deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-1424
Published: 2005-05-03
Description: StumbleInside GoText 1.01 stores sensitive username, mail address,and phone number information in plaintext in the GoText.bin file, which allows local users to obtain that information.
CVSS Score: 2.1 (LOW)
References: http://securitytracker.com/id?1013825; http://www.osvdb.org/14686; http://www.securityfocus.com/bid/13443
CVE: CVE-2005-1425
Published: 2005-05-03
Description: Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/guestbook.mdb.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://securitytracker.com/id?1013830; http://www.osvdb.org/15995; http://www.securityfocus.com/archive/1/456240/100/0/threaded
CVE: CVE-2005-1426
Published: 2005-05-03
Description: Uapplication Ublog Reload stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/blog.mdb (aka mdb-database/blog.msb).
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://securitytracker.com/id?1013830; http://www.osvdb.org/15996; https://exchange.xforce.ibmcloud.com/vulnerabilities/20314
CVE: CVE-2005-1427
Published: 2005-05-03
Description: Uapplication Uphotogallery stores the database under the web document root, which allows remote attackers to obtain sensitive information via a direct request to uphotogallery.mdb.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1013830; http://www.osvdb.org/15994; https://exchange.xforce.ibmcloud.com/vulnerabilities/20314
CVE: CVE-2005-1428
Published: 2005-05-03
Description: edit_image.asp in Uapplication Uphotogallery allows remote attackers to upload arbitrary files.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1013830; https://exchange.xforce.ibmcloud.com/vulnerabilities/20314; http://securitytracker.com/id?1013830
CVE: CVE-2005-1429
Published: 2005-05-03
Description: SQL injection vulnerability in login.asp in WWWguestbook 1.1 allows remote attackers to execute arbitrary SQL commands via the password parameter.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1013837; http://www.osvdb.org/15968; http://www.securityfocus.com/bid/13404
CVE: CVE-2005-1430
Published: 2005-05-03
Description: Mac OS X 10.3.x and earlier uses insecure permissions for a pseudo terminal tty (pty) that is managed by a non-setuid program, which allows local users to read or modify sessions of other users.
CVSS Score: 3.6 (LOW)
References: http://www.security-focus.com/archive/1/397306; http://www.security-focus.com/archive/1/397306
CVE: CVE-2005-1431
Published: 2005-05-03
Description: The "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote attackers to cause a denial of service, possibly related to padding bytes in gnutils_cipher.c.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.gnupg.org/pipermail/gnutls-dev/2005-April/000858.html; http://secunia.com/advisories/15193; http://securitytracker.com/id?1013861
CVE: CVE-2005-1433
Published: 2005-05-03
Description: Multiple unknown vulnjerabilities HP OpenView Event Correlation Services (OV ECS) 3.32 and 3.33 allow attackers to cause a denial of service or execute arbitrary code.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/15226; http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMA01141; http://secunia.com/advisories/15226
CVE: CVE-2005-1434
Published: 2005-05-03
Description: Multiple unknown vulnerabilities in OpenView Network Node Manager (OV NNM) 6.2, 6.4, 7.01, and 7.50 allow attackers to cause a denial of service or execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15223; http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMA01140; http://secunia.com/advisories/15223
CVE: CVE-2005-1435
Published: 2005-05-03
Description: Open WebMail (OWM) before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15225; http://securitytracker.com/id?1013859; http://sourceforge.net/forum/message.php?msg_id=3128678
CVE: CVE-2005-1436
Published: 2005-05-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via (1) the t parameter to view.php, (2) the osticket_title parameter to header.php, (3) the em parameter to admin_login.php, (4) the e parameter to user_login.php, (5) the err parameter to open_submit.php, or (6) the name and subject fields when adding a ticket.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/15216; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5; http://www.osvdb.org/16270
CVE: CVE-2005-1437
Published: 2005-05-03
Description: Multiple SQL injection vulnerabilities in osTicket allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to admin.php or (2) cat parameter to view.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15216; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5; http://www.osvdb.org/16277
CVE: CVE-2005-1438
Published: 2005-05-03
Description: PHP remote file inclusion vulnerability in main.php in osTicket allows remote attackers to execute arbitrary PHP code via the include_dir parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15216; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5; http://www.osvdb.org/16278
CVE: CVE-2005-1439
Published: 2005-05-03
Description: Directory traversal vulnerability in attachments.php in osTicket allows remote attackers to read arbitrary files via .. sequences in the file parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15216; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5; http://www.osvdb.org/16279
CVE: CVE-2005-1440
Published: 2005-05-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arbitrary web script or HTML via (1) various parameters to basket.php, (2) the nickname, email, topic, and message fields in forum.php, as demonstrated using forum_new_thread.php and forum_thread.php, (3) the page parameter to page.php, (4) category_id and item_id parameters to reviews.php, (5) the category_id parameter to product_details.php, (6) the category_id or search_string parameters to products.php, or (7) the rp or page parameters to news_view.php.
CVSS Score: 6.8 (MEDIUM)
References: http://lostmon.blogspot.com/2005/04/viart-shop-enterprise-multiple.html; http://secunia.com/advisories/15181; http://securitytracker.com/id?1013853
CVE: CVE-2005-1441
Published: 2005-05-03
Description: Format string vulnerability in Lotus Domino 6.0.x before 6.0.5 and 6.5.x before 6.5.4 allows remote attackers to cause a denial of service via the Notes protocol (NRPC).
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/14879; http://securitytracker.com/id?1013842; http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202525
CVE: CVE-2005-1442
Published: 2005-05-03
Description: Buffer overflow in the Lotus Notes client for Domino 6.5 before 6.5.4 and 6.0 before 6.0.5 allows local users to cause a denial of service (client crash) and possibly execute arbitrary code via the NOTES.INI file.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/1013841; http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202526; http://www.osvdb.org/15367
CVE: CVE-2005-1443
Published: 2005-05-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php for Invision Power Board (IPB) 2.0.3 and 2.1 Alpha 2 allows remote attackers to inject arbitrary web script or HTML via the (1) act, (2) Members, (3) calendar, or (4) HID parameters.
CVSS Score: 6.8 (MEDIUM)
References: http://securitytracker.com/id?1013863; http://securitytracker.com/id?1013863
CVE: CVE-2005-1444
Published: 2005-05-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to inject arbitrary web script or HTML via (1) the v, show, or sec_name parameters to main.php, (2) the inadmin, newsev, or postid parameters to 5.php, or (3) the id parameter to 0.php.
CVSS Score: 6.8 (MEDIUM)
References: http://forum.sitepanel2.com/index.php?showtopic=271; http://secunia.com/advisories/15213; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5
CVE: CVE-2005-1445
Published: 2005-05-03
Description: Multiple directory traversal vulnerabilities in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to (1) delete arbitrary files via the id parameter in a rmattach action to 5.php, or (2) read arbitrary files via the lang parameter to index.php.
CVSS Score: 6.4 (MEDIUM)
References: http://forum.sitepanel2.com/index.php?showtopic=271; http://secunia.com/advisories/15213; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5
CVE: CVE-2005-1446
Published: 2005-05-03
Description: SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to upload and execute arbitrary files such as PHP scripts via an attachment to a trouble ticket.
CVSS Score: 7.5 (HIGH)
References: http://forum.sitepanel2.com/index.php?showtopic=271; http://secunia.com/advisories/15213; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5
CVE: CVE-2005-1447
Published: 2005-05-03
Description: PHP remote file inclusion vulnerability in main.php in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to execute arbitrary PHP code via the p parameter.
CVSS Score: 7.5 (HIGH)
References: http://forum.sitepanel2.com/index.php?showtopic=271; http://secunia.com/advisories/15213; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5
CVE: CVE-2005-1448
Published: 2005-05-03
Description: Cross-site scripting (XSS) vulnerability in the BBCode plugin for Serendipity before 0.8 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/15145; http://www.osvdb.org/15876; http://www.s9y.org/63.html#A9
CVE: CVE-2005-1449
Published: 2005-05-03
Description: Unknown vulnerability in serendipity_config_local.inc.php for Serendipity before 0.8 has unknown impact.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/15145; http://www.s9y.org/63.html#A9; http://secunia.com/advisories/15145
CVE: CVE-2005-1450
Published: 2005-05-03
Description: Unknown vulnerability in "the function used to validate path-names for uploading media" in Serendipity before 0.8 has unknown impact.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15145; http://www.osvdb.org/15877; http://www.s9y.org/63.html#A9
CVE: CVE-2005-1451
Published: 2005-05-03
Description: The media manager in Serendipity before 0.8 allows remote attackers to upload and execute arbitrary (1) .php or (2) .shtml files.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15145; http://www.osvdb.org/15878; http://www.s9y.org/63.html#A9
CVE: CVE-2005-1452
Published: 2005-05-03
Description: Serendipity before 0.8 allows Chief users to "hide plugins installed by other users."
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/15145; http://www.s9y.org/63.html#A9; http://secunia.com/advisories/15145
CVE: CVE-2005-1825
Published: 2005-05-03
Description: Multiple stack-based buffer overflows in the nvd_exec function in HP Radia Notify Daemon 3.1.2.0 (formerly by Novadigm), and other versions including 2.x, 3.x, and 4.x, allows remote attackers to execute arbitrary code via a command with crafted parameters to a RADEXECD process.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034387.html; http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034394.html; http://secunia.com/advisories/15567
CVE: CVE-2005-1826
Published: 2005-05-03
Description: Buffer overflow in HP Radia Notify Daemon 3.1.0.0 (formerly by Novadigm), and other versions including 2.x, 3.x, and 4.x, allows remote attackers to execute arbitrary code via a long file extension.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034387.html; http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034394.html; http://secunia.com/advisories/15567
CVE: CVE-2005-0594
Published: 2005-05-04
Description: Buffer overflow in the Netinfo Setup Tool (NeST) allows local users to execute arbitrary code.
CVSS Score: 7.2 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005/May/msg00001.html; http://www.kb.cert.org/vuls/id/354486; http://www.us-cert.gov/cas/techalerts/TA05-136A.html
CVE: CVE-2005-0676
Published: 2005-05-04
Description: index.php in Zorum 3.5 allows remote attackers to trigger an SQL error, and possibly inject arbitrary SQL commands, via the search capability.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1013365; http://securitytracker.com/id?1013365
CVE: CVE-2005-1194
Published: 2005-05-04
Description: Stack-based buffer overflow in the ieee_putascii function for nasm 0.98 and earlier allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than CVE-2004-1287.
CVSS Score: 4.6 (MEDIUM)
References: http://www.redhat.com/support/errata/RHSA-2005-381.html; http://www.securityfocus.com/bid/13506; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11256
CVE: CVE-2005-1330
Published: 2005-05-04
Description: AppKit in Mac OS X 10.3.9 allows attackers to cause a denial of service (Cocoa application crash) via a malformed TIFF image that causes the NXSeek to use an incorrect offset, leading to an unhandled exception.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2005/May/msg00001.html; http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
CVE: CVE-2005-1331
Published: 2005-05-04
Description: The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is different than the actual code that would be run, which could allow remote attackers to trick users into executing malicious code via certain URI characters such as NULL, control characters, and homographs.
CVSS Score: 5.1 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005/May/msg00001.html; http://remahl.se/david/vuln/010/; http://secunia.com/advisories/15227
CVE: CVE-2005-1332
Published: 2005-05-04
Description: Bluetooth-enabled systems in Mac OS X 10.3.9 enables the Bluetooth file exchange service by default, which allows remote attackers to access files without the user being notified, and local users to access files via the default directory.
CVSS Score: 7.5 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=301381; http://lists.apple.com/archives/security-announce/2005/May/msg00001.html; http://www.digitalmunition.com/DMA%5B2005-0502a%5D.txt
CVE: CVE-2005-1333
Published: 2005-05-04
Description: Directory traversal vulnerability in the Bluetooth file and object exchange (OBEX) services in Mac OS X 10.3.9 allows remote attackers to read arbitrary files.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html; http://lists.apple.com/archives/security-announce/2005/May/msg00001.html; http://www.digitalmunition.com/DMA%5B2005-0502a%5D.txt
CVE: CVE-2005-1335
Published: 2005-05-04
Description: Unknown vulnerability in Mac OS X 10.3.9 allows local users to gain privileges via (1) chfn, (2) chpass, and (3) chsh, which "use external helper programs in an insecure manner."
CVSS Score: 7.2 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005/May/msg00001.html; http://www.kb.cert.org/vuls/id/331694; http://www.us-cert.gov/cas/techalerts/TA05-136A.html
CVE: CVE-2005-1336
Published: 2005-05-04
Description: Buffer overflow in the Foundation framework for Mac OS X 10.3.9 allows local users to execute arbitrary code via a long environment variable.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005/May/msg00001.html; http://www.kb.cert.org/vuls/id/582934; http://www.us-cert.gov/cas/techalerts/TA05-136A.html
CVE: CVE-2005-1337
Published: 2005-05-04
Description: Apple Help Viewer 2.0.7 and 3.0.0 in Mac OS X 10.3.9 allows remote attackers to read and execute arbitrary scrpts with less restrictive privileges via a help:// URI.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005/May/msg00001.html; http://remahl.se/david/vuln/004/; http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
CVE: CVE-2005-1338
Published: 2005-05-04
Description: Mac OS X 10.3.9, when using an LDAP server that does not use ldap_extended_operation, may store initial LDAP passwords for new accounts in plaintext.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005/May/msg00001.html; http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
CVE: CVE-2005-1339
Published: 2005-05-04
Description: lukemftpd in Mac OS X 10.3.9 allows remote authenticated users to escape the chroot environment by logging in with their full name.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005/May/msg00001.html; http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
CVE: CVE-2005-1340
Published: 2005-05-04
Description: The HTTP proxy service in Server Admin for Mac OS X 10.3.9 does not restrict access when it is enabled, which allows remote attackers to use the proxy.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005/May/msg00001.html; http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
CVE: CVE-2005-1341
Published: 2005-05-04
Description: Apple Terminal 1.4.4 allows attackers to execute arbitrary commands via terminal escape sequences.
CVSS Score: 5.1 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005/May/msg00001.html; http://remahl.se/david/vuln/012/; http://secunia.com/advisories/15227
CVE: CVE-2005-1342
Published: 2005-05-04
Description: The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005/May/msg00001.html; http://remahl.se/david/vuln/011/; http://secunia.com/advisories/15227
CVE: CVE-2005-0918
Published: 2005-05-05
Description: The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page immediately stops loading, which indicates whether the file exists or not.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-203
References: http://secunia.com/advisories/15255; http://securitytracker.com/id?1013890; http://www.adobe.com/support/techdocs/323585.html
CVE: CVE-2005-1453
Published: 2005-05-05
Description: fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service (crash) by closing the connection while fetchnews is reading (1) an article header or (2) an article body, which also prevents fetchnews from querying other servers.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0037.html; http://leafnode.sourceforge.net/leafnode-SA-2005-01.txt; http://secunia.com/advisories/15252
CVE: CVE-2005-1456
Published: 2005-05-05
Description: Multiple unknown vulnerabilities in the (1) DHCP and (2) Telnet dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (abort).
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963; http://www.ethereal.com/appnotes/enpa-sa-00019.html; http://www.ethereal.com/news/item_20050504_01.html
CVE: CVE-2005-1457
Published: 2005-05-05
Description: Multiple unknown vulnerabilities in the (1) AIM, (2) LDAP, (3) FibreChannel, (4) GSM_MAP, (5) SRVLOC, and (6) NTLMSSP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash).
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963; http://www.ethereal.com/appnotes/enpa-sa-00019.html; http://www.ethereal.com/news/item_20050504_01.html
CVE: CVE-2005-1458
Published: 2005-05-05
Description: Multiple unknown "other problems" in the KINK dissector in Ethereal before 0.10.11 have unknown impact and attack vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963; http://www.ethereal.com/appnotes/enpa-sa-00019.html; http://www.ethereal.com/news/item_20050504_01.html
CVE: CVE-2005-1459
Published: 2005-05-05
Description: Multiple unknown vulnerabilities in the (1) WSP, (2) BER, (3) SMB, (4) NDPS, (5) IAX2, (6) RADIUS, (7) TCAP, (8) MRDISC, (9) 802.3 Slow, (10) SMBMailslot, or (11) SMB PIPE dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (assert error).
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963; http://www.ethereal.com/appnotes/enpa-sa-00019.html; http://www.ethereal.com/news/item_20050504_01.html
CVE: CVE-2005-1460
Published: 2005-05-05
Description: Multiple unknown dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (assert error) via an invalid protocol tree item length.
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963; http://www.ethereal.com/appnotes/enpa-sa-00019.html; http://www.ethereal.com/news/item_20050504_01.html
CVE: CVE-2005-1461
Published: 2005-05-05
Description: Multiple buffer overflows in the (1) SIP, (2) CMIP, (3) CMP, (4) CMS, (5) CRMF, (6) ESS, (7) OCSP, (8) X.509, (9) ISIS, (10) DISTCC, (11) FCELS, (12) Q.931, (13) NCP, (14) TCAP, (15) ISUP, (16) MEGACO, (17) PKIX1Explitit, (18) PKIX_Qualified, (19) Presentation dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963; http://www.ethereal.com/appnotes/enpa-sa-00019.html; http://www.ethereal.com/news/item_20050504_01.html
CVE: CVE-2005-1462
Published: 2005-05-05
Description: Double free vulnerability in the ICEP dissector in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963; http://www.ethereal.com/appnotes/enpa-sa-00019.html; http://www.ethereal.com/news/item_20050504_01.html
CVE: CVE-2005-1463
Published: 2005-05-05
Description: Multiple format string vulnerabilities in the (1) DHCP and (2) ANSI A dissectors in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963; http://www.ethereal.com/appnotes/enpa-sa-00019.html; http://www.ethereal.com/news/item_20050504_01.html
CVE: CVE-2005-1464
Published: 2005-05-05
Description: Multiple unknown vulnerabilities in the (1) KINK, (2) L2TP, (3) MGCP, (4) EIGRP, (5) DLSw, (6) MEGACO, (7) LMP, and (8) RSVP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (infinite loop).
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963; http://www.ethereal.com/appnotes/enpa-sa-00019.html; http://www.ethereal.com/news/item_20050504_01.html