DuyTa/cve-kgrag-db huggingface dataset:
CVE-2005-3689
post.php in XMB 1.9.2 allows remote attackers to obtain the installation path via an invalid fid parameter in a newthread action.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: xmb
References: http://irannetjob.com/content/view/163/28/, http://secunia.com/advisories/17642, http://www.securityfocus.com/archive/1/417078/30/0/threaded
CVE-2005-3720
The default index page in the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 lists sensitive information such as software versions.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ip5000_voip_wifi_phone
References: http://marc.info/?l=full-disclosure&m=113217425618951&w=2, http://secunia.com/advisories/17628, http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf
CVE-2005-2257
The saveProfile function in PhpSlash 0.8.0 allows remote attackers to modify arbitrary profiles and gain privileges by modifying the author_id parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: phpslash
References: http://marc.info/?l=bugtraq&m=112076117708139&w=2, http://secunia.com/advisories/15936, http://securitytracker.com/id?1014415
CVE-2005-0133
ClamAV 0.80 and earlier allows remote attackers to cause a denial of service (clamd daemon crash) via a ZIP file with malformed headers.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: clamav
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000928, http://sourceforge.net/project/shownotes.php?release_id=300116, http://www.gentoo.org/security/en/glsa/glsa-200501-46.xml
CVE-2005-0849
Multiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt, Revolution, Secret Service, Shadow Force, and US Most Wanted, allow remote attackers to cause a denial of service (crash from invalid memory access) via a malformed join packet with values that cause the server to copy more memory than was actually provided in the packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: 4x4_off-road_adventure_iii, cabelas_dangerous_hunts, us_most_wanted_nowhere_to_hide, secret_service_in_harms_way, revolution
References: http://aluigi.altervista.org/adv/funlabsboom-adv.txt, http://secunia.com/advisories/14638, http://securitytracker.com/id?1013492
CVE-2005-0335
Directory traversal vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mediapartner_web_server
References: http://marc.info/?l=bugtraq&m=110547214224714&w=2, http://secunia.com/advisories/13820, http://securitytracker.com/id?1012838
CVE-2005-0982
Multiple cross-site scripting (XSS) vulnerabilities in Yet Another Forum.net 0.9.9 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) location, or (3) Subject field.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: yet_another_forum.net
References: http://marc.info/?l=bugtraq&m=111247338301262&w=2, http://securitytracker.com/id?1013632, http://marc.info/?l=bugtraq&m=111247338301262&w=2
CVE-2005-0966
The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows (1) remote attackers to inject arbitrary Gaim markup via irc_msg_kick, irc_msg_mode, irc_msg_part, irc_msg_quit, (2) remote attackers to inject arbitrary Pango markup and pop up empty dialog boxes via irc_msg_invite, or (3) malicious IRC servers to cause a denial of service (application crash) by injecting certain Pango markup into irc_msg_badmode, irc_msg_banned, irc_msg_unknown, irc_msg_nochan functions.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: gaim
References: http://gaim.sourceforge.net/security/index.php?id=14, http://marc.info/?l=bugtraq&m=111238715307356&w=2, http://secunia.com/advisories/14815
CVE-2005-1411
Cybration ICUII 7.0 stores passwords in plaintext in the world-readable icuii.ini file, which allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: icuii
References: http://osvdb.org/ref/14/14688-icuii.txt, http://secunia.com/advisories/15171, http://securitytracker.com/id?1013828
CVE-2005-3413
Cross-site scripting (XSS) vulnerability in desktop.php in eyeOS 0.8.4 allows remote attackers to inject arbitrary web script or HTML via the motd parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: eyeos
References: http://secunia.com/advisories/17105, http://www.osvdb.org/20410, http://www.securityfocus.com/bid/15255
CVE-2005-2517
Safari in Mac OS X 10.3.9 and 10.4.2 submits forms from an XSL formatted page to the next page that is browsed by the user, which causes form data to be sent to the wrong site.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: safari, mac_os_x
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html, http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html, http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE-2005-0518
eXeem 0.21 stores sensitive information such as passwords in plaintext in the Exeem registry key, which allows local users to gain privileges via the proxy_user and proxy_password values.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: exeem
References: http://securitytracker.com/id?1013266, http://securitytracker.com/id?1013266
CVE-2005-0086
Heap-based buffer overflow in less in Red Hat Enterprise Linux 3 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted file, as demonstrated using the UTF-8 locale.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_linux, enterprise_linux_desktop
References: http://www.redhat.com/support/errata/RHSA-2005-068.html, https://bugzilla.fedora.us/show_bug.cgi?id=2404, https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=145527
CVE-2005-2860
Cross-site scripting (XSS) vulnerability in Nikto 1.35 and earlier allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response header, which is directly injected into an HTML report.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: nikto
References: http://marc.info/?l=bugtraq&m=112561344400914&w=2, http://seclists.org/lists/vulnwatch/2005/Jul-Sep/0032.html, http://www.cybsec.com/vuln/010905-multiple_webscanner_script_injection.pdf
CVE-2005-1727
Apple Mac OS X 10.4.x up to 10.4.1 sets insecure world- and group-writable permissions for the (1) system cache folder and (2) Dashboard system widgets, which allows local users to conduct unauthorized file operations via "file race conditions."
CVSS v2.0 Score: 3.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products: mac_os_x_server
References: http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html, http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html
CVE-2005-3978
Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Free Edition 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter in (a) ViewCat.php and (b) gallery.php, and the (2) ItemNum parameter in (c) ViewItem.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netclassifieds
References: http://pridels0.blogspot.com/2005/12/netclassifieds-all-versions-sql-inj.html, http://secunia.com/advisories/17853, http://www.osvdb.org/21378
CVE-2005-3736
Multiple cross-site scripting (XSS) vulnerabilities in e-Quick Cart allow remote attackers to inject arbitrary web script or HTML via the (1) strgifttoname parameter in shopgift.asp, (2) strfirstname parameter in shopmaillist.asp, (3) strpid parameter in shopprojectlogin.asp, and (4) Custname parameter in shoptellafriend.asp.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: e-quick_cart
References: http://securitytracker.com/id?1015244, http://www.osvdb.org/20993, http://www.osvdb.org/20994
CVE-2005-4764
BEA WebLogic Server and WebLogic Express 9.0, 8.1, and 7.0 lock out the admin user account after multiple incorrect password guesses, which allows remote attackers who know or guess the admin account name to cause a denial of service (blocked admin logins).
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N
Affected Products: weblogic_server
References: http://dev2dev.bea.com/pub/advisory/155, http://secunia.com/advisories/17138, http://www.securityfocus.com/bid/15052
CVE-2005-1294
The affix_sock_register in the Affix Bluetooth Protocol Stack for Linux might allow local users to gain privileges via a socket call with a negative protocol value, which is used as an array index.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: affix
References: http://affix.sourceforge.net/patch_hci_3_2_0, http://marc.info/?l=bugtraq&m=111445064725591&w=2, http://www.digitalmunition.com/DMA%5B2005-0423a%5D.txt
CVE-2005-1694
Multiple SQL injection vulnerabilities in Xanthia.php in the Xanthia module in PostNuke 0.750 allow remote attackers to execute arbitrary SQL commands via the (1) name or (2) module parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: postnuke
References: http://marc.info/?l=bugtraq&m=111670823128472&w=2, http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2691, http://marc.info/?l=bugtraq&m=111670823128472&w=2
CVE-2005-4619
SQL injection vulnerability in index.php in phpoutsourcing Zorum Forum 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the rollid parameter in the showhtmllist method.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: zorum
References: http://pridels0.blogspot.com/2005/11/zorum-forum-35-rollid-sql-inj-vuln.html, http://www.osvdb.org/21372, http://www.securityfocus.com/bid/16131
CVE-2005-4233
SQL injection vulnerability in advertiser_statistic.php in Ad Manager Pro 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ad_number parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ad_manager_pro
References: http://pridels0.blogspot.com/2005/12/ad-manager-pro-sql-vuln.html, http://www.osvdb.org/21709, http://www.securityfocus.com/bid/15847
CVE-2005-3515
Cross-site scripting (XSS) vulnerability in recommend.php in Chipmunk Topsites script allows remote attackers to inject arbitrary web script or HTML via the ID parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: chipmunk_topsites
References: http://irannetjob.com/content/view/148/28/, http://marc.info/?l=bugtraq&m=112982490104274&w=2, http://secunia.com/advisories/17262/
CVE-2005-4380
Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL commands via the (1) sort_mode parameter to (a) fisheye/list_galleries.php, (b) messages/message_box.php, and (c) users/my.php; the (2) post_id parameter to (d) blogs/view_post.php; and the (3) blog_id parameter to (e) blogs/view.php, which are not properly cleansed by the convert_sortmode function in kernel/BitDb.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bitweaver
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://pridels0.blogspot.com/2005/12/bitweaver-multiple-vuln.html, http://www.bitweaver.org/forums/viewtopic.php?t=1299, http://www.osvdb.org/21919
CWE: CWE-89
CVE-2005-4551
Cross-site scripting (XSS) vulnerability in sign.php in codegrrl SimpBook 1.0, when html_enable is on, allows remote attackers to inject arbitrary web script or HTML via the message parameter to index.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: simpbook
References: http://marc.info/?l=full-disclosure&m=113535570125766&w=2, http://secunia.com/advisories/18256, http://www.securityfocus.com/bid/16053
CVE-2005-4771
Trusted Mobility Agent PC Policy in Trust Digital Trusted Mobility Suite provides a cancel button that bypasses the domain-authentication prompt, which allows local users to sync a handheld (PDA) device despite a policy setting that sync is unauthorized.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: trusted_mobility_suite
References: http://www.securityfocus.com/archive/1/413417, http://www.securityfocus.com/bid/15109, http://www.securityfocus.com/archive/1/413417
CVE-2005-2138
Cross-site scripting (XSS) vulnerability in index.php in Comdev eCommerce 3.0 and 3.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the onMouseOver event of an "A" tag in a review message.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: comdev_ecommerce
References: http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=64, http://secunia.com/advisories/15865, http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=64
CVE-2005-2962
The post-installation script for ntlmaps before 0.9.9 sets world-readable permissions for the configuration file, which allows local users to obtain the username and password.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ntlmaps
References: http://secunia.com/advisories/17017, http://www.debian.org/security/2005/dsa-830, http://www.securityfocus.com/bid/16700
CVE-2005-2688
Multiple cross-site scripting (XSS) vulnerabilities in SaveWebPortal 3.4 allow remote attackers to inject arbitrary web script or HTML via a large number of parameters to (1) footer.php, (2) header.php, (3) menu_dx.php, or (4) menu_sx.php, or Javascript code in the (5) HTTP_REFERER (referer) or (6) HTTP_USER_AGENT (user agent) fields.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: savewebportal
References: http://rgod.altervista.org/save_yourself_from_savewebportal34.html, http://secunia.com/advisories/16522, http://rgod.altervista.org/save_yourself_from_savewebportal34.html
CVE-2005-1961
Unknown vulnerability in ObjectWeb Consortium C-JDBC before 1.3.1 allows local users to bypass intended access restrictions and obtain the cache results from another user.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: consortium_c-jdbc
References: http://secunia.com/advisories/15627, http://securitytracker.com/id?1014118, http://secunia.com/advisories/15627
CVE-2005-2721
Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) admin.php in Foojan PHP Weblog allow remote attackers to inject arbitrary web script or HTML via the Referer field in the HTTP header.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: php_weblog
References: http://marc.info/?l=bugtraq&m=112491140712884&w=2, http://secunia.com/advisories/16565/, http://www.securityfocus.com/bid/14658
CVE-2005-0696
Buffer overflow in ArGoSoft FTP Server 1.4.2.8 allows remote authenticated users to execute arbitrary code via a long DELE command. NOTE: this issue was later reported to also affect 1.4.3.5.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ftp_server
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042523.html, http://secunia.com/advisories/14526, http://securityreason.com/securityalert/494
CVE-2005-1910
SQL injection vulnerability in login.asp for WWWeb Concepts Events System 1.0 allows remote attackers to execute arbitrary SQL commands via the password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: events_system
References: http://secunia.com/advisories/15595, http://securitytracker.com/id?1014104, http://www.under9round.com/wecs.txt
CVE-2005-1062
The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: personal_firewall, kerio_mailserver, winroute_firewall
References: http://research.tic.udc.es/scg/advisories/20050429-1.txt, http://www.kerio.com/security_advisory.html, http://www.securityfocus.com/archive/1/397221
CVE-2005-1117
PHP remote file inclusion vulnerability in index.php in All4WWW-Homepagecreator 1.0a allows remote attackers to execute arbitrary PHP code by modifying the site parameter to reference a URL on a remote web server that contains the code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: all4www-homepagecreator
References: http://marc.info/?l=bugtraq&m=111350434925520&w=2, http://secunia.com/advisories/14972, http://www.securityfocus.com/bid/13169
CVE-2005-4662
Multiple SQL injection vulnerabilities in OcoMon 1.20, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via unknown attack vectors in an unspecified input form, a different vulnerability than CVE-2005-4664.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: ocomon
References: http://secunia.com/advisories/17470, http://sourceforge.net/project/showfiles.php?group_id=45554, http://sourceforge.net/project/shownotes.php?release_id=369163
CVE-2005-1724
NFS on Apple Mac OS X 10.4.x up to 10.4.1 does not properly obey the -network or -mask flags for a filesystem and exports it to everyone, which allows remote attackers to bypass intended access restrictions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mac_os_x_server
References: http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html, http://securitytracker.com/id?1014142, http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html
CVE-2005-1796
Format string vulnerability in the curses_msg function in the Ncurses interface (ec_curses.c) for Ettercap before 0.7.3 allows remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: debian_linux, ettercap
References: http://ettercap.sourceforge.net/history.php, http://secunia.com/advisories/15535, http://secunia.com/advisories/15664
CVE-2005-0151
Unknown vulnerability in the installation of Adobe License Management Service, as used in Adobe Photoshop CS, Adobe Creative Suite 1.0, and Adobe Premiere Pro 1.5, allows attackers to gain administrator privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: photoshop, premiere, creative_suite
References: http://securitytracker.com/id?1014168, http://securitytracker.com/id?1014169, http://securitytracker.com/id?1014170
CVE-2005-3545
SQL injection vulnerability in index.php of the report module in ibProArcade 2.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ibproarcade
References: http://osvdb.org/20514, http://secunia.com/advisories/17457, http://securityreason.com/securityalert/151
CVE-2005-3373
Multiple interpretation error in Dr.Web 4.32b allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: dr.web_antivirus
References: http://marc.info/?l=bugtraq&m=113026417802703&w=2, http://www.securityelf.org/magicbyte.html, http://www.securityelf.org/magicbyteadv.html
CVE-2005-0175
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: squid
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931, http://fedoranews.org/updates/FEDORA--.shtml, http://marc.info/?l=bugtraq&m=110780531820947&w=2
CVE-2005-2931
Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the (1) EXPN, (2) MAIL, (3) MAIL FROM, and (4) RCPT TO commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: imail_server, ipswitch_collaboration_suite
References: http://secunia.com/advisories/17863, http://securitytracker.com/id?1015317, http://www.idefense.com/application/poi/display?id=346&type=vulnerabilities
CVE-2005-2564
Direct static code injection vulnerability in editcss.php in Gravity Board X (GBX) 1.1 allows remote attackers to execute arbitrary PHP code, HTML, and script via the csscontent parameter, which is directly inserted into the gbxfinal.css file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gravity_board_x
References: http://marc.info/?l=bugtraq&m=112351740803443&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/21742, http://marc.info/?l=bugtraq&m=112351740803443&w=2
CVE-2005-4260
Interpretation conflict in includes/mainfile.php in PHP-Nuke 7.9 and later allows remote attackers to perform cross-site scripting (XSS) attacks by replacing the ">" in the tag with a "<", which bypasses the regular expressions that sanitize the data, but is automatically corrected by many web browsers.  NOTE: it could be argued that this vulnerability is due to a design limitation of many web browsers; if so, then this should not be treated as a vulnerability in PHP-Nuke.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: php-nuke
References: http://www.securityfocus.com/archive/1/419496/100/0/threaded, http://www.securityfocus.com/archive/1/419991/100/0/threaded, http://www.securityfocus.com/bid/15855
CVE-2005-2604
index.php for My Image Gallery (Mig ) 1.4.1 allows remote attackers to obtain the web server path via certain currDir and image arguments, which leaks the path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: my_image_gallery
References: http://secunia.com/advisories/16405, http://secwatch.org/advisories/secwatch/20050813_Mig.txt, http://sourceforge.net/project/shownotes.php?release_id=349348
CVE-2005-0523
Format string vulnerability in ProZilla 1.3.7.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the Location header.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: prozilla_download_accelerator
References: http://deicide.siyahsapka.org/exploits/proz_ex2.c, http://www.debian.org/security/2005/dsa-719, http://www.securiteam.com/exploits/5WP082KEUW.html
CVE-2005-4797
Directory traversal vulnerability in printd line printer daemon (lpd) in Solaris 7 through 10 allows remote attackers to delete arbitrary files via ".." sequences in an "Unlink data file" command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: sunos, solaris
References: http://downloads.securityfocus.com/vulnerabilities/exploits/solaris_lpd_unlink.pm, http://secunia.com/advisories/16367, http://securitytracker.com/id?1014635
CVE-2005-3489
Buffer overflow in Asus Video Security 3.5.0.0 and earlier, when using authorization, allows remote attackers to execute arbitrary code via a long username/password string.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: video_security_online
References: http://aluigi.altervista.org/adv/asusvsbugs-adv.txt, http://marc.info/?l=full-disclosure&m=113096055302614&w=2, http://secunia.com/advisories/17419
CVE-2005-0872
Cross-site scripting (XSS) vulnerability in calendar_scheduler.php in the Topic Calendar 1.0.1 module for phpBB allows remote attackers to inject arbitrary web script or HTML via the start parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpbb
References: http://marc.info/?l=bugtraq&m=111168190630576&w=2, http://secunia.com/advisories/14659, http://securitytracker.com/id?1013554
CVE-2005-3528
Cross-site scripting (XSS) vulnerability in tiki-view_forum_thread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to inject arbitrary web script or HTML via the topics_offset parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: tikiwiki_cms//groupware
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://moritz-naumann.com/adv/0003/tikiw/0003.txt, http://secunia.com/advisories/17521, http://www.securityfocus.com/archive/1/416152/30/0/threaded
CWE: CWE-79
CVE-2005-2046
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) iCat parameter to cat.asp, (2) iSub parameter to sub.asp, (3) iSub parameter to detail.asp, (4) iPro parameter to review.asp, iCat parameter to (5) catEdit.asp, (6) catDelete.asp, (7) productEdit.asp, or (8) productDelete.asp, or (9) iType parameter to type.asp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: duamazon_pro
References: http://echo.or.id/adv/adv19-theday-2005.txt, http://marc.info/?l=bugtraq&m=111945219205114&w=2, http://echo.or.id/adv/adv19-theday-2005.txt
CVE-2005-1841
The control for Adobe Reader 5.0.9 and 5.0.10 on Linux, Solaris, HP-UX, and AIX creates temporary files with the permissions as specified in a user's umask, which could allow local users to read PDF documents of that user if the umask allows it.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: acrobat_reader
References: http://secunia.com/advisories/14457, http://secunia.com/secunia_research/2005-6/advisory/, http://www.adobe.com/support/techdocs/329121.html
CVE-2005-0314
Cross-site scripting (XSS) vulnerability in user.php in Magic Winmail Server 4.0 Build 1112 allows remote attackers to inject arbitrary web script or HTML via the personal information fields.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: magic_winmail_server
References: http://marc.info/?l=bugtraq&m=110685011825461&w=2, http://secunia.com/advisories/14053, http://securitytracker.com/id?1013017
CVE-2005-0057
The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link that triggers an "unchecked buffer" in the library, possibly due to a buffer overflow.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_me, windows_98se, windows_98, windows_2003_server
References: http://secunia.com/advisories/14195, http://securitytracker.com/id?1013119, http://www.kb.cert.org/vuls/id/820427
CVE-2005-0725
SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows remote attackers to execute arbitrary SQL commands via the articleid parameter to article.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wf-sections
References: http://marc.info/?l=bugtraq&m=111049618519821&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/19660, http://marc.info/?l=bugtraq&m=111049618519821&w=2
CVE-2005-1215
Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: isa_server
References: http://secunia.com/advisories/15693/, http://securitytracker.com/id?1014193, http://www.securityfocus.com/bid/13956
CVE-2005-0215
Mozilla 1.6 and possibly other versions allows remote attackers to cause a denial of service (application crash) via a XBM (X BitMap) file with a large (1) height or (2) width value.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mozilla
References: http://marc.info/?l=bugtraq&m=110512665029209&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/18803, http://marc.info/?l=bugtraq&m=110512665029209&w=2
CVE-2005-1732
Cookie Cart allows remote attackers to read the Order Notification list via the testmycgi and path parameters to testmy.cgi.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cookie_cart
References: http://marc.info/?l=bugtraq&m=111686721022831&w=2, http://secunia.com/advisories/15448, http://securitytracker.com/id?1014026
CVE-2005-3268
yiff server (yiff-server) 2.14.2 on Debian GNU/Linux runs as root and does not properly verify ownership of files that it opens, which allows local users to read arbitrary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: yiff_server
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334616, http://secunia.com/advisories/17242, http://www.osvdb.org/20074
CVE-2005-2317
Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLIST_TTL is greater than 0 or MACLIST_DISPOSITION is set to ACCEPT, allows remote attackers with an accepted MAC address to bypass other firewall rules or policies.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: shorewall
References: http://seclists.org/lists/fulldisclosure/2005/Jul/0409.html, http://secunia.com/advisories/16087, http://secunia.com/advisories/17110
CVE-2005-2319
PHP remote file include vulnerability in Yawp library 1.0.6 and earlier, as used in YaWiki and possibly other products, allows remote attackers to include arbitrary files via the _Yawp[conf_path] parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: yawp
References: http://phpyawp.com/yawiki/index.php?page=ChangeLog, http://secunia.com/advisories/16049, http://www.hardened-php.net/advisory-102005.php
CVE-2005-3148
StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux, storebackup
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434, http://secunia.com/advisories/17025, http://secunia.com/advisories/19489
CVE-2005-0774
SQL injection vulnerability in member.php and possibly other scripts in PhotoPost PHP 5.0 RC3 allows remote attackers to execute arbitrary SQL commands via the uid parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: photopost_php_pro
References: http://marc.info/?l=bugtraq&m=111065868402859&w=2, http://secunia.com/advisories/14576, http://www.securityfocus.com/bid/12779
CVE-2005-2370
Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: gaim, ekg
Related CWEs: CWE-399
References: http://gaim.sourceforge.net/security/index.php?id=20, http://marc.info/?l=bugtraq&m=112198499417250&w=2, http://secunia.com/advisories/16265
CWE: CWE-399
CVE-2005-1047
Meilad File upload script (up.php) mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded, which allows remote authenticated users to execute arbitrary commands by uploading PHP files, then directly requesting them from the uploads directory.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpbb
References: http://marc.info/?l=bugtraq&m=111299353030534&w=2, http://securitytracker.com/id?1013671, http://www.defacers.com.mx/advisories/2.txt
CVE-2005-4141
Multiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary SQL commands via the (1) harf parameter in kullanicilistesi.asp and (2) baslik parameter in forum.asp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aspmforum
References: http://secunia.com/advisories/17954, http://www.osvdb.org/21538, http://www.osvdb.org/21539
CVE-2005-0367
Multiple directory traversal vulnerabilities in ArGoSoft Mail Server 1.8.7.3 allow remote authenticated users to read, delete, or upload arbitrary files via a .. (dot dot) in (1) the filename of an e-mail attachment, (2) the _msgatt.rec file, (3) and the /msg, /delete, /folderadd, and /folderdelete operations for the Folder parameter.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: argosoft_mail_server
References: http://marc.info/?l=bugtraq&m=110796956011699&w=2, http://www.security.org.sg/vuln/argosoftmail1873.html, http://marc.info/?l=bugtraq&m=110796956011699&w=2
CVE-2005-0829
Cross-site scripting (XSS) vulnerability in setuser.php of the Digitanium addon to PHP-Fusion 5.01 allows remote attackers to inject arbitrary web script or HTML via the (1) user_name or (2) user_pass parameters.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: php_fusion
References: http://marc.info/?l=bugtraq&m=111125692513645&w=2, http://marc.info/?l=bugtraq&m=111142752220155&w=2, http://marc.info/?l=bugtraq&m=111142918711745&w=2
CVE-2005-0666
Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC and VMA mirroring, allows local users and possibly remote attackers to bypass intended access restrictions and execute arbitrary code.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pax_linux
References: http://secunia.com/advisories/14489, http://www.securityfocus.com/archive/1/392348, http://www.securityfocus.com/bid/12729
CVE-2005-0088
The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mod_python
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000926, http://marc.info/?l=bugtraq&m=110815313218389&w=2, http://security.gentoo.org/glsa/glsa-200502-14.xml
CVE-2005-2067
SQL injection vulnerability in article.asp in unknown versions of aspnuke allows remote attackers to execute arbitrary SQL commands via the articleid parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: asp-nuke
References: http://downloads.securityfocus.com/vulnerabilities/exploits/ASPNuke-0601-sql.txt, http://marc.info/?l=bugtraq&m=111989828622112&w=2, http://www.securityfocus.com/bid/18215
CVE-2005-0884
DigitalHive 2.0 allows remote attackers to re-install the product by directly accessing the install script.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: digitalhive
References: http://securitytracker.com/id?1013516, https://exchange.xforce.ibmcloud.com/vulnerabilities/19802, http://securitytracker.com/id?1013516
CVE-2005-3768
Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gateway_security_300, gateway_security_5300, gateway_security_5310, firewall_vpn_appliance_200, enterprise_firewall
References: http://secunia.com/advisories/17684, http://securityresponse.symantec.com/avcenter/security/Content/2005.11.21.html, http://securitytracker.com/id?1015247
CVE-2005-2953
Cross-site scripting (XSS) vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary web script or HTML via the Customer_Login parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: miva_merchant
References: http://marc.info/?l=bugtraq&m=112684680903655&w=2, http://secunia.com/advisories/16829/, http://www.securityfocus.com/bid/14828
CVE-2005-4308
index.php in ezUpload Pro 2.2 and earlier allows remote attackers to include files via the mode parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ezupload_pro
References: http://pridels0.blogspot.com/2005/12/ezupload-pro-vuln.html, http://www.osvdb.org/21911, http://www.securityfocus.com/bid/15918
CVE-2005-4041
Cross-site scripting (XSS) vulnerability in search.cgi in MR CGI Guy Hot Links SQL 3.1.x and Hot Links Pro 3.1.x allows remote attackers to inject arbitrary web script or HTML via the query string.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: hot_links_pro, hot_links_sql
References: http://pridels0.blogspot.com/2005/12/hot-links-pro-3x-xss-vuln.html, http://pridels0.blogspot.com/2005/12/hot-links-sql-3x-xss-vuln.html, http://secunia.com/advisories/17868
CVE-2005-1812
Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code via a long (1) filename or (2) transfer mode string in a Read Request (RRQ) or Write Request (WRQ) packet.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: tftp_server_2000
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://secunia.com/advisories/15539, http://securitytracker.com/id?1014079, http://www.security.org.sg/vuln/tftp2000-1001.html
CWE: CWE-119
CVE-2005-1383
The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attackers to bypass HTTP Server mod_access restrictions via a request to the webcache TCP port 7778.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: application_server
References: http://marc.info/?l=bugtraq&m=111472266123952&w=2, http://secunia.com/advisories/15143, http://www.osvdb.org/15908
CVE-2005-3079
PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language selection.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:S/C:P/I:P/A:P
Affected Products: punbb
References: http://secunia.com/advisories/16908, http://www.punbb.org/changelogs/1.2.7_to_1.2.8.txt, http://secunia.com/advisories/16908
CVE-2005-0771
VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by calling methods to the RPC interface on TCP port 6106.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: backup_exec
References: http://secunia.com/advisories/15789, http://securitytracker.com/id?1014273, http://seer.support.veritas.com/docs/276605.htm
CVE-2005-3018
Apple Safari allows remote attackers to cause a denial of service (application crash) via a crafted data:// URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: safari
References: http://marc.info/?l=bugtraq&m=112715234411672&w=2, http://secunia.com/advisories/16875/, http://www.osvdb.org/19569
CVE-2005-2071
traceroute in Sun Solaris 10 on x86 systems allows local users to execute arbitrary code with PRIV_NET_RAWACCESS privileges via (1) a large number of -g arguments or (2) a malformed -s argument with a trailing . (dot).
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: solaris
Related CWEs: CWE-264
References: http://marc.info/?l=bugtraq&m=111963068714114&w=2, http://marc.info/?l=bugtraq&m=111963809801731&w=2, http://marc.info/?l=bugtraq&m=111964580023012&w=2
CWE: CWE-264
CVE-2005-3590
The getgrouplist function in the GNU C library (glibc) before version 2.3.5, when invoked with a zero argument, writes to the passed pointer even if the specified array size is zero, leading to a buffer overflow and potentially allowing attackers to corrupt memory.
CVSS v3.0 Score: 9.8 (CRITICAL)
CVSS v3.0 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: glibc
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://www.securityfocus.com/bid/107871, https://sourceware.org/bugzilla/show_bug.cgi?id=661, https://support.f5.com/csp/article/K12740406
CWE: CWE-119
CVE-2005-3854
Cross-site scripting (XSS) vulnerability in index.php in EasyPageCMS allows remote attackers to inject arbitrary web script or HTML via the cat parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: easypagecms
References: http://packetstorm.linuxsecurity.com/0511-exploits/EasyPageCMSXSS.txt, http://securitytracker.com/id?1015211, http://www.osvdb.org/21007
CVE-2005-1843
VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, allows local users to load arbitrary libraries and execute arbitrary code via the -lib command line argument.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: version_cue
References: http://secunia.com/advisories/16541, http://securitytracker.com/id?1014776, http://www.adobe.com/support/techdocs/327129.html
CVE-2005-1102
Multiple cross-site scripting (XSS) vulnerabilities in template-functions-post.php in WordPress 1.5 and earlier allow remote attackers to execute arbitrary commands via the (1) content or (2) title of the post.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: wordpress
References: http://bugs.gentoo.org/show_bug.cgi?id=88926, http://marc.info/?l=bugtraq&m=111336102101571&w=2, http://security.gentoo.org/glsa/glsa-200506-04.xml
CVE-2005-4323
Unspecified vulnerability in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and Groupmax Collaboration Web Client 07-00 through 07-10-/A allow remote attackers to cause a denial of service of unspecified impact via repeated invalid requests to the Schedule component.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: cosminexus_collaboration_portal, groupmax_collaboration_web_client, groupmax_collaboration_portal
References: http://secunia.com/advisories/17634/, http://securitytracker.com/alerts/2005/Nov/1015241.html, http://securitytracker.com/alerts/2005/Nov/1015242.html
CVE-2005-4720
Mozilla Firefox 1.0.7 and earlier on Linux allows remote attackers to cause a denial of service (client crash) via an IFRAME element with a large value of the WIDTH attribute, which triggers a problem related to representation of floating-point numbers, leading to an infinite loop of widget resizes and a corresponding large number of function calls on the stack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: firefox
References: http://secunia.com/advisories/17071, http://security-protocols.com/modules.php?name=News&file=article&sid=2978, http://securitytracker.com/id?1015011
CVE-2005-2722
Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a direct request to /daylinks/index.php or (2) a negative value in the daylinkspage parameter to index.php, which reveal the path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php_weblog
References: http://marc.info/?l=bugtraq&m=112491140712884&w=2, http://marc.info/?l=bugtraq&m=112491140712884&w=2
CVE-2005-3153
login.php in myBloggie 2.1.3 beta and earlier allows remote attackers to bypass a whitelist regular expression and conduct SQL injection attacks via a username parameter with SQL after a null character, which causes the whitelist check to succeed but injects the SQL into a query string, a different vulnerability than CVE-2005-2838.  NOTE: it is possible that this is actually a bug in PHP code, in which case this should not be treated as a myBloggie vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mybloggie
References: http://marc.info/?l=bugtraq&m=112818273307878&w=2, http://mywebland.com/forums/showtopic.php?t=399, http://rgod.altervista.org/mybloggie213b.html
CVE-2005-2425
Stack-based buffer overflow in Ares FileShare 1.1 allows remote attackers or local users to execute arbitrary code via a (1) long history parameter in the configuration file (ares.conf) or (2) long search string.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: fileshare
References: http://marc.info/?l=bugtraq&m=112239196706345&w=2, http://securitytracker.com/id?1014576, http://www.securityfocus.com/bid/14377
CVE-2005-4390
SQL injection vulnerability in index.php in ContentServ 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the StoryID parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: contentserv
References: http://pridels0.blogspot.com/2005/12/contentserv-31-sql-inj.html, http://www.osvdb.org/21851, http://www.securityfocus.com/bid/15956
CVE-2005-3203
The manual installation of Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 stores the SYS password in install.lst in plaintext, which allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: html_db
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0174.html, http://marc.info/?l=bugtraq&m=112870441917345&w=2, http://secunia.com/advisories/14935/
CVE-2005-3706
Heap-based buffer overflow in LibSystem in Mac OS X 10.4 through 10.4.5 allows context-dependent attackers to execute arbitrary code by causing an application that uses LibSystem to request a large amount of memory.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: mac_os_x_server, mac_os_x
References: http://docs.info.apple.com/article.html?artnum=303382, http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html, http://secunia.com/advisories/19064
CVE-2005-0980
PHP remote file inclusion vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary PHP code by modifying the view parameter to reference a URL on a remote web server that contains the code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: epay
References: http://marc.info/?l=bugtraq&m=111247198021626&w=2, http://secunia.com/advisories/14802, http://www.securityfocus.com/bid/12973