DuyTa/cve-kgrag-db huggingface dataset:
CVE-2005-4726
MUTE 0.4 uses improper flood protection algorithms, which allows remote attackers to obtain sensitive information (privacy leak and search result data) by controlling a drop chain neighbor that is near the end of a message chain.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mute
References: http://sourceforge.net/mailarchive/message.php?msg_id=11184523, http://sourceforge.net/mailarchive/message.php?msg_id=11200225, http://www.osvdb.org/23335
CVE-2005-3106
Race condition in Linux 2.6, when threads are sharing memory mapping via CLONE_VM (such as linuxthreads and vfork), might allow local users to cause a denial of service (deadlock) by triggering a core dump while waiting for a thread that has just performed an exec.
CVSS v3.1 Score: 4.7 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel, debian_linux, ubuntu_linux
Related CWEs: CWE-667
Related CAPECs: CAPEC-25, CAPEC-27, CAPEC-26
MITRE ATT&CK Techniques: T1499.004
MITRE ATT&CK Tactics: T1499
References: http://linux.bkbits.net:8080/linux-2.6/diffs/fs/exec.c%401.156?nav=index.html%7Csrc/%7Csrc/fs%7Chist/fs/exec.c, http://secunia.com/advisories/17141, http://secunia.com/advisories/18056
CWE: CWE-667
MITRE ATT&CK techniques: T1499.004
MITRE ATT&CK tactics: T1499
CVE-2005-3004
SQL injection vulnerability in Interakt MX Shop 3.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) idp, (2) id_ctg, or (3) id_prd parameters to the pages module in index.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mx_shop
References: http://securitytracker.com/id?1014932, http://www.osvdb.org/19611, http://www.securityfocus.com/bid/14876
CVE-2005-4403
SQL injection vulnerability in index.php in Marwel 2.7 and earlier allows remote attackers to execute arbitrary SQL commands via the show parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: marwel
References: http://pridels0.blogspot.com/2005/12/marwel-sql-inj.html, http://secunia.com/advisories/18099, http://www.osvdb.org/21831
CVE-2005-2704
Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects via an XBL control that implements an internal XPCOM interface.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: mozilla_suite, firefox
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt, http://secunia.com/advisories/16911, http://secunia.com/advisories/16917
CVE-2005-1968
Cross-site scripting (XSS) vulnerability in ProductCart Ecommerce before 2.7 allows remote attackers to inject arbitrary web script or HTML via the error parameter to techErr.asp.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: productcart
References: http://echo.or.id/adv/adv16-theday-2005.txt, http://securitytracker.com/id?1014129, http://echo.or.id/adv/adv16-theday-2005.txt
CVE-2005-1891
The GIF parser in ateimg32.dll in AOL Instant Messenger (AIM) 5.9.3797 and earlier allows remote attackers to cause a denial of service (crash) via a malformed buddy icon that causes an integer underflow in a loop counter variable.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows, aim
Related CWEs: CWE-191
References: http://marc.info/?l=bugtraq&m=111816939928640&w=2, http://marc.info/?l=bugtraq&m=111817881214343&w=2, http://securitytracker.com/id?1014145
CWE: CWE-191
CVE-2005-3701
Unspecified vulnerability in passwordserver in Mac OS X Server 10.3.9 and 10.4.3, when creating an Open Directory master server, allows local users to gain privileges via unknown attack vectors.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mac_os_x_server
References: http://docs.info.apple.com/article.html?artnum=302847, http://secunia.com/advisories/17813, http://securitytracker.com/id?1015290
CVE-2005-2520
The password assistant in Mac OS X 10.4 to 10.4.2, when used to create multiple accounts from the same process, does not reset the suggested password list when the assistant is displayed, which allows attackers to view recently used passwords.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mac_os_x
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html, http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html, http://securitytracker.com/id?1014707
CVE-2005-4436
Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS after 12.3(2), 12.3(3)B, and 12.3(2)T and other products, allows remote attackers to cause a denial of service by sending a "spoofed neighbor announcement" with (1) mismatched k values or (2) "goodbye message" Type-Length-Value (TLV).
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: extended_interior_gateway_routing_protocol
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040330.html, http://marc.info/?l=full-disclosure&m=113504451523186&w=2, http://securitytracker.com/id?1015382
CVE-2005-2205
The ReadLog function in kaiseki.cgi in pngren allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pngren
References: http://seclists.org/lists/bugtraq/2005/Jul/0097.html, http://secunia.com/advisories/15981, http://securitytracker.com/id?1014426
CVE-2005-2118
Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary commands via a crafted shortcut (.lnk) file with long font properties that lead to a buffer overflow when the user views the file's properties using Windows Explorer, a different vulnerability than CVE-2005-2122.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_xp, windows_2003_server
References: http://secunia.com/advisories/17168, http://secunia.com/advisories/17172, http://secunia.com/advisories/17223
CVE-2005-3988
SQL injection vulnerability in article.php in Pineapple Technologies Lore 1.5.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: lore
References: http://pridels0.blogspot.com/2005/12/lore-sql-inj-vuln.html, http://secunia.com/advisories/17842, http://www.osvdb.org/21328
CVE-2005-2747
Buffer overflow in ImageIO for Apple Mac OS X 10.4.2, as used by applications such as WebCore and Safari, allows remote attackers to execute arbitrary code via a crafted GIF file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mac_os_x_server, mac_os_x
References: http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html, http://secunia.com/advisories/16920/, http://securitytracker.com/alerts/2005/Sep/1014958.html
CVE-2005-1082
Multiple SQL injection vulnerabilities in AzDGDatingPlatinum 1.1.0 allows remote attackers to execute arbitrary SQL commands via (1) the id parameter to view.php or (2) the from parameter to members/index.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: azdgdating
References: http://www.osvdb.org/15525, http://www.securityfocus.com/archive/1/395530, http://www.securityfocus.com/archive/1/438607/100/100/threaded
CVE-2005-1274
Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via an HTTP unlock request and a long "If" parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: maxdb
References: http://www.idefense.com/application/poi/display?id=236&type=vulnerabilities, http://www.idefense.com/application/poi/display?id=236&type=vulnerabilities
CVE-2005-1045
OpenText FirstClass 8.0 client does not properly sanitize strings before passing them to the Windows ShellExecute API, which allows remote attackers to execute arbitrary commands via a UNC path in a bookmark.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: centrinity_firstclass_desktop_client
References: http://marc.info/?l=bugtraq&m=111323587931293&w=2, http://secunia.com/advisories/14898/, http://securitytracker.com/id?1013665
CVE-2005-0950
Directory traversal vulnerability in FastStone 4in1 Browser 1.2 allows remote attackers to read arbitrary files via a (1) ... (triple dot) or (2) ..\ (dot dot backslash) in the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: 4in1_browser
References: http://marc.info/?l=bugtraq&m=111213034206802&w=2, http://secunia.com/advisories/14743, http://securitytracker.com/id?1013596
CVE-2005-1520
Buffer overflow in the header_get_field_name function in header.c for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via a crafted e-mail.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailutils
References: http://secunia.com/advisories/15442, http://securitytracker.com/id?1014052, http://www.debian.org/security/2005/dsa-732
CVE-2005-4005
SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to obtain path information and possibly execute arbitrary SQL commands via the srch_text parameter in a Search and Sort option to messages.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php_fusion
References: http://secunia.com/advisories/17871, http://securityreason.com/securityalert/31, http://www.osvdb.org/21415
CVE-2005-4155
registration.PHP in ATutor 1.5.1 pl2 allows remote attackers to execute arbitrary SQL commands via an e-mail address that ends in a NULL character, which bypasses the PHP regular expression check. NOTE: it is possible that this is actually a bug in PHP code, in which case this should not be treated as a vulnerability in ATutor.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: atutor
References: http://rgod.altervista.org/atutor151pl2.html, http://securitytracker.com/alerts/2005/Nov/1015166.html, http://www.osvdb.org/20851
CVE-2005-0690
Gene6 FTP Server does not properly restrict access to the control console, which allows local users to modify the server configuration and gain privileges, as demonstrated by defining a SITE command.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: g6_ftp_server
References: http://marc.info/?l=bugtraq&m=111022496826680&w=2, http://marc.info/?l=bugtraq&m=111026585431080&w=2, http://secunia.com/advisories/14436
CVE-2005-0703
Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11.000 through 3.97.20.032, Pro 65/75/90 1.001.00.060 through 1.001.02.084, and others, has an "unauthenticated account," which allows remote attackers to modify system configuration, a different vulnerability than CVE-2005-1179.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: workcentre_175, workcentre_165, workcentre_75, workcentre_90, workcentre_2128
References: http://secunia.com/advisories/14507, http://www.xerox.com/downloads/usa/en/c/cert_XRX05_005.pdf, http://secunia.com/advisories/14507
CVE-2005-4094
connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP by using the FileUpload command to upload a file that appears to be an image but contains PHP script.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: docebolms
References: http://rgod.altervista.org/docebo204_xpl.html, http://secunia.com/advisories/1015308, http://secunia.com/advisories/17896
CVE-2005-1828
D-Link DSL-504T stores usernames and passwords in cleartext in the router configuration file, which allows remote attackers to obtain sensitive information.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: dsl-504t_firmware, dsl-504t
Related CWEs: CWE-312
Related CAPECs: CAPEC-37
MITRE ATT&CK Techniques: T1005, T1552.004
MITRE ATT&CK Tactics: T1552
References: http://marc.info/?l=bugtraq&m=111722515805478&w=2, http://marc.info/?l=bugtraq&m=111722515805478&w=2
CWE: CWE-312
MITRE ATT&CK techniques: T1005, T1552.004
MITRE ATT&CK tactics: T1552
CVE-2005-4079
The register_globals emulation in phpMyAdmin 2.7.0 rc1 allows remote attackers to exploit other vulnerabilities in phpMyAdmin by modifying the import_blacklist variable in grab_globals.php, which can then be used to overwrite other variables.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: phpmyadmin
References: http://secunia.com/advisories/17925/, http://secunia.com/advisories/17957, http://secunia.com/advisories/18618
CVE-2005-3259
Multiple SQL injection vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) login field, (2) "search this thread" feature, (3) "search for posts" feature, (4) "forgot password" feature, (5) list parameter in userlistpre.php, and the (6) select, (7) categ, and (8) to parameters in index.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: versatilebulletinboard
References: http://marc.info/?l=bugtraq&m=112907535528616&w=2, http://rgod.altervista.org/versatile100RC2.html, http://secunia.com/advisories/17174/
CVE-2005-4191
Multiple cross-site scripting (XSS) vulnerabilities in templates/tasklists/tasklists.inc in Horde Nag Task List Manager H3 before 2.0.4 allow remote authenticated users to inject arbitrary web script or HTML via (1) the tasklist's name or (2) description, when creating a new tasklist.
CVSS v2.0 Score: 3.5 (LOW)
CVSS v2.0 Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Affected Products: nag_task_list_manager_h3
References: http://cvs.horde.org/diff.php/nag/templates/tasklists/tasklists.inc?r1=1.10&r2=1.11&ty=h, http://lists.horde.org/archives/announce/2005/000236.html, http://secunia.com/advisories/17969
CVE-2005-0565
The Announce module in phpWebSite 0.10.0 and earlier allows remote attackers to execute arbitrary PHP code by setting the Image field to reference a PHP file whose name contains a .gif.php extension.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpwebsite
References: http://marc.info/?l=bugtraq&m=110928565530828&w=2, http://secunia.com/advisories/14399, http://securitytracker.com/id?1013298
CVE-2005-2459
The huft_build function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 returns the wrong value, which allows remote attackers to cause a denial of service (kernel crash) via a certain compressed file that leads to a null pointer dereference, a different vulnerability than CVE-2005-2458.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel, debian_linux
Related CWEs: CWE-476
References: http://bugs.gentoo.org/show_bug.cgi?id=94584, http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5, http://secunia.com/advisories/16355/
CWE: CWE-476
CVE-2005-3370
Multiple interpretation error in ArcaVir 2005 package 2005-06-21 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: arcavir_2005
References: http://marc.info/?l=bugtraq&m=113026417802703&w=2, http://www.securityelf.org/magicbyte.html, http://www.securityelf.org/magicbyteadv.html
CVE-2005-2893
Direct static code injection vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via the username (u parameter), which is directly injected into a file that is later executed upon login.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pblang
References: http://marc.info/?l=bugtraq&m=112611338417979&w=2, http://secunia.com/advisories/16711/, http://securitytracker.com/alerts/2005/Sep/1014861.html
CVE-2005-0634
Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: golden_ftp_server
References: http://retrogod.altervista.org/golden_heap.html, http://secunia.com/advisories/23323, http://www.securityfocus.com/archive/1/391987
CVE-2005-1031
RUNCMS 1.1A, and possibly other products based on e-Xoops (exoops), when "Allow custom avatar upload" is enabled, does not properly verify uploaded files, which allows remote attackers to upload arbitrary files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: e-xoops, runcms
References: http://marc.info/?l=bugtraq&m=111280711228450&w=2, http://secunia.com/advisories/14869, http://www.runcms.org/public/modules/news/
CVE-2005-2606
Unknown vulnerability in the "frontend authentication" in PHlyMail 3.02.00 has unknown impact and attack vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phlymail
References: http://phlymail.de/forum/viewtopic.php?t=698, http://secunia.com/advisories/16388, http://www.securityfocus.com/bid/14537
CVE-2005-1376
Multiple directory traversal vulnerabilities in (1) document.php or (2) insertMyDoc.php in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote project administrators to upload arbitrary files.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: claroline
References: http://marc.info/?l=bugtraq&m=111464607103407&w=2, http://secunia.com/advisories/15161, http://secunia.com/advisories/15725
CVE-2005-3057
The FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and other versions before 3.0 MR1, allows remote attackers to bypass the Fortinet FTP anti-virus engine by sending a STOR command and uploading a file before the FTP server response has been sent, as demonstrated using LFTP.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: fortios, fortigate
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042139.html, http://marc.info/?l=bugtraq&m=113986337408103&w=2, http://secunia.com/advisories/18844
CVE-2005-2051
Buffer overflow in the VERITAS Backup Exec Web Administration Console (BEWAC) 9.0 4367 through 10.0 rev. 5484 allows remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: backup_exec
References: http://marc.info/?l=bugtraq&m=111954711532252&w=2, http://secunia.com/advisories/15789, http://seer.support.veritas.com/docs/276606.htm
CVE-2005-4852
The siteaccess URIMatching implementation in eZ publish 3.5 through 3.8 before 20050812 converts all non-alphanumeric characters in a URI to '_' (underscore), which allows remote attackers to bypass access restrictions by inserting certain characters in a URI, as demonstrated by a request for /admin:de, which matches a rule allowing only /admin_de to access /admin.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: ez_publish
Related CWEs: CWE-264
References: http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0, http://issues.ez.no/7025, http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0
CWE: CWE-264
CVE-2005-3749
Unspecified "absolute path vulnerabilities" in the diagela command (diagela.sh) in IBM AIX 5.2 and 5.3 have unknown impact and attack vectors.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://secunia.com/advisories/17474, http://securitytracker.com/id?1015212, http://www-1.ibm.com/support/search.wss?rs=0&q=IY78800&apar=only
CVE-2005-3911
Multiple SQL injection vulnerabilities in calendar.php in BosDates 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) category parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bosdates
References: http://pridels0.blogspot.com/2005/11/bosdates-v40-sql-vuln.html, http://secunia.com/advisories/17752, http://www.osvdb.org/21173
CVE-2005-1607
Cross-site scripting (XSS) vulnerability in shop.cgi in Remote Cart allows remote attackers to inject arbitrary web script or HTML via the (1) merchant or (2) demo parameters.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: remote_cart
References: http://securitytracker.com/id?1013903, http://www.governmentsecurity.org/forum/lofiversion/index.php/t14715.html, http://www.osvdb.org/16454
CVE-2005-1024
modules.php in PHP-Nuke 6.x to 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) my_headlines, (2) userinfo, or (3) search, which reveals the path in a PHP error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=111263454308478&w=2, http://www.securityreason.com/adv/PHPNuke%206.x-7.6-p1.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/19953
CVE-2005-4049
Multiple SQL injection vulnerabilities in Blog System 1.2 allow remote attackers to execute arbitrary SQL commands via (1) the cat parameter in index.php and (2) the note parameter in blog.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: blog_system
References: http://pridels0.blogspot.com/2005/12/blog-system-v12-sql-inj-vuln.html, http://secunia.com/advisories/17893/, http://securityreason.com/securityalert/230
CVE-2005-0407
Cross-site scripting (XSS) vulnerability in Openconf 1.04, and possibly other versions before 1.10, allows remote attackers to inject arbitrary HTML and web script via the paper title.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: openconf
References: http://seclists.org/lists/fulldisclosure/2005/Feb/0347.html, http://secunia.com/advisories/14294, http://www.redteam-pentesting.de/advisories/rt-sa-2005-007.txt
CVE-2005-4057
Cross-site scripting (XSS) vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to inject arbitrary web script or HTML via the (1) Location, (2) Last Name, and (3) First Name parameters.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: pluggedout_nexus
References: http://pridels0.blogspot.com/2005/12/pluggedout-nexus-sqlxss-vuln_06.html, http://secunia.com/advisories/17909, http://www.osvdb.org/21479
CVE-2005-0486
Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive information during authentication, which allows remote attackers to identify valid usernames and the authentication scheme.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: tarantella_enterprise, secure_global_desktop
References: http://www.tarantella.com/security/bulletin-11.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/19407, http://www.tarantella.com/security/bulletin-11.html
CVE-2005-1815
Multiple buffer overflows in Hummingbird Connectivity inetD 10.0.0.1 and 9.0.0.4 allows attackers to cause a denial of service and possibly execute arbitrary code via (1) an FTP command with a long argument to FTPD (ftpdw.exe) or (2) a large amount of data to LPD (Lpdw.exe).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: connectivity
References: http://connectivity.hummingbird.com/support/nc/exceed/ftpd_advisory.html?cks=y, http://connectivity.hummingbird.com/support/nc/exceed/lpdw_advisory.html, http://secunia.com/advisories/15557
CVE-2005-4592
Heap-based buffer overflow in bogofilter and bogolexer 0.96.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via words that are longer than the input buffer used by flex.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: email_filter
References: http://bogofilter.sourceforge.net/security/bogofilter-SA-2005-02, http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html, http://secunia.com/advisories/18352
CVE-2005-1417
Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute arbitrary SQL commands via (1) article_popular.asp, (2) arguments to dl_popular.asp, (3) arguments to links_popular.asp, (4) arguments to pic_popular.asp, (5) article_rate.asp, (6) dl_rate.asp, (7) links_rate.asp, (8) pic_rates.asp, (9) article_toprated.asp, (10) dl_toprated.asp, (11) links_toprated.asp, (12) arguments to pic_toprated.asp, or (13) the TOPIC_ID or Forum_ID parameters to custom_link.asp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: maxwebportal
References: http://secunia.com/advisories/15214, http://securitytracker.com/id?1013845, http://www.maxwebportal.info/downloads/mwp_security_fixes.zip
CVE-2005-2686
Directory traversal vulnerability in SaveWebPortal 3.4 allows remote attackers to include arbitrary files and execute arbitrary local PHP programs via ".." sequences in the (1) SITE_Path parameter to menu_dx.php or (2) CONTENTS_Dir parameter to menu_sx.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: savewebportal
References: http://rgod.altervista.org/save_yourself_from_savewebportal34.html, http://secunia.com/advisories/16522, http://rgod.altervista.org/save_yourself_from_savewebportal34.html
CVE-2005-1966
The eTrace_validaddr function in eTrace plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the etrace_host parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: e107
References: http://marc.info/?l=bugtraq&m=111868460811287&w=2, http://www.securityfocus.com/bid/13934, http://marc.info/?l=bugtraq&m=111868460811287&w=2
CVE-2005-2417
Contrexx before 1.0.5 allows remote attackers to obtain sensitive information via a direct request to /config/version.xml.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: contrexx
References: http://marc.info/?l=bugtraq&m=112206702015439&w=2, http://secunia.com/advisories/16169, http://securitytracker.com/id?1014554
CVE-2005-2560
Cross-site scripting (XSS) vulnerability in index.cfm in CFBB 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: cfbb
References: http://marc.info/?l=bugtraq&m=112352059715868&w=2, http://secunia.com/advisories/16311, http://www.securityfocus.com/bid/14440
CVE-2005-4271
Buffer overflow in the malloc debug system in IBM AIX 5.3 allows local users to execute arbitrary code.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://secunia.com/advisories/18088, http://www-1.ibm.com/support/search.wss?rs=0&q=IY78227&apar=only, http://www.securityfocus.com/archive/1/419577/100/0/threaded
CVE-2005-0779
PlatinumFTP 1.0.18, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via multiple connection attempts with a \ (backslash) in the username.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: platinumftpserver
References: http://marc.info/?l=bugtraq&m=111066232415249&w=2, http://www.securityfocus.com/archive/1/455609/100/0/threaded, http://www.securityfocus.com/bid/12790
CVE-2005-1204
Desktop Rover 3.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application crash) via a crafted packet to TCP port 61427, which causes an invalid memory access.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: desktop_rover
References: http://marc.info/?l=bugtraq&m=111401676906915&w=2, http://secunia.com/advisories/15032, http://www.evilpacket.net/advisories/EP-000-0003.html
CVE-2005-0941
The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: openoffice
References: http://secunia.com/advisories/17027, http://www.gentoo.org/security/en/glsa/glsa-200504-13.xml, http://www.novell.com/linux/security/advisories/2005_21_sr.html
CVE-2005-3797
PHP remote file inclusion vulnerability in payment_paypal.php in AlstraSoft Template Seller Pro 3.25 allows remote attackers to execute arbitrary PHP code via the config[basepath] parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: template_seller
References: http://marc.info/?l=bugtraq&m=113209710803581&w=2, http://myblog.it-security23.net/?postid=6, http://secunia.com/advisories/17603/
CVE-2005-3175
Microsoft Windows 2000 before Update Rollup 1 for SP4 allows a local administrator to unlock a computer even if it has been locked by a domain administrator, which allows the local administrator to access the session as the domain administrator.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000
References: http://support.microsoft.com/kb/842742, http://support.microsoft.com/kb/900345, http://support.microsoft.com/kb/842742
CVE-2005-1009
Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or (2) local users to execute arbitrary code via a long Name entry in the configure.cfg file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netvault
References: http://secunia.com/advisories/14814, http://securitytracker.com/id?1013625, http://www.class101.org/netv-locsbof.pdf
CVE-2005-0926
Buffer overflow in Sylpheed before 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attachments with MIME-encoded file names.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: sylpheed
References: http://sylpheed.good-day.net/changelog.html.en, http://sylpheed.good-day.net/changelog.html.en
CVE-2005-4734
Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows remote attackers to execute arbitrary code via a long url parameter in the Redirect method.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: authentication_agent_for_web
References: http://secunia.com/advisories/17281, http://www.metasploit.com/projects/Framework/exploits.html#rsa_iiswebagent_redirect, http://www.osvdb.org/20151
CVE-2005-3035
Compuware DriverStudio Remote Control service (DSRsvc.exe) 2.7 and 3.0 beta 2 allows remote attackers to cause a denial of service (reboot) via a UDP packet sent directly to port 9110.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: driverstudio
References: http://lists.seifried.org/pipermail/security/2005-September/009956.html, http://secunia.com/advisories/16838, http://www.securityfocus.com/bid/14838
CVE-2005-3416
phpBB 2.0.17 and earlier, when register_globals is enabled and the session_start function has not been called to handle a session, allows remote attackers to bypass security checks by setting the $_SESSION and $HTTP_SESSION_VARS variables to strings instead of arrays, which causes an array_merge function call to fail.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpbb
References: http://marc.info/?l=bugtraq&m=113081113317600&w=2, http://secunia.com/advisories/17366, http://secunia.com/advisories/18098
CVE-2005-1212
Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark link file (.cbo, cbl, or .cbm extension) with a long User field.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_98se, windows_98, windows_2003_server, windows_me
References: http://idefense.com/application/poi/display?id=262&type=vulnerabilities&flashstatus=true, http://secunia.com/advisories/15669/, http://securitytracker.com/id?1014194
CVE-2005-3097
Directory traversal vulnerability in Avi Alkalay contribute.cgi (aka contribute.pl), dated 16 Jun 2002, allows remote attackers to overwrite arbitrary files via ".." sequences in the contribdir variable.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: contribute.cgi
References: http://www.cirt.net/advisories/alkalay.shtml, http://www.osvdb.org/19522, http://www.cirt.net/advisories/alkalay.shtml
CVE-2005-1922
The MS-Expand file handling in Clam AntiVirus (ClamAV) before 0.86 allows remote attackers to cause a denial of service (file descriptor and memory consumption) via a crafted file that causes repeated errors in the cli_msexpand function.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: clamav
References: http://sourceforge.net/project/shownotes.php?release_id=336462, http://www.debian.org/security/2005/dsa-737, http://www.idefense.com/application/poi/display?id=276&type=vulnerabilities&flashstatus=true
CVE-2005-3336
SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mantis
References: http://bugs.mantisbt.org/changelog_page.php, http://secunia.com/advisories/16506, http://secunia.com/advisories/16818
CVE-2005-4018
SQL injection vulnerability in ls.php in Landshop Real Estate Commerce System 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) start, (2) search_order, (3) search_type, (4) search_area, and (5) keyword parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: real_estate_commerce_system
References: http://pridels0.blogspot.com/2005/12/landshop-real-estate-commerce-system.html, http://secunia.com/advisories/17843, http://www.osvdb.org/21433
CVE-2005-2053
Just another flat file (JAF) CMS before 3.0 Final allows remote attackers to obtain sensitive information via (1) an * (asterisk) in the id parameter, (2) a blank id parameter, or (3) an * (asterisk) in the disp parameter to index.php, which reveals the path in an error message.  NOTE: a followup suggests that this may be a directory traversal or file inclusion vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: jaf_cms
References: http://echo.or.id/adv/adv20-theday-2005.txt, http://marc.info/?l=bugtraq&m=111954840611126&w=2, http://marc.info/?l=bugtraq&m=111990004028512&w=2
CVE-2005-0915
Webmasters-Debutants WD Guestbook 2.8 allows remote attackers to bypass authentication and perform certain administrator actions via a direct HTTP POST request to (1) ajout_admin2.php or (2) suppr.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wd_guestbook
References: http://securitytracker.com/id?1013570, http://securitytracker.com/id?1013570
CVE-2005-4890
There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process.
CVSS v3.1 Score: 7.8 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: enterprise_linux, sudo, debian_linux, shadow
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://www.openwall.com/lists/oss-security/2012/11/06/8, http://www.openwall.com/lists/oss-security/2013/05/20/3, http://www.openwall.com/lists/oss-security/2013/11/28/10
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2005-4862
The search functionality in XWiki 0.9.793 indexes cleartext user passwords, which allows remote attackers to obtain sensitive information via a search string that matches a password.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: xwiki
Related CWEs: CWE-255
References: http://jira.xwiki.org/jira/browse/XWIKI-70, http://jira.xwiki.org/jira/browse/XWIKI-70
CWE: CWE-255
CVE-2005-4674
Multiple SQL injection vulnerabilities in list.php in Complete PHP Counter allow remote attackers to execute arbitrary SQL commands via the (1) c or (2) s parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: complete_php_counter
References: http://securitytracker.com/id?1015054, http://www.osvdb.org/20084, http://www.osvdb.org/20085
CVE-2005-3030
Directory traversal vulnerability in the archive decompression library in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBlock 2005 build 6.0.0.383, and V3Net for Windows Server 6.0 build 6.0.0.383 allows remote attackers to write arbitrary files via a .. (dot dot) in the filename in a compressed archive.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: v3pro_2004, v3_virusblock_2005, v3net
References: http://info.ahnlab.com/english/advisory/01.html, http://marc.info/?l=bugtraq&m=112680062609377&w=2, http://secunia.com/advisories/15674/
CVE-2005-0587
Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downloading a .LNK (link) file twice, which overwrites the file that was referenced in the first .LNK file.
CVSS v3.1 Score: 6.5 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: mozilla, firefox
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://secunia.com/advisories/19823, http://www.mozilla.org/security/announce/mfsa2005-21.html, http://www.novell.com/linux/security/advisories/2006_04_25.html
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-2005-0589
The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that monitors the values that are generated by the autocomplete capability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: firefox
References: http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml, http://www.mozilla.org/security/announce/mfsa2005-19.html, http://www.redhat.com/support/errata/RHSA-2005-176.html
CVE-2005-4707
Multiple cross-site scripting (XSS) vulnerabilities in PHP GEN before 1.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: php_gen
References: http://secunia.com/advisories/17560, http://secunia.com/advisories/18715, http://www.eyce.be/php_gen/NEWS
CVE-2005-2723
SQL injection vulnerability in auth.php in PaFileDB 3.1, when authmethod is set to cookies, allows remote attackers to execute arbitrary SQL commands via the username value in the pafiledbcookie cookie.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pafiledb
References: http://marc.info/?l=bugtraq&m=112490781927680&w=2, http://secunia.com/advisories/16566/, http://www.security-project.org/projects/board/showthread.php?t=947
CVE-2005-3070
HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:P
Affected Products: hylafax
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=329384, http://secunia.com/advisories/17107, http://www.mandriva.com/security/advisories?name=MDKSA-2005:177
CVE-2005-2022
Unknown vulnerability in Webmail in iPlanet Messaging Server 5.2 Patch 1 and Sun ONE Messaging Server 6.2 allows remote attackers to execute arbitrary Javascript, possibly due to a cross-site scripting (XSS) vulnerability.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: iplanet_messaging_server, one_messaging_server
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-101770-1, http://www.vupen.com/english/advisories/2005/0816, http://sunsolve.sun.com/search/document.do?assetkey=1-26-101770-1
CWE: CWE-79
CVE-2005-4604
Buffer overflow in MTink in the printer-filters-utils package allows local users to execute arbitrary code via a long HOME environment variable.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mtink
References: http://secunia.com/advisories/18249, http://secunia.com/advisories/18287, http://www.mandriva.com/security/advisories?name=MDKSA-2005:239
CVE-2005-0409
CitrusDB 0.3.6 and earlier does not verify authorization for the (1) importcc.php and (2) uploadcc.php, which allows remote attackers to upload credit card data and obtain sensitive information such as the pathnames for temporary files that store credit card data, and facilitates the exploitation of other vulnerabilities.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: citrusdb
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031707.html, http://www.redteam-pentesting.de/advisories/rt-sa-2005-003.txt, http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031707.html
CVE-2005-1590
The Altiris Client Service for Windows (ACLIENT.EXE) 6.0.88 allows local users to disable password protection and access the administrative interface by finding and showing the "Altiris Client Service" hidden window, disabling the password protection, disabling the "Hide client tray icon box" option, then opening the AClient tray icon and using the View Log File option, a different vulnerability than CVE-2004-2070.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: deployment_solution, client_service
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-04/0614.html, http://secunia.com/advisories/15159, http://www.osvdb.org/15897
CVE-2005-3479
Cross-site scripting (XSS) vulnerability in login.asp in Ringtail CaseBook 6.1.0 allows remote attackers to inject arbitrary web script or HTML via the users parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: casebook
References: http://secunia.com/advisories/17383, http://www.osvdb.org/20423, http://www.procheckup.com/Vulner_PR0412.php
CVE-2005-2268
Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: mozilla, firefox
References: http://secunia.com/advisories/15489, http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/, http://www.debian.org/security/2005/dsa-810
CVE-2005-0863
Cross-site scripting (XSS) vulnerability in PHPOpenChat v3.x allows remote attackers to inject arbitrary web script or HTML via (1) the chatter parameter to regulars.php or (2) the chatter, chatter1, chatter2, chatter3, or chatter4 parameters to register.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpopenchat
References: http://seclists.org/lists/bugtraq/2005/Mar/0331.html, http://secunia.com/advisories/14651, http://www.securityfocus.com/bid/12841
CVE-2005-1182
Unknown vulnerability in Incoming Remote Command (iSeries Access for Windows Remote Command service) in IBM OS/400 R510, R520, and R530 allows attackers to cause a denial of service (IRC shutdown) via certain inputs.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: os_400
References: http://secunia.com/advisories/14970, http://www-1.ibm.com/support/docview.wss?uid=nas29afd3991f5f290b086256fdb0053b293, https://exchange.xforce.ibmcloud.com/vulnerabilities/20612
CVE-2005-2013
paFAQ 1.0 Beta 4 allows remote attackers to obtain sensitive information via a direct request to admin/backup.php, which contains a backup of the database including usernames and passwords.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: pafaq
References: http://marc.info/?l=bugtraq&m=111928841328681&w=2, http://www.gulftech.org/?node=research&article_id=00083-06202005, http://marc.info/?l=bugtraq&m=111928841328681&w=2
CVE-2005-0958
Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enabled, allows remote attackers to execute arbitrary code via the CWD command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mtftpd
References: http://unl0ck.org/files/papers/mtftpd.txt, http://www.securiteam.com/exploits/5KP0W0AF5K.html, http://www.securityfocus.com/bid/12947
CVE-2005-1118
Cross-site scripting (XSS) vulnerability in IISWebAgentIF.dll in the RSA Authentication Agent for Web 5.2 allows remote attackers to inject arbitrary web script or HTML via the postdata parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: authentication_agent_for_web
References: http://secunia.com/advisories/14954, http://securitytracker.com/id?1013724, http://www.kb.cert.org/vuls/id/366372
CVE-2005-4065
SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: trac
References: http://lists.edgewall.com/archive/trac/2005-December/005777.html, http://projects.edgewall.com/trac/wiki/ChangeLog, http://secunia.com/advisories/17894