DuyTa/cve-kgrag-db huggingface dataset:
CVE-2005-3905
Unspecified vulnerability in reflection APIs in Java SDK and JRE 1.3.1_15 and earlier, 1.4.2_08 and earlier, and JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors, a different vulnerability than CVE-2005-3906.  NOTE: this is associated with the "first issue" identified in SUNALERT:102003.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jre, jdk
References: http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html, http://secunia.com/advisories/17748, http://secunia.com/advisories/17847
CVE-2005-4488
Multiple cross-site scripting (XSS) vulnerabilities in index.tpl in Redakto WCMS 3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) iid, (2) iid2, (3) r, (4) cart, (5) str, (6) nf, and (7) a parameters.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: redakto_cms
References: http://pridels0.blogspot.com/2005/12/redakto-wcms-multiple-xss-vuln.html, http://secunia.com/advisories/18195, http://www.securityfocus.com/bid/16013
CVE-2005-3514
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Forum script allow remote attackers to inject arbitrary web script or HTML via the forumID parameter to (1) newtopic.php, (2) quote.php, (3) index.php, and (4) reply.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: chipmunk_forum
References: http://irannetjob.com/content/view/148/28/, http://marc.info/?l=bugtraq&m=112982490104274&w=2, http://secunia.com/advisories/17239/
CVE-2005-1261
Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message (IM) with a large URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gaim
References: http://gaim.sourceforge.net/security/index.php?id=16, http://www.redhat.com/support/errata/RHSA-2005-429.html, http://www.redhat.com/support/errata/RHSA-2005-432.html
CVE-2005-4783
kernfs_xread in kernfs_vnops.c in NetBSD before 20050831 does not check for a negative offset when reading the message buffer, which allows local users to read arbitrary kernel memory.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netbsd
References: http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/miscfs/kernfs/kernfs_vnops.c, http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/miscfs/kernfs/kernfs_vnops.c.diff?r1=1.110&r2=1.111&f=h, http://mail-index.netbsd.org/netbsd-announce/2005/10/31/0000.html
CVE-2005-1551
Sophos Anti-Virus 3.93 does not check downloaded files for viruses when they have only been written, which creates a race condition and may allow remote attackers to bypass virus protection if the file is executed before the antivirus starts on system reboot.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: sophos_anti-virus
References: http://marc.info/?l=bugtraq&m=111566827411376&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/20519, http://marc.info/?l=bugtraq&m=111566827411376&w=2
CVE-2005-3229
Multiple interpretation error in unspecified versions of ClamAV Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: clamav
References: http://marc.info/?l=bugtraq&m=112879611919750&w=2, http://shadock.net/secubox/AVCraftedArchive.html, http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE-2005-2084
Cross-site scripting (XSS) vulnerability in SearchResults.aspx in Community Forum allows remote attackers to inject arbitrary web script or HTML via the q parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: community_server_forums
References: http://marc.info/?l=bugtraq&m=111998009409469&w=2, http://marc.info/?l=bugtraq&m=111998009409469&w=2
CVE-2005-1911
The fetchnews NNTP client in leafnode 1.11.2 and earlier can hang while waiting for input that never arrives, which allows remote NNTP servers to cause a denial of service (news loss).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: leafnode
References: http://leafnode.sourceforge.net/leafnode-SA-2005-02.txt, http://leafnode.sourceforge.net/leafnode-SA-2005-02.txt
CVE-2005-1600
A "mathematical flaw" in the implementation of the El Gamal signature algorithm for LibTomCrypt 1.0 to 1.0.2 allows attackers to generate valid signatures without having the private key.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: libtomcrypt
References: http://secunia.com/advisories/15233, http://www.osvdb.org/16188, http://www.securiteam.com/unixfocus/5JP092AFPG.html
CVE-2005-4442
Untrusted search path vulnerability in OpenLDAP before 2.2.28-r3 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openldap
References: http://secunia.com/advisories/18040/, http://www.gentoo.org/security/en/glsa/glsa-200512-07.xml, http://www.securityfocus.com/bid/15120
CVE-2005-4040
SQL injection vulnerability in FileLister 0.51 and earlier allows remote attackers to execute arbitrary SQL commands via the search parameters, possibly the searchwhat parameter to definesearch.jsp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: filelister
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://pridels0.blogspot.com/2005/12/filelister-sql-inj-vuln.html, http://secunia.com/advisories/17821, http://www.osvdb.org/21416
CWE: CWE-89
CVE-2005-1784
Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress parameter in an updateprofile action for UserProfile.asp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hosting_controller
References: http://securitytracker.com/id?1014062, http://securitytracker.com/id?1014062
CVE-2005-3483
Buffer overflow in GO-Global for Windows 3.1.0.3270 and earlier allows remote attackers to execute arbitrary code via a data block that is longer than the specified data block size.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: go-global, windows
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://aluigi.altervista.org/adv/ggwbof-adv.txt, http://marc.info/?l=full-disclosure&m=113095918810489&w=2, http://secunia.com/advisories/17424
CWE: CWE-119
CVE-2005-3339
Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mantis
References: http://bugs.mantisbt.org/changelog_page.php, http://secunia.com/advisories/16506, http://secunia.com/advisories/17362
CVE-2005-0426
Unknown vulnerability in Solaris 8 and 9 allows remote attackers to cause a denial of service (panic) via "Heavy UDP Usage" that triggers a NULL dereference.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-57728-1, http://www.securityfocus.com/bid/12385, https://exchange.xforce.ibmcloud.com/vulnerabilities/19119
CVE-2005-0134
The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could allow attackers to hijack local sockets.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: unixware
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.8/SCOSA-2005.8.txt, http://www.vupen.com/english/advisories/2005/0077, ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.8/SCOSA-2005.8.txt
CVE-2005-1444
Multiple cross-site scripting (XSS) vulnerabilities in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to inject arbitrary web script or HTML via (1) the v, show, or sec_name parameters to main.php, (2) the inadmin, newsev, or postid parameters to 5.php, or (3) the id parameter to 0.php.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: sitepanel
References: http://forum.sitepanel2.com/index.php?showtopic=271, http://secunia.com/advisories/15213, http://www.gulftech.org/?node=research&article_id=00072-05032005
CVE-2005-1707
The fn_show_postinst function in Gentoo webapp-config before 1.10-r14 allows local users to overwrite arbitrary files via a symlink attack on the postinst.txt temporary file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux_webapp-config
References: http://bugs.gentoo.org/show_bug.cgi?id=91785, http://secunia.com/advisories/15445, http://securitytracker.com/id?1014027
CVE-2005-2397
Cross-site scripting (XSS) vulnerability in guestbook.php in phpBook 1.46 allows remote attackers to inject arbitrary web script or HTML via the admin parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpbook
References: http://secunia.com/advisories/16192, http://securitytracker.com/id?1014573, http://www.osvdb.org/18295
CVE-2005-2287
SoftiaCom wMailServer 1.0 and 2.0 allows remote attackers to cause a denial of service (application crash) via a large TCP packet with a leading space, possibly triggering a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: wmailserver
References: http://marc.info/?l=bugtraq&m=112122500308722&w=2, http://marc.info/?l=bugtraq&m=112122500308722&w=2
CVE-2005-1824
The sql_escape_string function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "\" (backslash) character, which is used as an escape character and makes the module vulnerable to SQL injection attacks.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailutils
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=308031, http://www.gentoo.org/security/en/glsa/glsa-200506-02.xml, http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=308031
CVE-2005-1320
Cross-site scripting (XSS) vulnerability in Horde Mnemo Note Manager before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: mnemo
References: http://cvs.horde.org/diff.php/mnemo/docs/CHANGES?r1=1.4.2.31&r2=1.4.2.33&ty=h, http://lists.horde.org/archives/mnemo/Week-of-Mon-20050418/000166.html, http://secunia.com/advisories/15078
CVE-2005-0949
Multiple cross-site scripting (XSS) vulnerabilities in content.asp in Iatek PortalApp allow remote attackers to inject arbitrary web script or HTML via the (1) contenttype or (2) keywords parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: portalapp
References: http://icis.digitalparadox.org/~dcrab/portalapp.txt, http://marc.info/?l=bugtraq&m=111213291118273&w=2, http://secunia.com/advisories/14749
CVE-2005-2845
Ariba Spend Management System sends the username and password to the server in plaintext in a POST request, which allows remote attackers to obtain sensitive information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ariba_spend_management_solutions
References: http://marc.info/?l=bugtraq&m=112552683829473&w=2, http://marc.info/?l=bugtraq&m=112559982413287&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/22116
CVE-2005-4283
Cross-site scripting (XSS) vulnerability in The CITY Shop 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via parameters to the search module, possibly SKey to store.cgi.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: the_city_shop
References: http://pridels0.blogspot.com/2005/12/city-shop-xss-vuln.html, http://secunia.com/advisories/18041, http://www.osvdb.org/21728
CVE-2005-0718
Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the connection during a (1) PUT or (2) POST request, which causes Squid to access previously freed memory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: squid
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931, http://fedoranews.org/updates/FEDORA--.shtml, http://secunia.com/advisories/12508
CVE-2005-3757
The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to obtain sensitive information and execute arbitrary code via dangerous Java class methods in select attribute of xsl:value-of tags in XSLT style sheets, such as (1) system-property, (2) sys:getProperty, and (3) run:exec.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mini_search_appliance, search_appliance
References: http://metasploit.com/research/vulns/google_proxystylesheet/, http://secunia.com/advisories/17644, http://securitytracker.com/id?1015246
CVE-2005-1687
SQL injection vulnerability in wp-trackback.php in Wordpress 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the tb_id parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wordpress
References: http://bugs.gentoo.org/show_bug.cgi?id=88926, http://marc.info/?l=bugtraq&m=111661517716733&w=2, http://security.gentoo.org/glsa/glsa-200506-04.xml
CVE-2005-3540
Buffer overflow in petris before 1.0.1 allows remote attackers to execute arbitrary code via unspecified attack vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: petris
References: http://secunia.com/advisories/18362, http://secunia.com/advisories/18384, http://www.debian.org/security/2005/dsa-929
CVE-2005-1827
D-Link DSL-504T allows remote attackers to bypass authentication and gain privileges, such as upgrade firmware, restart the router or restore a saved configuration, via a direct request to firmwarecfg.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: dsl-504t_firmware, dsl-504t
Related CWEs: CWE-425
Related CAPECs: CAPEC-668, CAPEC-144, CAPEC-127
MITRE ATT&CK Techniques: T1565.002, T1083
MITRE ATT&CK Tactics: T1565
References: http://marc.info/?l=bugtraq&m=111722515805478&w=2, http://secunia.com/advisories/15422, http://www.securityfocus.com/bid/13679
CWE: CWE-425
MITRE ATT&CK techniques: T1565.002, T1083
MITRE ATT&CK tactics: T1565
CVE-2005-2717
PHP remote file inclusion vulnerability in WebCalendar before 1.0.1 allows remote attackers to execute arbitrary PHP code when opening settings.php, possibly via send_reminders.php or other scripts.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webcalendar
References: http://secunia.com/advisories/16528, http://secunia.com/advisories/16675, http://securitytracker.com/id?1014849
CVE-2005-2862
ADSL Road Runner modem in the Annex A family has a service running on port 224, which allows remote attackers to login to the modem with a blank password and gain unauthorized access.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: adsl_road_runner_modem
References: http://marc.info/?l=bugtraq&m=112607274800750&w=2, http://marc.info/?l=bugtraq&m=112607274800750&w=2
CVE-2005-0254
BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files that are presented to other users with PDF or PS icons, which may trick some users into downloading and executing those files.
CVSS v3.1 Score: 3.7 (LOW)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: biborb
Related CWEs: CWE-434
Related CAPECs: CAPEC-1
MITRE ATT&CK Techniques: T1574.010
MITRE ATT&CK Tactics: T1574
References: http://marc.info/?l=bugtraq&m=110868948719773&w=2, http://marc.info/?l=full-disclosure&m=110864983905770&w=2, http://www.securityfocus.com/bid/12583
CWE: CWE-434
MITRE ATT&CK techniques: T1574.010
MITRE ATT&CK tactics: T1574
CVE-2005-3118
Mason before 1.0.0 does not install the init script after the user uses Mason to configure a firewall, which causes the system to run without a firewall after a reboot.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mason
References: http://secunia.com/advisories/17084, http://www.debian.org/security/2005/dsa-845, http://www.osvdb.org/19875
CVE-2005-1504
GameSpy SDK CD-Key Validation Toolkit, as used by many online games, allows remote attackers to bypass the CD key validation by sending a spoofed \disc\ command, which tells the server the CD key is no longer in use.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cd-key_validation_system
References: http://aluigi.altervista.org/adv/gskeyinuse-adv.txt, http://marc.info/?l=bugtraq&m=111539740212818&w=2, http://secunia.com/advisories/15254/
CVE-2005-3445
Multiple unspecified vulnerabilities in HTTP Server in Oracle Database Server 8i up to 10.1.0.4.2 and Application Server 1.0.2.2 up to 10.1.2.0 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB30 and AS03 or (2) DB31 and AS05.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: database_server, application_server
References: http://secunia.com/advisories/17250, http://www.kb.cert.org/vuls/id/210524, http://www.kb.cert.org/vuls/id/890940
CVE-2005-4616
SQL injection vulnerability in index.php in iSupport 1.06 allows remote attackers to execute arbitrary SQL commands via the include_file parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: isupport
References: http://pridels0.blogspot.com/2005/11/isupport-1x-includefile-sql-inj.html, http://www.osvdb.org/21317, https://exchange.xforce.ibmcloud.com/vulnerabilities/24356
CVE-2005-1408
Apple Keynote 2.0 and 2.0.1 allows remote attackers to read arbitrary files via the keynote: URI handler in a crafted Keynote presentation.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: keynote
References: http://lists.apple.com/archives/security-announce/2005/May/msg00005.html, http://remahl.se/david/vuln/016/, http://secunia.com/advisories/15508
CVE-2005-3972
Cross-site scripting (XSS) vulnerability in extremesearch.php in Extreme Search Corporate Edition 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: extreme_search
References: http://pridels0.blogspot.com/2005/12/extreme-search-corporate-edition-6x.html, http://secunia.com/advisories/17816, http://www.osvdb.org/21336
CVE-2005-1871
Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: drupal
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-06/0010.html, http://marc.info/?l=bugtraq&m=111782257601422&w=2, http://secunia.com/advisories/15372
CVE-2005-2543
Directory traversal vulnerability in wce.download.php in Comdev eCommerce 3.0 allows remote attackers to download arbitrary files via a .. (dot dot) in the download parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: comdev_ecommerce
References: http://marc.info/?l=bugtraq&m=112327874920062&w=2, http://www.securityfocus.com/bid/14479, http://marc.info/?l=bugtraq&m=112327874920062&w=2
CVE-2005-1135
Cross-site scripting (XSS) vulnerability in search.php for Simple PHP Blog (sphpBlog) 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: simple_php_blog
References: http://echo.or.id/adv/adv12-y3dips-2005.txt, http://marc.info/?l=bugtraq&m=111359320312609&w=2, http://www.securityfocus.com/bid/13170
CVE-2005-1816
Invision Power Board (IPB) 1.0 through 2.0.4 allows non-root admins to add themselves or other users to the root admin group via the "Move users in this group to" screen.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: invision_board
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0635.html, http://secunia.com/advisories/15545, http://www.securityfocus.com/bid/13797
CVE-2005-1759
Race condition in shtool 2.0.1 and earlier allows local users to modify or create arbitrary files via a symlink attack on temporary files after they have been created, a different vulnerability than CVE-2005-1751.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: shtool
References: http://bugs.gentoo.org/show_bug.cgi?id=93782, http://marc.info/?l=bugtraq&m=111955937622637&w=2, http://secunia.com/advisories/15668
CVE-2005-2919
libclamav/fsg.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers to cause a denial of service (infinite loop) via a crafted FSG packed executable.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: clamav
Related CWEs: CWE-399, CWE-17
References: http://secunia.com/advisories/16848, http://secunia.com/advisories/16989, http://sourceforge.net/project/shownotes.php?release_id=356974
CWE: CWE-399, CWE-17
CVE-2005-2098
The KEYCTL_JOIN_SESSION_KEYRING operation in the Linux kernel before 2.6.12.5 contains an error path that does not properly release the session management semaphore, which allows local users or remote attackers to cause a denial of service (semaphore hang) via a new session keyring (1) with an empty name string, (2) with a long name string, (3) with the key quota reached, or (4) ENOMEM.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5, http://secunia.com/advisories/16355/, http://secunia.com/advisories/17073
CVE-2005-1205
The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_2003_server
References: http://idefense.com/application/poi/display?id=260&type=vulnerabilities, http://secunia.com/advisories/15690/, http://securitytracker.com/id?1014203
CVE-2005-4055
SQL injection vulnerability in index.php in Cars Portal 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) page and (2) car parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cars_portal
References: http://pridels0.blogspot.com/2005/12/cars-portal-v1x-sql-injection.html, http://secunia.com/advisories/17914, http://www.osvdb.org/21482
CVE-2005-4353
SQL injection vulnerability in index.php in toendaCMS 0.6.2.1, when configured to use a SQL database, allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: toendacms
References: http://secunia.com/advisories/18058, http://www.osvdb.org/21768, http://www.vupen.com/english/advisories/2005/2926
CVE-2005-2422
Cross-site scripting (XSS) vulnerability in index.php in Beehive Forum allows remote attackers to inject arbitrary web script or HTML via the webtag parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: beehive_forum
References: http://marc.info/?l=bugtraq&m=112230744103930&w=2, http://secunia.com/advisories/16217, http://www.securityfocus.com/bid/14363
CVE-2005-2959
Incomplete blacklist vulnerability in sudo 1.6.8 and earlier allows local users to gain privileges via the (1) SHELLOPTS and (2) PS4 environment variables before executing a bash script on behalf of another user, which are not cleared even though other variables are.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sudo
Related CWEs: CWE-264
References: http://docs.info.apple.com/article.html?artnum=305214, http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html, http://secunia.com/advisories/17318
CWE: CWE-264
CVE-2005-0249
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: norton_internet_security, norton_system_works, antivirus_scan_engine, mail_security, norton_antivirus
References: http://securitytracker.com/id?1013133, http://www.kb.cert.org/vuls/id/107822, http://www.symantec.com/avcenter/security/Content/2005.02.08.html
CVE-2005-2068
FreeBSD 4.x through 4.11 and 5.x through 5.4 allows remote attackers to modify certain TCP options via a TCP packet with the SYN flag set for an already established session.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: freebsd
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:15.tcp.asc, ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:15.tcp.asc
CVE-2005-4586
Multiple SQL injection vulnerabilities in PHPSurveyor before 0.991 allow remote attackers to execute arbitrary SQL commands via the (1) sql parameter in browse.php and the (2) sid, (3) lid, (4) gid, and (5) token parameters in certain PHP scripts.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpsurveyor
References: http://secunia.com/advisories/18167, http://sourceforge.net/project/shownotes.php?release_id=381050&group_id=74605, http://www.osvdb.org/22039
CVE-2005-3729
Idetix Software Systems Revize CMS allows remote attackers to obtain sensitive information via direct requests to files in the revize/debug directory, such as (1) apptables.html and (2) main.html.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: revize_cms
References: http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html, http://secunia.com/advisories/17623, http://securitytracker.com/id?1015231
CVE-2005-0737
Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: messenger
References: http://seclists.org/lists/fulldisclosure/2005/Mar/0284.html, http://www.securityfocus.com/bid/12750, http://seclists.org/lists/fulldisclosure/2005/Mar/0284.html
CVE-2005-0758
zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ubuntu_linux, gzip
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt, ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc, http://bugs.gentoo.org/show_bug.cgi?id=90626
CVE-2005-3218
Multiple interpretation error in unspecified versions of Dr.Web Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: dr.web_antivirus
References: http://marc.info/?l=bugtraq&m=112879611919750&w=2, http://shadock.net/secubox/AVCraftedArchive.html, http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE-2005-1097
Rebrand P2P Share Spy 2.2 stores the user password in plaintext in the txtPassword value in the registry, which allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: p2p_share_spy
References: http://securitytracker.com/id?1013673, http://securitytracker.com/id?1013673
CVE-2005-1445
Multiple directory traversal vulnerabilities in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to (1) delete arbitrary files via the id parameter in a rmattach action to 5.php, or (2) read arbitrary files via the lang parameter to index.php.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: sitepanel
References: http://forum.sitepanel2.com/index.php?showtopic=271, http://secunia.com/advisories/15213, http://www.gulftech.org/?node=research&article_id=00072-05032005
CVE-2005-2285
WebEOC before 6.0.2 stores sensitive information in locations such as URIs, web pages, and configuration files, which allows remote attackers to obtain information such as Usernames, Passwords, Emergency information, medical information, and system configuration.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webeoc
References: http://www.kb.cert.org/vuls/id/165290, http://www.kb.cert.org/vuls/id/JGEI-6BWPXL, http://www.kb.cert.org/vuls/id/165290
CVE-2005-2797
OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding ("-D" option) when a listen address is not provided, which may cause OpenSSH to enable the GatewayPorts functionality.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: openssh
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.11/SCOSA-2006.11.txt, ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.53/SCOSA-2005.53.txt, http://marc.info/?l=bugtraq&m=112605977304049&w=2
CVE-2005-0331
Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP file to extract it, allows remote attackers to create arbitrary files via a ... (triple dot) in the filename of the ZIP file.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: winrar
References: http://marc.info/?l=bugtraq&m=110737609604210&w=2, http://www.securityfocus.com/bid/12422, https://exchange.xforce.ibmcloud.com/vulnerabilities/20585
CVE-2005-0007
Unknown vulnerability in the DLSw dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (application crash from assertion).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ethereal
References: http://secunia.com/advisories/13946/, http://www.ciac.org/ciac/bulletins/p-106.shtml, http://www.ethereal.com/appnotes/enpa-sa-00017.html
CVE-2005-4533
Argument injection vulnerability in scponlyc in scponly 4.1 and earlier, when both scp and rsync compatibility are enabled, allows local users to execute arbitrary applications via "getopt" style argument specifications, which are not filtered.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: scponly
References: http://secunia.com/advisories/18223, http://secunia.com/advisories/18236, http://sublimation.org/scponly/#relnotes
CVE-2005-3374
Multiple interpretation error in F-Prot 3.16c allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: f-prot_antivirus
References: http://marc.info/?l=bugtraq&m=113026417802703&w=2, http://www.securityelf.org/magicbyte.html, http://www.securityelf.org/magicbyteadv.html
CVE-2005-3003
SQL injection vulnerability in index.php in NooTopList 1.0.0 release 17 allows remote attackers to execute arbitrary SQL commands via the (1) o or (2) sort parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: nootoplist
References: http://securitytracker.com/id?1014931, http://www.systemsecure.org/ssforum/viewtopic.php?t=249, http://securitytracker.com/id?1014931
CVE-2005-4292
Cross-site scripting (XSS) vulnerability in CommerceSQL 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the keywords parameter in the Quick Find feature.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: commercesql
References: http://pridels0.blogspot.com/2005/12/commercesql-xss-vuln.html, http://secunia.com/advisories/17932, http://www.osvdb.org/21717
CVE-2005-3752
Unspecified vulnerability in ldapdiff before 1.1.1 has unknown impact and attack vectors, related to "ldapdiff.conf path construction".
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ldapdiff
References: http://webtomware.rhoen.de/ldapdiff-1.2.1.tar.gz, http://webtomware.rhoen.de/ldapdiff-1.2.1.tar.gz
CVE-2005-1743
BEA WebLogic Server and WebLogic Express 8.1 through Service Pack 3 and 7.0 through Service Pack 5 does not properly handle when a security provider throws an exception, which may cause WebLogic to use incorrect identity for the thread, or to fail to audit security exceptions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: weblogic_portal, weblogic_server
References: http://dev2dev.bea.com/pub/advisory/126, http://secunia.com/advisories/15486, http://securitytracker.com/id?1014049
CVE-2005-2357
Directory traversal vulnerability in EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: navisphere_manager
References: http://secunia.com/advisories/16344, http://securitytracker.com/id?1014629, http://www.idefense.com/application/poi/display?id=288&type=vulnerabilities&flashstatus=true
CVE-2005-0618
The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460/460R firmware before vuild 858, and Nexland Pro800turbo, when configured for load balancing between two WANs, might send SMTP traffic to a trusted network through an untrusted network.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: pro800turbo, gateway_security_460, firewall_vpn_appliance_200r, gateway_security_360
References: http://secunia.com/advisories/14428, http://securityresponse.symantec.com/avcenter/security/Content/2005.02.28.html, http://secunia.com/advisories/14428
CVE-2005-1854
Unknown vulnerability in apt-cacher in Debian 3.1, related to "missing input sanitising," allows remote attackers to execute arbitrary commands on the caching server.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: apt-cacher
References: http://secunia.com/advisories/16327, http://www.debian.org/security/2005/dsa-772, http://www.securityfocus.com/bid/14459
CVE-2005-0852
Microsoft Windows XP SP1 allows local users to cause a denial of service (system crash) via an empty datagram to a raw IP over IP socket (IP protocol 4), as originally demonstrated using code in Python 2.3.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_xp
References: http://www.securityfocus.com/archive/1/393956, http://www.securityfocus.com/bid/12870, http://www.securityfocus.com/archive/1/393956
CVE-2005-3332
PHP remote file include vulnerability in admin/define.inc.php in Belchior Foundry vCard 2.9 allows remote attackers to execute arbitrary PHP code via the match parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vcard
References: http://www.securityfocus.com/bid/15207, http://www.securityfocus.com/bid/15207
CVE-2005-0836
Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06 allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: j2se
References: http://jouko.iki.fi/adv/ws.html, http://marc.info/?l=full-disclosure&m=111117284323657&w=2, http://secunia.com/advisories/14640
CVE-2005-0504
Buffer overflow in the MoxaDriverIoctl function for the moxa serial driver (moxa.c) in Linux 2.2.x, 2.4.x, and 2.6.x before 2.6.22 allows local users to execute arbitrary code via a certain modified length value.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22, http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030660.html, http://secunia.com/advisories/17002
CWE: CWE-119
CVE-2005-1654
Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request to addsubsite.asp with the loginname and password parameters set.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hosting_controller
Related CWEs: CWE-425
Related CAPECs: CAPEC-668, CAPEC-144, CAPEC-127
MITRE ATT&CK Techniques: T1565.002, T1083
MITRE ATT&CK Tactics: T1565
References: http://isun.shabgard.org/hc3.txt, http://secunia.com/advisories/15271, http://isun.shabgard.org/hc3.txt
CWE: CWE-425
MITRE ATT&CK techniques: T1565.002, T1083
MITRE ATT&CK tactics: T1565
CVE-2005-1240
Directory traversal vulnerability in the third party tool from Castlehill, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: secure_net
References: http://www.securityfocus.com/archive/1/396628, http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf, https://exchange.xforce.ibmcloud.com/vulnerabilities/20260
CVE-2005-4785
Cross-site scripting (XSS) vulnerability in QuickBlogger 1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) author ("your name") and (2) "comment" section.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: quickblogger
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-07/0090.html, http://exploitlabs.com/files/advisories/EXPL-A-2005-011-quickblogger.txt, http://secunia.com/advisories/15942
CVE-2005-1339
lukemftpd in Mac OS X 10.3.9 allows remote authenticated users to escape the chroot environment by logging in with their full name.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mac_os_x_server, mac_os_x
References: http://lists.apple.com/archives/security-announce/2005/May/msg00001.html, http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
CVE-2005-2178
probe.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the olddat parameter.  NOTE: it is unclear which product or vendor this program is associated with, if any.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: probe.cgi
References: http://marc.info/?l=bugtraq&m=112059815028059&w=2, http://securitytracker.com/id?1014393, http://www.badroot.org/advisories/SA0x06
CVE-2005-2573
The mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta, when running on Windows, uses an incomplete blacklist in a directory traversal check, which allows attackers to include arbitrary files via the backslash (\) character.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mysql
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/035847.html, http://marc.info/?l=bugtraq&m=112360618320729&w=2, http://mysql.bkbits.net:8080/mysql-4.0/cset%40428b981bg2iwh3CbGANDaF-W6DbttA
CVE-2005-1866
Cross-site scripting (XSS) vulnerability in calendar.php in Calendarix Advanced 1.5 allows remote attackers to inject arbitrary web script or HTML via the year parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: calendarix_advanced
References: http://archives.neohapsis.com/archives/bugtraq/2005-05/0356.html, http://securitytracker.com/alerts/2005/May/1014083.html, http://www.osvdb.org/16973
CVE-2005-4500
SQL injection vulnerability in MusicBox 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) show and (2) type parameter.  NOTE: the provenance of this information is unknown, although it was later rediscovered.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: musicbox
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://archives.neohapsis.com/archives/bugtraq/2006-03/0515.html, http://secunia.com/advisories/18369, http://www.osvdb.org/22272
CWE: CWE-89
CVE-2005-2147
Trac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname in the id parameter to the (1) upload or (2) attachment viewer scripts.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: trac
References: http://secunia.com/advisories/15752, http://www.debian.org/security/2005/dsa-739, http://www.hardened-php.net/advisory-012005.php
CVE-2005-3357
mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service (application crash) via a non-SSL request to an SSL port, which triggers a NULL pointer dereference.
CVSS v2.0 Score: 5.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:C
Affected Products: http_server
Related CWEs: CWE-399
References: ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U, http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01428449, http://issues.apache.org/bugzilla/show_bug.cgi?id=37791
CWE: CWE-399
CVE-2005-4778
The powersave daemon in SUSE Linux 10.0 before 20051007 has an unspecified "configuration problem," which allows local users to suspend the computer and possibly perform certain other unauthorized actions.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: suse_linux, suse_sled_beagle
References: http://lists.suse.com/archive/suse-security-announce/2005-Oct/0002.html, http://www.securityfocus.com/bid/15042, http://lists.suse.com/archive/suse-security-announce/2005-Oct/0002.html
CVE-2005-4072
Cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the Words parameter in search_forums.cfm, as used in the "Search For:" field.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: magic_forum_personal
References: http://pridels0.blogspot.com/2005/12/magic-forum-personal-sqlxss-vuln.html, http://secunia.com/advisories/17935, http://www.securityfocus.com/bid/15774
CVE-2005-1581
Cross-site scripting (XSS) vulnerability in Bug Report 1.0 allows remote attackers to inject arbitrary web script or HTML via various fields to bug_report.php, which are not filtered or quoted when processed by bug_list.php or admin/index.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: bug_report
References: http://securitytracker.com/id?1013957, http://securitytracker.com/id?1013957
CVE-2005-4524
Mantis 1.0.0rc3 does not properly handle "Make note private" when a bug is being resolved, which has unknown impact and attack vectors, probably related to an information leak.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mantis
References: http://secunia.com/advisories/18481, http://sourceforge.net/project/shownotes.php?release_id=377934&group_id=14963, http://www.debian.org/security/2005/dsa-944
CVE-2005-3630
Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from adm.conf via an IFRAME element, probably involving an Apache httpd.conf configuration that orders "allow" directives before "deny" directives.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: fedora_core
References: http://directory.fedora.redhat.com/wiki/FDS10Announcement, http://secunia.com/advisories/18939, http://www.securityfocus.com/bid/16729
CVE-2005-1143
Cross-site scripting (XSS) vulnerability in index.php in EasyPHPCalendar before 6.2.8 allows remote attackers to inject arbitrary web script or HTML via the yr parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: easyphpcalendar
References: http://docs.easyphpcalendar.com/Change%20Log/changeLog.htm, http://securitytracker.com/id?1013704, http://www.osvdb.org/15544
CVE-2005-3314
Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code via "long verb arguments."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netmail
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://secunia.com/advisories/17641, http://securitytracker.com/id?1015240, http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972665.htm
CWE: CWE-119
CVE-2005-0968
Computer Associates (CA) eTrust Intrusion Detection 3.0 allows remote attackers to cause a denial of service via large size values that are not properly validated before calling the CPImportKey function in the Crypto API.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: etrust_intrusion_detection
References: http://www.idefense.com/application/poi/display?id=223&type=vulnerabilities, http://www.idefense.com/application/poi/display?id=223&type=vulnerabilities
CVE-2005-1085
Cross-site scripting (XSS) vulnerability in the control panel in aeDating 3.2 allows remote attackers to inject arbitrary web script or HTML.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: aedating
References: http://secunia.com/advisories/14913, http://secunia.com/advisories/14913