DuyTa/cve-kgrag-db huggingface dataset:
CVE-2005-2461
Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to execute arbitrary SQL commands via the (1) year or (2) date parameter.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: liveresponse
References: http://marc.info/?l=bugtraq&m=112274359718863&w=2, http://secunia.com/advisories/16286, http://www.gulftech.org/?node=research&article_id=00092-07302005
CVE-2005-3651
Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ethereal
References: ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U, http://anonsvn.ethereal.com/viewcvs/viewcvs.py/trunk/epan/dissectors/packet-ospf.c, http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html
CVE-2005-1597
Cross-site scripting (XSS) vulnerability in (1) search.php and (2) topics.php for Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the highlite parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: invision_board, invision_power_board
References: http://forums.invisionpower.com/index.php?showtopic=168016, http://marc.info/?l=bugtraq&m=111539908705851&w=2, http://secunia.com/advisories/15265
CVE-2005-1263
The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to execute arbitrary code via an ELF binary that, in certain conditions involving the create_elf_tables function, causes a negative length argument to pass a signed integer comparison, leading to a buffer overflow.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel
References: ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U, http://secunia.com/advisories/19185, http://secunia.com/advisories/19607
CVE-2005-0357
EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: storedge_enterprise_backup_software, solstice_backup, legato_networker
References: http://secunia.com/advisories/16464, http://secunia.com/advisories/16470, http://securitytracker.com/id?1014713
CVE-2005-1003
Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote attackers to include arbitrary PHP files via .. (dot dot) sequences in the modID parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: payprocart
References: http://marc.info/?l=bugtraq&m=111264602406090&w=2, http://secunia.com/advisories/14832, http://securitytracker.com/id?1013640
CVE-2005-1346
Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27, SAV/Filter for Domino NT 3.1.1.87, and Mail Security for Exchange 4.5.4.743, when running on Windows, allows remote attackers to cause a denial of service (component crash) and avoid detection via a crafted RAR file.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: norton_internet_security, norton_system_works, antivirus_scan_engine, mail_security, norton_antivirus
References: http://securityresponse.symantec.com/avcenter/security/Content/2005.04.27.html, http://securityresponse.symantec.com/avcenter/security/Content/2005.04.27.html
CVE-2005-1313
Cross-site scripting (XSS) vulnerability in Horde Passwd module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: passwd
References: http://cvs.horde.org/diff.php/passwd/docs/CHANGES?r1=1.1.1.1.2.28&r2=1.1.1.1.2.33&ty=h, http://lists.horde.org/archives/sork/Week-of-Mon-20050418/002147.html, http://secunia.com/advisories/15075
CVE-2005-1481
Multiple SQL injection vulnerabilities in Aaron Outpost ASP Inline Corporate Calendar allow remote attackers to execute arbitrary SQL commands via the Event_ID parameter to (1) defer.asp or (2) details.asp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: asp_inline_corporate_calendar
References: http://marc.info/?l=bugtraq&m=111530675909673&w=2, http://secunia.com/advisories/15239, http://securitytracker.com/id?1013884
CVE-2005-2592
Unknown vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to bypass authentication via unknown vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mindalign
References: http://secunia.com/advisories/16408, http://www.niscc.gov.uk/niscc/docs/br-20050812-00673.html?lang=en, http://www.osvdb.org/18756
CVE-2005-1068
Cross-site scripting (XSS) vulnerability in sCssBoard 1.11 and earlier allows remote attackers to execute arbitrary Javascript via [url] tags.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: scssboard
References: http://secunia.com/advisories/14694, http://securitytracker.com/id?1013659, http://sourceforge.net/project/shownotes.php?release_id=318346
CVE-2005-1689
Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mac_os_x_server, mac_os_x, debian_linux, kerberos_5
Related CWEs: CWE-415
References: ftp://patches.sgi.com/support/free/security/advisories/20050703-01-U.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000993, http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CWE: CWE-415
CVE-2005-4058
SQL injection vulnerability in saralblog 1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to viewprofile.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: saralblog
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://evuln.com/vulns/40/summary.html, http://pridels0.blogspot.com/2005/12/saralblog-v1-sql-inj-vuln.html, http://www.osvdb.org/21520
CWE: CWE-89
CVE-2005-1095
Cross-site scripting (XSS) vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to inject arbitrary web script or HTML via the page parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: membership_manager_pro
References: http://secunia.com/advisories/14864, http://securitytracker.com/id?1013667, http://www.hackerscenter.com/archive/view.asp?id=1865
CVE-2005-3848
Memory leak in the icmp_push_reply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted packets that cause the ip_append_data function to fail, aka "DST leak in icmp_push_reply."
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: linux_kernel
References: http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html, http://marc.info/?l=linux-kernel&m=112431016816937&w=2, http://marc.info/?l=linux-kernel&m=112439084918917&w=2
CVE-2005-3639
PHP file inclusion vulnerability in the osTicket module in Help Center Live before 2.0.3 allows remote attackers to access or include arbitrary files via the file parameter, possibly due to a directory traversal vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: help_center_live
References: http://secunia.com/advisories/17580, http://www.securityfocus.com/bid/15404, http://www.vupen.com/english/advisories/2005/2451
CVE-2005-4735
IBM DB2 Universal Database (UDB) 810 before 8.1 FP10 allows remote authenticated users to cause a denial of service (application crash) via (1) certain equality predicates that trigger self-removal, aka IY70808; and (2) a query with more than 32000 elements in the IN-list, aka LI70817.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C
Affected Products: db2_universal_database
References: http://secunia.com/advisories/17031, http://www-1.ibm.com/support/docview.wss?uid=swg1IY70808, http://www-1.ibm.com/support/docview.wss?uid=swg1LI70817
CVE-2005-0709
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mysql
Related CWEs: CWE-94
Related CAPECs: CAPEC-242, CAPEC-77, CAPEC-35
MITRE ATT&CK Techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK Tactics: T1564, T1027
References: http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0084.html, http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html, http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
CWE: CWE-94
MITRE ATT&CK techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK tactics: T1564, T1027
CVE-2005-3885
The ps2epsi extension shell script (ps2epsi.sh) in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: inkscape
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=321501, http://secunia.com/advisories/16343, http://secunia.com/advisories/17882
CVE-2005-1528
Untrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitrary libraries via a LD_LIBRARY_PATH environment variable that references a malicious library.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: rtos
References: http://secunia.com/advisories/18750, http://securitytracker.com/id?1015599, http://www.idefense.com/intelligence/vulnerabilities/display.php?id=379
CVE-2005-4658
Multiple cross-site scripting (XSS) vulnerabilities in ASP-Programmers.com ASPKnowledgebase allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: aspknowledgebase
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://seclists.org/lists/bugtraq/2005/Nov/0122.html, http://secunia.com/advisories/17517, http://www.osvdb.org/20713
CWE: CWE-79
CVE-2005-1761
Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service (kernel crash) via ptrace and the restore_sigcontext function.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_desktop, suse_linux, open_enterprise_server
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ea78729b8dbfc400fe165a57b90a394a7275a54, http://secunia.com/advisories/17002, http://secunia.com/advisories/17073
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2005-2785
cosmoshop 8.10.78 and earlier stores passwords in plaintext in the database, which allows local users to obtain sensitive information.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cosmoshop
References: http://marc.info/?l=bugtraq&m=112534390600093&w=2, http://secunia.com/advisories/16625/, https://exchange.xforce.ibmcloud.com/vulnerabilities/22081
CVE-2005-1070
SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to execute arbitrary SQL commands via the st parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: invision_board
References: http://www.securityfocus.com/archive/1/395515, http://www.securityfocus.com/bid/13097, http://www.securitytracker.com/alerts/2005/Apr/1013676.html
CVE-2005-2827
The thread termination routine in the kernel for Windows NT 4.0 and 2000 (NTOSKRNL.EXE) allows local users to modify kernel memory and execution flow via steps in which a terminating thread causes Asynchronous Procedure Call (APC) entries to free the wrong data, aka the "Windows Kernel Vulnerability."
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_nt
References: http://secunia.com/advisories/15821, http://secunia.com/advisories/18064, http://secunia.com/advisories/18311
CVE-2005-0107
bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bsmtpd
References: http://www.debian.org/security/2005/dsa-690, http://www.debian.org/security/2005/dsa-690
CVE-2005-0188
Format string vulnerability in the SetBaseURL function in AtHoc toolbar allows remote attackers to execute arbitrary code via format string specifiers in an invalid URL that is recorded in the debug log.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: athoc_toolbar
References: http://marc.info/?l=bugtraq&m=109710974324742&w=2, http://marc.info/?l=bugtraq&m=110616363415176&w=2, http://www.ngssoftware.com/advisories/athoc-01full.txt
CVE-2005-0482
TrackerCam 5.12 and earlier allows remote attackers to cause a denial of service (crash) via (1) a large number of connections with a negative Content-Length header, possibly triggering an integer signedness error, or (2) a large amount of data.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: trackercam
References: http://www.securityfocus.com/archive/1/390918, http://www.securityfocus.com/bid/12592, https://exchange.xforce.ibmcloud.com/vulnerabilities/19417
CVE-2005-1806
Format string vulnerability in PeerCast 0.1211 and earlier allows remote attackers to execute arbitrary code via format strings in the URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: peercast
References: http://marc.info/?l=bugtraq&m=111746603629979&w=2, http://secunia.com/advisories/15536, http://secunia.com/advisories/15753
CVE-2005-0430
The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service (shutdown game server) and possibly crash the server via a long infostring, possibly triggering a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: quake_3_engine
References: http://aluigi.altervista.org/adv/q3infoboom-adv.txt, http://marc.info/?l=bugtraq&m=110824822224025&w=2, http://www.securityfocus.com/bid/12534
CVE-2005-3238
Multiple unspecified vulnerabilities in Solaris 10 SCTP Socket Option Processing allows local users to cause a denial of service (panic) via unspecified attack vectors.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: solaris
References: http://secunia.com/advisories/17198, http://securitytracker.com/id?1015059, http://sunsolve.sun.com/search/document.do?assetkey=1-26-101881-1
CVE-2005-4413
Multiple cross-site scripting (XSS) vulnerabilities in sample scripts in IBM WebSphere Application Server 6 allow remote attackers to inject arbitrary web script or HTML via the (1) E-mail address field to (a) PlantsByWebSphere/login.jsp, (2) message field to (b) TechnologySample/BulletinBoard Script, (3) Email address field to (c) TechnologySamples/Subscription, and the (4) Movie Name, (5) Movie Reviewer, and (6) Movie Review fields to (d) TechnologySamples/MovieReview2_1.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: websphere_application_server
References: http://securitytracker.com/id?1015360, http://www.ipomonis.com/advisories/ibm_css.txt, http://www.securityfocus.com/bid/15929
CVE-2005-2631
Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: network_admission_control_manager_and_server_system_software
References: http://secunia.com/advisories/16472/, http://www.cisco.com/warp/public/707/cisco-sa-20050817-cca.shtml, http://www.securityfocus.com/bid/14585
CVE-2005-0536
Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or determine file existence via a parameter related to image deletion.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mediawiki
References: http://secunia.com/advisories/14360, http://securitytracker.com/id?1013260, http://sourceforge.net/project/shownotes.php?release_id=307067
CVE-2005-3437
Unspecified vulnerability in the PL/SQL component in Oracle Database Server 9i up to 10.1.0.4 has unknown impact and attack vectors, aka Oracle Vuln# DB01.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: database_server
References: http://secunia.com/advisories/17250, http://www.kb.cert.org/vuls/id/210524, http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE-2005-2994
Unspecified vulnerability in the web client for IBM Rational ClearQuest 2002.05.00 and 2002.05.20, and 2003.06.00 through 2003.06.15 before SR5, allows remote attackers to execute XML Style Sheets (XSS).
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: rational_clearquest
References: http://secunia.com/advisories/16717, http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg21216901&loc=en_US&cs=utf-8&cc=us&lang=all, http://secunia.com/advisories/16717
CVE-2005-3096
Avi Alkalay nslookup.cgi program, dated 16 June 2002, allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: nslookup.cgi
References: http://secunia.com/advisories/16880, http://www.alkalay.net/software, http://www.cirt.net/advisories/alkalay.shtml
CVE-2005-2963
The mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for all locations that use the require group directive, even when other authentication mechanisms are specified, which might allow remote authenticated users to bypass security restrictions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mod_auth_shadow
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=323789, http://frontal1.mandriva.com/security/advisories?name=MDKSA-2005:200, http://secunia.com/advisories/17060/
CVE-2005-0667
Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: enterprise_linux, sylpheed-claws, linux, alt_linux, sylpheed
References: http://secunia.com/advisories/14491, http://securitytracker.com/id?1013376, http://sylpheed.good-day.net/changelog-devel.html.en
CVE-2005-2944
The perform_file_save function in GNOME Workstation Command Center (gwcc) 0.9.6 and earlier allows local users to create and overwrite arbitrary files via a symlink attack on the gwcc_out.txt temporary file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gnome_workstation_command_center
References: http://bugs.gentoo.org/show_bug.cgi?id=104566, http://secunia.com/advisories/16833, http://www.zataz.net/adviso/gwcc-09052005.txt
CVE-2005-0695
The password recovery feature (forgotpassword.asp) in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: hosting_controller
References: http://isun.shabgard.org/hc2.txt, http://marc.info/?l=bugtraq&m=111026083314947&w=2, http://secunia.com/advisories/14522
CVE-2005-0077
The DBI library (libdbi-perl) for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: enterprise_linux, debian_linux, linux, enterprise_linux_desktop, ubuntu_linux
References: http://marc.info/?l=bugtraq&m=110667936707597&w=2, http://secunia.com/advisories/14015, http://secunia.com/advisories/14050
CVE-2005-1165
Yager 5.24 and earlier allows remote attackers to cause a denial of service (application crash) via certain malformed data.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: yager_game
References: http://aluigi.altervista.org/adv/yagerbof-adv.txt, http://marc.info/?l=bugtraq&m=111352154820865&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/20105
CVE-2005-0583
Directory traversal vulnerability in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to create arbitrary files via .. (dot dot) sequences in a PUTOLF request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: license_software
References: http://marc.info/?l=bugtraq&m=110979326828704&w=2, http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp, http://www.idefense.com/application/poi/display?id=212&type=vulnerabilities
CVE-2005-0277
Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via (1) a long username in the USER command or (2) an FTP command that contains a long argument, such as cd, send, or ls.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: 3cdaemon
References: http://marc.info/?l=bugtraq&m=110485674622696&w=2, http://marc.info/?l=bugtraq&m=110886719528518&w=2, http://www.securityfocus.com/bid/12155
CVE-2005-1907
The ISA Firewall service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (Wspsrv.exe crash) via a large amount of SecureNAT network traffic.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: isa_server
References: http://securitytracker.com/id?1014113, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B894864, http://www.networksecurity.fi/advisories/windows-isa-firewall.html
CVE-2005-1629
SQL injection vulnerability in member.php for Photopost PHP Pro allows remote attackers to execute arbitrary SQL commands via the verifykey parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: photopost_php_pro
References: http://seclists.org/lists/fulldisclosure/2005/May/0311.html, http://www.securityfocus.com/bid/13620, http://seclists.org/lists/fulldisclosure/2005/May/0311.html
CVE-2005-1769
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.4 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in (1) the URL or (2) an e-mail message.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: squirrelmail
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html, http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html, http://marc.info/?l=bugtraq&m=111893827711390&w=2
CVE-2005-1199
SQL injection vulnerability in printthread.php in UBB.Threads allows remote attackers to execute arbitrary SQL commands via the main parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ultimate_bulletin_board
References: http://marc.info/?l=bugtraq&m=111393619021575&w=2, http://secunia.com/advisories/15024, http://www.osvdb.org/15698
CVE-2005-1884
Directory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to create or delete arbitrary directories via a .. (dot dot) in the dir parameter.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: yapig
References: http://secunia.com/advisories/15600/, http://securitytracker.com/id?1014103, http://secwatch.org/advisories/secwatch/20050530_yapig.txt
CVE-2005-0289
Apple AirPort Express prior to 6.1.1 and Extreme prior to 5.5.1, configured as a Wireless Data Service (WDS), allows remote attackers to cause a denial of service (device freeze) by connecting to UDP port 161 and before link-state change occurs.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: airport_extreme, airport_express
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030832.html, http://marc.info/?l=bugtraq&m=110582124528867&w=2, http://secunia.com/advisories/13753
CVE-2005-0963
An error in the Toshiba ACPI BIOS 1.6 causes the BIOS to only examine the first slot in the Master Boot Record (MBR) table for an active partition, which prevents the system from booting even though the MBR is not malformed.  NOTE: it has been debated as to whether or not this issue poses a security vulnerability, since administrative privileges would be required, and other DoS attacks are possible with such privileges.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: acpi_flash_bios
References: http://marc.info/?l=bugtraq&m=111214319914810&w=2, http://marc.info/?l=bugtraq&m=111229708208629&w=2, http://marc.info/?l=bugtraq&m=111229803502643&w=2
CVE-2005-1348
Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to execute arbitrary code via a long HTTP Authorization header.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailenable_enterprise, mailenable_professional
References: http://marc.info/?l=bugtraq&m=111445834220015&w=2, http://securitytracker.com/id?1013786, http://www.osvdb.org/15737
CVE-2005-4530
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Enterprise 3.0 (formerly DoPays) allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters in (1) profile.htm, (2) card.htm, (3) bank.htm, (4) subscriptions.htm, (5) send.htm, (6) request.htm, (7) forgot.htm, (8) escrow.htm, (9) donations.htm, and (10) products.htm.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: epay
References: http://pridels0.blogspot.com/2005/12/alstrasoft-epay-enterprise-v30-xss.html, http://secunia.com/advisories/18153, http://www.osvdb.org/21883
CVE-2005-0377
SQL injection vulnerability in imageview.php for SGallery 1.01 allows remote attackers to execute arbitrary SQL commands via the (1) idalbum or (2) idimage parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sgallery
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030844.html, http://marc.info/?l=bugtraq&m=110557050700947&w=2, http://secunia.com/advisories/13824
CVE-2005-3235
Multiple interpretation error in unspecified versions of Proland Protector Plus 2000 Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: protector_plus
References: http://marc.info/?l=bugtraq&m=112879611919750&w=2, http://shadock.net/secubox/AVCraftedArchive.html, http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE-2005-4264
Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields, and (3) id parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php_support_tickets
References: http://secunia.com/advisories/18067, http://securitytracker.com/id?1015352, http://www.nii.co.in/vuln/PHPSupportTickets.html
CVE-2005-3822
Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username in the login form or (2) record parameter, as demonstrated in the EditView action for the Contacts module.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vtiger_crm
References: http://marc.info/?l=full-disclosure&m=113290708121951&w=2, http://secunia.com/advisories/17693, http://securityreason.com/securityalert/203
CVE-2005-0400
The ext2_make_empty function call in the Linux kernel before 2.6.11.6 does not properly initialize memory when creating a block for a new directory entry, which allows local users to obtain potentially sensitive information by reading the block.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: linux_kernel
References: http://arkoon.net/advisories/ext2-make-empty-leak.txt, http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.6, http://marc.info/?l=bugtraq&m=111238764720696&w=2
CVE-2005-0679
PHP remote file inclusion vulnerability in tell_a_friend.inc.php for Tell A Friend Script 2.7 before 20050305 allows remote attackers to execute arbitrary PHP code by modifying the script_root parameter to reference a URL on a remote web server that contains the code.  NOTE: it was later reported that 2.4 is also affected.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tell_a_friend_script
Related CWEs: CWE-94
Related CAPECs: CAPEC-242, CAPEC-77, CAPEC-35
MITRE ATT&CK Techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK Tactics: T1564, T1027
References: http://arfis.wordpress.com/2007/09/13/rfi-02-openelibrary/, http://securitytracker.com/id?1013390, http://www.osvdb.org/14628
CWE: CWE-94
MITRE ATT&CK techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK tactics: T1564, T1027
CVE-2005-1833
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to calendar.php, (2) idsql parameter to online.php, (3) usersearch parameter to memberlist.php, (4) pid parameter to editpost.php, (5) fid parameter to forumdisplay.php, (6) tid parameter to newreply.php, (7) sid parameter to search.php, (8) tid or (9) pid parameter to showthread.php, (10) tid parameter to usercp2.php, (11) tid parameter to printthread.php, or (12) pid parameter to reputation.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mybulletinboard
References: http://marc.info/?l=bugtraq&m=111757191118050&w=2, http://secunia.com/advisories/15552, http://www.mybboard.com/community/showthread.php?tid=2559
CVE-2005-3177
CHKDSK in Microsoft Windows 2000 before Update Rollup 1 for SP4, Windows XP, and Windows Server 2003, when running in fix mode, does not properly handle security descriptors if the master file table contains a large number of files or if the descriptors do not satisfy certain NTFS conventions, which could cause ACLs for some files to be reverted to less secure defaults, or cause security descriptors to be removed.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_xp, windows_2003_server
References: http://support.microsoft.com/kb/831374, http://support.microsoft.com/kb/831375, http://support.microsoft.com/kb/900345
CVE-2005-0995
Multiple cross-site scripting (XSS) vulnerabilities in ProductCart 2.7 allow remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter to advSearch_h.asp, (2) the redirectUrl parameter to NewCust.asp, (3) the country parameter to storelocator_submit.asp, or (4) the error parameter to techErr.asp. NOTE: it has been reported that storelocator_submit.asp does not exist in ProductCart.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: productcart
References: http://digitalparadox.org/advisories/prodcart.txt, http://secunia.com/advisories/14833, http://www.osvdb.org/15264
CVE-2005-3192
Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xpdf
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.01pl1.patch, ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt, ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.20/SCOSA-2006.20.txt
CWE: CWE-119
CVE-2005-2215
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1.5beta3 allows remote attackers to inject arbitrary web script or HTML via a parameter in the page move template, a different vulnerability than CVE-2005-1888.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: mediawiki
References: http://secunia.com/advisories/15950, http://sourceforge.net/project/shownotes.php?release_id=340290, http://www.novell.com/linux/security/advisories/2005_19_sr.html
CVE-2005-1799
Cross-site scripting (XSS) vulnerability in FreeStyle Wiki 3.5.7 and WikiLite (FSWikiLite) .10 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: wiki, wikilite
References: http://secunia.com/advisories/15538, http://www.securityfocus.com/bid/13824, http://secunia.com/advisories/15538
CVE-2005-0339
Buffer overflow in Foxmail 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long MAIL FROM command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: foxmail_email_server
References: http://marc.info/?l=bugtraq&m=110763204301080&w=2, http://www.securityfocus.com/bid/12454, https://exchange.xforce.ibmcloud.com/vulnerabilities/19229
CVE-2005-1362
Multiple SQL injection vulnerabilities in MetaCart 2.0 for Paypal allow remote attackers to execute arbitrary SQL commands via the (1) intProdID parameter to product.asp, (2) intCatalogID or (3) strSubCatalogID parameters to productsByCategory.asp, (4) chkText, (5) strText, (6) chkPrice, (7) intPrice, (8) chkCat, or (9) strCat parameters to searchAction.asp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: metacart2
References: http://marc.info/?l=bugtraq&m=111454090503662&w=2, http://marc.info/?l=bugtraq&m=111454090503662&w=2
CVE-2005-2158
A regression error in the embedded HSQLDB in JBoss jBPM 2.0 allows remote attackers to execute arbitrary comands, a re-introduction of a vulnerability that was originally identified by CVE-2003-0845.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jbpm
References: http://marc.info/?l=bugtraq&m=112051548512338&w=2, http://www.illegalaccess.org/java/jboss.php, http://marc.info/?l=bugtraq&m=112051548512338&w=2
CVE-2005-3949
Multiple SQL injection vulnerabilities in WebCalendar 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) startid parameter to activity_log.php, (2) startid parameter to admin_handler.php, (3) template parameter to edit_template.php, and (4) multiple parameters to export_handler.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webcalendar
References: http://secunia.com/advisories/17784, http://secunia.com/advisories/19240, http://securityreason.com/securityalert/215
CVE-2005-2351
Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files.
CVSS v3.1 Score: 5.5 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: debian_linux, mutt
Related CWEs: CWE-668
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=311296, https://security-tracker.debian.org/tracker/CVE-2005-2351, https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=311296
CWE: CWE-668
CVE-2005-1683
Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted mcw file.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: word
References: http://marc.info/?l=bugtraq&m=111653088303057&w=2, http://www.securityfocus.com/archive/1/398649, http://www.securityfocus.com/bid/13687
CVE-2005-0223
The Software Development Kit (SDK) and Run Time Environment (RTE) 1.4.1 and 1.4.2 for Tru64 UNIX allows remote attackers to cause a denial of service (Java Virtual Machine hang) via object deserialization.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: rte, sdk, tru64
References: http://marc.info/?l=bugtraq&m=110719624029320&w=2, http://marc.info/?l=bugtraq&m=110719624029320&w=2
CVE-2005-1915
The log4sh_readProperties function in log4sh 1.2.5 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable log4sh.$$ filenames.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: log4sh
References: http://archives.neohapsis.com/archives/vulnwatch/2005-q3/0001.html, http://bugs.gentoo.org/show_bug.cgi?id=94069, http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/034873.html
CVE-2005-0519
ArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a ZIP file containing a shortcut (.LNK) file, using SITE UNZIP to extract the .LNK file onto the server, then accessing the file, a different vulnerability than CVE-2005-0520.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ftp_server
References: http://secunia.com/advisories/14172, http://www.argosoft.com/ftpserver/changelist.aspx, http://www.osvdb.org/13614
CVE-2005-1198
Directory traversal vulnerability in apexec.pl for Anaconda Foundation Directory allows remote attackers to read arbitrary files via hex-encoded null characters (%00) in the middle of ".." sequences in the template parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: foundation_directory
References: http://marc.info/?l=bugtraq&m=111393495916656&w=2, http://marc.info/?l=bugtraq&m=111393495916656&w=2
CVE-2005-2585
Mentor ADSL-FR4II router running firmware 2.00.0111 allows remote attackers to cause a denial of service (active TCP connections state table consumption) via a large number of connections, such as a port scan.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: adslfr4ii
References: http://marc.info/?l=bugtraq&m=112394620905095&w=2, http://www.securityfocus.com/bid/14557, http://marc.info/?l=bugtraq&m=112394620905095&w=2
CVE-2005-1387
Cocktail 3.5.4 and possibly earlier in Mac OS X passes the administrative password on the command line to sudo in cleartext, which allows local users to gain sensitive information by running listing processes.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cocktail
References: http://marc.info/?l=bugtraq&m=111480898530362&w=2, http://secunia.com/advisories/15201, http://www.osvdb.org/16046
CVE-2005-0211
Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: squid, debian_linux
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://fedoranews.org/updates/FEDORA--.shtml, http://marc.info/?l=bugtraq&m=110780531820947&w=2, http://secunia.com/advisories/14076
CWE: CWE-119
CVE-2005-1578
EnCase Forensic Edition 4.18a does not support Device Configuration Overlays (DCO), which allows attackers to hide information without detection.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: encase
References: http://secunia.com/advisories/15340, http://www.securityfocus.com/archive/104/398021, http://secunia.com/advisories/15340
CVE-2005-0611
Heap-based buffer overflow in RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: realplayer, realone_player, helix_player
References: http://marc.info/?l=bugtraq&m=110979465912834&w=2, http://marc.info/?l=vulnwatch&m=110977858619314&w=2, http://service.real.com/help/faq/security/050224_player/EN/
CVE-2005-4347
The Linux 2.4 kernel patch in kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux does not correctly set the "chroot barrier" with util-vserver, which allows attackers to access files on the host system that are outside of the vserver.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: kernel-patch-vserver, debian_linux
References: http://secunia.com/advisories/19339, http://www.debian.org/security/2006/dsa-1011, https://exchange.xforce.ibmcloud.com/vulnerabilities/25406
CVE-2005-4384
CitySoft Community Enterprise 4.x allows remote attackers to obtain the full path of the server via an invalid (1) fuseaction parameter to index.cfm and (2) documentid parameter to document/docWindow.cfm.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: community_enterprise
References: http://pridels0.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html, http://secunia.com/advisories/18145, http://www.osvdb.org/21857
CVE-2005-4824
PHP remote file inclusion vulnerability in web/classes.php in Siteframe before 3.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the LOCAL_PATH parameter, a different vulnerability than CVE-2005-1965.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: siteframe
References: http://list.broadpool.com/pipermail/siteframe/2005-October/001416.html, http://list.broadpool.com/pipermail/siteframe/2005-October/001416.html
CVE-2005-3460
Unspecified vulnerability in Oracle Agent in Oracle Enterprise Manager 9.0.4.1 up to 10.1.0.4 has unknown impact and attack vectors, as identified by Oracle Vuln# EM01.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: enterprise_manager_application_server_control, 10g_enterprise_manager_database_control
References: http://secunia.com/advisories/17250, http://www.kb.cert.org/vuls/id/210524, http://www.kb.cert.org/vuls/id/865948
CVE-2005-1150
Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier, when running on Windows systems, allows attackers to cause a denial of service (hang).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: java_system_web_server
References: http://secunia.com/advisories/14961, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57760-1, http://www.osvdb.org/15504
CVE-2005-2572
MySQL, when running on Windows, allows remote authenticated users with insert privileges on the mysql.func table to cause a denial of service (server hang) and possibly execute arbitrary code via (1) a request for a non-library file, which causes the Windows LoadLibraryEx function to block, or (2) a request for a function in a library that has the XXX_deinit or XXX_init functions defined but is not tailored for mySQL, such as jpeg1x32.dll and jpeg2x32.dll.
CVSS v2.0 Score: 8.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C
Affected Products: mysql
References: http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03897409, http://marc.info/?l=bugtraq&m=112360818900941&w=2, http://secunia.com/advisories/54788
CVE-2005-2283
WebEOC before 6.0.2 does not properly restrict the size of an uploaded file, which allows remote authenticated users to cause a denial of service (system and database resource consumption) via a large file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: webeoc
References: http://www.kb.cert.org/vuls/id/956762, http://www.kb.cert.org/vuls/id/JGEI-6BWLER, http://www.kb.cert.org/vuls/id/956762
CVE-2005-3991
Multiple cross-site scripting (XSS) vulnerabilities in phpMyChat 0.14.6 allow remote attackers to inject arbitrary web script or HTML via the medium parameter to (1) start_page.css.php and (2) style.css.php; or the From parameter to users_popupL.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpmychat
References: http://securityreason.com/securityalert/221, http://www.securityfocus.com/archive/1/418397/100/0/threaded, http://www.securityfocus.com/archive/1/484575/100/0/threaded
CVE-2005-3304
Multiple SQL injection vulnerabilities in PHP-Nuke 7.8 allow remote attackers to modify SQL queries and execute arbitrary PHP code via (1) the username parameter in the Your Account page, (2) the url parameter in the Downloads module, and (3) the description parameter in the Web_Links module.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=113017049702436&w=2, http://rgod.altervista.org/phpnuke78sql.html, http://secunia.com/advisories/17315/
CVE-2005-2026
Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 has a hard-coded account and password for debugging, which allows remote attackers to gain privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vertical_horizon-2402s
References: http://secunia.com/advisories/15757, http://www.enterasys.com/support/relnotes/VH-4802-2050509-patch-rel.pdf, http://secunia.com/advisories/15757