID 13445 XF filepocket-registry-plaintext-password(26187) ExoticSoft FilePocket 1.2 stores sensitive proxy information, including proxy passwords, in plaintext in the registry, which allows local users to gain privileges.

cpe:/a:globalscape:secure_ftp_server:3.0 cpe:/a:globalscape:secure_ftp_server:3.0.2

CVE-2005-1415

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:05.497-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-05-13T10:36:00.000-04:00

ALLOWS_ADMIN_ACCESS

FULLDISC 20050501 Remote buffer overflow in GlobalScape Secure FTP server 3.0.2 CONFIRM http://www.cuteftp.com/gsftps/history.asp BID 13454 Buffer overflow in GlobalSCAPE Secure FTP Server 3.0.2 allows remote authenticated users to execute arbitrary code via a long FTP command.

cpe:/a:soft3304:04webserver:1.81

CVE-2005-1416

2005-05-03T00:00:00.000-04:00

2011-03-07T21:21:44.847-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.soft3304.net/04WebServer/Security.html VUPEN ADV-2005-0448 Directory traversal vulnerability in 04WebServer 1.81 allows remote attackers to read files outside of the web root but within the installation folder.

cpe:/a:maxwebportal:maxwebportal:1.3.0 cpe:/a:maxwebportal:maxwebportal:1.3.1 cpe:/a:maxwebportal:maxwebportal:1.3.2 cpe:/a:maxwebportal:maxwebportal:1.3.3 cpe:/a:maxwebportal:maxwebportal:1.3.5 cpe:/a:maxwebportal:maxwebportal:2.0

CVE-2005-1417

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:05.843-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-13T10:46:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1013845 CONFIRM http://www.maxwebportal.info/downloads/mwp_security_fixes.zip CONFIRM http://www.maxwebportal.info/topic.asp?TOPIC_ID=2482&FORUM_ID=1&CAT_ID=1&Forum_Title=General+Chat&Topic_Title=Security+Update BID 13466 Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute arbitrary SQL commands via (1) article_popular.asp, (2) arguments to dl_popular.asp, (3) arguments to links_popular.asp, (4) arguments to pic_popular.asp, (5) article_rate.asp, (6) dl_rate.asp, (7) links_rate.asp, (8) pic_rates.asp, (9) article_toprated.asp, (10) dl_toprated.asp, (11) links_toprated.asp, (12) arguments to pic_toprated.asp, or (13) the TOPIC_ID or Forum_ID parameters to custom_link.asp.

cpe:/a:netleaf_limited:notjustbrowsing:1.0.3

CVE-2005-1418

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:38.563-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1013826 BID 13442 XF notjustbrowsing-password-disclosure(20319) NetLeaf Limited NotJustBrowsing 1.0.3 stores the View Lock Password in plaintext in the notjustbrowsing.prf file, which allows local users to gain privileges.

cpe:/a:ocean12_technologies:mailing_list_manager:1.06

CVE-2005-1419

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:06.170-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-13T10:45:00.000-04:00

ALLOWS_OTHER_ACCESS

BUGTRAQ 20050428 [HSC Security Group] Ocean12 Mailing List Manager Pro SQL injection SECTRACK 1013833 SQL injection vulnerability in the admin login panel for Ocean12 Mailing List Manager 1.06 allows remote attackers to execute arbitrary SQL commands via the Admin_id parameter.

cpe:/a:raysoft:video_cam_server:1.0.0_beta

CVE-2005-1420

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:06.327-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-13T10:44:00.000-04:00

SECTRACK 1013860 MISC http://www.autistici.org/fdonato/advisory/VideoCamServer1.0.0-adv.txt Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to determine the full pathname of the server via a request for an invalid page, as demonstrated using "%20" (hex-encoded space).

cpe:/a:raysoft:video_cam_server:1.0.0_beta

CVE-2005-1421

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:06.483-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-13T10:47:00.000-04:00

SECTRACK 1013860 MISC http://www.autistici.org/fdonato/advisory/VideoCamServer1.0.0-adv.txt Directory traversal vulnerability in Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to read arbitrary files via ".." (dot dot) sequences in an HTTP request.

CVE-2005-1422

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:06.640-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-13T10:49:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1013860 MISC http://www.autistici.org/fdonato/advisory/VideoCamServer1.0.0-adv.txt Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to conduct administrator operations and cause a denial of service (server or camera shutdown) via a direct request to admin.html.

cpe:/a:software602:602lan_suite:2004.0.05.0413

CVE-2005-1423

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:06.797-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

PARTIAL

http://nvd.nist.gov

2005-05-13T10:51:00.000-04:00

Directory traversal vulnerability in the mail program in 602LAN SUITE 2004.0.05.0413 allows remote attackers to cause a denial of service and determine the presence of arbitrary files via .. sequences in the A parameter.

cpe:/a:stumbleinside:gotext:1.01

CVE-2005-1424

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:38.627-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013825 BID 13443 XF gotext-user-information-disclosure(20315) StumbleInside GoText 1.01 stores sensitive username, mail address,and phone number information in plaintext in the GoText.bin file, which allows local users to obtain that information.

cpe:/a:uapplication:uguestbook:1.0

CVE-2005-1425

2005-05-03T00:00:00.000-04:00

2018-10-19T11:31:49.003-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013830 BUGTRAQ 20070107 Uguestbook Remote Password Disclosure Vulnerability XF uapplication-information-disclosure(20314) EXPLOIT-DB 8609 Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/guestbook.mdb.

CVE-2005-1426

2005-05-03T00:00:00.000-04:00

2017-10-10T21:30:07.297-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1013830 XF uapplication-information-disclosure(20314) EXPLOIT-DB 8610 Uapplication Ublog Reload stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/blog.mdb (aka mdb-database/blog.msb).

cpe:/a:uapplication:uphotogallery

CVE-2005-1427

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:38.780-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1013830 XF uapplication-information-disclosure(20314) Uapplication Uphotogallery stores the database under the web document root, which allows remote attackers to obtain sensitive information via a direct request to uphotogallery.mdb.

CVE-2005-1428

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:38.827-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1013830 XF uapplication-information-disclosure(20314) edit_image.asp in Uapplication Uphotogallery allows remote attackers to upload arbitrary files.

cpe:/a:abczone.it:wwwguestbook:1.1

CVE-2005-1429

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:07.700-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-13T11:00:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1013837 BID 13404 SQL injection vulnerability in login.asp in WWWguestbook 1.1 allows remote attackers to execute arbitrary SQL commands via the password parameter.

cpe:/o:apple:mac_os_x:10.0 cpe:/o:apple:mac_os_x:10.0.1 cpe:/o:apple:mac_os_x:10.0.2 cpe:/o:apple:mac_os_x:10.0.3 cpe:/o:apple:mac_os_x:10.0.4 cpe:/o:apple:mac_os_x:10.1 cpe:/o:apple:mac_os_x:10.1.1 cpe:/o:apple:mac_os_x:10.1.2 cpe:/o:apple:mac_os_x:10.1.3 cpe:/o:apple:mac_os_x:10.1.4 cpe:/o:apple:mac_os_x:10.1.5 cpe:/o:apple:mac_os_x:10.2 cpe:/o:apple:mac_os_x:10.2.1 cpe:/o:apple:mac_os_x:10.2.2 cpe:/o:apple:mac_os_x:10.2.3 cpe:/o:apple:mac_os_x:10.2.4 cpe:/o:apple:mac_os_x:10.2.5 cpe:/o:apple:mac_os_x:10.2.6 cpe:/o:apple:mac_os_x:10.2.7 cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3 cpe:/o:apple:mac_os_x:10.3.1 cpe:/o:apple:mac_os_x:10.3.2 cpe:/o:apple:mac_os_x:10.3.3 cpe:/o:apple:mac_os_x:10.3.4 cpe:/o:apple:mac_os_x:10.3.5 cpe:/o:apple:mac_os_x:10.3.6 cpe:/o:apple:mac_os_x:10.3.7 cpe:/o:apple:mac_os_x:10.3.8 cpe:/o:apple:mac_os_x:10.3.9 cpe:/o:apple:mac_os_x_server:10.0 cpe:/o:apple:mac_os_x_server:10.1 cpe:/o:apple:mac_os_x_server:10.1.1 cpe:/o:apple:mac_os_x_server:10.1.2 cpe:/o:apple:mac_os_x_server:10.1.3 cpe:/o:apple:mac_os_x_server:10.1.4 cpe:/o:apple:mac_os_x_server:10.1.5 cpe:/o:apple:mac_os_x_server:10.2 cpe:/o:apple:mac_os_x_server:10.2.1 cpe:/o:apple:mac_os_x_server:10.2.2 cpe:/o:apple:mac_os_x_server:10.2.3 cpe:/o:apple:mac_os_x_server:10.2.4 cpe:/o:apple:mac_os_x_server:10.2.5 cpe:/o:apple:mac_os_x_server:10.2.6 cpe:/o:apple:mac_os_x_server:10.2.7 cpe:/o:apple:mac_os_x_server:10.2.8 cpe:/o:apple:mac_os_x_server:10.3 cpe:/o:apple:mac_os_x_server:10.3.1 cpe:/o:apple:mac_os_x_server:10.3.2 cpe:/o:apple:mac_os_x_server:10.3.3 cpe:/o:apple:mac_os_x_server:10.3.4 cpe:/o:apple:mac_os_x_server:10.3.5 cpe:/o:apple:mac_os_x_server:10.3.6 cpe:/o:apple:mac_os_x_server:10.3.7 cpe:/o:apple:mac_os_x_server:10.3.8 cpe:/o:apple:mac_os_x_server:10.3.9

CVE-2005-1430

2005-05-03T00:00:00.000-04:00

2008-09-10T15:39:00.070-04:00

3.6

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-13T11:06:00.000-04:00

BUGTRAQ 20050501 Insecure pty permissions in OS X < 10.4 Mac OS X 10.3.x and earlier uses insecure permissions for a pseudo terminal tty (pty) that is managed by a non-setuid program, which allows local users to read or modify sessions of other users.

cpe:/a:gnu:gnutls:1.0.18 cpe:/a:gnu:gnutls:1.0.19 cpe:/a:gnu:gnutls:1.0.20 cpe:/a:gnu:gnutls:1.0.21 cpe:/a:gnu:gnutls:1.0.22 cpe:/a:gnu:gnutls:1.0.23 cpe:/a:gnu:gnutls:1.0.24 cpe:/a:gnu:gnutls:1.2.0 cpe:/a:gnu:gnutls:1.2.1 cpe:/a:gnu:gnutls:1.2.2

CVE-2005-1431

2005-05-03T00:00:00.000-04:00

2017-10-10T21:30:07.357-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MLIST [gnutls-dev] 20050428 GnuTLS 1.2.3 and 1.0.25 SECTRACK 1013861 REDHAT RHSA-2005:430 BID 13477 XF gnutls-record-parsing-dos(20328) The "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote attackers to cause a denial of service, possibly related to padding bytes in gnutils_cipher.c.

cpe:/a:hp:openview_event_correlation_services:3.2 cpe:/a:hp:openview_event_correlation_services:3.3

CVE-2005-1433

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:08.310-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-13T11:05:00.000-04:00

ALLOWS_USER_ACCESS

HP HPSBMA01141 Multiple unknown vulnjerabilities HP OpenView Event Correlation Services (OV ECS) 3.32 and 3.33 allow attackers to cause a denial of service or execute arbitrary code.

cpe:/a:hp:openview_network_node_manager:6.2 cpe:/a:hp:openview_network_node_manager:6.4 cpe:/a:hp:openview_network_node_manager:7.01 cpe:/a:hp:openview_network_node_manager:7.50

CVE-2005-1434

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:08.467-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-13T11:06:00.000-04:00

ALLOWS_USER_ACCESS

HP HPSBMA01140 Multiple unknown vulnerabilities in OpenView Network Node Manager (OV NNM) 6.2, 6.4, 7.01, and 7.50 allow attackers to cause a denial of service or execute arbitrary code.

cpe:/a:open_webmail:open_webmail:2.51

CVE-2005-1435

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:08.623-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-13T11:10:00.000-04:00

ALLOWS_USER_ACCESS

SECTRACK 1013859 CONFIRM http://sourceforge.net/forum/message.php?msg_id=3128678 Open WebMail (OWM) before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename.

cpe:/a:osticket:osticket:1.2.7 cpe:/a:osticket:osticket:1.3.0

CVE-2005-1436

2005-05-03T00:00:00.000-04:00

2013-07-14T00:38:18.647-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://www.gulftech.org/?node=research&article_id=00071-05022005 Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via (1) the t parameter to view.php, (2) the osticket_title parameter to header.php, (3) the em parameter to admin_login.php, (4) the e parameter to user_login.php, (5) the err parameter to open_submit.php, or (6) the name and subject fields when adding a ticket.

cpe:/a:osticket:osticket:1.x

CVE-2005-1437

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:08.950-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-13T11:21:00.000-04:00

ALLOWS_OTHER_ACCESS

MISC http://www.gulftech.org/?node=research&article_id=00071-05022005 Multiple SQL injection vulnerabilities in osTicket allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to admin.php or (2) cat parameter to view.php.

cpe:/a:osticket:osticket:1

CVE-2005-1438

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:09.107-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-13T11:14:00.000-04:00

ALLOWS_OTHER_ACCESS

MISC http://www.gulftech.org/?node=research&article_id=00071-05022005 PHP remote file inclusion vulnerability in main.php in osTicket allows remote attackers to execute arbitrary PHP code via the include_dir parameter.

cpe:/a:osticket:osticket

CVE-2005-1439

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:09.263-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-13T11:21:00.000-04:00

MISC http://www.gulftech.org/?node=research&article_id=00071-05022005 Directory traversal vulnerability in attachments.php in osTicket allows remote attackers to read arbitrary files via .. sequences in the file parameter.

cpe:/a:codetosell:viart_shop_enterprise:2.1.6

CVE-2005-1440

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:09.420-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2005-05-13T11:27:00.000-04:00

ALLOWS_OTHER_ACCESS

MISC http://lostmon.blogspot.com/2005/04/viart-shop-enterprise-multiple.html SECTRACK 1013853 BID 13462 Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arbitrary web script or HTML via (1) various parameters to basket.php, (2) the nickname, email, topic, and message fields in forum.php, as demonstrated using forum_new_thread.php and forum_thread.php, (3) the page parameter to page.php, (4) category_id and item_id parameters to reviews.php, (5) the category_id parameter to product_details.php, (6) the category_id or search_string parameters to products.php, or (7) the rp or page parameters to news_view.php.

cpe:/a:ibm:lotus_domino:6.0 cpe:/a:ibm:lotus_domino:6.0.1 cpe:/a:ibm:lotus_domino:6.0.2 cpe:/a:ibm:lotus_domino:6.0.2_cf2 cpe:/a:ibm:lotus_domino:6.0.3 cpe:/a:ibm:lotus_domino:6.5.0 cpe:/a:ibm:lotus_domino:6.5.1 cpe:/a:ibm:lotus_domino:6.5.2 cpe:/a:ibm:lotus_domino:6.5.3

CVE-2005-1441

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:38.953-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1013842 BID 13446 CONFIRM http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202525 XF lotus-nrpc-format-string(20043) Format string vulnerability in Lotus Domino 6.0.x before 6.0.5 and 6.5.x before 6.5.4 allows remote attackers to cause a denial of service via the Notes protocol (NRPC).

CVE-2005-1442

2005-05-03T00:00:00.000-04:00

2017-07-10T21:32:39.000-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 13447 CONFIRM http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202526 XF lotus-notesini-bo(20044) Buffer overflow in the Lotus Notes client for Domino 6.5 before 6.5.4 and 6.0 before 6.0.5 allows local users to cause a denial of service (client crash) and possibly execute arbitrary code via the NOTES.INI file.

CVE-2005-1443

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:09.937-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2005-05-13T11:40:00.000-04:00

ALLOWS_OTHER_ACCESS

SECTRACK 1013863 Multiple cross-site scripting (XSS) vulnerabilities in index.php for Invision Power Board (IPB) 2.0.3 and 2.1 Alpha 2 allows remote attackers to inject arbitrary web script or HTML via the (1) act, (2) Members, (3) calendar, or (4) HID parameters.

cpe:/a:sitepanel:sitepanel:2.6.1

CVE-2005-1444

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:10.093-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2005-05-13T11:36:00.000-04:00

ALLOWS_OTHER_ACCESS

MISC http://forum.sitepanel2.com/index.php?showtopic=271 MISC http://www.gulftech.org/?node=research&article_id=00072-05032005 Multiple cross-site scripting (XSS) vulnerabilities in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to inject arbitrary web script or HTML via (1) the v, show, or sec_name parameters to main.php, (2) the inadmin, newsev, or postid parameters to 5.php, or (3) the id parameter to 0.php.

cpe:/a:sitepanel:sitepanel:2.6.1

CVE-2005-1445

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:10.247-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-05-13T11:42:00.000-04:00

MISC http://forum.sitepanel2.com/index.php?showtopic=271 MISC http://www.gulftech.org/?node=research&article_id=00072-05032005 Multiple directory traversal vulnerabilities in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to (1) delete arbitrary files via the id parameter in a rmattach action to 5.php, or (2) read arbitrary files via the lang parameter to index.php.

cpe:/a:sitepanel:sitepanel:2.6.1

CVE-2005-1446

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:10.403-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-13T11:45:00.000-04:00

ALLOWS_OTHER_ACCESS

MISC http://forum.sitepanel2.com/index.php?showtopic=271 MISC http://www.gulftech.org/?node=research&article_id=00072-05032005 SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to upload and execute arbitrary files such as PHP scripts via an attachment to a trouble ticket.

cpe:/a:sitepanel:sitepanel:2.6.1

CVE-2005-1447

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:10.547-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-05-13T11:47:00.000-04:00

ALLOWS_OTHER_ACCESS

MISC http://forum.sitepanel2.com/index.php?showtopic=271 MISC http://www.gulftech.org/?node=research&article_id=00072-05032005 PHP remote file inclusion vulnerability in main.php in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to execute arbitrary PHP code via the p parameter.

cpe:/a:s9y:serendipity:0.7 cpe:/a:s9y:serendipity:0.7.1 cpe:/a:s9y:serendipity:0.7_beta1 cpe:/a:s9y:serendipity:0.7_beta2 cpe:/a:s9y:serendipity:0.7_beta3 cpe:/a:s9y:serendipity:0.7_beta4 cpe:/a:s9y:serendipity:0.7_rc1 cpe:/a:s9y:serendipity:0.8_beta5 cpe:/a:s9y:serendipity:0.8_beta6

CVE-2005-1448

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:10.700-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2005-05-13T12:00:00.000-04:00

ALLOWS_OTHER_ACCESS

CONFIRM http://www.s9y.org/63.html#A9 BID 13411 Cross-site scripting (XSS) vulnerability in the BBCode plugin for Serendipity before 0.8 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

cpe:/a:s9y:serendipity:0.3 cpe:/a:s9y:serendipity:0.4 cpe:/a:s9y:serendipity:0.5_pl1 cpe:/a:s9y:serendipity:0.6_pl3 cpe:/a:s9y:serendipity:0.7 cpe:/a:s9y:serendipity:0.7.1 cpe:/a:s9y:serendipity:0.7_beta1 cpe:/a:s9y:serendipity:0.7_beta2 cpe:/a:s9y:serendipity:0.7_beta3 cpe:/a:s9y:serendipity:0.7_beta4 cpe:/a:s9y:serendipity:0.7_rc1 cpe:/a:s9y:serendipity:0.8_beta5 cpe:/a:s9y:serendipity:0.8_beta6

CVE-2005-1449

2005-05-03T00:00:00.000-04:00

2008-09-05T16:49:10.873-04:00

10.0

NETWORK

LOW