Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2005-1020
Secure Shell (SSH) 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of service (device reload) (1) via a username that contains a domain name when using a TACACS+ server to authenticate, (2) when a new SSH session is in the login phase and a currently logged in user issues a send command, or (3) when IOS is logging messages and an SSH session is terminated while the server is sending data.
Affected Products: n/a
References: [{'name': '1013655', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2005/Apr/1013655.html'}, {'name': '13043', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13043'}, {'name': 'cisco-ios-sshv2-tacacs-authentication-dos(19987)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19987'}, {'name': 'cisco-ios-authentication-send-dos(19989)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19989'}, {'name': '14854', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14854'}, {'name': 'cisco-ios-ssh-message-log-dos(19990)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19990'}, {'name': '20050406 Vulnerabilities in Cisco IOS Secure Shell Server', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20050406-ssh.shtml'}, {'name': 'oval:org.mitre.oval:def:5455', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5455'}]
CVE State: PUBLISHED
Explain CVE-2005-1021
Memory leak in Secure Shell (SSH) in Cisco IOS 12.0 through 12.3, when authenticating against a TACACS+ server, allows remote attackers to cause a denial of service (memory consumption) via an incorrect username or password.
Affected Products: n/a
References: [{'name': '1013655', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2005/Apr/1013655.html'}, {'name': 'cisco-ios-memory-leak-dos(19991)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19991'}, {'name': '15303', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15303'}, {'name': '13042', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13042'}, {'name': '14854', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14854'}, {'name': '20050406 Vulnerabilities in Cisco IOS Secure Shell Server', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20050406-ssh.shtml'}, {'name': 'oval:org.mitre.oval:def:5687', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5687'}]
CVE State: PUBLISHED
Explain CVE-2005-1022
ColdFusion 6.1 Updater 1 places Java .class files under the web root in the /WEB-INF/cfclasses directory, which allows remote attackers to obtain sensitive information.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.macromedia.com/devnet/security/security_zone/mpsb05-02.html'}, {'name': '20050407 Macromedia Security Bulletin - ColdFusion MX 6.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111290407411801&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1023
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x to 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) min parameter to the Search module, (2) the categories parameter to the FAQ module, or (3) the ltr parameter to the Encyclopedia module.  NOTE: the bid parameter issue in banners.php is already an item in CVE-2005-1000.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityreason.com/adv/PHPNuke%206.x-7.6-p1.txt'}, {'name': '20050403 Full path disclosure and XSS in PHPNuke', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111263454308478&w=2'}, {'name': 'phpnuke-modulesphp-xss(19952)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19952'}]
CVE State: PUBLISHED
Explain CVE-2005-1024
modules.php in PHP-Nuke 6.x to 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) my_headlines, (2) userinfo, or (3) search, which reveals the path in a PHP error message.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityreason.com/adv/PHPNuke%206.x-7.6-p1.txt'}, {'name': 'phpnuke-modulesphp-path-disclosure(19953)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19953'}, {'name': '20050403 Full path disclosure and XSS in PHPNuke', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111263454308478&w=2'}, {'name': 'phpnuke-myheadlines-path-disclosure(44980)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/44980'}]
CVE State: PUBLISHED
Explain CVE-2005-1025
The FTP server in AS/400 4.3, when running in IFS mode, allows remote attackers to obtain sensitive information via a symlink attack using RCMD and the ADDLNK utility, as demonstrated using the QSYS.LIB library.
Affected Products: n/a
References: [{'name': '15300', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15300'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.venera.com/downloads/AS400_user_accounts_ftp_disclosure.pdf'}, {'name': '20050404 Disclosure of AS/400 user accounts via the FTP server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111264136829017&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1026
Multiple SQL injection vulnerabilities in SnailSource phpBB 2.0.x mods allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to dlman.php in DLMan Pro or (2) id parameter to links.php in Linkz Pro (aka LinksLinks Pro).
Affected Products: n/a
References: [{'name': '13030', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13030'}, {'name': '20050404 SQL INJECTION in DLMan Pro.  PHPBB Mod.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111272430128195&w=2'}, {'name': '20050404 SQL INJECTION in LinksLinks Pro.  PHPBB Mod.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111271895819594&w=2'}, {'name': '13028', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13028'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.snailsource.com/forum/dlman.php?func=file_info&file_id=77'}]
CVE State: PUBLISHED
Explain CVE-2005-1027
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x through 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter in the Your_Account module, (2) avatarcategory parameter in the Your_Account module, or (3) lid parameter in the Downloads module.
Affected Products: n/a
References: [{'name': '7570', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7570'}, {'name': '20030511 PHPNuke "Your Account" XSS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/321324'}, {'name': '20050404 [SECURITYREASON.COM] Full path disclosure and XSS in PHPNuke part 3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111272010303144&w=2'}, {'name': 'phpnuke-modules-xss(11994)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11994'}]
CVE State: PUBLISHED
Explain CVE-2005-1028
PHP-Nuke 6.x through 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) index.php with the forum_admin parameter set, (2) the Surveys module, or (3) the Your_Account module, which reveals the path in a PHP error message.
Affected Products: n/a
References: [{'name': '20050404 [SECURITYREASON.COM] Full path disclosure and XSS in PHPNuke part 3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111272010303144&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1029
Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) SortDir, or (3) Sortby parameter to default.asp, (4) itemID parameter to ItemInfo.asp, or (5) Email field to sendpassword.asp.
Affected Products: n/a
References: [{'name': '13034', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13034'}, {'name': 'aah-multiple-scripts-sql-injection(19977)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19977'}, {'name': '15283', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15283'}, {'name': '1013649', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2005/Apr/1013649.html'}, {'name': '15281', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15281'}, {'name': '13032', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13032'}, {'tags': ['x_refsource_MISC'], 'url': 'http://digitalparadox.org/advisories/aass.txt'}, {'name': '20050406 Active Auction House has multiple Sql injection, error and XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111280834000432&w=2'}, {'name': '13035', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13035'}, {'name': '14839', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14839'}, {'name': '15282', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15282'}]
CVE State: PUBLISHED
Explain CVE-2005-1030
Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary web script or HTML via the (1) ReturnURL, (2) password, (3) username parameter, (4) ReturnURL parameter to account.asp, (5) Table, (6) Title parameter to sendpassword.asp, or (7) itemid to watchthisitem.asp.
Affected Products: n/a
References: [{'name': '15287', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15287'}, {'name': '13038', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13038'}, {'name': '15286', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15286'}, {'name': '13036', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13036'}, {'name': '13039', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13039'}, {'name': '1013649', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2005/Apr/1013649.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://digitalparadox.org/advisories/aass.txt'}, {'name': '20050406 Active Auction House has multiple Sql injection, error and XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111280834000432&w=2'}, {'name': '15284', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15284'}, {'name': '15285', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15285'}, {'name': 'aah-multiple-scripts-xss(19975)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19975'}, {'name': '14839', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14839'}]
CVE State: PUBLISHED
Explain CVE-2005-1031
RUNCMS 1.1A, and possibly other products based on e-Xoops (exoops), when "Allow custom avatar upload" is enabled, does not properly verify uploaded files, which allows remote attackers to upload arbitrary files.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.runcms.org/public/modules/news/'}, {'name': '14869', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14869'}, {'name': '20050406 runcms/e-xoops 1.1A and below file upload vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111280711228450&w=2'}, {'name': '13027', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13027'}, {'name': 'exoops-runcms-upload-files(20001)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20001'}]
CVE State: PUBLISHED
Explain CVE-2005-1033
CubeCart 2.0.6 allows remote attackers to obtain sensitive information via an invalid (1) language parameter to index.php, (2) PHPSESSID parameter to index.php, (3) product parameter to tellafriend.php, (4) add parameter to view_cart.php, or (5) product parameter to view_product.php, which reveals the path in a PHP error message.
Affected Products: n/a
References: [{'name': '14064', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/14064'}, {'name': '1013660', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013660'}, {'name': '20050406 [NOBYTES.COM: #6] CubeCart 2.0.6 - Information Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111281457918479&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1034
SurgeFTP 2.2m1 allows remote attackers to cause a denial of service (application hang) via the LEAK command.
Affected Products: n/a
References: [{'name': '1013664', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013664'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.org.sg/vuln/surgeftp22m1.html'}, {'name': '13054', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13054'}, {'name': '14888', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14888'}, {'name': '20050407 [SIG^2 G-TEC] SurgeFTP LEAK Command Denial-Of-Service Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111289226204780&w=2'}, {'name': 'surgeftp-leak-ftp-dos(20011)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20011'}]
CVE State: PUBLISHED
Explain CVE-2005-1035
Multiple buffer overflows in Pavuk before 0.9.32 have unknown attack vectors and impact.
Affected Products: n/a
References: [{'name': '14571', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14571'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=313436'}]
CVE State: PUBLISHED
Explain CVE-2005-1036
FreeBSD 5.x to 5.4 on AMD64 does not properly initialize the IO permission bitmap used to allow user access to certain hardware, which allows local users to bypass intended access restrictions to cause a denial of service, obtain sensitive information, and possibly gain privileges.
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-05:03', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:03.amd64.asc'}]
CVE State: PUBLISHED
Explain CVE-2005-1037
Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges.
Affected Products: n/a
References: [{'name': 'IY68825', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY68825&apar=only'}, {'name': '14856', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14856'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.niscc.gov.uk/niscc/docs/br-20050405-00278.html?lang=en'}]
CVE State: PUBLISHED
Explain CVE-2005-1038
crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink.  NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235.
Affected Products: n/a
References: [{'name': '20060401-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U'}, {'name': 'RHSA-2006:0117', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2006-0117.html'}, {'name': 'SUSE-SR:2007:007', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2007_007_suse.html'}, {'name': '24995', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24995'}, {'name': 'oval:org.mitre.oval:def:11104', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11104'}, {'name': 'RHSA-2005:361', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-361.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2006-118.htm'}, {'name': '19532', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19532'}, {'name': '13024', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13024'}, {'name': '20666', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20666'}, {'name': '20050406 crontab from vixie-cron allows read other users crontabs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/395093'}]
CVE State: PUBLISHED
Explain CVE-2005-1039
Race condition in Core Utilities (coreutils) 5.2.1, when (1) mkdir, (2) mknod, or (3) mkfifo is running with the -m switch, allows local users to modify permissions of other files.
Affected Products: n/a
References: [{'name': '13053', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13053'}]
CVE State: PUBLISHED
Explain CVE-2005-1040
Multiple unknown vulnerabilities in netapplet in Novell Linux Desktop 9 allow local users to gain root privileges, related to "User input [being] passed to network scripts without verification."
Affected Products: n/a
References: [{'name': 'SUSE-SR:2005:010', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.suse.com/archive/suse-security-announce/2005-Apr/0002.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1041
The fib_seq_start function in fib_hash.c in Linux kernel allows local users to cause a denial of service (system crash) via /proc/net/route.
Affected Products: n/a
References: [{'name': 'RHSA-2005:366', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-366.html'}, {'name': '13267', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13267'}, {'name': '[bk-commits-head] 20050319 [PATCH] Fix crash while reading /proc/net/route', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=bk-commits-head&m=111186506706769&w=2'}, {'name': 'SUSE-SA:2005:068', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.securityfocus.com/archive/1/419522/100/0/threaded'}, {'name': 'oval:org.mitre.oval:def:9487', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9487'}, {'name': '17918', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17918'}, {'name': 'FLSA:157459-3', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/427980/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2005-1042
Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that leads to a negative byte count.
Affected Products: n/a
References: [{'name': 'RHSA-2005:406', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-406.html'}, {'name': 'MDKSA-2005:072', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:072'}, {'name': 'oval:org.mitre.oval:def:10822', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10822'}, {'name': 'GLSA-200504-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml'}, {'name': 'APPLE-SA-2005-06-08', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=154021'}, {'name': 'USN-112-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/112-1/'}, {'name': 'RHSA-2005:405', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-405.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.php.net/diff.php/php-src/ext/exif/exif.c?r1=1.118.2.33&r2=1.118.2.34&ty=u'}]
CVE State: PUBLISHED
Explain CVE-2005-1043
exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes significant stack recursion.
Affected Products: n/a
References: [{'name': 'RHSA-2005:406', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-406.html'}, {'name': 'MDKSA-2005:072', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:072'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=154025'}, {'name': 'GLSA-200504-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml'}, {'name': 'APPLE-SA-2005-06-08', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html'}, {'name': 'oval:org.mitre.oval:def:10307', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10307'}, {'name': 'USN-112-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/112-1/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.php.net/diff.php/php-src/ext/exif/exif.c?r1=1.118.2.29&r2=1.118.2.30&ty=u'}]
CVE State: PUBLISHED
Explain CVE-2005-1045
OpenText FirstClass 8.0 client does not properly sanitize strings before passing them to the Windows ShellExecute API, which allows remote attackers to execute arbitrary commands via a UNC path in a bookmark.
Affected Products: n/a
References: [{'name': '15356', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15356'}, {'name': '13079', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13079'}, {'name': '1013665', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013665'}, {'name': '14898', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14898/'}, {'name': '20050408 OpenText FirstClass 8.0 Client Arbitrary File Execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111323587931293&w=2'}, {'name': 'firstclass-bookmark-command-execution(20032)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20032'}]
CVE State: PUBLISHED
Explain CVE-2005-1046
Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:11081', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11081'}, {'name': 'SUSE-SA:2005:022', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_22_kdelibs3.html'}, {'name': 'oval:org.mitre.oval:def:5802', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5802'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20050421-1.txt'}, {'name': 'FLSA:178606', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/427976/100/0/threaded'}, {'name': 'ADV-2005-0331', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0331'}, {'name': '14908', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14908'}, {'name': '201320', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-201320-1'}, {'name': 'DSA-714', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-714'}, {'name': '28114', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28114'}, {'name': '103170', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-103170-1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.kde.org/show_bug.cgi?id=102328'}, {'name': '13096', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13096'}, {'name': 'RHSA-2005:393', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-393.html'}, {'name': 'ADV-2007-4241', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/4241'}]
CVE State: PUBLISHED
Explain CVE-2005-1047
Meilad File upload script (up.php) mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded, which allows remote authenticated users to execute arbitrary commands by uploading PHP files, then directly requesting them from the uploads directory.
Affected Products: n/a
References: [{'name': '1013671', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013671'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.defacers.com.mx/advisories/2.txt'}, {'name': '20050408 phpBB Upload Script "up.php" Arbitrary File Upload', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111299353030534&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1048
SQL injection vulnerability in modules.php in PostNuke 0.760 RC3 allows remote attackers to execute arbitrary SQL statements via the sid parameter.  NOTE: the vendor reports that they could not reproduce the issues for 760 RC3, or for .750.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://digitalparadox.org/advisories/postnuke.txt'}, {'name': 'postnuke-sid-sql-injection(20019)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20019'}, {'name': '20050408 Sql injection, xss and path disclosure vulnerabilities in PostNuke 0.760-RC3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111298226029957&w=2'}, {'name': '15371', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15371'}, {'name': '14868', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14868/'}, {'name': '1013670', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013670'}, {'tags': ['x_refsource_MISC'], 'url': 'http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2679'}]
CVE State: PUBLISHED
Explain CVE-2005-1049
Multiple cross-site scripting vulnerabilities in PostNuke 0.760-RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) module parameter to admin.php or (2) op parameter to user.php. NOTE: the vendor reports that certain issues could not be reproduced for 760 RC3, or for .750.  However, the op/user.php issue exists when the pnAntiCracker setting is disabled.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://digitalparadox.org/advisories/postnuke.txt'}, {'name': '15370', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15370'}, {'name': '20050408 Sql injection, xss and path disclosure vulnerabilities in PostNuke 0.760-RC3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111298226029957&w=2'}, {'name': '13076', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13076'}, {'name': '14868', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14868/'}, {'name': '1013670', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013670'}, {'name': '13075', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13075'}, {'name': 'postnuke-adminphp-userphp-xss(20018)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20018'}, {'tags': ['x_refsource_MISC'], 'url': 'http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2679'}, {'tags': ['x_refsource_MISC'], 'url': 'http://cvs.postnuke.com/viewcvs.cgi/Historic_PostNuke_Library/postnuke-devel/html/user.php.diff?r1=1.18&r2=1.19'}]
CVE State: PUBLISHED
Explain CVE-2005-1050
The modload op in the Reviews module for PostNuke 0.760-RC3 allows remote attackers to obtain sensitive information via an invalid id parameter, which reveals the path in a PHP error message.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://digitalparadox.org/advisories/postnuke.txt'}, {'name': '20050408 Sql injection, xss and path disclosure vulnerabilities in PostNuke 0.760-RC3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111298226029957&w=2'}, {'name': '1013670', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013670'}, {'name': 'postnuke-modules-full-path-disclosure(20020)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20020'}]
CVE State: PUBLISHED
Explain CVE-2005-1051
SQL injection vulnerability in profile.php in PunBB 1.2.4 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a change_email action.
Affected Products: n/a
References: [{'name': '14882', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14882'}, {'name': '20050408 PunBB <= 1.2.4 - change email to become admin exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111306207306155&w=2'}, {'name': '13071', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13071'}]
CVE State: PUBLISHED
Explain CVE-2005-1052
Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From field in an e-mail message, which could allow remote attackers to spoof e-mail addresses.
Affected Products: n/a
References: [{'name': 'owa-email-spoofing(20026)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20026'}, {'name': '20050408 Microsoft Multiple E-Mail Client Address Spoofing Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=227&type=vulnerabilities'}]
CVE State: PUBLISHED
Explain CVE-2005-1053
Multiple cross-site scripting (XSS) vulnerabilities in orderwiz.php in ModernBill 4.3.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) c_code or (2) aid parameters.
Affected Products: n/a
References: [{'name': 'modernbill-orderwiz-xss(20035)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20035'}, {'name': '1013672', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013672'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00067-04102005'}, {'name': '20050410 Multiple ModernBill 4.3.0 And Earlier Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111323741032183&w=2'}, {'name': '15426', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15426'}, {'name': '14890', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14890'}]
CVE State: PUBLISHED
Explain CVE-2005-1054
PHP remote file inclusion vulnerability in news.php in ModernBill 4.3.0 and earlier allows remote attackers to execute arbitrary PHP code by modifying the DIR parameter to reference a URL on a remote web server that contains the code.
Affected Products: n/a
References: [{'name': '1013672', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013672'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00067-04102005'}, {'name': '20050410 Multiple ModernBill 4.3.0 And Earlier Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111323741032183&w=2'}, {'name': '15427', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15427'}, {'name': '14890', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14890'}, {'name': 'modernbill-news-file-include(20036)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20036'}]
CVE State: PUBLISHED
Explain CVE-2005-1055
TowerBlog 0.6 and earlier stores the login data file under the web root, which allows remote attackers to obtain the MD5 checksums of the username and password via a direct request to the _dat/login file.
Affected Products: n/a
References: [{'name': '14884', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14884'}, {'name': '20050410 TowerBlog <= 0.6 Admin Account View [x0n3-h4ck]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111323802003019&w=2'}, {'name': '1013675', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013675'}, {'name': '15425', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15425'}, {'name': 'towerblog-datlogin-information-disclosure(20039)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20039'}]
CVE State: PUBLISHED
Explain CVE-2005-1056
Unknown vulnerability in HP OpenView Network Node Manager (NMM) 6.2 through 6.4, and 7.01 through 7.50, allows remote attackers to cause a denial of service.
Affected Products: n/a
References: [{'name': '13029', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13029'}, {'name': '15321', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15321'}, {'name': '1013651', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013651'}, {'name': 'HPSBMA01125', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/8372'}, {'name': 'openview-network-node-manager-dos(19993)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19993'}, {'name': '14865', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14865'}]
CVE State: PUBLISHED
Explain CVE-2005-1057
Cisco IOS 12.2T, 12.3 and 12.3T, when using Easy VPN Server XAUTH version 6 authentication, allows remote attackers to bypass authentication via a "malformed packet."
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:5852', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5852'}, {'name': '20050406 Vulnerabilities in the Internet Key Exchange Xauth Implementation', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20050406-xauth.shtml'}]
CVE State: PUBLISHED
Explain CVE-2005-1058
Cisco IOS 12.2T, 12.3 and 12.3T, when processing an ISAKMP profile that specifies XAUTH authentication after Phase 1 negotiation, may not process certain attributes in the ISAKMP profile that specifies XAUTH, which allows remote attackers to bypass XAUTH and move to Phase 2 negotiations.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:5738', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5738'}, {'name': '20050406 Vulnerabilities in the Internet Key Exchange Xauth Implementation', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20050406-xauth.shtml'}]
CVE State: PUBLISHED
Explain CVE-2005-1059
Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original password via the data parameter to changepw.html.
Affected Products: n/a
References: [{'name': '13051', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13051'}, {'name': '14871', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14871'}, {'name': 'linksys-wet11-security-bypass(20008)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20008'}, {'name': '20050407 Cisco Linksys WET11 Password Resetting Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-04/0148.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1060
Unknown vulnerability in the TCP/IP functionality (TCPIP.NLM) in Novell Netware 6.x allows remote attackers to cause a denial of service (ABEND by Page Fault Processor Exception) via certain packets.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/2970467.htm'}, {'name': '14874', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14874'}, {'name': 'novell-netware-tcpipnlm-dos(20024)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20024'}, {'name': '13067', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13067'}]
CVE State: PUBLISHED
Explain CVE-2005-1061
The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via certain strings in the secure file that are later used as part of a regular expression, which causes the parser to crash, aka "logwatch log processing regular expression DoS."
Affected Products: n/a
References: [{'name': 'RHSA-2005:364', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-364.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/bugzilla-old/show_bug.cgi?id=137502'}]
CVE State: PUBLISHED
Explain CVE-2005-1062
The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://research.tic.udc.es/scg/advisories/20050429-1.txt'}, {'name': '20050429 [CAN-2005-1062] Administration protocol abuse allows local/remote password cracking', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/397221'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kerio.com/security_advisory.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1063
The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to cause a denial of service (CPU consumption) via certain attacks that force the product to "compute unexpected conditions" and "perform cryptographic operations."
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://research.tic.udc.es/scg/advisories/20050429-2.txt'}, {'name': '20050429 [CAN-2005-1063] Administration protocol abuse leads to Service and System Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/397220'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kerio.com/security_advisory.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1064
The copy_symlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points to rather than the symlink itself, which allows local users to obtain access to arbitrary files.
Affected Products: n/a
References: [{'name': '20050410 rsnapshot Security Advisory 001', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=111317179531000&w=2'}, {'name': '15420', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15420'}, {'name': 'GLSA-200504-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200504-12.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.rsnapshot.org/security/2005/001.html'}, {'name': '1013674', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013674'}, {'name': '14878', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14878'}]
CVE State: PUBLISHED
Explain CVE-2005-1065
tetex in Novell Linux Desktop 9 allows local users to determine the existence of arbitrary files via a symlink attack in the /var/cache/fonts directory.
Affected Products: n/a
References: [{'name': 'SUSE-SR:2005:010', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.suse.com/archive/suse-security-announce/2005-Apr/0002.html'}, {'name': '13072', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13072'}]
CVE State: PUBLISHED
Explain CVE-2005-1066
Race condition in rpdump in Pine 4.62 and earlier allows local users to overwrite arbitrary files via a symlink attack.
Affected Products: n/a
References: [{'name': '20050411 rpdump TOCTOU file-permissions vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://msgs.securepoint.com/cgi-bin/get/bugtraq0504/126.html'}, {'name': '14899', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14899'}, {'name': '15456', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15456'}]
CVE State: PUBLISHED
Explain CVE-2005-1067
Vulnerability in Access_user Class before 1.75 allows local users to gain access as other users via the password "new".
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://freshmeat.net/projects/access_user/?branch_id=53852&release_id=192770'}, {'name': '14897', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14897'}, {'name': '15348', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15348'}]
CVE State: PUBLISHED
Explain CVE-2005-1068
Cross-site scripting (XSS) vulnerability in sCssBoard 1.11 and earlier allows remote attackers to execute arbitrary Javascript via [url] tags.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=318346'}, {'name': '13041', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13041'}, {'name': 'scssboard-url-tag-xss(20021)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20021'}, {'name': '1013659', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013659'}, {'name': '14694', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14694'}]
CVE State: PUBLISHED
Explain CVE-2005-1069
Unknown vulnerability in sCssBoard 1.11 and earlier has unknown impact, related to "an exploit on the Profile page."
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=318346'}, {'name': '1013659', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013659'}, {'name': '14694', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14694'}, {'name': 'scssboard-profile-unknown(20022)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20022'}]
CVE State: PUBLISHED
Explain CVE-2005-1070
SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to execute arbitrary SQL commands via the st parameter.
Affected Products: n/a
References: [{'name': 'invision-memberlist-sql-injection(20059)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20059'}, {'name': '13097', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13097'}, {'name': '20050411 Invision board 1.3.1 and below are vulnerable to a sql injection vulnerability [PATCH INCLUDED]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/395515'}, {'name': '1013676', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2005/Apr/1013676.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1071
SQL injection vulnerability in banner.inc.php in JPortal Web Portal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the haslo parameter.
Affected Products: n/a
References: [{'name': '15476', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15476'}, {'name': '20050412 Sql injection in jPortal version 2.3.1 (module banner)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111331738223323&w=2'}, {'name': '14919', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14919'}]
CVE State: PUBLISHED
Explain CVE-2005-1072
Cross-site scripting (XSS) vulnerability in PunBB before 1.2.5 allows remote attackers to inject arbitrary web script or HTML.
Affected Products: n/a
References: [{'name': '14882', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14882'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.punbb.org/'}]
CVE State: PUBLISHED