Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2005-1073
Directory traversal vulnerability in index.php for RadScripts RadBids Gold 2 allows remote attackers to read arbitrary files via the read parameter.
Affected Products: n/a
References: [{'name': 'radbids-gold-php-xss(20038)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20038'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalparadox.org/advisories/rga.txt'}, {'name': '20050409 Directory transversal, sql injection and xss vulnerabilities in RadBids Gold v2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/395527'}, {'name': '13080', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13080'}, {'name': '14906', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14906'}, {'name': '15428', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15428'}]
CVE State: PUBLISHED
Explain CVE-2005-1074
SQL injection vulnerability in index.php for RadScripts RadBids Gold 2 allows remote attackers to execute arbitrary SQL commands via the mode parameter.
Affected Products: n/a
References: [{'name': 'radbids-gold-index-sql-injection(20040)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20040'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalparadox.org/advisories/rga.txt'}, {'name': '20050409 Directory transversal, sql injection and xss vulnerabilities in RadBids Gold v2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/395527'}, {'name': '13080', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13080'}, {'name': '14906', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14906'}, {'name': '15429', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15429'}]
CVE State: PUBLISHED
Explain CVE-2005-1075
Multiple cross-site scripting (XSS) vulnerabilities in RadScripts RadBids Gold 2 allow remote attackers to inject arbitrary web script or HTML via (1) the farea parameter to faq.php or the (2) cat, (3) order, or (4) area parameters to index.php.
Affected Products: n/a
References: [{'name': 'radbids-gold-php-xss(20038)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20038'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalparadox.org/advisories/rga.txt'}, {'name': '20050409 Directory transversal, sql injection and xss vulnerabilities in RadBids Gold v2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/395527'}, {'name': '15430', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15430'}, {'name': '13080', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13080'}, {'name': '14906', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14906'}, {'name': '15431', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15431'}]
CVE State: PUBLISHED
Explain CVE-2005-1076
Cross-site scripting (XSS) vulnerability in the discussion board functionality for WebCT Campus Edition 4.1 allows remote attackers to inject arbitrary web script or HTML via the message field.
Affected Products: n/a
References: [{'name': '20050411 WebCT 4.1 vulnerable to XSS attacks', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/395544'}, {'name': '13101', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13101'}]
CVE State: PUBLISHED
Explain CVE-2005-1077
Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.4.x allow remote attackers to inject arbitrary web script or HTML via (1) cds.php, (2) Guestbook-EN.pl, or (3) phonebook.php.
Affected Products: n/a
References: [{'name': '13127', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13127'}, {'name': '13128', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13128'}, {'name': '13126', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13126'}, {'name': '20050412 XAMPP', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=111330048629182&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1078
XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges.
Affected Products: n/a
References: [{'name': '13131', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13131'}, {'name': '20050412 XAMPP', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=111330048629182&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1079
SQL injection vulnerability in index.php for zOOm Media Gallery 2.1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter.
Affected Products: n/a
References: [{'name': '14929', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14929'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/unixfocus/5LP0G0AFFY.html'}, {'name': '20050413 zOOM Media Gallery - Simple SQL Injection discovery', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111340031132596&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1081
Cross-site scripting (XSS) vulnerability in view.php in AzDGDatingPlatinum 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Affected Products: n/a
References: [{'name': '20050409 AzDGDatingPlatinum multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/395530'}, {'name': '13082', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13082'}, {'name': 'azdgdating-platinum-viewphp-xss(20052)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20052'}]
CVE State: PUBLISHED
Explain CVE-2005-1082
Multiple SQL injection vulnerabilities in AzDGDatingPlatinum 1.1.0 allows remote attackers to execute arbitrary SQL commands via (1) the id parameter to view.php or (2) the from parameter to members/index.php.
Affected Products: n/a
References: [{'name': '20050409 AzDGDatingPlatinum multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/395530'}, {'name': '20060628 AzDGDatingPlatinum<<--v1.1.0 "view.php" SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/438607/100/100/threaded'}, {'name': '13082', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13082'}, {'name': 'azdgdating-platinum-sql-injection(20051)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20051'}, {'name': '15525', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15525'}, {'name': 'azdgdatingplatinum-view-sql-injection(27436)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/27436'}]
CVE State: PUBLISHED
Explain CVE-2005-1083
index.php in aeDating 3.2 allows remote attackers to include arbitrary files via the skin parameter.
Affected Products: n/a
References: [{'name': '14913', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14913'}]
CVE State: PUBLISHED
Explain CVE-2005-1084
SQL injection vulnerability in sdating.php in aeDating 3.2 allows remote attackers to execute arbitrary SQL commands files via the event parameter.
Affected Products: n/a
References: [{'name': '14913', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14913'}]
CVE State: PUBLISHED
Explain CVE-2005-1085
Cross-site scripting (XSS) vulnerability in the control panel in aeDating 3.2 allows remote attackers to inject arbitrary web script or HTML.
Affected Products: n/a
References: [{'name': '14913', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14913'}]
CVE State: PUBLISHED
Explain CVE-2005-1086
Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with a long User-Agent header.
Affected Products: n/a
References: [{'name': '15361', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15361'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.org.sg/vuln/anhttpd142n.html'}, {'name': '14861', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14861'}, {'name': '1013666', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013666'}, {'name': '13066', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13066'}, {'name': 'an-httpd-cmdisdll-bo(20029)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20029'}]
CVE State: PUBLISHED
Explain CVE-2005-1087
CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.
Affected Products: n/a
References: [{'name': '15362', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15362'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.org.sg/vuln/anhttpd142n.html'}, {'name': '14861', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14861'}, {'name': 'an-httpd-logfile-character-injection(20031)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20031'}, {'name': '1013666', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013666'}]
CVE State: PUBLISHED
Explain CVE-2005-1088
Unknown vulnerability in DameWare NT Utilities 4.8 and earlier, and Mini Remote Control 4.8 and earlier, allows local users to gain additional rights.
Affected Products: n/a
References: [{'name': 'dameware-elevated-privileges(19997)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19997'}, {'name': '14829', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14829'}, {'name': '13023', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13023'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.dameware.com/support/security/bulletin.asp?ID=SB5'}, {'name': '18732', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/18732'}, {'name': '1013653', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013653'}]
CVE State: PUBLISHED
Explain CVE-2005-1089
Unknown vulnerability in DC++ before 0.674 allows attackers to append data to arbitrary files.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://dcplusplus.sourceforge.net/index.php?t=8&s=1'}, {'name': '15433', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15433'}, {'name': '14880', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14880'}]
CVE State: PUBLISHED
Explain CVE-2005-1090
Directory traversal vulnerability in the readFile and writeFile API for Maxthon 1.2.0 and 1.2.1 allows remote attackers to read or write arbitrary files.
Affected Products: n/a
References: [{'name': '13074', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13074'}, {'name': '14918', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14918'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.raffon.net/advisories/maxthon/multvulns.html'}, {'name': 'maxthon-directory-traversal(20033)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20033'}, {'name': '15423', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15423'}]
CVE State: PUBLISHED
Explain CVE-2005-1091
Maxthon 1.2.0 and 1.2.1 allows remote attackers to bypass the security ID and use restricted plugin API functions via script that includes the max.src file into the source page.
Affected Products: n/a
References: [{'name': '13073', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13073'}, {'name': '14918', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14918'}, {'name': '15424', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15424'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.raffon.net/advisories/maxthon/multvulns.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1092
Lightspeed DeluxeFTP 6.01 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges.
Affected Products: n/a
References: [{'name': '14923', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14923'}, {'name': '15421', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15421'}, {'name': '13105', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13105'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lostmon.blogspot.com/2005/04/deluxeftp-plain-text-passwords.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1093
Buffer overflow in the PopUp Plus 2.0.3.8 plugin for Miranda IM, with "Use SmileyAdd Setting" enabled, allows remote attackers to execute arbitrary code.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://forums.miranda-im.org/showthread.php?p=9624'}, {'name': '13048', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13048'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.miranda-im.org/'}, {'name': 'popupplus-message-bo(20013)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20013'}, {'name': '1013661', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013661'}, {'tags': ['x_refsource_MISC'], 'url': 'http://forums.miranda-im.org/showthread.php?t=1070'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sec.org.il/coverages.php?c=89'}, {'name': '15482', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15482'}]
CVE State: PUBLISHED
Explain CVE-2005-1094
FTP Now 2.6.14 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges.
Affected Products: n/a
References: [{'name': '1013657', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013657'}, {'name': '14889', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14889'}, {'name': 'ftpnow-sites-information-disclosure(20025)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20025'}, {'name': '15296', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15296'}]
CVE State: PUBLISHED
Explain CVE-2005-1095
Cross-site scripting (XSS) vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to inject arbitrary web script or HTML via the page parameter.
Affected Products: n/a
References: [{'name': '1013667', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013667'}, {'name': '14864', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14864'}, {'name': '15306', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15306'}, {'name': '13046', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13046'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hackerscenter.com/archive/view.asp?id=1865'}, {'name': 'ocean12-membershipmgr-mainasp-xss(20014)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20014'}]
CVE State: PUBLISHED
Explain CVE-2005-1096
SQL injection vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to execute arbitrary SQL commands via the UserID parameter.
Affected Products: n/a
References: [{'name': '1013667', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013667'}, {'name': '14864', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14864'}, {'name': '13049', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13049'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hackerscenter.com/archive/view.asp?id=1865'}, {'name': '15307', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15307'}, {'name': 'ocean12-membershipmgr-mainasp-sql-injection(20015)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20015'}]
CVE State: PUBLISHED
Explain CVE-2005-1097
Rebrand P2P Share Spy 2.2 stores the user password in plaintext in the txtPassword value in the registry, which allows local users to gain privileges.
Affected Products: n/a
References: [{'name': '1013673', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013673'}]
CVE State: PUBLISHED
Explain CVE-2005-1098
GetDataBack for NTFS 2.31 stores the username and license key in plaintext in the Name value in the License registry key, which may allow local users to obtain sensitive information.
Affected Products: n/a
References: [{'name': 'getdataback-ntfs-information-disclosure(19967)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19967'}, {'name': '15210', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15210'}, {'name': '1013644', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013644'}]
CVE State: PUBLISHED
Explain CVE-2005-1099
Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is listening on a network interface, allow remote attackers to execute arbitrary code.
Affected Products: n/a
References: [{'name': '1013678', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/alerts/2005/Apr/1013678.html'}, {'name': '15492', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15492'}, {'name': 'GLSA-200504-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200504-10.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.gasmi.net/down/gld-history'}, {'name': 'gld-serverc-bo(20066)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20066'}, {'name': '14941', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14941'}, {'name': '20050412 GLD (Greylisting daemon for Postfix) multiple vulnerabilities.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111339935903880&w=2'}, {'name': '20050413 Gld 1.5 released (security fix)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111342432325670&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1100
Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is passed directly to syslog.
Affected Products: n/a
References: [{'name': '15493', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15493'}, {'name': '1013678', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/alerts/2005/Apr/1013678.html'}, {'name': 'GLSA-200504-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200504-10.xml'}, {'name': '14941', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14941'}, {'name': '20050412 GLD (Greylisting daemon for Postfix) multiple vulnerabilities.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111339935903880&w=2'}, {'name': 'gld-cnfc-format-string(20067)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20067'}]
CVE State: PUBLISHED
Explain CVE-2005-1101
Multiple buffer overflows in Lotus Domino Server 6.0.5 and 6.5.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via large amounts of data in certain (1) time or (2) date fields.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/lotus-01.txt'}, {'name': '15364', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15364'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202431'}, {'name': '14879', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14879/'}, {'name': 'lotus-timedate-bo(20042)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20042'}, {'name': '20050412 Remote Buffer Overflow in Lotus Domino', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111335285121320&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1102
Multiple cross-site scripting (XSS) vulnerabilities in template-functions-post.php in WordPress 1.5 and earlier allow remote attackers to execute arbitrary commands via the (1) content or (2) title of the post.
Affected Products: n/a
References: [{'name': '20050412 WordPress XSS and HTML injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111336102101571&w=2'}, {'name': 'GLSA-200506-04', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200506-04.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=88926'}, {'tags': ['x_refsource_MISC'], 'url': 'http://wordpress.org/support/topic.php?id=30721'}]
CVE State: PUBLISHED
Explain CVE-2005-1103
Sygate Security Agent (SSA) in Sygate Secure Enterprise 3.5 through 4.1 does not prevent the security policy from being updated by unprivileged users, which allows local users to modify the policy by exporting the policy file, changing it, and importing it back into SSA.
Affected Products: n/a
References: [{'name': '20050412 IRM 011: Sygate,Security Agent (Sygate Secure Enterprise) Fail Open', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111335219201828&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1104
Multiple cross-site scripting (XSS) vulnerabilities in Centra 7 allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) first name, or (3) last name fields.
Affected Products: n/a
References: [{'name': '14930', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14930'}, {'name': '20050412 Centra 7 XSS Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111335198125566&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1105
Directory traversal vulnerability in the MimeBodyPart.getFileName method in JavaMail 1.3.2 allows remote attackers to write arbitrary files via a .. (dot dot) in the filename in the Content-Disposition header.
Affected Products: n/a
References: [{'name': '20050412 JavaMail allows directory traversal in attachments', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111335615600839&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1106
PictureViewer in QuickTime for Windows 6.5.2 allows remote attackers to cause a denial of service (application crash) via a GIF image with the maximum depth start value, possibly triggering an integer overflow.
Affected Products: n/a
References: [{'name': '20050413 QuickTime for Windows malformed GIF DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111335498626164&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1107
McAfee Internet Security Suite 2005 uses insecure default ACLs for installed files, which allows local users to gain privileges or disable protection by modifying certain files.
Affected Products: n/a
References: [{'name': '20050418 McAfee Internet Security Suite 2005 Insecure File Permission Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=233&type=vulnerabilities'}]
CVE State: PUBLISHED
Explain CVE-2005-1108
The ij_untrusted_url function in JunkBuster 2.0.2-r2, with single-threaded mode enabled, allows remote attackers to overwrite the referrer field via a crafted HTTP request.
Affected Products: n/a
References: [{'name': '15502', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15502'}, {'name': 'junkbuster-ijuntrustedurl-gain-access(20093)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20093'}, {'name': 'GLSA-200504-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200504-11.xml'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=88537'}, {'name': '14932', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14932/'}, {'name': 'DSA-713', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-713'}, {'name': '13147', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13147'}]
CVE State: PUBLISHED
Explain CVE-2005-1109
The filtering of URLs in JunkBuster before 2.0.2-r3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via heap corruption.
Affected Products: n/a
References: [{'name': 'GLSA-200504-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200504-11.xml'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=88537'}, {'name': '15503', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15503'}, {'name': '14932', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14932/'}, {'name': 'junkbuster-heap-corruption(20094)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20094'}, {'name': '13146', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13146'}, {'name': 'DSA-713', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-713'}]
CVE State: PUBLISHED
Explain CVE-2005-1110
Stack-based buffer overflow in the RespondeHTTPPendiente function in the HTTP server for SUMUS 0.2.2 allows remote attackers to execute arbitrary code via a large packet sent to TCP port 81.
Affected Products: n/a
References: [{'name': 'sumus-respondehttppendiente-bo(20110)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20110'}, {'name': '20050414 sumus[v0.2.2]: (httpd) remote buffer overflow exploit.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111350491800089&w=2'}, {'name': '1013717', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013717'}]
CVE State: PUBLISHED
Explain CVE-2005-1111
Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete.
Affected Products: n/a
References: [{'name': '20050413 cpio TOCTOU file-permissions vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111342664116120&w=2'}, {'name': '17532', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17532'}, {'name': 'SCOSA-2006.2', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.2/SCOSA-2006.2.txt'}, {'name': 'FreeBSD-SA-06:03', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:03.cpio.asc'}, {'name': '17123', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17123'}, {'name': '15725', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15725'}, {'name': 'RHSA-2005:378', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-378.html'}, {'name': '16998', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/16998'}, {'name': '13159', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13159'}, {'name': 'DSA-846', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-846'}, {'name': 'USN-189-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-189-1'}, {'name': 'SUSE-SR:2006:010', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html'}, {'name': '20117', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20117'}, {'name': 'oval:org.mitre.oval:def:9783', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9783'}, {'name': 'oval:org.mitre.oval:def:358', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A358'}, {'name': 'RHSA-2005:806', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-806.html'}, {'name': 'SCOSA-2005.32', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.32/SCOSA-2005.32.txt'}, {'name': '18395', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18395'}, {'name': '18290', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18290'}]
CVE State: PUBLISHED
Explain CVE-2005-1112
IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via an HTTP request with an invalid Host header, which causes the page to be processed by the web server instead of the JSP engine.
Affected Products: n/a
References: [{'name': '20050413 IBM WebSphere Widespread configuration JSP disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111342594129109&w=2'}, {'name': 'ibm-websphere-information-disclosure(20099)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20099'}, {'name': '15501', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15501'}, {'name': '13160', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13160'}, {'name': '1013697', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013697'}, {'name': '14962', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14962'}]
CVE State: PUBLISHED
Explain CVE-2005-1113
Multiple cross-site scripting (XSS) vulnerabilities in PhpBB Plus 1.52 and earlier allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) groupcp.php, (2) index.php, (3) portal.php, (4) viewforum.php, or (5) viewtopic.php, (6) the c parameter to index.php, or (7) the article parameter to portal.php.
Affected Products: n/a
References: [{'name': 'phpbb-multiple-modules-xss(20085)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20085'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalparadox.org/advisories/phpbbp.txt'}, {'name': '20050413 Multiple Sql injection and XSS vulnerabilities in phpBB Plus and below and some of its modules', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111343406309969&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1114
Multiple SQL injection vulnerabilities in album_search.php in Photo Album 2.0.53 for phpBB allow remote attackers to execute arbitrary SQL commands via the (1) mode or (2) search parameters.
Affected Products: n/a
References: [{'name': '13155', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13155'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalparadox.org/advisories/phpbbp.txt'}, {'name': '20050413 Multiple Sql injection and XSS vulnerabilities in phpBB Plus and below and some of its modules', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111343406309969&w=2'}, {'name': '15931', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15931'}, {'name': 'phpbb-multiple-modules-sql-injection(20086)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20086'}]
CVE State: PUBLISHED
Explain CVE-2005-1115
Multiple cross-site scripting (XSS) vulnerabilities in Photo Album 2.0.53 module for phpBB allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) album_cat.php or (2) album_comment.php.
Affected Products: n/a
References: [{'name': '13157', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13157'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalparadox.org/advisories/phpbbp.txt'}, {'name': '20050413 Multiple Sql injection and XSS vulnerabilities in phpBB Plus and below and some of its modules', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111343406309969&w=2'}, {'name': '13158', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13158'}]
CVE State: PUBLISHED
Explain CVE-2005-1116
Cross-site scripting (XSS) vulnerability in the Calendar module for phpBB allow remote attackers to inject arbitrary web script or HTML via the start parameter to calendar_scheduler.php.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalparadox.org/advisories/phpbbp.txt'}, {'name': '20050413 Multiple Sql injection and XSS vulnerabilities in phpBB Plus and below and some of its modules', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111343406309969&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1117
PHP remote file inclusion vulnerability in index.php in All4WWW-Homepagecreator 1.0a allows remote attackers to execute arbitrary PHP code by modifying the site parameter to reference a URL on a remote web server that contains the code.
Affected Products: n/a
References: [{'name': '14972', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14972'}, {'name': '20050414 All4WWW-Homepagecreator Remote Command Execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111350434925520&w=2'}, {'name': '13169', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13169'}]
CVE State: PUBLISHED
Explain CVE-2005-1118
Cross-site scripting (XSS) vulnerability in IISWebAgentIF.dll in the RSA Authentication Agent for Web 5.2 allows remote attackers to inject arbitrary web script or HTML via the postdata parameter.
Affected Products: n/a
References: [{'name': '14954', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14954'}, {'name': '1013724', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013724'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.oliverkarow.de/research/rsaxss.txt'}, {'name': 'VU#366372', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/366372'}, {'name': '13168', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13168'}, {'name': 'rsa-auth-postdata-xss(20098)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20098'}]
CVE State: PUBLISHED
Explain CVE-2005-1119
Sudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack on temporary files.
Affected Products: n/a
References: [{'name': '13171', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13171'}]
CVE State: PUBLISHED
Explain CVE-2005-1120
Multiple cross-site scripting (XSS) vulnerabilities in IlohaMail 0.8.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the e-mail (1) body, (2) filename, or (3) MIME type.
Affected Products: n/a
References: [{'name': '14957', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14957'}, {'name': '13175', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13175'}, {'name': '1013701', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013701'}, {'name': '19266', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19266'}, {'name': 'ilohamail-mail-attached-file-xss(20095)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20095'}, {'name': '15506', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15506'}, {'name': 'DSA-1010', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1010'}]
CVE State: PUBLISHED
Explain CVE-2005-1121
Format string vulnerability in the my_xlog function in lib.c for Oops! Proxy Server 1.5.23 and earlier, as called by the auth functions in the passwd_mysql and passwd_pgsql modules, may allow attackers to execute arbitrary code via a URL.
Affected Products: n/a
References: [{'name': 'GLSA-200505-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200505-02.xml'}, {'name': 'DSA-726', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-726'}, {'tags': ['x_refsource_MISC'], 'url': 'http://rst.void.ru/papers/advisory24.txt'}, {'name': 'oops-format-string(20191)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20191'}, {'name': '13172', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13172'}]
CVE State: PUBLISHED
Explain CVE-2005-1122
Format string vulnerability in cgi.c for Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP GET request containing double-encoded format string specifiers (aka "double expansion error").
Affected Products: n/a
References: [{'name': '14953', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14953'}, {'name': '15511', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15511'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=87916'}, {'name': 'GLSA-200504-14', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200504-14.xml'}]
CVE State: PUBLISHED
Explain CVE-2005-1123
Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service (memory corruption) via a request for a zero byte file.
Affected Products: n/a
References: [{'name': '14953', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14953'}, {'name': '15512', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15512'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=87916'}, {'name': 'GLSA-200504-14', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200504-14.xml'}]
CVE State: PUBLISHED
Explain CVE-2005-1124
Unknown vulnerability in the libgss Generic Security Services Library in Solaris 7, 8, and 9 allows local users to gain privileges by loading their own GSS-API.
Affected Products: n/a
References: [{'name': '57734', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57734-1'}, {'name': '14971', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14971'}, {'name': '15516', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15516'}]
CVE State: PUBLISHED
Explain CVE-2005-1125
Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before the _libsafe_die function call is completed.
Affected Products: n/a
References: [{'name': '20050415 [Overflow.pl] Libsafe - Safety Check Bypass Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/395999'}, {'name': '13190', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13190'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.overflow.pl/adv/libsafebypass.txt'}]
CVE State: PUBLISHED
Explain CVE-2005-1126
The SIOCGIFCONF ioctl (ifconf function) in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not properly clear a buffer before using it, which allows local users to obtain portions of sensitive kernel memory.
Affected Products: n/a
References: [{'name': 'ADV-2005-2256', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/2256'}, {'name': '14959', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14959'}, {'name': '17368', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17368'}, {'name': 'FreeBSD-SA-05:04', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:04.ifconf.asc'}, {'name': 'APPLE-SA-2005-10-31', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html'}, {'name': '15252', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/15252'}, {'name': '15514', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15514'}, {'name': 'freebsd-ifconf-information-disclosure(20114)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20114'}]
CVE State: PUBLISHED
Explain CVE-2005-1127
Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.18 and earlier, and possibly other products, allows remote attackers to cause a denial of service (crash) via format string specifiers that are not properly handled before being sent to syslog, as demonstrated using sender addresses to Postgrey.
Affected Products: n/a
References: [{'name': 'GLSA-200608-18', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200608-18.xml'}, {'name': 'DSA-1122', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1122'}, {'name': '21452', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21452'}, {'name': '[postgrey] 20050414 Re: Problem with crashing postgrey', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.ee.ethz.ch/postgrey/msg00630.html'}, {'name': '15517', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15517'}, {'name': '21164', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21164'}, {'name': '20050415 Use of function "log" in Perl module Net::Server', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=111354538331167&w=2'}, {'name': '21152', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21152'}, {'name': '[postgrey] 20050414 Problem with crashing postgrey', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.ee.ethz.ch/postgrey/msg00627.html'}, {'name': '21149', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21149'}, {'name': '[postgrey] 20050414 ANNOUNCE: Postgrey 1.21 (SECURITY)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.ee.ethz.ch/postgrey/msg00647.html'}, {'name': 'postgrey-logging-dos(20108)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20108'}, {'name': 'DSA-1121', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1121'}, {'name': '14958', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14958'}, {'name': 'MDKSA-2006:131', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:131'}, {'name': '13193', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13193'}]
CVE State: PUBLISHED
Explain CVE-2005-1128
Multiple SQL injection vulnerabilities in VHCS 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via certain inputs from HTTP POST queries.
Affected Products: n/a
References: [{'name': '1013703', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013703'}, {'name': '15541', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15541'}]
CVE State: PUBLISHED
Explain CVE-2005-1129
eGroupWare 1.0.6 and earlier, when an e-mail is composed with an attachment but not sent, will send that attachment in the next e-mail, which may cause sensitive information to be sent to the wrong recipient.
Affected Products: n/a
References: [{'name': '14940', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14940'}, {'name': '20050412 eGroupWare Leaks Files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2005-04/0157.html'}, {'name': 'egroupware-email-information-disclosure(20088)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20088'}, {'name': '13137', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13137'}, {'name': '15499', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15499'}]
CVE State: PUBLISHED