deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-2620
Published: 2005-08-17
Description: grpWise.exe for Novell GroupWise client 5.5 through 6.5.2 stores the password in plaintext in memory, which allows attackers to obtain the password using a debugger or another mechanism to read process memory.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2005-06/0158.html; http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0858.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5724&w=2
CVE: CVE-2005-2127
Published: 2005-08-19
Description: Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, as originally demonstrated using the (1) DDS Library Shape Control (Msdds.dll) COM object, and other objects including (2) Blnmgrps.dll, (3) Ciodm.dll, (4) Comsvcs.dll, (5) Danim.dll, (6) Htmlmarq.ocx, (7) Mdt2dd.dll (as demonstrated using a heap corruption attack with uninitialized memory), (8) Mdt2qd.dll, (9) Mpg4ds32.ax, (10) Msadds32.ax, (11) Msb1esen.dll, (12) Msb1fren.dll, (13) Msb1geen.dll, (14) Msdtctm.dll, (15) Mshtml.dll, (16) Msoeacct.dll, (17) Msosvfbr.dll, (18) Mswcrun.dll, (19) Netshell.dll, (20) Ole2disp.dll, (21) Outllib.dll, (22) Psisdecd.dll, (23) Qdvd.dll, (24) Repodbc.dll, (25) Shdocvw.dll, (26) Shell32.dll, (27) Soa.dll, (28) Srchui.dll, (29) Stobject.dll, (30) Vdt70.dll, (31) Vmhelper.dll, and (32) Wbemads.dll, aka a variant of the "COM Object Instantiation Memory Corruption vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://isc.sans.org/diary.php?date=2005-08-18; http://secunia.com/advisories/16480; http://secunia.com/advisories/17172
CVE: CVE-2005-2501
Published: 2005-08-19
Description: Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2 allows external user-assisted attackers to execute arbitrary code via a crafted Rich Text Format (RTF) file.
CVSS Score: 7.6 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://securitytracker.com/id?1014695
CVE: CVE-2005-2502
Published: 2005-08-19
Description: Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2, as used in applications such as TextEdit, allows external user-assisted attackers to execute arbitrary code via a crafted Microsoft Word file.
CVSS Score: 5.1 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://securitytracker.com/id?1014695
CVE: CVE-2005-2503
Published: 2005-08-19
Description: AppKit for Mac OS X 10.3.9 and 10.4.2 allows attackers with physical access to create local accounts by forcing a particular error to occur at the login window.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://securitytracker.com/id?1014696
CVE: CVE-2005-2504
Published: 2005-08-19
Description: The System Profiler in Mac OS X 10.4.2 labels a Bluetooth device with "Requires Authentication: No" even when the user has selected the "Require pairing for security" option, which could confuse users about which setting is valid.
CVSS Score: 7.2 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE: CVE-2005-2505
Published: 2005-08-19
Description: Buffer overflow in CoreFoundation in Mac OS X 10.3.9 allows attackers to execute arbitrary code via command line arguments to an application that uses CoreFoundation.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://securitytracker.com/id?1014697
CVE: CVE-2005-2506
Published: 2005-08-19
Description: Algorithmic complexity vulnerability in CoreFoundation in Mac OS X 10.3.9 and 10.4.2 allows attackers to cause a denial of service (CPU consumption) via crafted Gregorian dates.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://securitytracker.com/id?1014697
CVE: CVE-2005-2507
Published: 2005-08-19
Description: Buffer overflow in Directory Services in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://www.kb.cert.org/vuls/id/913820
CVE: CVE-2005-2508
Published: 2005-08-19
Description: dsidentity in Directory Services in Mac OS X 10.4.2 allows local users to add or remove user accounts.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE: CVE-2005-2509
Published: 2005-08-19
Description: Unknown vulnerability in loginwindow in Mac OS X 10.4.2 and earlier, when Fast User Switching is enabled, allows attackers to log into other accounts if they know the passwords to at least two accounts.
CVSS Score: 2.1 (LOW)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://securitytracker.com/id?1014704
CVE: CVE-2005-2510
Published: 2005-08-19
Description: The Server Admin tool in servermgr_ipfilter for Mac OS X 10.4 to 10.4.2, when using multiple subnets and Address Groups, does not always properly write firewall rules to the Active Rules when certain conditions occur, which could result in firewall policies that are less restrictive than intended by the administrator.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://securitytracker.com/id?1014708
CVE: CVE-2005-2511
Published: 2005-08-19
Description: Unknown vulnerability in Mac OS X 10.4.2 and earlier, when using Kerberos authentication with LDAP, allows attackers to gain access to a root Terminal window.
CVSS Score: 10.0 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE: CVE-2005-2512
Published: 2005-08-19
Description: Mail.app in Mac OS 10.4.2 and earlier, when printing or forwarding an HTML message, loads remote images even when the user's preferences state otherwise, which could result in a privacy leak.
CVSS Score: 2.1 (LOW)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE: CVE-2005-2513
Published: 2005-08-19
Description: Unknown vulnerability in HItoolbox for Mac OS X 10.4.2 allows VoiceOver services to read secure input fields.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://securitytracker.com/id?1014699
CVE: CVE-2005-2514
Published: 2005-08-19
Description: Buffer overflow in ping in Mac OS X 10.3.9 allows local users to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://securitytracker.com/id?1014701
CVE: CVE-2005-2515
Published: 2005-08-19
Description: Quartz Composer Screen Saver in Mac OS X 10.4.2 allows local users to access links from the RSS Visualizer even when a password is required.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://securitytracker.com/id?1014705
CVE: CVE-2005-2516
Published: 2005-08-19
Description: Safari in Mac OS X 10.3.9 and 10.4.2, when rendering Rich Text Format (RTF) files, can directly access URLs without performing the normal security checks, which allows remote attackers to execute arbitrary commands.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://www.kb.cert.org/vuls/id/709220
CVE: CVE-2005-2517
Published: 2005-08-19
Description: Safari in Mac OS X 10.3.9 and 10.4.2 submits forms from an XSL formatted page to the next page that is browsed by the user, which causes form data to be sent to the wrong site.
CVSS Score: 2.6 (LOW)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE: CVE-2005-2518
Published: 2005-08-19
Description: Buffer overflow in servermgrd in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://securitytracker.com/id?1014709
CVE: CVE-2005-2519
Published: 2005-08-19
Description: slpd in Directory Services in Mac OS X 10.3.9 creates insecure temporary files as root, which allows local users to gain privileges.
CVSS Score: 7.2 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE: CVE-2005-2520
Published: 2005-08-19
Description: The password assistant in Mac OS X 10.4 to 10.4.2, when used to create multiple accounts from the same process, does not reset the suggested password list when the assistant is displayed, which allows attackers to view recently used passwords.
CVSS Score: 2.1 (LOW)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://securitytracker.com/id?1014707
CVE: CVE-2005-2521
Published: 2005-08-19
Description: Buffer overflow in traceroute in Mac OS X 10.3.9 allows local users to execute arbitrary code via unknown vectors.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://securitytracker.com/id?1014702
CVE: CVE-2005-2522
Published: 2005-08-19
Description: Safari in WebKit in Mac OS X 10.4 to 10.4.2 directly accesses URLs within PDF files without the normal security checks, which allows remote attackers to execute arbitrary code via links in a PDF file.
CVSS Score: 5.1 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://www.kb.cert.org/vuls/id/420316
CVE: CVE-2005-2523
Published: 2005-08-19
Description: Multiple cross-site scripting (XSS) vulnerabilities in Weblog Server in Mac OS X 10.4 to 10.4.2 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE: CVE-2005-2525
Published: 2005-08-19
Description: CUPS in Mac OS X 10.3.9 and 10.4.2 does not properly close file descriptors when handling multiple simultaneous print jobs, which allows remote attackers to cause a denial of service (printing halt).
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://securitytracker.com/id?1014698
CVE: CVE-2005-2526
Published: 2005-08-19
Description: CUPS in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to cause a denial of service (CPU consumption) by sending a partial IPP request and closing the connection.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://securitytracker.com/id?1014698
CVE: CVE-2005-2621
Published: 2005-08-19
Description: index.php in ECW-Shop 6.0.2 allows remote attackers to obtain sensitive information via the (1) min or (2) max parameter with a "'" (single quote), which reveals the path in an error message, possibly due to a SQL injection vulnerability.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9985&w=2; http://secunia.com/advisories/16459; http://securitytracker.com/id?1014734
CVE: CVE-2005-2622
Published: 2005-08-19
Description: Cross-site scripting (XSS) vulnerability in index.php in ECW-Shop 6.0.2 allows remote attackers to inject arbitrary web script or HTML via the (1) max or (2) ctg parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9985&w=2; http://secunia.com/advisories/16459; http://securitytracker.com/id?1014734
CVE: CVE-2005-2623
Published: 2005-08-19
Description: ECW-Shop 6.0.2 allows remote attackers to reduce the total cost of their shopping cart by specifying a negative quantity for an item, which causes the price of the item to be subtracted from the total cost.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9985&w=2; http://secunia.com/advisories/16459; http://securitytracker.com/id?1014734
CVE: CVE-2005-2624
Published: 2005-08-19
Description: Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to execute arbitrary ASP code via the cpaint_argument[] parameter to (1) calculator.asp or (2) cpaintfile.asp, which is directly fed into an eval statement.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9768&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9768&w=2
CVE: CVE-2005-2625
Published: 2005-08-19
Description: Incomplete blacklist vulnerability in the checkBlacklist function in CPAINT allows remote attackers to execute arbitrary commands via the (1) ExecuteGlobal function or (2) GetRef statement, which is not included in the blacklist.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9768&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9768&w=2
CVE: CVE-2005-2626
Published: 2005-08-19
Description: Unspecified vulnerability in Kismet before 2005-08-R1 allows remote attackers to have an unknown impact via unprintable characters in the SSID.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/16447; http://secunia.com/advisories/16477; http://secunia.com/advisories/16634
CVE: CVE-2005-2627
Published: 2005-08-19
Description: Multiple integer underflows in Kismet before 2005-08-R1 allow remote attackers to execute arbitrary code via (1) kernel headers in a pcap file or (2) data frame dissection, which leads to heap-based buffer overflows.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/16447; http://secunia.com/advisories/16477; http://secunia.com/advisories/16634
CVE: CVE-2005-0357
Published: 2005-08-23
Description: EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/16464; http://secunia.com/advisories/16470; http://securitytracker.com/id?1014713
CVE: CVE-2005-0358
Published: 2005-08-23
Description: EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by modifying an authentication token.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/16464; http://secunia.com/advisories/16470; http://securitytracker.com/id?1014713
CVE: CVE-2005-0359
Published: 2005-08-23
Description: The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and pmap_unset commands, which allows remote attackers to (1) cause a denial of service by using pmap_unset to un-register a NetWorker service, or (2) obtain sensitive information from NetWorker services by using pmap_set to register a new service.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/16464; http://secunia.com/advisories/16470; http://securitytracker.com/id?1014713
CVE: CVE-2005-2098
Published: 2005-08-23
Description: The KEYCTL_JOIN_SESSION_KEYRING operation in the Linux kernel before 2.6.12.5 contains an error path that does not properly release the session management semaphore, which allows local users or remote attackers to cause a denial of service (semaphore hang) via a new session keyring (1) with an empty name string, (2) with a long name string, (3) with the key quota reached, or (4) ENOMEM.
CVSS Score: 5.0 (MEDIUM)
References: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5; http://secunia.com/advisories/16355/; http://secunia.com/advisories/17073
CVE: CVE-2005-2099
Published: 2005-08-23
Description: The Linux kernel before 2.6.12.5 does not properly destroy a keyring that is not instantiated properly, which allows local users or remote attackers to cause a denial of service (kernel oops) via a keyring with a payload that is not empty, which causes the creation to fail, leading to a null dereference in the keyring destructor.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5; http://secunia.com/advisories/16355/; http://secunia.com/advisories/17073
CVE: CVE-2005-2457
Published: 2005-08-23
Description: The driver for compressed ISO file systems (zisofs) in the Linux kernel before 2.6.12.5 allows local users and remote attackers to cause a denial of service (kernel crash) via a crafted compressed ISO file system.
CVSS Score: 5.0 (MEDIUM)
References: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5; http://secunia.com/advisories/16355/; http://secunia.com/advisories/16500
CVE: CVE-2005-2458
Published: 2005-08-23
Description: inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 allows remote attackers to cause a denial of service (kernel crash) via a compressed file with "improper tables".
CVSS Score: 5.0 (MEDIUM)
References: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5; http://secunia.com/advisories/16355/; http://secunia.com/advisories/16500
CVE: CVE-2005-2459
Published: 2005-08-23
Description: The huft_build function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 returns the wrong value, which allows remote attackers to cause a denial of service (kernel crash) via a certain compressed file that leads to a null pointer dereference, a different vulnerability than CVE-2005-2458.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-476
References: http://bugs.gentoo.org/show_bug.cgi?id=94584; http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5; http://secunia.com/advisories/16355/
CVE: CVE-2005-2491
Published: 2005-08-23
Description: Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt; ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U; http://docs.info.apple.com/article.html?artnum=302847
CVE: CVE-2005-2499
Published: 2005-08-23
Description: slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service (updatedb exit and incomplete slocate database) via a certain crafted directory structure.
CVSS Score: 2.1 (LOW)
References: http://securitytracker.com/id?1014751; http://www.osvdb.org/19034; http://www.redhat.com/support/errata/RHSA-2005-345.html
CVE: CVE-2005-2631
Published: 2005-08-23
Description: Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/16472/; http://www.cisco.com/warp/public/707/cisco-sa-20050817-cca.shtml; http://www.securityfocus.com/bid/14585
CVE: CVE-2005-2632
Published: 2005-08-23
Description: SQL injection vulnerability in login_admin_mediabox404.php in mediabox404 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the User field.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3646&w=2; http://secunia.com/advisories/16493/; http://www.securityfocus.com/bid/14593
CVE: CVE-2005-2633
Published: 2005-08-23
Description: Multiple PHP file inclusion vulnerabilities in (1) admin_o.php, (2) board_o.php, (3) dev_o.php, (4) file_o.php or (5) tech_o.php in PHPTB Topic Board 2.0 and earlier allow remote attackers to execute arbitrary PHP code via the absolutepath parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9802&w=2; http://secunia.com/advisories/16492; http://www.securityfocus.com/bid/14592
CVE: CVE-2005-2634
Published: 2005-08-23
Description: Buffer overflow in the Log-SCR function in the "Log to Screen" feature in WinFtp Server 1.6.8 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long request.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/036173.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2374&w=2; http://secunia.com/advisories/16461/
CVE: CVE-2005-2635
Published: 2005-08-23
Description: Multiple directory traversal vulnerabilities in phpAdsNew and phpPgAds before 2.0.6 allow remote attackers to include arbitrary files via a .. (dot dot) in the (1) layerstyle parameter to adlayer.php or (2) language parameter to js-form.php.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0344&w=2; http://secunia.com/advisories/16469/; http://www.securityfocus.com/bid/14584
CVE: CVE-2005-2636
Published: 2005-08-23
Description: SQL injection vulnerability in lib-view-direct.inc.php in phpAdsNew and phpPgAds before 2.0.6 allows remote attackers to execute arbitrary SQL commands via the clientid parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0344&w=2; http://secunia.com/advisories/16469/; http://www.securityfocus.com/bid/14583
CVE: CVE-2005-2637
Published: 2005-08-23
Description: Multiple SQL injection vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) Match or (2) CatID parameter to SearchResults.php, or (3) the password to AccessControl.php.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0016&w=2; http://secunia.com/advisories/16490/; http://securitytracker.com/id?1014726