deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-3126
Published: 2005-12-31
Description: The (1) kantiword (kantiword.sh) and (2) gantiword (gantiword.sh) scripts in antiword 0.35 and earlier allow local users to overwrite arbitrary files via a symlink attack on temporary (a) output and (b) error files.
CVSS Score: 1.9 (LOW)
CWE: CWE-59
References: http://secunia.com/advisories/15866; http://secunia.com/advisories/18530; http://www.debian.org/security/2005/dsa-945
CVE: CVE-2005-3187
Published: 2005-12-31
Description: The listening daemon in Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) via a long HTTP request that causes an out-of-bounds read.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/18288; http://www.idefense.com/intelligence/vulnerabilities/display.php?id=363; http://www.securityfocus.com/bid/16148
CVE: CVE-2005-3188
Published: 2005-12-31
Description: Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via (1) an m3u file containing a long line ending in .wma or (2) a pls file containing a long File1 value ending in .wma, a different vulnerability than CVE-2006-0476.
CVSS Score: 7.6 (HIGH)
References: http://securityreason.com/securityalert/397; http://securitytracker.com/id?1015565; http://securitytracker.com/id?1015621
CVE: CVE-2005-3240
Published: 2005-12-31
Description: Race condition in Microsoft Internet Explorer allows user-assisted attackers to overwrite arbitrary files and possibly execute code by tricking a user into performing a drag-and-drop action from certain objects, such as file objects within a folder view, then predicting the drag action, and re-focusing to a malicious window.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-362
References: http://blogs.technet.com/msrc/archive/2006/02/13/419439.aspx; http://secunia.com/advisories/18787; http://securitytracker.com/id?1015049
CVE: CVE-2005-3340
Published: 2005-12-31
Description: The tuxpaint-import.sh script in Tux Paint (tuxpaint) 0.9.14 and earlier creates temporary files insecurely, with unknown impact and attack vectors.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/18474; http://secunia.com/advisories/18475; http://secunia.com/advisories/18476
CVE: CVE-2005-3342
Published: 2005-12-31
Description: noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files in (1) lib/toascii.nw and (2) shell/roff.mm.
CVSS Score: 1.2 (LOW)
References: http://secunia.com/advisories/18809; http://secunia.com/advisories/18812; http://secunia.com/advisories/18967
CVE: CVE-2005-3356
Published: 2005-12-31
Description: The mq_open system call in Linux kernel 2.6.9, in certain situations, can decrement a counter twice ("double decrement") as a result of multiple calls to the mntput function when the dentry_open function call fails, which allows local users to cause a denial of service (panic) via unspecified attack vectors.
CVSS Score: 2.1 (LOW)
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169130; http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html; http://rhn.redhat.com/errata/RHSA-2006-0101.html
CVE: CVE-2005-3357
Published: 2005-12-31
Description: mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service (application crash) via a non-SSL request to an SSL port, which triggers a NULL pointer dereference.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-399
References: ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01428449; http://issues.apache.org/bugzilla/show_bug.cgi?id=37791
CVE: CVE-2005-3359
Published: 2005-12-31
Description: The atm module in Linux kernel 2.6 before 2.6.14 allows local users to cause a denial of service (panic) via certain socket calls that produce inconsistent reference counts for loadable protocol modules.
CVSS Score: 4.9 (MEDIUM)
References: http://linux.bkbits.net:8080/linux-2.6/cset%404339c66aLroC1_zunYKhEIbtIWrnwg; http://secunia.com/advisories/19220; http://secunia.com/advisories/20237
CVE: CVE-2005-3525
Published: 2005-12-31
Description: Stack-based buffer overflow in an ActiveX control for the installer for Adobe Macromedia Shockwave Player 10.1.0.11 and earlier allows remote attackers to execute arbitrary code via crafted large values for unspecified parameters.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/19009; http://securityreason.com/securityalert/481; http://securitytracker.com/id?1015673
CVE: CVE-2005-3526
Published: 2005-12-31
Description: Buffer overflow in the IMAP daemon in Ipswitch Collaboration Suite 2006.02 and earlier allows remote authenticated users to execute arbitrary code via a long FETCH command.
CVSS Score: 6.5 (MEDIUM)
References: http://secunia.com/advisories/19168; http://securityreason.com/securityalert/577; http://securitytracker.com/id?1015759
CVE: CVE-2005-3538
Published: 2005-12-31
Description: hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, which allows remote attackers to gain privileges.
CVSS Score: 7.5 (HIGH)
References: http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719; http://secunia.com/advisories/18314; http://secunia.com/advisories/18337
CVE: CVE-2005-3539
Published: 2005-12-31
Description: Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via (1) the notify script in HylaFAX 4.2.0 to 4.2.3 and (2) crafted CallID parameters to the faxrcvd script in HylaFAX 4.2.2 and 4.2.3.
CVSS Score: 7.5 (HIGH)
References: http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719; http://secunia.com/advisories/18314; http://secunia.com/advisories/18337
CVE: CVE-2005-3540
Published: 2005-12-31
Description: Buffer overflow in petris before 1.0.1 allows remote attackers to execute arbitrary code via unspecified attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/18362; http://secunia.com/advisories/18384; http://www.debian.org/security/2005/dsa-929
CVE: CVE-2005-3597
Published: 2005-12-31
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3573.  Reason: This candidate is a duplicate of CVE-2005-3573.  A CNA error by MITRE introduced the duplicate.  Notes: All CVE users should reference CVE-2005-3573 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-3618
Published: 2005-12-31
Description: Cross-site request forgery (CSRF) vulnerability in the management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 allows allows remote attackers to perform unauthorized actions as the administrator via URLs, as demonstrated using the setUsr operation to change a password.  NOTE: this issue can be leveraged with CVE-2005-3619 to automatically perform the attacks.
CVSS Score: 7.6 (HIGH)
References: http://kb.vmware.com/kb/2118366; http://secunia.com/advisories/21230; http://securitytracker.com/id?1016612
CVE: CVE-2005-3619
Published: 2005-12-31
Description: Cross-site scripting (XSS) vulnerability in the management interface for VMware ESX 2.5.x before 2.5.2 upgrade patch 2, 2.1.x before 2.1.2 upgrade patch 6, and 2.0.x before 2.0.1 upgrade patch 6 allows remote attackers to inject arbitrary web script or HTML via messages that are not sanitized when viewing syslog log files.
CVSS Score: 6.8 (MEDIUM)
References: http://www.corsaire.com/advisories/c051114-002.txt; http://www.securityfocus.com/archive/1/435610/100/0/threaded; http://www.securityfocus.com/archive/1/435888/100/0/threaded
CVE: CVE-2005-3620
Published: 2005-12-31
Description: The management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 records passwords in cleartext in URLs that are stored in world-readable web server log files, which allows local users to gain privileges.
CVSS Score: 2.1 (LOW)
References: http://kb.vmware.com/kb/2118366; http://secunia.com/advisories/21230; http://www.corsaire.com/advisories/c051114-003.txt
CVE: CVE-2005-3623
Published: 2005-12-31
Description: nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting access controls (ACL) on files on exported NFS filesystems, which allows remote attackers to bypass ACLs for readonly mounted NFS filesystems.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-862
References: http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html; http://lkml.org/lkml/2005/12/23/171; http://secunia.com/advisories/18788
CVE: CVE-2005-3624
Published: 2005-12-31
Description: The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt; ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U; ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
CVE: CVE-2005-3625
Published: 2005-12-31
Description: Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt; ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U; ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
CVE: CVE-2005-3626
Published: 2005-12-31
Description: Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt; ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U; ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
CVE: CVE-2005-3627
Published: 2005-12-31
Description: Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with (1) a large "number of components" value that is not checked by DCTStream::readBaselineSOF or DCTStream::readProgressiveSOF, (2) a large "Huffman table index" value that is not checked by DCTStream::readHuffmanTables, and (3) certain uses of the scanInfo.numComps value by DCTStream::readScanInfo.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt; ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U; ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
CVE: CVE-2005-3628
Published: 2005-12-31
Description: Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via unknown attack vectors.
CVSS Score: 7.5 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U; http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html; http://secunia.com/advisories/18147
CVE: CVE-2005-3629
Published: 2005-12-31
Description: initscripts in Red Hat Enterprise Linux 4 does not properly handle certain environment variables when /sbin/service is executed, which allows local users with sudo permissions for /sbin/service to gain root privileges via unknown vectors.
CVSS Score: 7.2 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U; http://secunia.com/advisories/19162; http://secunia.com/advisories/19532
CVE: CVE-2005-3630
Published: 2005-12-31
Description: Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from adm.conf via an IFRAME element, probably involving an Apache httpd.conf configuration that orders "allow" directives before "deny" directives.
CVSS Score: 5.0 (MEDIUM)
References: http://directory.fedora.redhat.com/wiki/FDS10Announcement; http://secunia.com/advisories/18939; http://www.securityfocus.com/bid/16729
CVE: CVE-2005-3653
Published: 2005-12-31
Description: Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]5927&w=2; http://secunia.com/advisories/18591; http://securityreason.com/securityalert/380
CVE: CVE-2005-3654
Published: 2005-12-31
Description: Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of packets with 0xFF characters to the Telnet port (TCP 23), which corrupts the heap.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/18288; http://securityreason.com/securityalert/322; http://securitytracker.com/id?1015442
CVE: CVE-2005-3655
Published: 2005-12-31
Description: Heap-based buffer overflow in Novell Open Enterprise Server Remote Manager (novell-nrm) in Novell SUSE Linux Enterprise Server 9 allows remote attackers to execute arbitrary code via an HTTP POST request with a negative Content-Length parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/18484; http://securityreason.com/securityalert/348; http://securitytracker.com/id?1015487
CVE: CVE-2005-3656
Published: 2005-12-31
Description: Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username.
CVSS Score: 10.0 (HIGH)
CWE: CWE-134
References: ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U; http://secunia.com/advisories/18304; http://secunia.com/advisories/18321
CVE: CVE-2005-3658
Published: 2005-12-31
Description: Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise Backup Software (EBS) 7.1 through 7.2L, allow remote attackers to execute arbitrary code or cause a denial of service (unresponsive application) via malformed RPC packets to (1) RPC program number 390109 (nsrd.exe) and (2) RPC program number 390113 (nsrexecd.exe).
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: ftp://ftp.legato.com/pub/NetWorker/Updates/LGTpa83990/README.TXT; http://secunia.com/advisories/18495; http://secunia.com/advisories/18615
CVE: CVE-2005-3659
Published: 2005-12-31
Description: nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise Backup Software (EBS) 7.1 through 7.2L, allows remote attackers to cause a denial of service (nsrd service crash) via a malformed RPC request to RPC program number 390109, which triggers a null dereference.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: ftp://ftp.legato.com/pub/NetWorker/Updates/LGTpa83990/README.TXT; http://secunia.com/advisories/18495; http://secunia.com/advisories/18615
CVE: CVE-2005-3706
Published: 2005-12-31
Description: Heap-based buffer overflow in LibSystem in Mac OS X 10.4 through 10.4.5 allows context-dependent attackers to execute arbitrary code by causing an application that uses LibSystem to request a large amount of memory.
CVSS Score: 6.4 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=303382; http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html; http://secunia.com/advisories/19064
CVE: CVE-2005-3707
Published: 2005-12-31
Description: Buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via crafted TGA image files.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0445.html; http://docs.info.apple.com/article.html?artnum=303101; http://secunia.com/advisories/18370
CVE: CVE-2005-3708
Published: 2005-12-31
Description: Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via crafted TGA image files.
CVSS Score: 7.5 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=303101; http://secunia.com/advisories/18370; http://securitytracker.com/id?1015464
CVE: CVE-2005-3709
Published: 2005-12-31
Description: Integer underflow in Apple Quicktime before 7.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Color Map Entry Size in a TGA image file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0447.html; http://docs.info.apple.com/article.html?artnum=303101; http://secunia.com/advisories/18370
CVE: CVE-2005-3710
Published: 2005-12-31
Description: Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a TIFF image file with modified image height and width (ImageWidth) tags.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0440.html; http://docs.info.apple.com/article.html?artnum=303101; http://secunia.com/advisories/18370
CVE: CVE-2005-3711
Published: 2005-12-31
Description: Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a TIFF image file with modified (1) "strips" (StripByteCounts) or (2) "bands" (StripOffsets) values.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0442.html; http://docs.info.apple.com/article.html?artnum=303101; http://secunia.com/advisories/18370
CVE: CVE-2005-3712
Published: 2005-12-31
Description: Heap-based buffer overflow in rsync in Mac OS X 10.4 through 10.4.5 allows remote authenticated users to execute arbitrary code via long extended attributes.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://docs.info.apple.com/article.html?artnum=303382; http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html; http://secunia.com/advisories/19064
CVE: CVE-2005-3713
Published: 2005-12-31
Description: Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a GIF image file with a crafted Netscape Navigator Application Extension Block that modifies the heap in the Picture Modifier block.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0401.html; http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0402.html; http://docs.info.apple.com/article.html?artnum=303101
CVE: CVE-2005-3714
Published: 2005-12-31
Description: The network interface for Apple AirPort Express 6.x before Firmware Update 6.3, and AirPort Extreme 5.x before Firmware Update 5.7, allows remote attackers to cause a denial of service (unresponsive interface) via malformed packets.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2006/Jan/msg00000.html; http://secunia.com/advisories/18319; http://securitytracker.com/id?1015443
CVE: CVE-2005-3782
Published: 2005-12-31
Description: Mac OS X 10.4.3 up to 10.4.6, when loginwindow uses the "Name and password" setting, and the "Show the Restart, Sleep, and Shut Down buttons" option is disabled, allows users with physical access to bypass login and reboot the system by entering ">restart", ">power", or ">shutdown" sequences after the username.
CVSS Score: 2.1 (LOW)
References: http://www.osvdb.org/20776; http://www.osvdb.org/20776
CVE: CVE-2005-4085
Published: 2005-12-31
Description: Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/18288; http://secunia.com/advisories/18909; http://securitytracker.com/id?1015441
CVE: CVE-2005-4347
Published: 2005-12-31
Description: The Linux 2.4 kernel patch in kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux does not correctly set the "chroot barrier" with util-vserver, which allows attackers to access files on the host system that are outside of the vserver.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/19339; http://www.debian.org/security/2006/dsa-1011; https://exchange.xforce.ibmcloud.com/vulnerabilities/25406
CVE: CVE-2005-4351
Published: 2005-12-31
Description: The securelevels implementation in FreeBSD 7.0 and earlier, OpenBSD up to 3.8, DragonFly up to 1.2, and Linux up to 2.6.15 allows root users to bypass immutable settings for files by mounting another filesystem that masks the immutable files while the system is running.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/openbsd/2005-10/1523.html; http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041177.html; http://www.redteam-pentesting.de/advisories/rt-sa-2005-015.txt
CVE: CVE-2005-4352
Published: 2005-12-31
Description: The securelevels implementation in NetBSD 2.1 and earlier, and Linux 2.6.15 and earlier, allows local users to bypass time setting restrictions and set the clock backwards by setting the clock ahead to the maximum unixtime value (19 Jan 2038), which then wraps around to the minimum value (13 Dec 1901), which can then be set ahead to the desired time, aka "settimeofday() time wrap."
CVSS Score: 2.1 (LOW)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041178.html; http://secunia.com/advisories/25691; http://securitytracker.com/id?1015454
CVE: CVE-2005-4418
Published: 2005-12-31
Description: util-vserver before 0.30.208-1 with kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux sets a default policy that trusts unknown capabilities, which could allow local users to conduct unauthorized activities.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19333; http://secunia.com/advisories/19339; http://www.debian.org/security/2006/dsa-1011
CVE: CVE-2005-4536
Published: 2005-12-31
Description: Mail::Audit module in libmail-audit-perl 2.1-5, when logging is enabled without a default log file specified, uses predictable log filenames, which allows local users to overwrite arbitrary files via a symlink attack on the [PID]-audit.log temporary file.
CVSS Score: 2.1 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=344029; http://secunia.com/advisories/18652; http://secunia.com/advisories/18656
CVE: CVE-2005-4561
Published: 2005-12-31
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was assigned in 2005 to an issue that would not be published until 2006, so new identifiers were assigned.  Notes: none
CVE: CVE-2005-4562
Published: 2005-12-31
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was assigned in 2005 to an issue that would not be published until 2006, so new identifiers were assigned.  Notes: none