Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2005-1842
VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, creates temporary log files with predictable names, which allows local users to modify arbitrary files via a symlink attack.
Affected Products: n/a
References: [{'name': '14638', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/14638'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/techdocs/327129.html'}, {'name': '1014776', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014776'}, {'name': '20050829 Adobe Version Cue VCNative Arbitrary File Overwrite Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=297&type=vulnerabilities'}, {'name': '16541', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/16541'}]
CVE State: PUBLISHED
Explain CVE-2005-1843
VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, allows local users to load arbitrary libraries and execute arbitrary code via the -lib command line argument.
Affected Products: n/a
References: [{'name': '14638', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/14638'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/techdocs/327129.html'}, {'name': '1014776', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014776'}, {'name': '16541', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/16541'}, {'name': '20050829 Adobe Version Cue VCNative Arbitrary Library Loading Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=296&type=vulnerabilities'}]
CVE State: PUBLISHED
Explain CVE-2005-1846
Multiple directory traversal vulnerabilities in YaMT before 0.5_2 allow attackers to overwrite arbitrary files via the (1) rename or (2) sort options.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://rpmfind.net/linux/RPM/suse/updates/8.2/i386/rpm/i586/yamt-0.5-1277.i586.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vuxml.org/freebsd/99b5cfa5-d3d2-11d9-8ffb-00061bc2ad93.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1847
Multiple buffer overflows in YaMT before 0.5_2 allow attackers to execute arbitrary code via the (1) rename or (2) sort options.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://rpmfind.net/linux/RPM/suse/updates/8.2/i386/rpm/i586/yamt-0.5-1277.i586.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vuxml.org/freebsd/99b5cfa5-d3d2-11d9-8ffb-00061bc2ad93.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1848
The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors that cause an out-of-bounds memory read.
Affected Products: n/a
References: [{'name': 'RHSA-2005:603', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-603.html'}, {'name': 'DSA-750', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-750'}]
CVE State: PUBLISHED
Explain CVE-2005-1850
Certain contributed scripts for ekg Gadu Gadu client 1.5 and earlier create temporary files insecurely, with unknown impact and attack vectors, a different vulnerability than CVE-2005-1916.
Affected Products: n/a
References: [{'name': 'DSA-760', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-760'}, {'name': '20050721 Multiple vulnerabilities in libgadu and ekg package', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=112198499417250&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1851
A certain contributed script for ekg Gadu Gadu client 1.5 and earlier allows attackers to execute shell commands via unknown attack vectors.
Affected Products: n/a
References: [{'name': 'DSA-760', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-760'}, {'name': '20050721 Multiple vulnerabilities in libgadu and ekg package', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=112198499417250&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1852
Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an incoming message.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20050721-1.txt'}, {'name': '16140', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/16140'}, {'name': 'oval:org.mitre.oval:def:9532', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9532'}, {'name': 'GLSA-200507-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200507-26.xml'}, {'name': '14345', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/14345'}, {'name': '16242', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/16242'}, {'name': 'GLSA-200507-23', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200507-23.xml'}, {'name': 'SUSE-SR:2005:019', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_19_sr.html'}, {'name': '20050721 Multiple vulnerabilities in libgadu and ekg package', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=112198499417250&w=2'}, {'name': 'RHSA-2005:639', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-639.html'}, {'name': 'FEDORA-2005-624', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lwn.net/Articles/144724/'}, {'name': '16211', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/16211'}, {'name': '16155', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/16155'}]
CVE State: PUBLISHED
Explain CVE-2005-1853
gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local users to gain privileges.
Affected Products: n/a
References: [{'name': '1014599', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2005/Jul/1014599.html'}, {'name': 'DSA-770', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-770'}]
CVE State: PUBLISHED
Explain CVE-2005-1854
Unknown vulnerability in apt-cacher in Debian 3.1, related to "missing input sanitising," allows remote attackers to execute arbitrary commands on the caching server.
Affected Products: n/a
References: [{'name': '16327', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/16327'}, {'name': '14459', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/14459'}, {'name': 'DSA-772', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-772'}, {'name': 'aptcacher-command-execution(21664)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/21664'}]
CVE State: PUBLISHED
Explain CVE-2005-1855
Backup Manager (backup-manager) before 0.5.8 creates backup files with world-readable default permissions, which allows local users to obtain sensitive information.
Affected Products: n/a
References: [{'name': 'DSA-787', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-787'}, {'name': '13892', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13892'}, {'name': '15615', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15615'}, {'name': '1014124', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014124'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.usenetlinux.com/archive/index.php/t-411815.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sukria.net/packages/backup-manager/'}]
CVE State: PUBLISHED
Explain CVE-2005-1856
The CD-burning feature in backup-manager 0.5.8 and earlier uses a fixed filename in a world-writable directory for logging, which allows local users to overwrite files via a symlink attack.
Affected Products: n/a
References: [{'name': 'DSA-787', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-787'}]
CVE State: PUBLISHED
Explain CVE-2005-1857
Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code via format string specifiers in a reply.
Affected Products: n/a
References: [{'name': 'VU#139421', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/139421'}, {'name': '16567', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/16567/'}, {'name': 'simpleproxy-reply-format-string(22016)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/22016'}, {'name': 'DSA-786', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-786'}, {'name': '14666', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/14666'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?group_id=604&release_id=351847'}]
CVE State: PUBLISHED
Explain CVE-2005-1858
FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a short byte count to a read request, which may allow local users to obtain sensitive information.
Affected Products: n/a
References: [{'name': '16024', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/16024'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/311634'}, {'name': '13857', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13857'}, {'name': '1014107', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014107'}, {'name': '15561', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15561/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=331884'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.sven-tantau.de/public_files/fuse/fuse_20050603.txt'}, {'name': 'DSA-744', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-744'}, {'name': '17042', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17042'}]
CVE State: PUBLISHED
Explain CVE-2005-1859
Unknown vulnerability in arshell in the Array Service (arrayd) for SGI ProPack 3 with SP 5 and 6, and SGI ProPack 4, allows local users to execute arbitrary shells as root on other hosts in the cluster or array.
Affected Products: n/a
References: [{'name': '20050701-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20050701-01-P.asc'}, {'name': '1014454', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014454'}]
CVE State: PUBLISHED
Explain CVE-2005-1864
PHP remote file inclusion vulnerability in cal_admintop.php in Calendarix Advanced 1.5 allows remote attackers to execute arbitrary PHP code via the calpath parameter.
Affected Products: n/a
References: [{'name': '1014083', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/alerts/2005/May/1014083.html'}, {'name': '20050531 multiple vulnerability Calendarix Advanced', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2005-05/0356.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1865
Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL commands via the catview parameter to (1) cal_week.php, (2) cal_cat.php, or (3) cal_day.php, or (4) id parameter to cal_pophols.php.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.calendarix.com/download_basic.php'}, {'name': '16972', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16972'}, {'name': '16975', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16975'}, {'name': '1014083', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/alerts/2005/May/1014083.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.calendarix.com/download_advanced.php'}, {'name': '15569', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15569'}, {'name': '16971', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16971'}, {'name': '16974', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16974'}, {'name': '20050531 multiple vulnerability Calendarix Advanced', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2005-05/0356.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1866
Cross-site scripting (XSS) vulnerability in calendar.php in Calendarix Advanced 1.5 allows remote attackers to inject arbitrary web script or HTML via the year parameter.
Affected Products: n/a
References: [{'name': '1014083', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/alerts/2005/May/1014083.html'}, {'name': '16973', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16973'}, {'name': '20050531 multiple vulnerability Calendarix Advanced', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2005-05/0356.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1867
Symantec Brightmail AntiSpam before 6.0.2 has a hard-coded database administrator password, which allows remote attackers to gain privileges.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://securityresponse.symantec.com/avcenter/security/Content/2005.05.31a.html'}, {'name': '1014088', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014088'}, {'name': '15562', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15562'}, {'name': 'brightmail-static-database-security-bypass(20804)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20804'}, {'name': 'ADV-2005-0671', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0671'}]
CVE State: PUBLISHED
Explain CVE-2005-1868
I-Man 0.9, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by uploading a file attachment with a .php extension.
Affected Products: n/a
References: [{'name': 'iman-file-upload(20857)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20857'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=331422'}, {'name': '15558', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15558/'}]
CVE State: PUBLISHED
Explain CVE-2005-1869
PHP remote file inclusion vulnerability in start_lobby.php in MWChat 6.x allows remote attackers to execute arbitrary PHP code via the CONFIG[MWCHAT_Libs] parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.defacers.com.mx/advisories/4.txt'}, {'name': '17087', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17087'}, {'name': '1014090', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2005/Jun/1014090.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.appindex.net'}, {'name': '15596', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15596'}]
CVE State: PUBLISHED
Explain CVE-2005-1870
PHP remote file inclusion vulnerability in childwindow.inc.php in Popper 1.41-r2 and earlier allows remote attackers to execute arbitrary PHP code via the form parameter.
Affected Products: n/a
References: [{'name': '17085', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17085'}, {'name': '20050606 Popper webmail remote code execution vulnerability - advisory fix', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034425.html'}, {'name': '1014116', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014116'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-06-07'}, {'name': '15584', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15584'}, {'name': '20050604 LSS.hr false positives.', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034408.html'}, {'name': '20050605 Re: LSS.hr false positives. (correction)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=111801389729155&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1871
Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."
Affected Products: n/a
References: [{'name': '17028', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17028'}, {'name': '15372', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15372'}, {'name': '20050603 [DRUPAL-SA-2005-001] New Drupal release fixes critical security issue', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2005-06/0010.html'}, {'name': '20050603 [DRUPAL-SA-2005-001] New Drupal release fixes critical security issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111782257601422&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1872
Buffer overflow in the administrative console in IBM WebSphere Application Server 5.x, when the global security option is enabled, allows remote attackers to execute arbitrary code.
Affected Products: n/a
References: [{'name': '17041', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17041'}, {'name': '15598', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15598/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.appsecinc.com/resources/alerts/general/WEBSPHERE-001.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24009775'}, {'name': '20050607 [AppSecInc Advisory WEBSP05-V0098] Remote Buffer overflow in WebSphere Application Server Administrative Console', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111817727120752&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1873
Multiple buffer overflows in Crob FTP 3.6.1, and possibly earlier versions, allow remote attackers to execute arbitrary code via (1) an FTP command with a large string followed by the RMD command with a long string or (2) a globbing ("*") character followed by a long string.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://security.lss.hr/index.php?page=details&ID=LSS-2005-06-06'}, {'name': '15585', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15585'}, {'name': '20050606 Crob FTP Server remote buffer overflows', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034426.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1874
Directory traversal vulnerability in Dzip before 2.9 allows remote attackers to create arbitrary files via a filename containing a .. (dot dot) in a .dz archive.
Affected Products: n/a
References: [{'name': 'GLSA-200506-03', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200506-03.xml'}, {'name': '15599', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15599'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=93079'}, {'name': 'ADV-2005-0692', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0692'}, {'name': '15614', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15614'}]
CVE State: PUBLISHED
Explain CVE-2005-1875
Multiple SQL injection vulnerabilities in list.php in Exhibit Engine (EE) 1.22 allow remote attackers to execute arbitrary SQL commands via the (1) search_row, (2) sort_row, (3) order or (4) perpage parameter.
Affected Products: n/a
References: [{'name': '13844', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13844'}, {'name': '15583', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15583'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://photography-on-the.net/forum/showthread.php?p=579692'}, {'name': '17006', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17006'}, {'name': '20050602 SEC-CONSULT SA20050602-2 :: Exhibit Engine Blind SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111773894525119&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1876
Direct code injection vulnerability in CuteNews 1.3.6 and earlier allows remote attackers with administrative privileges to execute arbitrary PHP code via certain inputs that are injected into a template (.tpl) file.
Affected Products: n/a
References: [{'name': '17030', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17030'}, {'name': '20050602 PHP Execution Vulnerability in CuteNews', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111773528322711&w=2'}, {'name': '15594', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15594'}]
CVE State: PUBLISHED
Explain CVE-2005-1877
Cross-site scripting (XSS) vulnerability in view_ticket.php in Lpanel 1.59 and earlier allows remote attackers to inject arbitrary web script or HTML and obtain sensitive information via the pid parameter.
Affected Products: n/a
References: [{'name': '13869', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13869'}, {'name': "20050606 Lpanel.NET's Lpanel (all versions up to and including 1.59) is vulnerable to plain-text session credential leakage via script injection.", 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034413.html'}, {'name': '15589', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15589/'}]
CVE State: PUBLISHED
Explain CVE-2005-1878
GIPTables Firewall 1.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the temp.ip.addresses temporary file.
Affected Products: n/a
References: [{'name': '15604', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15604'}, {'name': '20050606 GIPTables Firewall <= v1.1 insecure temporary file creation', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034423.html'}, {'name': '1014109', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014109'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zataz.net/adviso/giptables-05222005.txt'}]
CVE State: PUBLISHED
Explain CVE-2005-1879
LutelWall 0.97 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://firewall.lutel.pl/download/0.98/ChangeLog'}, {'name': 'GLSA-200506-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200506-10.xml'}, {'name': '1014112', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014112'}, {'name': '20050606 LutelWall <= 0.97 insecure temporary file creation', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034424.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zataz.net/adviso/lutelwall-05222005.txt'}, {'name': '15647', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15647'}, {'name': '15665', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15665'}, {'name': '13863', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13863'}]
CVE State: PUBLISHED
Explain CVE-2005-1880
everybuddy 0.4.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget.
Affected Products: n/a
References: [{'name': '1014110', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014110'}, {'name': '20050606 everybuddy <= 0.4.3 insecure temporary file creation', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034422.html'}, {'name': '13865', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13865'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=94473'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zataz.net/adviso/everybuddy-06062005.txt'}]
CVE State: PUBLISHED
Explain CVE-2005-1881
upload.php in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict the file extension for uploaded image files, which allows remote attackers to upload arbitrary files and execute arbitrary PHP code.
Affected Products: n/a
References: [{'name': '15600', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15600/'}, {'name': '17115', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17115'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secwatch.org/advisories/secwatch/20050530_yapig.txt'}, {'name': '1014103', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014103'}]
CVE State: PUBLISHED
Explain CVE-2005-1882
PHP remote file inclusion vulnerability in last_gallery.php in YaPiG 0.93u and 0.94u allows remote attackers to execute arbitrary PHP code via the YAPIG_PATH parameter.
Affected Products: n/a
References: [{'name': '15600', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15600/'}, {'name': '17117', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17117'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secwatch.org/advisories/secwatch/20050530_yapig.txt'}, {'name': '1014103', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014103'}]
CVE State: PUBLISHED
Explain CVE-2005-1883
global.php in YaPiG 0.92b allows remote attackers to include arbitrary local files via the BASE_DIR parameter.
Affected Products: n/a
References: [{'name': '17116', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17116'}, {'name': '15600', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15600/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secwatch.org/advisories/secwatch/20050530_yapig.txt'}, {'name': '1014103', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014103'}]
CVE State: PUBLISHED
Explain CVE-2005-1884
Directory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to create or delete arbitrary directories via a .. (dot dot) in the dir parameter.
Affected Products: n/a
References: [{'name': '15600', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15600/'}, {'name': '17120', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17120'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secwatch.org/advisories/secwatch/20050530_yapig.txt'}, {'name': '13877', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13877'}, {'name': '1014103', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014103'}]
CVE State: PUBLISHED
Explain CVE-2005-1885
view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to obtain sensitive information via a phid parameter that is not an integer, which reveals the path in an error message.
Affected Products: n/a
References: [{'name': '17119', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17119'}, {'name': '15600', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15600/'}, {'name': '1014103', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014103'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secwatch.org/advisories/secwatch/20050530_yapig.txt'}]
CVE State: PUBLISHED
Explain CVE-2005-1886
Cross-site scripting (XSS) vulnerability in view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to inject arbitrary web script or HTML via (1) the phid parameter or (2) unknown parameters when posting a new comment.
Affected Products: n/a
References: [{'name': '15600', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15600/'}, {'name': '13876', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13876'}, {'name': '13875', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13875'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secwatch.org/advisories/secwatch/20050530_yapig.txt'}, {'name': '1014103', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014103'}, {'name': '17118', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17118'}]
CVE State: PUBLISHED
Explain CVE-2005-1887
Unknown vulnerability in the Sun Solaris C library (libc and libproject) in Solaris 10 allows local users to gain privileges.
Affected Products: n/a
References: [{'name': '17099', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17099'}, {'name': 'solaris-clibrary-libproject-gain-privileges(20874)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20874'}, {'name': '101740', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101740-1'}, {'name': '15613', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15613'}, {'name': 'ADV-2005-0690', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0690'}]
CVE State: PUBLISHED
Explain CVE-2005-1888
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates.
Affected Products: n/a
References: [{'name': 'SUSE-SR:2005:019', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_19_sr.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=332231'}, {'name': '13861', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13861'}]
CVE State: PUBLISHED
Explain CVE-2005-1889
Unknown vulnerability in Sun ONE Application Server 6.5 SP1 Maintenance Update 6 and earlier allows attackers to read files.
Affected Products: n/a
References: [{'name': '101690', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101690-1'}, {'name': 'ADV-2005-0695', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0695'}]
CVE State: PUBLISHED
Explain CVE-2005-1890
Unknown vulnerability in Mortiforo before 0.9.1 allows users to access private forums via unknown attack vectors.
Affected Products: n/a
References: [{'name': '1014120', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014120'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=332807'}]
CVE State: PUBLISHED
Explain CVE-2005-1891
The GIF parser in ateimg32.dll in AOL Instant Messenger (AIM) 5.9.3797 and earlier allows remote attackers to cause a denial of service (crash) via a malformed buddy icon that causes an integer underflow in a loop counter variable.
Affected Products: n/a
References: [{'name': '13880', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13880'}, {'name': '20050607 AOL AIM Instant Messenger Buddy Icon "ateimg32.dll" DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111816939928640&w=2'}, {'name': '1014145', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014145'}, {'name': '20050607 Re: AOL AIM Instant Messenger Buddy Icon "ateimg32.dll" DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111817881214343&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1892
FlatNuke 2.5.3 allows remote attackers to cause a denial of service or obtain sensitive information via (1) a direct request to foot_news.php, which triggers an infinite loop, or (2) direct requests to unknown scripts, which reveals the web document root in an error message.
Affected Products: n/a
References: [{'name': '1014114', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014114'}, {'name': '15603', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15603'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secwatch.org/advisories/secwatch/20050604_flatnuke.txt'}, {'name': 'ADV-2005-0697', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0697'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256'}]
CVE State: PUBLISHED
Explain CVE-2005-1893
FlatNuke 2.5.3 allows remote attackers to obtain sensitive information via invalid parameters to certain scripts, which leaks the web document root in an error message.
Affected Products: n/a
References: [{'name': '1014114', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014114'}, {'name': '15603', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15603'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secwatch.org/advisories/secwatch/20050604_flatnuke.txt'}, {'name': 'ADV-2005-0697', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0697'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256'}]
CVE State: PUBLISHED
Explain CVE-2005-1894
Direct code injection vulnerability in FlatNuke 2.5.3 allows remote attackers to execute arbitrary PHP code by placing the code into the Referer header of an HTTP request, which causes the code to be injected into referer.php, which can then be accessed by the attacker.
Affected Products: n/a
References: [{'name': '1014114', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014114'}, {'name': '15603', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15603'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secwatch.org/advisories/secwatch/20050604_flatnuke.txt'}, {'name': 'ADV-2005-0697', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0697'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256'}]
CVE State: PUBLISHED
Explain CVE-2005-1895
Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the border or back parameters to (1) help.php or (2) footer.php.
Affected Products: n/a
References: [{'name': '1014114', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014114'}, {'name': '15603', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15603'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secwatch.org/advisories/secwatch/20050604_flatnuke.txt'}, {'name': 'ADV-2005-0697', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0697'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256'}]
CVE State: PUBLISHED
Explain CVE-2005-1896
Directory traversal vulnerability in thumb.php in FlatNuke 2.5.3 allows remote attackers to read arbitrary images or obtain the installation path via the image parameter.
Affected Products: n/a
References: [{'name': '1014114', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014114'}, {'name': '15603', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15603'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secwatch.org/advisories/secwatch/20050604_flatnuke.txt'}, {'name': 'ADV-2005-0697', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0697'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256'}]
CVE State: PUBLISHED
Explain CVE-2005-1897
Unknown vulnerability in FlexCast Audio Video Streaming Server before 2.0 has unknown impact and attack vectors.
Affected Products: n/a
References: [{'name': '15441', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15441'}]
CVE State: PUBLISHED
Explain CVE-2005-1898
The passthrough functionality in phpThumb.php in phpThumb() before 1.5.4 allows remote attackers to read files that are not images.
Affected Products: n/a
References: [{'name': '15534', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15534'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=330469'}, {'name': '13842', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13842'}]
CVE State: PUBLISHED
Explain CVE-2005-1899
Rakkarsoft RakNet network library 2.33 and earlier, when released before 30 May 2005, and as used in multiple products including nFusion Elite Warriors: Vietnam, allows remote attackers to cause a denial of service (infinite loop) via a zero-byte UDP packet.
Affected Products: n/a
References: [{'name': '13862', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13862'}, {'name': '20050605 Server termination in Raknet 2.33 (before 30 May 2005)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111809312423958&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/rakzero-adv.txt'}, {'name': '15597', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15597'}, {'name': '1014111', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014111'}]
CVE State: PUBLISHED
Explain CVE-2005-1900
Sawmill before 7.1.6 allows remote attackers to bypass authentication and (1) gain administrative privileges or (2) add a license.
Affected Products: n/a
References: [{'name': '17100', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17100'}, {'name': '1014106', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014106'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.networksecurity.fi/advisories/sawmill-admin.html'}, {'name': '17101', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17101'}, {'name': '15499', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15499'}, {'name': 'sawmill-unknown-gain-access(20879)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20879'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sawmill.net/version_history7.html'}, {'name': 'sawmill-unknown-add-license(20880)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20880'}]
CVE State: PUBLISHED
Explain CVE-2005-1901
Multiple cross-site scripting (XSS) vulnerabilities in Sawmill before 7.1.6 allow remote attackers to inject arbitrary web script or HTML via (1) the username in the Add User window or (2) the license key in the Licensing page.
Affected Products: n/a
References: [{'name': '17102', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17102'}, {'name': '17103', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17103'}, {'name': '1014106', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014106'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.networksecurity.fi/advisories/sawmill-admin.html'}, {'name': '15499', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15499'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sawmill.net/version_history7.html'}, {'name': 'sawmill-add-user-xss(20881)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20881'}]
CVE State: PUBLISHED
Explain CVE-2005-1902
Directory traversal vulnerability in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated users to read other users' mail and perform operations on arbitrary directories via .. sequences in the (1) SELECT, (2) CREATE, (3) DELETE, and (4) RENAME commands.
Affected Products: n/a
References: [{'name': '1014095', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014095'}, {'name': 'spa-pro-imap-diectory-traversal(20860)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20860'}, {'name': 'ADV-2005-0680', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0680'}, {'name': '15573', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15573'}, {'name': '16989', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16989'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.org.sg/vuln/spa-promail4.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1903
Buffer overflow in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated users to execute arbitrary code via a long CREATE command.
Affected Products: n/a
References: [{'name': '1014095', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014095'}, {'name': 'ADV-2005-0680', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0680'}, {'name': '15573', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15573'}, {'name': '16990', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16990'}, {'name': 'spa-pro-create-bo(20862)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20862'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.org.sg/vuln/spa-promail4.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1904
SQL injection vulnerability in login.asp in JiRo's Upload System (JUS) 1 allows remote attackers to execute arbitrary SQL commands via the password parameter.
Affected Products: n/a
References: [{'name': '16969', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16969'}, {'name': '1014086', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014086'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.under9round.com/jus.txt'}, {'name': '15564', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15564'}]
CVE State: PUBLISHED
Explain CVE-2005-1905
The klif.sys driver in Kaspersky Labs Anti-Virus 5.0.227, 5.0.228, and 5.0.335 on Windows 2000 allows local users to gain privileges by modifying certain critical code addresses that are later accessed by privileged programs.
Affected Products: n/a
References: [{'name': '13878', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13878'}, {'name': '20050607 Kaspersky AntiVirus "klif.sys" Privilege Escalation Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111817777430401&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1906
SQL injection vulnerability in login.asp in livingmailing 1.3 allows remote attackers to execute arbitrary SQL commands via the password. NOTE: there is little public information about this product and its vendor, and the original researcher announcement is no longer available.
Affected Products: n/a
References: [{'name': '1014087', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014087'}, {'name': 'ADV-2005-0678', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0678'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.under9round.com/lmg.txt'}]
CVE State: PUBLISHED
Explain CVE-2005-1907
The ISA Firewall service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (Wspsrv.exe crash) via a large amount of SecureNAT network traffic.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.networksecurity.fi/advisories/windows-isa-firewall.html'}, {'name': '17031', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17031'}, {'name': '1014113', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014113'}, {'name': '894864', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B894864'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.niscc.gov.uk/niscc/docs/br-20050602-00456.html?lang=en'}, {'name': '13846', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13846'}]
CVE State: PUBLISHED
Explain CVE-2005-1908
Perception LiteWeb allows remote attackers to bypass access controls for files via an extra leading / (slash) or leading \ (backslash) in the URL.
Affected Products: n/a
References: [{'name': '1014096', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014096'}, {'name': '15592', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15592'}, {'name': '17084', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17084'}]
CVE State: PUBLISHED