deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-0579
Published: 2005-02-25
Description: nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allows local users to access the X server without X authentication.
CVSS Score: 4.6 (MEDIUM)
References: http://mail.kde.org/pipermail/freenx-knx/2005-February/000734.html; http://www.linuxcompatible.org/story42495.html; http://mail.kde.org/pipermail/freenx-knx/2005-February/000734.html
CVE: CVE-2005-0580
Published: 2005-02-25
Description: cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file.
CVSS Score: 2.1 (LOW)
References: http://security.gentoo.org/glsa/glsa-200502-30.xml; http://security.gentoo.org/glsa/glsa-200502-30.xml
CVE: CVE-2004-0945
Published: 2005-02-28
Description: The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 allows remote authenticated users to cause a denial of service (resource exhaustion) via a large number of active sessions, which exceeds ICP's maximum.
CVSS Score: 5.0 (MEDIUM)
References: http://www.corsaire.com/advisories/c040817-003.txt; http://www.mitel.com/DocController?documentId=14223; http://www.niscc.gov.uk/niscc/docs/re-20[PII_REDACTED]8.pdf?lang=en
CVE: CVE-2005-0603
Published: 2005-02-28
Description: viewtopic.php in phpBB 2.0.12 and earlier allows remote attackers to obtain sensitive information via a highlight parameter containing invalid regular expression syntax, which reveals the path in a PHP error message.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2950&w=2; http://neossecurity.net/Advisories/Advisory-06.txt; http://secunia.com/advisories/14413
CVE: CVE-2005-0608
Published: 2005-02-28
Description: Heap-based buffer overflow in server.cpp for WebMod 0.47 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a POST request with a Content-Length that is less than the amount of data that is actually sent.
CVSS Score: 7.5 (HIGH)
References: http://djeyl.net/forum/index.php?showtopic=41440; http://secunia.com/advisories/14302; http://djeyl.net/forum/index.php?showtopic=41440
CVE: CVE-2005-0613
Published: 2005-02-28
Description: Unknown vulnerability in FCKeditor 2.0 RC2, when used with PHP-Nuke, allows remote attackers to upload arbitrary files.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/12676; http://www.securityfocus.com/bid/12676
CVE: CVE-2005-0616
Published: 2005-02-28
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Download module for PostNuke 0.750 and 0.760-RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) Program name, (2) File link, (3) Author name (4) Author e-mail address, (5) File size, (6) Version, or (7) Home page variables.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0373&w=2; http://news.postnuke.com/Article2669.html; http://securitytracker.com/id?1013324
CVE: CVE-2005-0619
Published: 2005-02-28
Description: Einstein 1.0.1 stores sensitive information such as usernames and passwords in plaintext in the registry, which allows local users to gain privileges.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/14455; http://securitytracker.com/id?1013316; http://www.osvdb.org/14212
CVE: CVE-2005-0624
Published: 2005-02-28
Description: reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords.
CVSS Score: 2.1 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=295407; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7388&w=2; http://secunia.com/advisories/14422/
CVE: CVE-2005-0625
Published: 2005-02-28
Description: reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd.
CVSS Score: 2.1 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=295407; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7388&w=2; http://secunia.com/advisories/14422/
CVE: CVE-2004-0983
Published: 2005-03-01
Description: The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request.
CVSS Score: 5.0 (MEDIUM)
References: http://www.debian.org/security/2004/dsa-586; http://www.mandriva.com/security/advisories?name=MDKSA-2004:128; http://www.redhat.com/support/errata/RHSA-2004-635.html
CVE: CVE-2004-0986
Published: 2005-03-01
Description: Iptables before 1.2.11, under certain conditions, does not properly load the required modules at system startup, which causes the firewall rules to fail to load and protect the system from remote attackers.
CVSS Score: 7.5 (HIGH)
References: http://rpmfind.net/linux/RPM/suse/updates/9.2/i386/rpm/i586/iptables-1.2.11-4.2.i586.html; http://www.ciac.org/ciac/bulletins/p-026.shtml; http://www.debian.org/security/2004/dsa-580
CVE: CVE-2004-0988
Published: 2005-03-01
Description: Integer overflow on Apple QuickTime before 6.5.2, when running on Windows systems, allows remote attackers to cause a denial of service (memory consumption) via certain inputs that cause a large memory operation.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2004/Oct/msg00001.html; http://lists.apple.com/archives/security-announce/2004/Oct/msg00001.html
CVE: CVE-2004-0989
Published: 2005-03-01
Description: Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.
CVSS Score: 10.0 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000890; http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3482&w=2
CVE: CVE-2004-0990
Published: 2005-03-01
Description: Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.
CVSS Score: 10.0 (HIGH)
References: http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2099&w=2; http://secunia.com/advisories/18717
CVE: CVE-2004-0992
Published: 2005-03-01
Description: Format string vulnerability in the -a option (daemon mode) in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer.
CVSS Score: 10.0 (HIGH)
References: http://proxytunnel.sourceforge.net/news.html; http://www.gentoo.org/security/en/glsa/glsa-200411-07.xml; http://www.securityfocus.com/bid/11592
CVE: CVE-2004-1001
Published: 2005-03-01
Description: Unknown vulnerability in the passwd_check function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pam_chauthtok function call is not properly handled.
CVSS Score: 4.6 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000894; http://secunia.com/advisories/13028; http://www.debian.org/security/2004/dsa-585
CVE: CVE-2004-1002
Published: 2005-03-01
Description: Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service (daemon crash) via a CBCP packet with an invalid length value that causes pppd to access an incorrect memory location.
CVSS Score: 7.5 (HIGH)
CWE: CWE-191
References: http://www.securityfocus.com/archive/1/379450; https://exchange.xforce.ibmcloud.com/vulnerabilities/17874; https://www.ubuntu.com/usn/usn-12-1/
CVE: CVE-2004-1003
Published: 2005-03-01
Description: Trend ScanMail allows remote attackers to obtain potentially sensitive information or disable the anti-virus capability via the smency.nsf file.
CVSS Score: 5.0 (MEDIUM)
References: http://cgi.nessus.org/plugins/dump.php3?id=14312; https://exchange.xforce.ibmcloud.com/vulnerabilities/17962; http://cgi.nessus.org/plugins/dump.php3?id=14312
CVE: CVE-2004-1006
Published: 2005-03-01
Description: Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2004-10/0287.html; http://archives.neohapsis.com/archives/bugtraq/2004-11/0037.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2449&w=2
CVE: CVE-2004-1007
Published: 2005-03-01
Description: The quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 allows remote attackers to cause a denial of service (application crash) via mail headers that cause a line feed (LF) to be replaced by a null byte that is written to an incorrect memory address.
CVSS Score: 5.0 (MEDIUM)
References: http://bogofilter.sourceforge.net/security/bogofilter-SA-2004-01; https://exchange.xforce.ibmcloud.com/vulnerabilities/17916; http://bogofilter.sourceforge.net/security/bogofilter-SA-2004-01
CVE: CVE-2004-1010
Published: 2005-03-01
Description: Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname.
CVSS Score: 10.0 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028379.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1053&w=2; http://secunia.com/advisories/13094/
CVE: CVE-2004-1021
Published: 2005-03-01
Description: iCal before 1.5.4 on Mac OS X 10.2.3, and other later versions, does not alert the user when handling calendars that use alarms, which allows attackers to execute programs and send e-mail via alarms.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce//2004/Nov/msg00000.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/18209; http://lists.apple.com/archives/security-announce//2004/Nov/msg00000.html
CVE: CVE-2004-1027
Published: 2005-03-01
Description: Directory traversal vulnerability in the -x (extract) command line option in unarj allows remote attackers to overwrite arbitrary files via an arj archive with filenames that contain .. (dot dot) sequences.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027348.html; http://lwn.net/Articles/121827/; http://security.gentoo.org/glsa/glsa-200411-29.xml
CVE: CVE-2004-1029
Published: 2005-03-01
Description: The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://jouko.iki.fi/adv/javaplugin.html; http://lists.apple.com/archives/security-announce/2005/Feb/msg00000.html; http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html
CVE: CVE-2004-1030
Published: 2005-03-01
Description: fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by calling fcronsighup with an arbitrary file, which reveals the contents of the file that can not be parsed in an error message.
CVSS Score: 2.1 (LOW)
References: http://security.gentoo.org/glsa/glsa-200411-27.xml; http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false; http://www.securityfocus.com/bid/11684
CVE: CVE-2004-1031
Published: 2005-03-01
Description: fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass access restrictions and load an arbitrary configuration file by starting an suid process and pointing the fcronsighup configuration file to a /proc entry that is owned by root but modifiable by the user, such as /proc/self/cmdline or /proc/self/environ.
CVSS Score: 7.2 (HIGH)
References: http://security.gentoo.org/glsa/glsa-200411-27.xml; http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false; http://www.securityfocus.com/bid/11684
CVE: CVE-2004-1032
Published: 2005-03-01
Description: fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete arbitrary files or create arbitrary empty files via a target filename with a large number of leading slash (/) characters such that fcronsighup does not properly append the intended fcrontab.sig to the resulting string.
CVSS Score: 2.1 (LOW)
References: http://security.gentoo.org/glsa/glsa-200411-27.xml; http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false; https://exchange.xforce.ibmcloud.com/vulnerabilities/18077
CVE: CVE-2004-1033
Published: 2005-03-01
Description: Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable.
CVSS Score: 2.1 (LOW)
References: http://security.gentoo.org/glsa/glsa-200411-27.xml; http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false; http://www.securityfocus.com/bid/11684
CVE: CVE-2004-1034
Published: 2005-03-01
Description: Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media (.ram) playlist file.
CVSS Score: 10.0 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028061.html; http://secunia.com/advisories/13117/; http://security.gentoo.org/glsa/glsa-200411-14.xml
CVE: CVE-2004-1035
Published: 2005-03-01
Description: Multiple integer signedness errors in (1) imapcommon.c, (2) main.c, (3) request.c, and (4) select.c for up-imapproxy IMAP proxy 1.2.2 allow remote attackers to cause a denial of service (server crash) and possibly leak sensitive information via certain literal values that are not properly handled when using the IMAP_Line_Read function.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0773&w=2; https://exchange.xforce.ibmcloud.com/vulnerabilities/17999; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0773&w=2
CVE: CVE-2004-1036
Published: 2005-03-01
Description: Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in mime.php for SquirrelMail 1.4.3a and earlier, and 1.5.1-cvs before 23rd October 2004, allows remote attackers to execute arbitrary web script or HTML.
CVSS Score: 6.8 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000905; http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html
CVE: CVE-2004-1037
Published: 2005-03-01
Description: The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2004-11/0201.html; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000918; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6456&w=2
CVE: CVE-2004-1038
Published: 2005-03-01
Description: A design error in the IEEE1394 specification allows attackers with physical access to a device to read and write to sensitive memory using a modified FireWire/IEEE 1394 client, thus bypassing intended restrictions that would normally require greater degrees of physical access to exploit.  NOTE: this was reported in 2008 to affect Windows Vista, but some Linux-based operating systems have protection mechanisms against this attack.
CVSS Score: 7.2 (HIGH)
References: http://it.slashdot.org/article.pl?sid=08/03/04/1258210; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0790&w=2; http://md.hudora.de/presentations/firewire/2005-firewire-cansecwest.pdf
CVE: CVE-2004-1051
Published: 2005-03-01
Description: sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program's full pathname.
CVSS Score: 7.2 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005/May/msg00001.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1192&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5675&w=2
CVE: CVE-2004-1052
Published: 2005-03-01
Description: Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many (1) ! (exclamation) or (2) @ (at sign) characters.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7839&w=2; http://secunia.com/advisories/13149/; http://security.lss.hr/en/index.php?page=details&ID=LSS-2004-11-03
CVE: CVE-2004-1053
Published: 2005-03-01
Description: Integer overflow in fetch on FreeBSD 4.1 through 5.3 allows remote malicious servers to execute arbitrary code via certain HTTP headers in an HTTP response, which lead to a buffer overflow.
CVSS Score: 10.0 (HIGH)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:16.fetch.asc; http://www.securityfocus.com/bid/11702; https://exchange.xforce.ibmcloud.com/vulnerabilities/18160
CVE: CVE-2004-1055
Published: 2005-03-01
Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PmaAbsoluteUri parameter, (2) the zero_rows parameter in read_dump.php, (3) the confirm form, or (4) an error message generated by the internal phpMyAdmin parser.
CVSS Score: 6.8 (MEDIUM)
References: http://www.netvigilance.com/html/advisory0005.htm; http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2004-3; https://exchange.xforce.ibmcloud.com/vulnerabilities/18158
CVE: CVE-2005-0622
Published: 2005-03-01
Description: RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to view the PHP source code via an HTTP GET request for a filename with a trailing (1) . (dot) or (2) space.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3313&w=2; http://secunia.com/advisories/14453; http://www.security.org.sg/vuln/raidenhttpd1132.html
CVE: CVE-2005-0623
Published: 2005-03-01
Description: Buffer overflow in RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to execute arbitrary code via a long URL.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3313&w=2; http://secunia.com/advisories/14453; http://www.security.org.sg/vuln/raidenhttpd1132.html
CVE: CVE-2005-0628
Published: 2005-03-01
Description: Multiple cross-site scripting (XSS) vulnerabilities in Forumwa 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter in search.php or the (2) body or (3) subject of a forum message.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6900&w=2; http://secunia.com/advisories/14418; http://www.securityfocus.com/bid/12689
CVE: CVE-2005-0629
Published: 2005-03-01
Description: Multiple cross-site scripting (XSS) vulnerabilities in profile.php in 427BB 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) Avatar parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6113&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4167&w=2; http://secunia.com/advisories/14434
CVE: CVE-2005-0630
Published: 2005-03-01
Description: sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the orig parameter.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1589&w=2; http://pblforum.drmartinus.de/post.php?cat=2&fid=2&pid=40&page=1; http://www.securityfocus.com/bid/12690
CVE: CVE-2005-0631
Published: 2005-03-01
Description: delpm.php in PBLang 4.63 allows remote authenticated users to delete arbitrary PM files by modifying the "id" and "a" parameters.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4608&w=2; http://pblforum.drmartinus.de/post.php?cat=2&fid=2&pid=42&page=1; http://www.securityfocus.com/bid/12694
CVE: CVE-2005-0632
Published: 2005-03-01
Description: PHP remote file inclusion vulnerability in auth.php in PHPNews 1.2.4 and possibly 1.2.3, allows remote attackers to execute arbitrary PHP code via the path parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4719&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8570&w=2; http://secunia.com/advisories/14449
CVE: CVE-2005-0605
Published: 2005-03-02
Description: scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.5/SCOSA-2006.5.txt; ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.57/SCOSA-2005.57.txt; ftp://patches.sgi.com/support/free/security/advisories/20060403-01-U
CVE: CVE-2005-0620
Published: 2005-03-02
Description: Einstein 1.0 stores credit card information in plaintext in the world-readable wallets.dat file, which allows local users to steal the information.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/14455; http://secunia.com/advisories/14455
CVE: CVE-2005-0633
Published: 2005-03-02
Description: Buffer overflow in Trillian 3.0 and Pro 3.0 allows remote attackers to execute arbitrary code via a crafted PNG image file.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4809&w=2; http://www.securiteam.com/exploits/5KP030KF5E.html; http://www.securityfocus.com/bid/12703
CVE: CVE-2005-0636
Published: 2005-03-02
Description: Format string vulnerability in Foxmail Server 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the USER command.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/14145; http://securitytracker.com/id?1013356; http://www.securityfocus.com/archive/1/391960
CVE: CVE-2005-0638
Published: 2005-03-02
Description: xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.
CVSS Score: 7.5 (HIGH)
References: http://bugs.gentoo.org/show_bug.cgi?id=79762; http://secunia.com/advisories/14459; http://secunia.com/advisories/14462
CVE: CVE-2005-0639
Published: 2005-03-02
Description: Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via "buffer management errors" from certain image properties, some of which may be related to integer overflows in PPM files.
CVSS Score: 7.5 (HIGH)
References: http://bugs.gentoo.org/show_bug.cgi?id=79762; http://secunia.com/advisories/14459; http://security.gentoo.org/glsa/glsa-200503-05.xml