Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2005-1735
Multiple cross-site scripting (XSS) vulnerabilities in PROMS before 0.11 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.
Affected Products: n/a
References: [{'name': '1013992', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013992'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://projects.electricmonk.nl/proms.php?action=ReleaseOverview&project_id=2&release_id=91'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://projects.electricmonk.nl//files/PROMS/proms-0.11.tar.gz'}]
CVE State: PUBLISHED
Explain CVE-2005-1736
PROMS 0.11 does not properly handle "certain combinations of rights," which gives more rights to users than intended.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://projects.electricmonk.nl/proms.php?action=ReleaseOverview&project_id=2&release_id=91'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://projects.electricmonk.nl//files/PROMS/proms-0.11.tar.gz'}]
CVE State: PUBLISHED
Explain CVE-2005-1737
Multiple unknown vulnerabilities in PROMS 0.11 allow "non-authorized users" to (1) view or modify the project member list or (2) modify the todos list.
Affected Products: n/a
References: [{'name': '1013992', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013992'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://projects.electricmonk.nl/proms.php?action=ReleaseOverview&project_id=2&release_id=91'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://projects.electricmonk.nl//files/PROMS/proms-0.11.tar.gz'}]
CVE State: PUBLISHED
Explain CVE-2005-1738
Format string vulnerability in the logPrintBadfile function in delbadfiles.c Iron Bars SHell (ibsh) before 0.3d allows users to "access files outside the home directory" and possibly execute arbitrary code via certain inputs that are not properly handled in a syslog call.
Affected Products: n/a
References: [{'name': '13720', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13720'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=329340'}, {'name': '15473', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15473'}]
CVE State: PUBLISHED
Explain CVE-2005-1739
The XWD Decoder in ImageMagick before 6.2.2.3, and GraphicsMagick before 1.1.6-r1, allows remote attackers to cause a denial of service (infinite loop) via an image with a zero color mask.
Affected Products: n/a
References: [{'name': '16775', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16775'}, {'name': 'GLSA-200505-16', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200505-16.xml'}, {'name': 'MDKSA-2005:107', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:107'}, {'name': '13705', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13705'}, {'name': '16774', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16774'}, {'name': 'RHSA-2005:480', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-480.html'}, {'name': 'USN-132-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/132-1/'}, {'name': 'oval:org.mitre.oval:def:960', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A960'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=90423'}, {'name': '15429', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15429'}, {'name': '15446', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15446'}, {'name': '15453', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15453'}, {'name': 'oval:org.mitre.oval:def:11667', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11667'}]
CVE State: PUBLISHED
Explain CVE-2005-1740
fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files to execute arbitrary commands, or overwrite arbitrary files via a symlink attack.
Affected Products: n/a
References: [{'name': '13715', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13715'}, {'name': 'GLSA-200505-18', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200505-18.xml'}, {'name': 'ADV-2005-0598', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0598'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zataz.net/adviso/net-snmp-05182005.txt'}, {'name': '15471', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15471'}, {'name': '1014039', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014039'}, {'name': '16778', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16778'}, {'name': '16999', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/16999'}, {'name': '18635', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18635'}, {'name': 'oval:org.mitre.oval:def:11659', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11659'}, {'name': 'MDKSA-2006:025', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:025'}, {'name': 'RHSA-2005:395', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-395.html'}, {'name': 'RHSA-2005:373', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-373.html'}, {'name': '17135', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17135'}]
CVE State: PUBLISHED
Explain CVE-2005-1741
Gearbox Software Halo: Combat Evolved 1.6 allows remote attackers to cause a denial of service (infinite loop) via malformed data.
Affected Products: n/a
References: [{'name': '13728', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13728'}, {'name': '1014067', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014067'}, {'name': 'ADV-2005-0616', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0616'}, {'name': '15501', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15501'}, {'name': '20050524 Endless loop in Halo 1.06', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/398833'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/haloloop-adv.txt'}]
CVE State: PUBLISHED
Explain CVE-2005-1742
BEA WebLogic Server and WebLogic Express 8.1 SP2 and SP3 allows users with the Monitor security role to "shrink or reset JDBC connection pools."
Affected Products: n/a
References: [{'name': '15486', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15486'}, {'name': 'ADV-2005-0602', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0602'}, {'name': '1014049', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014049'}, {'name': 'BEA05-75.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/125'}, {'name': '13717', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13717'}]
CVE State: PUBLISHED
Explain CVE-2005-1743
BEA WebLogic Server and WebLogic Express 8.1 through Service Pack 3 and 7.0 through Service Pack 5 does not properly handle when a security provider throws an exception, which may cause WebLogic to use incorrect identity for the thread, or to fail to audit security exceptions.
Affected Products: n/a
References: [{'name': '15486', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15486'}, {'name': 'ADV-2005-0603', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0603'}, {'name': '1014049', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014049'}, {'name': '13717', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13717'}, {'name': 'BEA05-76.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/126'}]
CVE State: PUBLISHED
Explain CVE-2005-1744
BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows those users to continue to access the application without having to log in again, which may be in violation of newly changed security constraints or role mappings.
Affected Products: n/a
References: [{'name': 'ADV-2005-0604', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0604'}, {'name': '15486', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15486'}, {'name': 'BEA05-77.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/127'}, {'name': '1014049', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014049'}, {'name': '13717', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13717'}]
CVE State: PUBLISHED
Explain CVE-2005-1745
The UserLogin control in BEA WebLogic Portal 8.1 through Service Pack 3 prints the password to standard output when an incorrect login attempt is made, which could make it easier for attackers to guess the correct password.
Affected Products: n/a
References: [{'name': '15486', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15486'}, {'name': '1014049', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014049'}, {'name': 'BEA05-78.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/128'}, {'name': '13717', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13717'}, {'name': 'ADV-2005-0605', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0605'}]
CVE State: PUBLISHED
Explain CVE-2005-1746
The cluster cookie parsing code in BEA WebLogic Server 7.0 through Service Pack 5 attempts to contact any host or port specified in a cookie, even when it is not in the cluster, which allows remote attackers to cause a denial of service (cluster slowdown) via modified cookies.
Affected Products: n/a
References: [{'name': '15486', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15486'}, {'name': 'ADV-2005-0606', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0606'}, {'name': '1014049', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014049'}, {'name': '13717', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13717'}, {'name': 'BEA05-79.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/129'}]
CVE State: PUBLISHED
Explain CVE-2005-1747
Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 6, allow remote attackers to inject arbitrary web script or HTML, and possibly gain administrative privileges, via the (1) j_username or (2) j_password parameters in the login page (LoginForm.jsp), (3) parameters to the error page in the Administration Console, (4) unknown vectors in the Server Console while the administrator has an active session to obtain the ADMINCONSOLESESSION cookie, or (5) an alternate vector in the Server Console that does not require an active session but also leaks the username and password.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.appsecinc.com/resources/alerts/general/BEA-002.html'}, {'name': '20050524 ACROS Security: HTML Injection in BEA WebLogic Server Console (1)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111695921212456&w=2'}, {'name': 'BEA05-80.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/130'}, {'name': '15486', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15486'}, {'name': '20050527 [AppSecInc Advisory BEA05-V0101] BEA WebLogic Administration Console login page cross-site scripting vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111722380313416&w=2'}, {'name': '1014049', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014049'}, {'name': 'ADV-2005-0607', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0607'}, {'name': '20050524 ACROS Security: HTML Injection in BEA WebLogic Server Console (2)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111695844803328&w=2'}, {'name': '13717', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13717'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.appsecinc.com/resources/alerts/general/BEA-001.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.acrossecurity.com/aspr/ASPR-2005-05-24-2-PUB.txt'}, {'name': '20050527 [AppSecInc Advisory BEA05-V0100] BEA WebLogic Administration Console error page cross-site scripting vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111722298705561&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.acrossecurity.com/aspr/ASPR-2005-05-24-1-PUB.txt'}]
CVE State: PUBLISHED
Explain CVE-2005-1748
The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 5, allows remote anonymous binds, which may allow remote attackers to view user entries or cause a denial of service.
Affected Products: n/a
References: [{'name': '15486', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15486'}, {'name': 'ADV-2005-0608', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0608'}, {'name': '1014049', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014049'}, {'name': '13717', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13717'}, {'name': 'BEA05-81.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/131'}]
CVE State: PUBLISHED
Explain CVE-2005-1749
Buffer overflow in BEA WebLogic Server and WebLogic Express 6.1 Service Pack 4 allows remote attackers to cause a denial of service (CPU consumption from thread looping).
Affected Products: n/a
References: [{'name': '15486', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15486'}, {'name': 'ADV-2005-0609', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0609'}, {'name': '13717', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13717'}, {'name': 'BEA05-82.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/132'}]
CVE State: PUBLISHED
Explain CVE-2005-1750
SQL injection vulnerability in login.asp in ezdwc NewsletterEz 3.0 allows remote attackers to execute arbitrary SQL commands via the password parameter.
Affected Products: n/a
References: [{'name': '13730', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13730'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.under9round.com/nez.txt'}, {'name': '1014038', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014038'}, {'name': '15469', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15469'}]
CVE State: PUBLISHED
Explain CVE-2005-1751
Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack on the .shtool.$$ temporary file, a different vulnerability than CVE-2005-1759.
Affected Products: n/a
References: [{'name': 'DSA-789', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-789'}, {'name': 'oval:org.mitre.oval:def:9639', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9639'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=93782'}, {'name': '15668', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15668'}, {'name': '15496', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15496'}, {'name': '1014059', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014059'}, {'name': '13767', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13767'}, {'name': 'oval:org.mitre.oval:def:345', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A345'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zataz.net/adviso/shtool-05252005.txt'}, {'name': 'RHSA-2005:564', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-564.html'}, {'name': 'GLSA-200506-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200506-08.xml'}, {'name': 'OpenPKG-SA-2005.011', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://marc.info/?l=bugtraq&m=111955937622637&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1752
viewFile.php in the scm component of Gforge before 4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file_name parameter.
Affected Products: n/a
References: [{'name': '13845', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13845'}, {'name': '13716', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13716'}, {'name': '20050524 Gforge - viewFile.php security flaw', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111695779919830&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1753
ReadMessage.jsp in JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to view other users' e-mail attachments via a direct request to /mailboxesdir/username@domainname. NOTE: Sun and Apache dispute this issue.  Sun states: "The report makes references to source code and files that do not exist in the mentioned products.
Affected Products: n/a
References: [{'name': '20050524 Javamail Multiple Information Disclosure Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111697083812367&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://tomcat.apache.org/security-5.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1754
JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to read arbitrary files via a full pathname in the argument to the Download parameter.  NOTE: Sun and Apache dispute this issue.  Sun states: "The report makes references to source code and files that do not exist in the mentioned products.
Affected Products: n/a
References: [{'name': '20050524 Javamail Multiple Information Disclosure Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111697083812367&w=2'}, {'name': '13753', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13753'}, {'tags': ['x_refsource_MISC'], 'url': 'http://tomcat.apache.org/security-5.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1755
PHP remote file inclusion vulnerability in poll_vote.php in PHP Poll Creator 1.01 allows remote attackers to execute arbitrary PHP code via the relativer_pfad parameter.
Affected Products: n/a
References: [{'name': '16846', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16846'}, {'name': '15510', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15510'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.svt.nukleon.us/lab/svadvisory6.txt'}, {'name': '20050525 PHP Injection in PHP Poll Creator', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111704581329860&w=2'}, {'name': '1014061', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014061'}]
CVE State: PUBLISHED
Explain CVE-2005-1756
Cross-site scripting (XSS) vulnerability in the ModWeb agent for Novell NetMail 3.52 before 3.52C allows remote attackers to inject arbitrary web script or HTML via calendar display fields.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971588.htm'}, {'name': 'ADV-2005-0727', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0727'}, {'name': '17240', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17240'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971590.htm'}, {'name': '15644', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15644'}, {'name': '13926', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13926'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971591.htm'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097957.htm'}]
CVE State: PUBLISHED
Explain CVE-2005-1757
Buffer overflow in the Modweb agent for Novell NetMail 3.52 before 3.52C, when renaming folders, may allow attackers to execute arbitrary code.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971588.htm'}, {'name': 'ADV-2005-0727', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0727'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971590.htm'}, {'name': '15644', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15644'}, {'name': '13926', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13926'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971591.htm'}, {'name': '17241', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17241'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097957.htm'}]
CVE State: PUBLISHED
Explain CVE-2005-1758
Buffer overflow in the IMAP command continuation function in Novell NetMail 3.52 before 3.52C may allow remote attackers to execute arbitrary code.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971588.htm'}, {'name': 'ADV-2005-0727', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0727'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971590.htm'}, {'name': '17239', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17239'}, {'name': '15644', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15644'}, {'name': '13926', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13926'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971591.htm'}, {'name': '14718', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/14718'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097957.htm'}]
CVE State: PUBLISHED
Explain CVE-2005-1759
Race condition in shtool 2.0.1 and earlier allows local users to modify or create arbitrary files via a symlink attack on temporary files after they have been created, a different vulnerability than CVE-2005-1751.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=93782'}, {'name': '15668', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15668'}, {'name': '13767', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13767'}, {'name': 'GLSA-200506-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200506-08.xml'}, {'name': 'OpenPKG-SA-2005.011', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://marc.info/?l=bugtraq&m=111955937622637&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1760
sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:623', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A623'}, {'name': 'oval:org.mitre.oval:def:9522', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9522'}, {'name': '13936', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13936'}, {'name': '15675', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15675'}, {'name': '1014181', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014181'}, {'name': 'RHSA-2005:502', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-502.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1761
Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service (kernel crash) via ptrace and the restore_sigcontext function.
Affected Products: n/a
References: [{'name': '18056', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18056'}, {'name': '14051', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/14051'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.1'}, {'name': '17073', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17073'}, {'name': '19369', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19369'}, {'name': 'oval:org.mitre.oval:def:10487', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10487'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ea78729b8dbfc400fe165a57b90a394a7275a54'}, {'name': 'DSA-1018', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1018'}, {'name': 'DSA-922', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-922'}, {'name': 'RHSA-2005:551', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-551.html'}, {'name': '1014275', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014275'}, {'name': 'RHSA-2005:514', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-514.html'}, {'name': '17002', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17002'}, {'name': 'SUSE-SA:2005:044', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_44_kernel.html'}, {'name': 'FLSA:157459-3', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/427980/100/0/threaded'}, {'name': 'RHSA-2005:663', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-663.html'}, {'name': 'ADV-2005-1878', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/1878'}]
CVE State: PUBLISHED
Explain CVE-2005-1762
The ptrace call in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform allows local users to cause a denial of service (kernel crash) via a "non-canonical" address.
Affected Products: n/a
References: [{'name': '18056', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18056'}, {'name': '17073', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17073'}, {'name': '13904', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13904'}, {'name': '18059', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18059'}, {'name': 'oval:org.mitre.oval:def:10630', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10630'}, {'name': 'FLSA:157459-2', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/428058/100/0/threaded'}, {'name': 'SUSE-SA:2005:029', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_29_kernel.html'}, {'name': 'DSA-922', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-922'}, {'name': '15786', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15786'}, {'name': 'DSA-921', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-921'}, {'name': 'RHSA-2005:514', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-514.html'}, {'name': '17002', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17002'}, {'name': 'USN-143-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/143-1/'}, {'name': 'FLSA:157459-3', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/427980/100/0/threaded'}, {'name': 'RHSA-2005:663', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-663.html'}, {'name': 'ADV-2005-1878', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/1878'}]
CVE State: PUBLISHED
Explain CVE-2005-1763
Buffer overflow in ptrace in the Linux Kernel for 64-bit architectures allows local users to write bytes into kernel memory.
Affected Products: n/a
References: [{'name': '18056', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18056'}, {'name': '17073', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17073'}, {'name': 'SUSE-SA:2005:029', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_29_kernel.html'}, {'name': 'DSA-922', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-922'}, {'name': 'oval:org.mitre.oval:def:10182', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10182'}, {'name': 'RHSA-2005:514', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-514.html'}, {'name': 'FLSA:157459-3', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/427980/100/0/threaded'}, {'name': '13903', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13903'}]
CVE State: PUBLISHED
Explain CVE-2005-1764
Linux 2.6.11 on 64-bit x86 (x86_64) platforms does not use a guard page for the 47-bit address page to protect against an AMD K8 bug, which allows local users to cause a denial of service.
Affected Products: n/a
References: [{'name': 'linux-kernel-guardpage-dos(43324)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/43324'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=637716a3825e186555361574aa1fa3c0ebf8018b'}, {'name': 'MDKSA-2005:220', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:220'}, {'name': '13904', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13904'}, {'name': 'SUSE-SA:2005:029', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://freshmeat.net/articles/view/1678/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=637716a3825e186555361574aa1fa3c0ebf8018b'}]
CVE State: PUBLISHED
Explain CVE-2005-1765
syscall in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform, when running in 32-bit compatibility mode, allows local users to cause a denial of service (kernel hang) via crafted arguments.
Affected Products: n/a
References: [{'name': '18056', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18056'}, {'name': '13904', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13904'}, {'name': 'SUSE-SA:2005:029', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_29_kernel.html'}, {'name': 'DSA-922', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-922'}, {'name': 'USN-143-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/143-1/'}]
CVE State: PUBLISHED
Explain CVE-2005-1766
Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other versions before 10.0.5 on Linux, allows remote attackers to execute arbitrary code via a RealMedia file with a long RealText string, such as an SMIL file.
Affected Products: n/a
References: [{'name': 'RHSA-2005:517', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-517.html'}, {'name': 'DSA-826', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-826'}, {'name': 'RHSA-2005:523', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-523.html'}, {'name': '16981', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/16981'}, {'name': '20050623 RealNetworks RealPlayer RealText Parsing Heap Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=250&type=vulnerabilities&flashstatus=true'}, {'name': 'oval:org.mitre.oval:def:9509', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9509'}, {'name': 'SUSE-SA:2005:037', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_37_real_player.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://service.real.com/help/faq/security/050623_player/EN/'}]
CVE State: PUBLISHED
Explain CVE-2005-1767
traps.c in the Linux kernel 2.6.x and 2.4.x executes stack segment faults on an exception stack, which allows local users to cause a denial of service (oops and stack fault exception).
Affected Products: n/a
References: [{'name': '18056', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18056'}, {'name': 'USN-187-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-187-1'}, {'name': '18977', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18977'}, {'name': '18059', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18059'}, {'name': 'MDKSA-2006:044', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044'}, {'name': 'DSA-922', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-922'}, {'name': '14467', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/14467'}, {'name': 'DSA-921', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-921'}, {'name': '17002', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17002'}, {'name': 'SUSE-SA:2005:044', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_44_kernel.html'}, {'name': 'RHSA-2005:663', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-663.html'}, {'name': 'ADV-2005-1878', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/1878'}, {'name': 'oval:org.mitre.oval:def:11101', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11101'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Bh=51e31546a2fc46cb978da2ee0330a6a68f07541e'}]
CVE State: PUBLISHED
Explain CVE-2005-1768
Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 before 2.6.6 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via a concurrent thread that increments a pointer count after the nargs function has counted the pointers, but before the count is copied from user space to kernel space, which leads to a buffer overflow.
Affected Products: n/a
References: [{'name': '20050711 [ Suresec Advisories ] - Linux kernel ia32 compatibility (ia64/x86-64)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=112110120216116&w=2'}, {'name': '15980', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15980'}, {'name': '1014442', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014442'}, {'name': '18059', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18059'}, {'name': '19185', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19185'}, {'name': '19607', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19607'}, {'name': 'oval:org.mitre.oval:def:11117', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11117'}, {'name': 'DSA-921', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-921'}, {'name': 'RHSA-2005:551', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-551.html'}, {'name': '17002', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17002'}, {'name': '14205', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/14205'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.suresec.org/advisories/adv4.pdf'}, {'name': '20060402-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U'}, {'name': 'SUSE-SA:2005:044', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_44_kernel.html'}, {'name': 'RHSA-2005:663', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-663.html'}, {'name': 'ADV-2005-1878', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/1878'}]
CVE State: PUBLISHED
Explain CVE-2005-1769
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.4 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in (1) the URL or (2) an e-mail message.
Affected Products: n/a
References: [{'name': 'SUSE-SR:2005:018', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_18_sr.html'}, {'name': 'MDKSA-2005:108', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:108'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squirrelmail.org/security/issue/2005-06-15'}, {'name': '20050616 [SM-ANNOUNCE] Patch fixes SquirrelMail cross site scripting vulnerabilities [CAN-2005-1769]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111893827711390&w=2'}, {'name': 'oval:org.mitre.oval:def:9852', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9852'}, {'name': 'FLSA:163047', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=163047'}, {'name': 'APPLE-SA-2005-08-15', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html'}, {'name': 'RHSA-2005:595', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-595.html'}, {'name': 'DSA-756', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-756'}, {'name': 'APPLE-SA-2005-08-17', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1770
Buffer overflow in the Aavmker4 device driver in Avast! Antivirus 4.6 and possibly other versions allows local users to cause a denial of service (system crash) and possibly execute arbitrary code via certain signals combined with crafted input.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://pb.specialised.info/all/adv/avast-adv.txt'}, {'name': '20050526 Alwil Software Avast Antivirus Device Driver Memory Overwrite Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111712494620031&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1771
Unknown vulnerability in HP-UX trusted systems B.11.00 through B.11.23 allows remote attackers to gain unauthorized access, possibly involving remshd and/or telnet -t.
Affected Products: n/a
References: [{'name': '1014060', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014060'}, {'name': 'HPSBUX01165', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=111713178014478&w=2'}, {'name': 'SSRT5899', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=111713178014478&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1772
Buffer overflow in the client cd-key hash in Terminator 3: War of the Machines 1.16 and earlier allows remote attackers to cause a denial of service (application crash) via a long client cd-key hash value, a different vulnerability than CVE-2005-1556.
Affected Products: n/a
References: [{'name': '20050526 Buffer-overflow and crash in Terminator 3: War of the Machines 1.16', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111713248227479&w=2'}, {'name': '15520', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15520'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/t3wmbof-adv.txt'}]
CVE State: PUBLISHED
Explain CVE-2005-1773
Multiple unknown vulnerabilities in L-Soft LISTSERV 14.3, 1.8e, and 1.8d allow remote attackers to execute arbitrary code or cause a denial of service.  NOTE: this candidate may be SPLIT in the future when more precise technical details become available.
Affected Products: n/a
References: [{'name': '15498', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15498'}, {'name': '13768', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13768'}, {'name': '1014051', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014051'}, {'name': "20050525 High Risk Vulnerability in L-Soft's LISTSERV Server", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111705329308546&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1774
WEB-DAV Linux File System (davfs2) 0.2.3 does not properly enforce Unix permissions, which allows local users to write arbitrary files on a davfs2 mounted filesystem.
Affected Products: n/a
References: [{'name': '15497', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15497'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=310757'}, {'name': '20050525 davfs2 does not honour Unix permissions', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111705524308096&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1775
Terminator 3: War of the Machines 1.16 and earlier allows remote attackers to cause a denial of service (application crash) via a large nickname.
Affected Products: n/a
References: [{'name': '20050526 Buffer-overflow and crash in Terminator 3: War of the Machines 1.16', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111713248227479&w=2'}, {'name': '15520', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15520'}]
CVE State: PUBLISHED
Explain CVE-2005-1776
Buffer overflow in the READ_TCP_STRING function in game_message_functions.cpp in the network plugin for C'Nedra 0.4.0 and earlier allows remote attackers to execute arbitrary code via a long text string.
Affected Products: n/a
References: [{'name': "20050526 Buffer-overflow in C'Nedra 0.4.0", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111713300212601&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/cnedrabof-adv.txt'}, {'name': '15519', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15519'}]
CVE State: PUBLISHED