deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-0429
Published: 2005-05-02
Description: Direct code injection vulnerability in forumdisplay.php in vBulletin 3.0 through 3.0.4, when showforumusers is enabled, allows remote attackers to execute inject arbitrary PHP commands via the comma parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5315&w=2; http://www.securityfocus.com/bid/12542; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5315&w=2
CVE: CVE-2005-0431
Published: 2005-05-02
Description: Barracuda Spam Firewall 3.1.10 and earlier does not restrict the domains that white-listed domains can send mail to, which allows members of white-listed domains to use Barracuda as an open mail relay for spam.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2492&w=2; http://secunia.com/advisories/14243; https://exchange.xforce.ibmcloud.com/vulnerabilities/19283
CVE: CVE-2005-0432
Published: 2005-05-02
Description: BEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 Service Pack 3 and earlier, generates different login exceptions that suggest why an authentication attempt fails, which makes it easier for remote attackers to guess passwords via brute force attacks.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA05-74.00.jsp; http://secunia.com/advisories/14298; http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA05-74.00.jsp
CVE: CVE-2005-0435
Published: 2005-05-02
Description: awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginmode parameters to rawlog.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/14299; http://www.securityfocus.com/archive/1/390368; https://exchange.xforce.ibmcloud.com/vulnerabilities/19333
CVE: CVE-2005-0436
Published: 2005-05-02
Description: Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of Perl code via the PluginMode parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14299; http://www.osvdb.org/13832; http://www.securityfocus.com/archive/1/390368
CVE: CVE-2005-0437
Published: 2005-05-02
Description: Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to include arbitrary Perl modules via .. (dot dot) sequences in the loadplugin parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14299; http://www.securityfocus.com/archive/1/390368; http://secunia.com/advisories/14299
CVE: CVE-2005-0438
Published: 2005-05-02
Description: awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to obtain sensitive information by setting the debug parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/14299; http://www.securityfocus.com/archive/1/390368; https://exchange.xforce.ibmcloud.com/vulnerabilities/19477
CVE: CVE-2005-0439
Published: 2005-05-02
Description: Buffer overflow in the decode_post function in ELOG before 2.5.7 allows remote attackers to execute arbitrary code via attachments with long file names.
CVSS Score: 7.5 (HIGH)
References: http://midas.psi.ch/elogs/Forum/941; http://sourceforge.net/project/shownotes.php?group_id=40505&release_id=304880; http://www.securityfocus.com/bid/12556
CVE: CVE-2005-0440
Published: 2005-05-02
Description: ELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration file that contains a sensitive write password via a modified URL.
CVSS Score: 7.5 (HIGH)
References: http://midas.psi.ch/elogs/Forum/941; http://sourceforge.net/project/shownotes.php?group_id=40505&release_id=304880; http://www.securityfocus.com/bid/12556
CVE: CVE-2005-0442
Published: 2005-05-02
Description: Directory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote attackers to read arbitrary files via the language parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1191&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5580&w=2; http://secunia.com/advisories/14272
CVE: CVE-2005-0443
Published: 2005-05-02
Description: index.php in CubeCart 2.0.4 allows remote attackers to (1) obtain the full path for the web server or (2) conduct cross-site scripting (XSS) attacks via an invalid language parameter, which echoes the parameter in a PHP error message.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1191&w=2; http://www.cubecart.com/site/forums/index.php?showtopic=5741; http://www.osvdb.org/14064
CVE: CVE-2005-0445
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web script via the domain name parameter (logindomain) in the login page.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/14253; http://securitytracker.com/id?1013172; http://turtle.ee.ncku.edu.tw/openwebmail/doc/changes.txt
CVE: CVE-2005-0446
Published: 2005-05-02
Description: Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931; http://fedoranews.org/updates/FEDORA--.shtml; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0453&w=2
CVE: CVE-2005-0448
Published: 2005-05-02
Description: Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.
CVSS Score: 1.2 (LOW)
References: ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056; http://fedoranews.org/updates/FEDORA--.shtml
CVE: CVE-2005-0449
Published: 2005-05-02
Description: The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) or bypass firewall rules via crafted packets, which are not properly handled by the skb_checksum_help function.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945; http://oss.sgi.com/archives/netdev/2005-01/msg01036.html
CVE: CVE-2005-0450
Published: 2005-05-02
Description: Directory traversal vulnerability in Sami HTTP Server 1.0.5 allows remote attackers to read arbitrary files via an HTTP request containing (1) .. (dot dot) or (2) "%2e%2e" (encoded dot dot) sequences.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/14283; http://securitytracker.com/id?1013191; http://secunia.com/advisories/14283
CVE: CVE-2005-0451
Published: 2005-05-02
Description: Sami HTTP Server 1.0.5 allows remote attackers to cause a denial of service via an HTTP request containing two CRLF sequences, which triggers a NULL dereference.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/14283; http://securitytracker.com/id?1013191; http://secunia.com/advisories/14283
CVE: CVE-2005-0454
Published: 2005-05-02
Description: Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the lcat, doc, or uid parameters to index.php, or (2) the mid or bid parameters to forums.php.
CVSS Score: 7.5 (HIGH)
References: http://glide.stanford.edu/yichen/research/sec.pdf; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7809&w=2; http://securityreason.com/securityalert/108
CVE: CVE-2005-0455
Published: 2005-05-02
Description: Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value.
CVSS Score: 5.1 (MEDIUM)
References: http://service.real.com/help/faq/security/050224_player; http://www.idefense.com/application/poi/display?id=209&type=vulnerabilities; http://www.redhat.com/support/errata/RHSA-2005-265.html
CVE: CVE-2005-0457
Published: 2005-05-02
Description: Opera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local users to gain privileges by inserting malicious libraries into the PORTAGE_TMPDIR (portage) temporary directory.
CVSS Score: 7.2 (HIGH)
CWE: CWE-427
References: http://bugs.gentoo.org/show_bug.cgi?id=81747; http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml; http://bugs.gentoo.org/show_bug.cgi?id=81747
CVE: CVE-2005-0458
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in contact_us.php in osCommerce 2.2-MS2 allows remote attackers to inject arbitrary web script or HTML via the enquiry parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4995&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4995&w=2
CVE: CVE-2005-0459
Published: 2005-05-02
Description: phpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the full path of the web root via a direct request to select_lang.lib.php, which reveals the path in a PHP error message.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1013210; http://securitytracker.com/id?1013210
CVE: CVE-2005-0460
Published: 2005-05-02
Description: index.php in MercuryBoard 1.0.x and 1.1.x allows remote attackers to obtain sensitive information by setting the debug parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://lostmon.blogspot.com/2005/02/mercuryboard-debug-information.html; http://secunia.com/advisories/14284; http://www.osvdb.org/13787
CVE: CVE-2005-0461
Published: 2005-05-02
Description: Unknown vulnerability in NewsBruiser 2.x before 2.6.1 allows remote attackers to "take actions on comments."
CVSS Score: 5.0 (MEDIUM)
References: http://newsbruiser.tigris.org/servlets/NewsItemView?newsItemID=1016; http://newsbruiser.tigris.org/source/browse/newsbruiser/CHANGELOG?rev=1.283&content-type=text/x-cvsweb-markup; http://secunia.com/advisories/14262
CVE: CVE-2005-0463
Published: 2005-05-02
Description: Unknown "major security flaws" in Ulog-php before 1.0, related to input validation, have unknown impact and attack vectors, probably related to SQL injection vulnerabilities in (1) host.php, (2) port.php, and (3) index.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14321; http://securitytracker.com/id?1013220; http://www.inl.fr/article.php3?id_article=7
CVE: CVE-2005-0464
Published: 2005-05-02
Description: gr_osview in SGI IRIX 6.5.22, and possibly other 6.5 versions, does not drop privileges when opening description files while in debug mode, which allows local users to read a line from arbitrary files via the -d and -D options, which prints the line as a formatting error.
CVSS Score: 2.1 (LOW)
References: ftp://patches.sgi.com/support/free/security/advisories/20050402-01-P; http://secunia.com/advisories/14875; http://securitytracker.com/id?1013662
CVE: CVE-2005-0465
Published: 2005-05-02
Description: gr_osview in SGI IRIX does not drop privileges before opening files, which allows local users to overwrite arbitrary files via the -s option.
CVSS Score: 2.1 (LOW)
References: ftp://patches.sgi.com/support/free/security/advisories/20050402-01-P; http://secunia.com/advisories/14875; http://securitytracker.com/id?1013662
CVE: CVE-2005-0468
Published: 2005-05-02
Description: Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:01.telnet.asc; ftp://patches.sgi.com/support/free/security/advisories/20050405-01-P; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000962
CVE: CVE-2005-0469
Published: 2005-05-02
Description: Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character (SLC) commands.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:01.telnet.asc; ftp://patches.sgi.com/support/free/security/advisories/20050405-01-P; http://secunia.com/advisories/14745
CVE: CVE-2005-0490
Published: 2005-05-02
Description: Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by (1) the Curl_input_ntlm function in http_ntlm.c during NTLM authentication or (2) the Curl_krb_kauth and krb4_auth functions in krb4.c during Kerberos authentication.
CVSS Score: 8.8 (HIGH)
CWE: CWE-131
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000940; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]7755&w=2; http://www.gentoo.org/security/en/glsa/glsa-200503-20.xml
CVE: CVE-2005-0491
Published: 2005-05-02
Description: Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a long type 77 request.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5794&w=2; http://secunia.com/advisories/14327; http://www.securityfocus.com/bid/12594
CVE: CVE-2005-0492
Published: 2005-05-02
Description: Adobe Acrobat Reader 6.0.3 and 7.0.0 allows remote attackers to cause a denial of service (application crash) via a PDF file that contains a negative Count value in the root page node.
CVSS Score: 2.6 (LOW)
CWE: CWE-20
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1486&w=2; http://secunia.com/advisories/14813; http://www.adobe.com/support/techdocs/331468.html
CVE: CVE-2005-0493
Published: 2005-05-02
Description: CRLF injection vulnerability in bizmail.cgi in Biz Mail Form before 2.2 allows remote attackers to bypass the email check and send spam e-mail via CRLF sequences and forged mail headers in the email parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1321&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1321&w=2
CVE: CVE-2005-0497
Published: 2005-05-02
Description: ADP Elite System Max 9000 allows remote authenticated users to gain privileges by uploading a .profile that sets the ADPROOT environment variable to the root directory.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0503&w=2; https://exchange.xforce.ibmcloud.com/vulnerabilities/20622; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0503&w=2
CVE: CVE-2005-0498
Published: 2005-05-02
Description: Gigafast router (aka CompUSA router) allows remote attackers to gain sensitive information and bypass the login page via a direct request to backup.cfg, which reveals the administrator password in plaintext.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2760&w=2; https://exchange.xforce.ibmcloud.com/vulnerabilities/19422; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2760&w=2
CVE: CVE-2005-0500
Published: 2005-05-02
Description: Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to spoof the domain name of a URL in a titlebar for a script-initiated popup window, which could facilitate phishing attacks.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]1027&w=2; http://secunia.com/advisories/14335; http://www.securityfocus.com/bid/12602
CVE: CVE-2005-0501
Published: 2005-05-02
Description: Buffer overflow in Bontago 1.1 and earlier allows remote attackers to execute arbitrary code via a long nickname.
CVSS Score: 7.5 (HIGH)
References: http://aluigi.altervista.org/adv/bontagobof-adv.txt; http://secunia.com/advisories/14350; http://www.securityfocus.com/bid/12603
CVE: CVE-2005-0522
Published: 2005-05-02
Description: Chat Anywhere 2.72a stores sensitive information such as passwords in plaintext in the .INI file for a chatroom, which allows local users to gain privileges.
CVSS Score: 4.6 (MEDIUM)
References: http://securitytracker.com/id?1013270; http://securitytracker.com/id?1013270
CVE: CVE-2005-0523
Published: 2005-05-02
Description: Format string vulnerability in ProZilla 1.3.7.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the Location header.
CVSS Score: 7.5 (HIGH)
References: http://deicide.siyahsapka.org/exploits/proz_ex2.c; http://www.debian.org/security/2005/dsa-719; http://www.securiteam.com/exploits/5WP082KEUW.html
CVE: CVE-2005-0524
Published: 2005-05-02
Description: The php_handle_iff function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service (infinite loop) via a -8 size value.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html; http://secunia.com/advisories/14792; http://securitytracker.com/id?1013619
CVE: CVE-2005-0525
Published: 2005-05-02
Description: The php_next_marker function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service (infinite loop) via a JPEG image with an invalid marker value, which causes a negative length value to be passed to php_stream_seek.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html; http://secunia.com/advisories/14792; http://securitytracker.com/id?1013619
CVE: CVE-2005-0526
Published: 2005-05-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in PBLang 4.65 allow remote attackers to inject arbitrary web script or HTML via (1) the search string to search.php, (2) the subject of a PM, which is processed by pm.php, or (3) the body of a PM, which is processed by pmpshow.php.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5486&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8589&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1595&w=2
CVE: CVE-2005-0527
Published: 2005-05-02
Description: Firefox 1.0 allows remote attackers to execute arbitrary code via plugins that load "privileged content" into frames, as demonstrated using certain XUL events when a user drags a scrollbar two times, aka "Firescrolling."
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0395&w=2; http://securitytracker.com/id?1013301; http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml
CVE: CVE-2005-0529
Published: 2005-05-02
Description: Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types for offset arguments to the proc_file_read and locks_read_proc functions, which leads to a heap-based buffer overflow when a signed comparison causes negative integers to be used in a positive context.
CVSS Score: 2.1 (LOW)
References: http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930; http://linux.bkbits.net:8080/linux-2.6/cset%404201818eC6aMn0x3GY_9rw3ueb2ZWQ; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6556&w=2
CVE: CVE-2005-0530
Published: 2005-05-02
Description: Signedness error in the copy_from_read_buf function in n_tty.c for Linux kernel 2.6.10 and 2.6.11rc1 allows local users to read kernel memory via a negative argument.
CVSS Score: 2.1 (LOW)
References: http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930; http://linux.bkbits.net:8080/linux-2.6/cset%[PII_REDACTED]2LZmhPTewcCOLkubGwOL3w; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6556&w=2
CVE: CVE-2005-0531
Published: 2005-05-02
Description: The atm_get_addr function in addr.c for Linux kernel 2.6.10 and 2.6.11 before 2.6.11-rc4 may allow local users to trigger a buffer overflow via negative arguments.
CVSS Score: 2.1 (LOW)
References: http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930; http://linux.bkbits.net:8080/linux-2.6/gnupatch%404208e1fcfccuD-eH2OGM5mBhihmQ3A; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6556&w=2
CVE: CVE-2005-0532
Published: 2005-05-02
Description: The reiserfs_copy_from_user_to_file_region function in reiserfs/file.c for Linux kernel 2.6.10 and 2.6.11 before 2.6.11-rc4, when running on 64-bit architectures, may allow local users to trigger a buffer overflow as a result of casting discrepancies between size_t and int data types.
CVSS Score: 2.1 (LOW)
References: http://linux.bkbits.net:8080/linux-2.6/cset%[PII_REDACTED]TkNpHlX6BefnItV_GqMmzQ; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6556&w=2; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]2817&w=2
CVE: CVE-2005-0533
Published: 2005-05-02
Description: Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a crafted ARJ file with long header file names that modify pointers within a structure.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14396; http://securitytracker.com/id?1013289; http://securitytracker.com/id?1013290
CVE: CVE-2005-0534
Published: 2005-05-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allow remote attackers to inject arbitrary web script.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/14360; http://securitytracker.com/id?1013260; http://sourceforge.net/project/shownotes.php?release_id=307067
CVE: CVE-2005-0536
Published: 2005-05-02
Description: Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or determine file existence via a parameter related to image deletion.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/14360; http://securitytracker.com/id?1013260; http://sourceforge.net/project/shownotes.php?release_id=307067
CVE: CVE-2005-0538
Published: 2005-05-02
Description: Directory traversal vulnerability in (1) GinpPictureServlet.java and (2) PicCollection.java in ginp (Java Photo Gallery Web Application) before 0.22 allows remote attackers to read arbitrary files.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/14373; http://sourceforge.net/project/shownotes.php?release_id=307518; http://secunia.com/advisories/14373
CVE: CVE-2005-0539
Published: 2005-05-02
Description: Unknown vulnerability in IBM Hardware Management Console (HMC) before 4.4 for POWER5 servers allows local users to gain privileges, related to the Guided Setup Wizard.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/14377; http://techsupport.services.ibm.com/server/hmc/power5/fixes/ptf_MH00220.html; http://secunia.com/advisories/14377
CVE: CVE-2005-0540
Published: 2005-05-02
Description: Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote attackers to obtain sensitive information via a direct request to the /about.html page.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]7137&w=2; http://secunia.com/advisories/14378; http://www.cirt.net/advisories/alterpath_disclosure.shtml
CVE: CVE-2005-0541
Published: 2005-05-02
Description: consoleConnect.jsp in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote attackers to connect to arbitrary consoles by modifying the consolename parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]7137&w=2; http://secunia.com/advisories/14378; http://www.cirt.net/advisories/alterpath_console.shtml
CVE: CVE-2005-0542
Published: 2005-05-02
Description: saveUser.do in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows local users to gain privileges by setting the adminUser parameter to true.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]7137&w=2; http://secunia.com/advisories/14378; http://www.cirt.net/advisories/alterpath_privesc.shtml