DuyTa/cve-kgrag-db huggingface dataset:
CVE-2005-2989
Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) tid parameter to topic.php, the uid parameter to (2) misc.php or (3) pm.php, or the fid parameter to (3) forums.php or (4) newpost.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: deluxebb
References: http://secunia.com/advisories/16819, http://www.securityfocus.com/bid/14851, http://www.vupen.com/english/advisories/2005/1752
CVE-2005-1583
1Two News 1.0 allows remote attackers to (1) delete images for new stories via a direct request to admin/delete.php or (2) upload arbitrary images via a direct request to admin/upload.php.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: 1two_news
References: http://securitytracker.com/id?1013960, http://securitytracker.com/id?1013960
CVE-2005-3428
Cross-site scripting (XSS) vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to inject arbitrary web script or HTML via a message body.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: mailsite_express
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.html, http://marc.info/?l=bugtraq&m=113053680631151&w=2, http://secunia.com/advisories/17240/
CVE-2005-0654
gifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4 allows remote attackers or local users to cause a denial of service (application crash) via the image descriptor (1) height or (2) width fields set to zero.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: gimp
References: http://marc.info/?l=bugtraq&m=110995346018830&w=2, http://marc.info/?l=bugtraq&m=110995346018830&w=2
CVE-2005-1484
Directory traversal vulnerability in Golden FTP server pro 2.52 allows remote attackers to read arbitrary files via a "\.." (backward slash dot dot) with a leading '"' (double quote) in the GET command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: golden_ftp_server
References: http://marc.info/?l=bugtraq&m=111530871716145&w=2, http://secunia.com/advisories/15175, http://www.securityfocus.com/bid/13479
CVE-2005-0484
Format string vulnerability in gprostats for GProFTPD before 8.1.9 may allow remote attackers to execute arbitrary code via an FTP transfer with a crafted filename that causes format string specifiers to be inserted into the ProFTPD transfer log.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gproftpd
References: http://bugs.gentoo.org/show_bug.cgi?id=81894, http://security.gentoo.org/glsa/glsa-200502-26.xml, http://bugs.gentoo.org/show_bug.cgi?id=81894
CVE-2005-1372
nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netvault
References: http://marc.info/?l=bugtraq&m=111464410324243&w=2, http://secunia.com/advisories/15158/, http://www.osvdb.org/15900
CVE-2005-2876
umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r (remount) option, which causes the file system to be remounted with just the read-only flag, which effectively clears the nosuid, nodev, and other flags.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: util-linux
References: http://marc.info/?l=bugtraq&m=112656096125857&w=2, http://marc.info/?l=bugtraq&m=112690609622266&w=2, http://secunia.com/advisories/16785
CVE-2005-2055
RealPlayer 8, 10, 10.5 (6.0.12.1040-1069), and Enterprise and RealOne Player v1 and v2 allows remote malicious web server to create an arbitrary HTML file that executes an RM file via "default settings of earlier Internet Explorer browsers".
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: realplayer, realone_player
References: http://service.real.com/help/faq/security/050623_player/EN/, http://service.real.com/help/faq/security/050623_player/EN/
CVE-2005-0379
Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the _zb_path parameter to (1) _head.php or (2) outlogin.php, or the dir parameter to (3) write.php.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: zeroboard
References: http://marc.info/?l=bugtraq&m=110565373407474&w=2, http://securitytracker.com/id?1012884, http://www.securityfocus.com/bid/12257
CVE-2005-1736
PROMS 0.11 does not properly handle "certain combinations of rights," which gives more rights to users than intended.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: proms
References: http://projects.electricmonk.nl//files/PROMS/proms-0.11.tar.gz, http://projects.electricmonk.nl/proms.php?action=ReleaseOverview&project_id=2&release_id=91, http://projects.electricmonk.nl//files/PROMS/proms-0.11.tar.gz
CVE-2005-0798
Novell iChain Mini FTP Server 2.3, and possibly earlier versions, does not limit the number of incorrect logins, which makes it easier for remote attackers to conduct brute force login attacks.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ichain
References: http://marc.info/?l=bugtraq&m=111091517007681&w=2, http://secunia.com/advisories/14607, http://securitytracker.com/id?1013408
CVE-2005-2567
PHP remote file inclusion vulnerability in SysCP 1.2.10 and earlier allows remote attackers to execute arbitrary PHP code via the language parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: syscp
References: http://marc.info/?l=bugtraq&m=112352095923614&w=2, http://www.hardened-php.net/advisory_132005.64.html, http://www.syscp.de/forum/viewtopic.php?t=1772
CVE-2005-1237
SQL injection vulnerability in news.php in FlexPHPNews 0.0.3 allows remote attackers to execute arbitrary SQL commands via the newsid parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: flexphpnews
References: http://secunia.com/advisories/14905, http://www.attrition.org/pipermail/vim/2007-April/001506.html, http://www.osvdb.org/15715
CVE-2005-2657
Unknown vulnerability in common-lisp-controller 4.18 and earlier allows local users to gain privileges by compiling arbitrary code in the cache directory, which is executed by another user if the user has not run Common Lisp before.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: common-lisp-controller
References: http://secunia.com/advisories/16822/, http://www.debian.org/security/2005/dsa-811, http://www.securityfocus.com/bid/14829
CVE-2005-1122
Format string vulnerability in cgi.c for Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP GET request containing double-encoded format string specifiers (aka "double expansion error").
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: monkey
Related CWEs: CWE-134
Related CAPECs: CAPEC-135, CAPEC-67
References: http://bugs.gentoo.org/show_bug.cgi?id=87916, http://secunia.com/advisories/14953, http://security.gentoo.org/glsa/glsa-200504-14.xml
CWE: CWE-134
CVE-2005-0051
The Server service (srvsvc.dll) in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information (users who are accessing resources) via an anonymous logon using a named pipe, which is not properly authenticated, aka the "Named Pipe Vulnerability."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_xp
References: http://secunia.com/advisories/14189, http://securitytracker.com/id?1013112, http://www.kb.cert.org/vuls/id/939074
CVE-2005-2580
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 with Security Patch allow remote attackers to execute arbitrary SQL commands via the Username field in (1) index.php or (2) member.php, action parameter to (3) search.php or (4) member.php, or (5) polloptions parameter to polls.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mybulletinboard
References: http://marc.info/?l=bugtraq&m=112387501519835&w=2, http://www.securityfocus.com/bid/14553, http://marc.info/?l=bugtraq&m=112387501519835&w=2
CVE-2005-3512
Cross-site scripting (XSS) vulnerability in index.php in VUBB alpha rc1 allows remote attackers to inject arbitrary web script or HTML via the t parameter in a newreply action.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: vubb
References: http://irannetjob.com/content/view/152/28/, http://marc.info/?l=bugtraq&m=113087965608496&w=2, http://www.securityfocus.com/bid/15260/
CVE-2005-3858
Memory leak in the ip6_input_finish function in ip6_input.c in Linux kernel 2.6.12 and earlier might allow attackers to cause a denial of service via malformed IPv6 packets with unspecified parameter problems, which prevents the SKB from being freed.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: linux_kernel
References: http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html, http://marc.info/?l=linux-kernel&m=112508479120081&w=2, http://marc.info/?l=linux-kernel&m=112533899509033&w=2
CVE-2005-2322
Cross-site scripting (XSS) vulnerability in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allows remote attackers to inject arbitrary web script or HTML via the (1) viewuser_id or (2) group parameter to users.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: clever_copy, class-1_forum
References: http://lostmon.blogspot.com/2005/07/class-1-forum-software-cross-site.html, http://secunia.com/advisories/16078, http://securitytracker.com/id?1014485
CVE-2005-4011
SQL injection vulnerability in calendar.php in Codewalkers ltwCalendar (aka PHP Event Calendar) 4.2, 4.1.3, and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ltwcalendar
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://ltwcalendar.sourceforge.net/changelog.php, http://pridels0.blogspot.com/2005/11/codewalkers-ltwcalendar-4x-sql-inj.html, http://secunia.com/advisories/17799
CWE: CWE-89
CVE-2005-2874
The is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service (CPU consumption by tight loop) via a "..\.." URL in an HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cups
References: http://lwn.net/Alerts/152835/, http://securitytracker.com/id?1012811, http://www.cups.org/relnotes.php#010123
CVE-2005-0553
Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail, aka "DHTML Object Memory Corruption Vulnerability".
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: ie, internet_explorer
References: http://secunia.com/advisories/14922/, http://www.idefense.com/application/poi/display?id=228&type=vulnerabilities, http://www.kb.cert.org/vuls/id/774338
CVE-2005-4342
ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 does not throw an exception if the SecurityManager is disabled, which might allow remote attackers to "bypass security controls," aka "JRun Clustered Sandbox Security Vulnerability."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: coldfusion
References: http://secunia.com/advisories/18078, http://securitytracker.com/id?1015369, http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html
CVE-2005-0723
Cross-site scripting (XSS) vulnerability in the jumpmenu function in functions.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL parameters, which is not properly cleansed in the $pageurl variable, as demonstrated using pafiledb.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: pafiledb
References: http://marc.info/?l=bugtraq&m=111031801802851&w=2, http://marc.info/?l=bugtraq&m=111031801802851&w=2
CVE-2005-3643
IBM DB2 Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account without supplying a password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: db2_universal_database
References: http://www.ngssoftware.com/papers/database-on-xp.pdf, http://www.securityfocus.com/bid/15452, http://www.ngssoftware.com/papers/database-on-xp.pdf
CVE-2005-0383
Trend Micro Control Manager 3.0 Enterprise Edition allows remote attackers to gain privileges via a replay attack of the encrypted username and password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: control_manager
References: http://marc.info/?l=bugtraq&m=110564369316593&w=2, http://marc.info/?l=bugtraq&m=110565281205427&w=2, http://www.cirt.dk/advisories/cirt-28-advisory.pdf
CVE-2005-4688
PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's profile, which might allow an attacker to make an address change via a hijacked login session.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: punbb
References: http://www.punbb.org/changelogs/1.2.9_to_1.2.10.txt, http://www.punbb.org/changelogs/1.2.9_to_1.2.10.txt
CVE-2005-2889
Check Point NGX R60 does not properly verify packets against the predefined service group "CIFS" rule, which allows remote attackers to bypass intended restrictions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: connectra_ngx
References: http://marc.info/?l=bugtraq&m=112611529724821&w=2, http://www.kb.cert.org/vuls/id/508209, http://marc.info/?l=bugtraq&m=112611529724821&w=2
CVE-2005-1382
The webcacheadmin module in Oracle Webcache 9i allows remote attackers to corrupt arbitrary files via a full pathname in the cache_dump_file parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: application_server_web_cache
References: http://marc.info/?l=bugtraq&m=111472615519295&w=2, http://secunia.com/advisories/15143, http://www.osvdb.org/15909
CVE-2005-2859
Savant Web Server stores user credentials in plaintext in the Savant\Users registry key, which allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: savant_webserver
References: http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=84, http://secunia.com/advisories/16666, http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=84
CVE-2005-3882
SQL injection vulnerability in answer.php in FAQSystems FAQRing Knowledge Base Software 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: faqring_knowledge_base_software
References: http://pridels0.blogspot.com/2005/11/faqring-30-sql-inj-vuln.html, http://secunia.com/advisories/17811, http://www.osvdb.org/21265
CVE-2005-3138
Bugzilla 2.18rc1 through 2.18.3, 2.19 through 2.20rc2, and 2.21 allows remote attackers to obtain sensitive information such as the list of installed products via the config.cgi file, which is accessible even when the requirelogin parameter is set.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: bugzilla
References: http://marc.info/?l=bugtraq&m=112818466125484&w=2, http://secunia.com/advisories/17030/, http://www.bugzilla.org/security/2.18.4/
CVE-2005-3487
Multiple buffer overflows in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute arbitrary code via various (1) GLConsole::addLine, (2) ServerCommon::sendString, (3) ServerCommon::serverLog functions, (4) a long command that is not properly handled in ComsMessageHandler.cpp when generating an error message, (5) a long UniqueID value in Logger.cpp, and possibly other unspecified vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: scorched_3d
References: http://aluigi.altervista.org/adv/scorchbugs-adv.txt, http://marc.info/?l=full-disclosure&m=113095941031946&w=2, http://secunia.com/advisories/17423
CVE-2005-3384
SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: techno_dreams_guest_book
References: http://marc.info/?l=bugtraq&m=113035773010381&w=2, http://secunia.com/advisories/17354/, http://www.kapda.ir/advisory-103.html
CVE-2005-2977
The SELinux version of PAM before 0.78 r3 allows local users to perform brute force password guessing attacks via unix_chkpwd, which does not log failed guesses or delay its responses.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: pam
References: http://cvs.sourceforge.net/viewcvs.py/pam/Linux-PAM/NEWS?rev=1.6&view=markup, http://secunia.com/advisories/17346, http://secunia.com/advisories/17350
CVE-2005-3688
Cross-site scripting (XSS) vulnerability in members.php in XMB 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the "Your Current Mood" field in the registration page.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: xmb
References: http://irannetjob.com/content/view/163/28/, http://secunia.com/advisories/17642, http://securitytracker.com/id?1015237
CVE-2005-2099
The Linux kernel before 2.6.12.5 does not properly destroy a keyring that is not instantiated properly, which allows local users or remote attackers to cause a denial of service (kernel oops) via a keyring with a payload that is not empty, which causes the creation to fail, leading to a null dereference in the keyring destructor.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
Related CWEs: CWE-399
References: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5, http://secunia.com/advisories/16355/, http://secunia.com/advisories/17073
CWE: CWE-399
CVE-2005-0243
Yahoo! Messenger 6.0.0.1750, and possibly other versions before 6.0.0.1921, does not properly display long filenames in file dialog boxes, which could allow remote attackers to trick users into downloading and executing programs via file names containing a large number of spaces and multiple file extensions.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: messenger
References: http://secunia.com/advisories/13712, http://secunia.com/secunia_research/2005-2/advisory/, http://secunia.com/advisories/13712
CVE-2005-0893
modes.c in smail 3.2.0.120 implements signal handlers with certain unsafe library calls, which may allow attackers to execute arbitrary code via signal handler race conditions, possibly using xmalloc.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: smail
References: http://marc.info/?l=bugtraq&m=111177045217717&w=2, http://marc.info/?l=bugtraq&m=111177045217717&w=2
CVE-2005-2080
Unknown vulnerability in Remote Agent for Windows Servers (RAWS) in VERITAS Backup Exec 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for NetWare, allows remote attackers to gain privileges by copying the handle for the server.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: backup_exec
References: http://secunia.com/advisories/15789, http://seer.support.veritas.com/docs/276608.htm, http://seer.support.veritas.com/docs/277429.htm
CVE-2005-2388
Buffer overflow in a certain USB driver, as used on Microsoft Windows, allows attackers to execute arbitrary code.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_98se, windows_98, windows_2003_server, windows_me
References: http://secunia.com/advisories/16210, http://securitytracker.com/id?1014566, http://www.eweek.com/article2/0%2C1759%2C1840131%2C00.asp
CVE-2005-3108
mm/ioremap.c in Linux 2.6 on 64-bit x86 systems allows local users to cause a denial of service or an information leak via an ioremap on a certain memory map that causes the iounmap to perform a lookup of a page that does not exist.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: http://secunia.com/advisories/17141, http://secunia.com/advisories/17364, http://secunia.com/advisories/18056
CVE-2005-4858
Multiple cross-site scripting (XSS) vulnerabilities in mimic2.cgi in mimicboard2 (Mimic2) 086 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters associated with the (1) name, (2) title, and (3) comment sections, as demonstrated by referencing a remote document through the SRC attribute of an IFRAME element.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Affected Products: mimicboard_2
References: http://exploitlabs.com/files/advisories/EXPL-A-2005-013-mimic2.txt, http://www.securityfocus.com/bid/14778, http://exploitlabs.com/files/advisories/EXPL-A-2005-013-mimic2.txt
CVE-2005-4512
Cross-site scripting (XSS) vulnerability in WAXTRAPP 3.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: waxtrapp
References: http://pridels0.blogspot.com/2005/12/waxtrapp-xss-vuln.html, http://www.osvdb.org/22046, http://www.securityfocus.com/bid/16037
CVE-2005-3861
PHP remote file inclusion vulnerability in content.php in phpGreetz 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the content parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpgreetz
Related CWEs: CWE-94
Related CAPECs: CAPEC-242, CAPEC-77, CAPEC-35
MITRE ATT&CK Techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK Tactics: T1564, T1027
References: http://securityreason.com/securityalert/210, http://securitytracker.com/id?1015276, http://www.securityfocus.com/archive/1/417798/100/0/threaded
CWE: CWE-94
MITRE ATT&CK techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK tactics: T1564, T1027
CVE-2005-3537
A "missing request validation" error in phpBB 2 before 2.0.18 allows remote attackers to edit private messages of other users, probably by modifying certain parameters or other inputs.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: phpbb
References: http://secunia.com/advisories/18098, http://www.debian.org/security/2005/dsa-925, http://www.securityfocus.com/bid/15246
CVE-2005-4635
The nl_fib_input function in fib_frontend.c in the Linux kernel before 2.6.15 does not check for valid lengths of the header and payload, which allows remote attackers to cause a denial of service (invalid memory reference) via malformed fib_lookup netlink messages.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: http://secunia.com/advisories/18216, http://secunia.com/advisories/18788, http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ea86575eaf99a9262a969309d934318028dbfacb
CVE-2005-4620
Buffer overflow in WinRAR 3.50 and earlier allows local users to execute arbitrary code via a long command-line argument.  NOTE: because this program executes with the privileges of the invoking user, and because remote programs do not normally have the ability to specify a command-line argument for this program, there may not be a typical attack vector for the issue that crosses privilege boundaries. Therefore this may not be a vulnerability.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: winrar
References: http://www.rarlab.com/rarnew.htm, http://www.securityfocus.com/archive/1/420679/100/0/threaded, http://www.securityfocus.com/bid/15123
CVE-2005-0182
The mod_dosevasive module 1.9 and earlier for Apache creates temporary files with predictable filenames, which could allow remote attackers to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: mod_dosevasive
References: http://marc.info/?l=bugtraq&m=110547469530582&w=2, http://secunia.com/advisories/13725, http://security.lss.hr/index.php?page=details&ID=LSS-2005-01-01
CVE-2005-1780
SQL injection vulnerability in admin/login.asp in Active News Manager allows remote attackers to execute arbitrary SQL commands via the password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: active_news_manager
References: http://secunia.com/advisories/15493, http://securitytracker.com/id?1014057, http://www.under9round.com/anm.txt
CVE-2005-1026
Multiple SQL injection vulnerabilities in SnailSource phpBB 2.0.x mods allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to dlman.php in DLMan Pro or (2) id parameter to links.php in Linkz Pro (aka LinksLinks Pro).
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linkz_pro, dlman_pro
References: http://marc.info/?l=bugtraq&m=111271895819594&w=2, http://marc.info/?l=bugtraq&m=111272430128195&w=2, http://www.securityfocus.com/bid/13028
CVE-2005-2315
Buffer overflow in Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to execute arbitrary code via a large number of large DNS packets with the Z and QR flags cleared.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: dnrd
References: http://secunia.com/advisories/16142, http://securitytracker.com/id?1014557, http://sourceforge.net/forum/forum.php?forum_id=482568
CVE-2005-1480
Directory traversal vulnerability in RaidenFTPD before 2.4.2241 allows remote attackers to read arbitrary files via a "..\\" (dot dot backslash) in the urlget site command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: raidenftpd
References: http://forum.raidenftpd.com/showflat.php?Board=UBB13&Number=45685, http://marc.info/?l=bugtraq&m=111507556127582&w=2, http://secunia.com/advisories/15037
CVE-2005-4482
Cross-site scripting (XSS) vulnerability in login.asp in PortalApp 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the ret_page parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: portalapp
References: http://pridels0.blogspot.com/2005/12/portalapp-xss-vuln.html, http://secunia.com/advisories/18201, http://www.osvdb.org/21880
CVE-2005-2579
Nortel Contivity VPN Client V05_01.030, when configuring a certificate to be used as authentication, does not properly drop system privileges, which allows local users to gain privileges by opening a program with the File Open dialog box.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: contivity
References: http://marc.info/?l=bugtraq&m=112370730131219&w=2, http://marc.info/?l=bugtraq&m=112370730131219&w=2
CVE-2005-4762
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier sometimes stores the boot password in the registry in cleartext, which might allow local users to gain administrative privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: weblogic_server
References: http://dev2dev.bea.com/pub/advisory/153, http://secunia.com/advisories/17138, http://www.securityfocus.com/bid/15052
CVE-2005-3237
Cross-site scripting (XSS) vulnerability in Cyphor 0.19 allows remote attackers to inject arbitrary web script or HTML via the t_login parameter of footer.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: cyphor
References: http://marc.info/?l=bugtraq&m=112879353805769&w=2, http://secunia.com/advisories/17104/, http://securityreason.com/securityalert/70
CVE-2005-2066
SQL injection vulnerability in comment_post.asp in ASP Nuke 0.80 allows remote attackers to execute arbitrary SQL statements via the TaskID parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: asp-nuke
References: http://marc.info/?l=bugtraq&m=111989223906484&w=2, http://marc.info/?l=bugtraq&m=111999188612055&w=2, http://www.securityfocus.com/bid/14064
CVE-2005-3152
Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the redir parameter to (1) cart.php or (2) index.php, or (3) the searchStr parameter in a viewCat action to index.php.  Note: vectors (1) and (2) were later reported to affect 3.0.7-pl1.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: cubecart
References: http://bugs.cubecart.com/?do=details&id=363, http://bugs.cubecart.com/?do=details&id=459, http://lostmon.blogspot.com/2005/09/cubecart-303-multiple-variable-cross.html
CVE-2005-2494
kcheckpass in KDE 3.2.0 up to 3.4.2 allows local users to gain root access via a symlink attack on lock files.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kde
References: ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.2-kdebase-kcheckpass.diff, http://marc.info/?l=bugtraq&m=112603999215453&w=2, http://marc.info/?l=bugtraq&m=112611555928169&w=2
CVE-2005-4440
The 802.1q VLAN protocol allows remote attackers to bypass network segmentation and spoof VLAN traffic via a message with two 802.1q tags, which causes the second tag to be redirected from a downstream switch after the first tag has been stripped, as demonstrated by Yersinia, aka "double-tagging VLAN jumping attack."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: vlan_protocol
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040333.html, http://www.securityfocus.com/archive/1/419831/100/0/threaded, http://www.securityfocus.com/archive/1/419834/100/0/threaded
CVE-2005-1220
Shoutbox SCRIPT 3.0.2 and earlier allows remote attackers to obtain sensitive information via a direct request to db/settings.dat, which displays usernames and password hashes.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: shoutbox_script
References: http://marc.info/?l=bugtraq&m=111402253108991&w=2, http://secunia.com/advisories/15015, http://www.osvdb.org/15695
CVE-2005-0661
SQL injection vulnerability in the getwbbuserdata function in session.php for Woltlab Burning Board 2.0.3 through 2.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) lastvisit cookie.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: burning_board
References: http://secunia.com/advisories/14450, http://securitytracker.com/id?1013351, http://secunia.com/advisories/14450
CVE-2005-3344
The default installation of Horde 3.0.4 contains an administrative account with a blank password, which allows remote attackers to gain access.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: horde
References: http://www.debian.org/security/2005/dsa-884, http://www.networkscanning.com/Horde-Default-Admin-Password-Vulnerability-VSS_20171.html, http://www.osvdb.org/24117
CVE-2005-3986
Multiple SQL injection vulnerabilities in Instant Photo Gallery 1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter in portfolio.php and (2) cid parameter in content.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: instant_photo_gallery
References: http://pridels0.blogspot.com/2005/11/instant-photo-gallery-sql-inj-vuln.html, http://secunia.com/advisories/17841, http://www.osvdb.org/21334
CVE-2005-2727
Home Ftp Server 1.0.7 stores sensitive user information and server information in the same directory as the user's home directory, which allows remote authenticated users to obtain sensitive information by obtaining ftpmembers.lst and ftpsettings.lst.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: home_ftp_server
References: http://marc.info/?l=bugtraq&m=112490496918102&w=2, http://www.autistici.org/fdonato/advisory/HomeFtpServer1.0.7-adv.txt, http://www.securityfocus.com/bid/14653
CVE-2005-4511
Format string vulnerability in TN3270 Resource Gateway 1.1.0 allows local users to cause a denial of service and possibly execute arbitrary code via format string specifiers in syslog function calls.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tn3270_resource_gateway
References: http://secunia.com/advisories/18185, http://sourceforge.net/project/shownotes.php?release_id=379592, http://www.vupen.com/english/advisories/2005/3057
CVE-2005-4468
PHP remote file include vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to execute arbitrary code via a URL in the PGV_BASE_DIRECTORY parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpgedview
References: http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/help_text_vars.php?r1=1.63&r2=1.64, http://rgod.altervista.org/phpgedview_337_xpl.html, http://secunia.com/advisories/18177
CVE-2005-2321
PHP remote file inclusion vulnerability in CaLogic 1.2.2 allows remote attackers to execute arbitrary code via the CLPATH parameter to (1) cl_minical.php, (2) clmcpreload.php, (3) mcconfig.php, or (4) mcpi-demo.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: calogic
References: http://secunia.com/advisories/16090, http://www.albaniafuckgreece.org/adviso/calogic.txt, http://www.calogic.de/modules/newbb/viewtopic.php?topic_id=333&forum=7
CVE-2005-4296
AppServ Open Project 2.5.3 allows remote attackers to cause a denial of service via a large HTTP request.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: appserv
References: http://www.securityfocus.com/bid/15851, http://www.securityfocus.com/bid/15851
CVE-2005-0074
Buffer overflow in pcdsvgaview in xpcd 2.08 allows local users to execute arbitrary code.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: xpcd
References: http://secunia.com/advisories/14248, http://secunia.com/advisories/14250, http://securitytracker.com/id?1013162
CVE-2005-1889
Unknown vulnerability in Sun ONE Application Server 6.5 SP1 Maintenance Update 6 and earlier allows attackers to read files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: java_system_web_server
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-101690-1, http://www.vupen.com/english/advisories/2005/0695, http://sunsolve.sun.com/search/document.do?assetkey=1-26-101690-1
CVE-2005-1864
PHP remote file inclusion vulnerability in cal_admintop.php in Calendarix Advanced 1.5 allows remote attackers to execute arbitrary PHP code via the calpath parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: calendarix_advanced
References: http://archives.neohapsis.com/archives/bugtraq/2005-05/0356.html, http://securitytracker.com/alerts/2005/May/1014083.html, http://archives.neohapsis.com/archives/bugtraq/2005-05/0356.html
CVE-2005-4630
SQL injection vulnerability in index.php in ClientExec 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) billshowid, (2) billdetailid, (3) fuse, and (4) frmClientID parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: clientexec
References: http://pridels0.blogspot.com/2005/11/clientexec-2x-multiple-sql-inj.html, http://secunia.com/advisories/17756, http://www.ce-talk.com/showthread.php?t=653
CVE-2005-0353
Buffer overflow in the Sentinel LM (Lservnt) service in the Sentinel License Manager 7.2.0.2 allows remote attackers to execute arbitrary code by sending a large amount of data to UDP port 5093.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sentinel_license_manager
References: http://marc.info/?l=bugtraq&m=111022094326772&w=2, http://marc.info/?l=full-disclosure&m=111072872816405&w=2, http://secunia.com/advisories/14511
CVE-2005-1342
The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: terminal, mac_os_x
References: http://lists.apple.com/archives/security-announce/2005/May/msg00001.html, http://remahl.se/david/vuln/011/, http://secunia.com/advisories/15227
CVE-2005-2207
Cross-site scripting (XSS) vulnerability in store/login.asp in CartWIZ allows remote attackers to inject arbitrary web script or HTML via the message parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: cartwiz
References: http://digitalparadox.org/viewadvisories.ah?view=42, http://securitytracker.com/id?1014418, http://digitalparadox.org/viewadvisories.ah?view=42
CVE-2005-3792
Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows remote attackers to execute arbitrary SQL commands, as demonstrated via the query parameter in a stories type.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-nuke
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0454.html, http://marc.info/?l=bugtraq&m=113210758511323&w=2, http://secunia.com/advisories/17543/
CVE-2005-0906
Buffer overflow in a player logging function in the Tincat network library 2.x before 2.0.28, as used in games such as Sacred and The Settlers: Heritage of Kings, allows remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tincat, the_settlersheritage_of_kings, sacred
References: http://aluigi.altervista.org/adv/tincat2bof-adv.txt, http://secunia.com/advisories/14762, http://secunia.com/advisories/14767
CVE-2005-4178
Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression that does not enforce the proper order of operations.
CVSS v2.0 Score: 6.5 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Affected Products: dropbear_ssh, debian_linux
References: http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2005q4/000312.html, http://matt.ucc.asn.au/dropbear/dropbear.html, http://secunia.com/advisories/18108
CVE-2005-1104
Multiple cross-site scripting (XSS) vulnerabilities in Centra 7 allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) first name, or (3) last name fields.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: centra
References: http://marc.info/?l=bugtraq&m=111335198125566&w=2, http://secunia.com/advisories/14930, http://marc.info/?l=bugtraq&m=111335198125566&w=2
CVE-2005-1084
SQL injection vulnerability in sdating.php in aeDating 3.2 allows remote attackers to execute arbitrary SQL commands files via the event parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aedating
References: http://secunia.com/advisories/14913, http://secunia.com/advisories/14913
CVE-2005-4798
Buffer overflow in NFS readlink handling in the Linux Kernel 2.4 up to 2.4.31 allows remote NFS servers to cause a denial of service (crash) via a long symlink, which is not properly handled in (1) nfs2xdr.c or (2) nfs3xdr.c and causes a crash in the NFS client.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: http://secunia.com/advisories/20398, http://secunia.com/advisories/22082, http://secunia.com/advisories/22093
CVE-2005-0699
Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11.c) for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via RADIUS authentication packets with large length values.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_linux, ethereal, linux, alt_linux, linux_advanced_workstation
References: http://marc.info/?l=bugtraq&m=111038641832400&w=2, http://marc.info/?l=bugtraq&m=111083125521813&w=2, http://security.gentoo.org/glsa/glsa-200503-16.xml
CVE-2005-0823
ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.txt file, which allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ipool, isnooker
References: http://secunia.com/advisories/14629, http://securitytracker.com/id?1013458, http://securitytracker.com/id?1013459
CVE-2005-2401
PHP-Fusion allows remote attackers to inject arbitrary Cascading Style Sheets (CSS) via the BBCode color tag.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: php_fusion
References: http://secunia.com/advisories/16096, http://www.osvdb.org/18111, http://www.securityfocus.com/bid/14332
CVE-2005-1269
Gaim before 1.3.1 allows remote attackers to cause a denial of service (application crash) via a Yahoo! message with non-ASCII characters in a file name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: gaim
References: http://gaim.sourceforge.net/security/?id=18, http://security.gentoo.org/glsa/glsa-200506-11.xml, http://www.debian.org/security/2005/dsa-734
CVE-2005-2558
Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions to execute arbitrary code via a long function_name field.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mysql
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.18.1/SCOSA-2006.18.1.txt, http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/035845.html, http://marc.info/?l=bugtraq&m=112354450412427&w=2
CVE-2005-1659
Cross-site scripting (XSS) vulnerability in filemanager.cpp in MyServer 0.8 allows remote attackers to inject arbitrary Javascript via a URL with a "..."  (triple dot) followed by an onmouseover event.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: myserver
References: http://cvs.sourceforge.net/viewcvs.py/myserverweb/myserverweb/source/filemanager.cpp?rev=1.116&view=log, http://secunia.com/advisories/15274, http://cvs.sourceforge.net/viewcvs.py/myserverweb/myserverweb/source/filemanager.cpp?rev=1.116&view=log
CVE-2005-4348
fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service (application crash) by sending messages without headers from upstream mail servers.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: fetchmail
Related CWEs: CWE-399
References: ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc, http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=343836, http://fetchmail.berlios.de/fetchmail-SA-2005-03.txt
CWE: CWE-399
CVE-2005-0366
The integrity check feature in OpenPGP, when handling a message that was encrypted using cipher feedback (CFB) mode, allows remote attackers to recover part of the plaintext via a chosen-ciphertext attack when the first 2 bytes of a message block are known, and an oracle or other mechanism is available to determine whether an integrity check failed.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: gnupg
Related CWEs: CWE-326
Related CAPECs: CAPEC-112, CAPEC-192, CAPEC-20
MITRE ATT&CK Techniques: T1110
References: http://eprint.iacr.org/2005/033, http://eprint.iacr.org/2005/033.pdf, http://securitytracker.com/id?1013166
CWE: CWE-326
MITRE ATT&CK techniques: T1110
CVE-2005-0540
Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote attackers to obtain sensitive information via a direct request to the /about.html page.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: alterpath_manager
References: http://marc.info/?l=full-disclosure&m=110924450827137&w=2, http://secunia.com/advisories/14378, http://www.cirt.net/advisories/alterpath_disclosure.shtml
CVE-2005-4677
SQL injection vulnerability in additional_images.php (aka the Additional Images module) before 1.14 in osCommerce allows remote attackers to execute arbitrary SQL commands via the products_id parameter to product_info.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: oscommerce
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0124.html, http://secunia.com/advisories/17082, http://www.oscommerce.com/community/contributions%2C1032
CVE-2005-1163
Multiple buffer overflows in Yager 5.24 and earlier allow remote attackers to execute arbitrary code via (1) a crafted nickname or (2) a packet with a large amount of data.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: yager_game
References: http://aluigi.altervista.org/adv/yagerbof-adv.txt, http://marc.info/?l=bugtraq&m=111352154820865&w=2, http://secunia.com/advisories/14967
CVE-2005-3535
Buffer overflow in KETM 0.0.6 allows local users to execute arbitrary code via unknown vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ketm
References: http://secunia.com/advisories/18225, http://www.debian.org/security/2005/dsa-926, http://www.securityfocus.com/bid/16049/
CVE-2005-2058
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitrary SQL commands via the Number parameter to (1) download.php, (2) modifypost.php, (3) mailthread.php, or (4) notifymod.php, (5) month or (6) year parameter to calendar.php, (7) message parameter to viewmessage.php, (8) main parameter to addfav.php, or (9) posted parameter to grabnext.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ubb.threads
References: http://marc.info/?l=bugtraq&m=111963737202040&w=2, http://www.gulftech.org/?node=research&article_id=00084-06232005, http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351
CVE-2005-3159
SQL injection vulnerability in messages.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the msg_view parameter, a different vulnerability than CVE-2005-3157 and CVE-2005-3158.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php_fusion
References: http://marc.info/?l=bugtraq&m=112811077320676&w=2, http://www.osvdb.org/18708, http://www.s4a.cc/forum/archive/index.php/t-3585.html