deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-0136
Published: 2005-12-31
Description: The Linux kernel before 2.6.11 on the Itanium IA64 platform has certain "ptrace corner cases" that allow local users to cause a denial of service (crash) via crafted syscalls, possibly related to MCA/INIT, a different vulnerability than CVE-2005-1761.
CVSS Score: 2.1 (LOW)
References: http://lists.alioth.debian.org/pipermail/kernel-svn-changes/2005-August/002597.html; http://openvz.org/news/updates/kernel-022stab045.1-released; http://secunia.com/advisories/17002
CVE: CVE-2005-0489
Published: 2005-12-31
Description: The /proc handling (proc/base.c) Linux kernel 2.4 before 2.4.17 allows local users to cause a denial of service via unknown vectors that cause an invalid access of free memory.
CVSS Score: 4.9 (MEDIUM)
References: http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes; http://secunia.com/advisories/20163; http://secunia.com/advisories/20202
CVE: CVE-2005-0528
Published: 2005-12-31
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2003-0985.  Reason: This candidate is a duplicate of CVE-2003-0985.  Notes: All CVE users should reference CVE-2003-0985 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-0985
Published: 2005-12-31
Description: Unspecified vulnerability in the Mac OS X kernel before 10.3.8 allows local users to cause a denial of service (temporary hang) via unspecified attack vectors related to the fan control unit (FCU) driver.
CVSS Score: 2.1 (LOW)
References: http://docs.info.apple.com/article.html?artnum=301324; http://docs.info.apple.com/article.html?artnum=301324
CVE: CVE-2005-1528
Published: 2005-12-31
Description: Untrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitrary libraries via a LD_LIBRARY_PATH environment variable that references a malicious library.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/18750; http://securitytracker.com/id?1015599; http://www.idefense.com/intelligence/vulnerabilities/display.php?id=379
CVE: CVE-2005-1726
Published: 2005-12-31
Description: The CoreGraphics Window Server in Mac OS X 10.4.1 allows local users with console access to gain privileges by "launching commands into root sessions."
CVSS Score: 4.6 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=301742; http://lists.apple.com/archives/Security-announce/2005/Jun/msg00000.html; http://secunia.com/advisories/15481
CVE: CVE-2005-1730
Published: 2005-12-31
Description: Multiple vulnerabilities in the OpenSSL ASN.1 parser, as used in Novell iManager 2.0.2, allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted packets, as demonstrated by "OpenSSL ASN.1 brute forcer."  NOTE: this issue might overlap CVE-2004-0079, CVE-2004-0081, or CVE-2004-0112.
CVSS Score: 9.3 (HIGH)
References: http://www.cirt.dk/advisories/cirt-32-advisory.pdf; http://www.securityfocus.com/bid/8732; http://www.securityfocus.com/data/vulnerabilities/exploits/ASN.1-Brute.c
CVE: CVE-2005-1752
Published: 2005-12-31
Description: viewFile.php in the scm component of Gforge before 4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file_name parameter.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9830&w=2; http://secunia.com/advisories/13845; http://www.securityfocus.com/bid/13716
CVE: CVE-2005-1753
Published: 2005-12-31
Description: ReadMessage.jsp in JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to view other users' e-mail attachments via a direct request to /mailboxesdir/username@domainname. NOTE: Sun and Apache dispute this issue.  Sun states: "The report makes references to source code and files that do not exist in the mentioned products.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2367&w=2; http://tomcat.apache.org/security-5.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2367&w=2
CVE: CVE-2005-1754
Published: 2005-12-31
Description: JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to read arbitrary files via a full pathname in the argument to the Download parameter.  NOTE: Sun and Apache dispute this issue.  Sun states: "The report makes references to source code and files that do not exist in the mentioned products.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2367&w=2; http://tomcat.apache.org/security-5.html; http://www.securityfocus.com/bid/13753
CVE: CVE-2005-1755
Published: 2005-12-31
Description: PHP remote file inclusion vulnerability in poll_vote.php in PHP Poll Creator 1.01 allows remote attackers to execute arbitrary PHP code via the relativer_pfad parameter.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9860&w=2; http://secunia.com/advisories/15510; http://securitytracker.com/id?1014061
CVE: CVE-2005-1918
Published: 2005-12-31
Description: The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/".
CVSS Score: 2.6 (LOW)
CWE: CWE-22
References: ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc; http://secunia.com/advisories/18988; http://secunia.com/advisories/19130
CVE: CVE-2005-1919
Published: 2005-12-31
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2005-1924
Published: 2005-12-31
Description: The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute arbitrary commands via shell metacharacters in (1) the fpr parameter to the deleteKey function in gpg_keyring.php, as called by (a) import_key_file.php, (b) import_key_text.php, and (c) keyring_main.php; and (2) the keyserver parameter to the gpg_recv_key function in gpg_key_functions.php, as called by gpg_options.php.  NOTE: this issue may overlap CVE-2007-3636.
CVSS Score: 9.3 (HIGH)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=329; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=331; http://osvdb.org/37923
CVE: CVE-2005-1939
Published: 2005-12-31
Description: Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." (dot dot) sequences in a request to the Report service (TCP 8022).
CVSS Score: 5.0 (MEDIUM)
References: http://cirt.dk/advisories/cirt-40-advisory.pdf; http://secunia.com/advisories/15500; http://secunia.com/secunia_research/2005-14/advisory/
CVE: CVE-2005-1976
Published: 2005-12-31
Description: Novell NetMail 3.5.2a, 3.5.2b, and 3.5.2c, when running on Linux, sets the owner and group ID to 500 for certain files, which could allow users or groups with that ID to execute arbitrary code or cause a denial of service by modifying those files.
CVSS Score: 1.7 (LOW)
References: http://secunia.com/advisories/15763; http://securitytracker.com/id?1014251; http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098022.htm
CVE: CVE-2005-2194
Published: 2005-12-31
Description: Unspecified vulnerability in the Apple Mac OS X kernel before 10.4.2 allows remote attackers to cause a denial of service (kernel panic) via a crafted TCP packet, possibly related to source routing or loose source routing.
CVSS Score: 5.0 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=301948; http://lists.apple.com/archives/Security-announce/2005/Jul/msg00000.html; http://secunia.com/advisories/16047
CVE: CVE-2005-2315
Published: 2005-12-31
Description: Buffer overflow in Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to execute arbitrary code via a large number of large DNS packets with the Z and QR flags cleared.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/16142; http://securitytracker.com/id?1014557; http://sourceforge.net/forum/forum.php?forum_id=482568
CVE: CVE-2005-2316
Published: 2005-12-31
Description: Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to cause a denial of service (infinite recursion) via a DNS packet that uses message compression in the QNAME and two pointers that point to each other (circular buffer).
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/16142; http://securitytracker.com/id?1014557; http://sourceforge.net/forum/forum.php?forum_id=482568
CVE: CVE-2005-2340
Published: 2005-12-31
Description: Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted (1) QuickTime Image File (QTIF), (2) PICT, or (3) JPEG format image with a long data field.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0392.html; http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0398.html; http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0402.html
CVE: CVE-2005-2341
Published: 2005-12-31
Description: Heap-based buffer overflow in Research in Motion (RIM) BlackBerry Attachment Service allows remote attackers to cause a denial of service (hang) via an e-mail attachment with a crafted TIFF file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/18277; http://securitytracker.com/id?1015426; http://www.kb.cert.org/vuls/id/570768
CVE: CVE-2005-2342
Published: 2005-12-31
Description: Research in Motion (RIM) BlackBerry Router allows remote attackers to cause a denial of service (communication disruption) via crafted Server Routing Protocol (SRP) packets.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/18277; http://securitytracker.com/id?1015427; http://www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/728075/728850/728215/?nodeid=1167898
CVE: CVE-2005-2343
Published: 2005-12-31
Description: Research in Motion (RIM) BlackBerry Handheld web browser for BlackBerry Handheld before 4.0.2 allows remote attackers to cause a denial of service (hang) via a Java Application Description (JAD) file with a long application name and vendor string, which prevents a browser dialog from being properly dismissed.
CVSS Score: 2.6 (LOW)
References: http://securitytracker.com/id?1015428; http://www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/7925/8142/?nodeid=1167791; http://www.kb.cert.org/vuls/id/829400
CVE: CVE-2005-2344
Published: 2005-12-31
Description: The BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.0 to version 4.0 Service Pack 2 allows attackers to cause a denial of service via a malformed Portable Network Graphics (PNG) file that triggers a heap-based buffer overflow.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/18393; http://www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/728075/728850/728215/?nodeid=1167794; http://www.kb.cert.org/vuls/id/646976
CVE: CVE-2005-2454
Published: 2005-12-31
Description: IBM Lotus Notes 6.5.4 and 6.5.5, and 7.0.0 and 7.0.1, uses insecure default permissions (Everyone/Full Control) for the "Notes" folder and all children, which allows local users to gain privileges and modify, add, or delete files in that folder.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/19537; http://secunia.com/advisories/27342; http://secunia.com/secunia_research/2005-29/advisory/
CVE: CVE-2005-2460
Published: 2005-12-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in Kayako liveResponse 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter or (2) name field when entering a session or sending a message.
CVSS Score: 5.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8863&w=2; http://secunia.com/advisories/16286; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5
CVE: CVE-2005-2461
Published: 2005-12-31
Description: Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to execute arbitrary SQL commands via the (1) year or (2) date parameter.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8863&w=2; http://secunia.com/advisories/16286; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5
CVE: CVE-2005-2462
Published: 2005-12-31
Description: Kayako liveResponse 2.x, when logging in a user, records the password in plaintext in the URL, which allows local users and possibly remote attackers to gain privileges.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8863&w=2; http://secunia.com/advisories/16286; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5
CVE: CVE-2005-2463
Published: 2005-12-31
Description: Kayako liveResponse 2.x allows remote attackers to obtain sensitive information via a direct request to addressbook.php and other include scripts, which reveals the path in an error message.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8863&w=2; http://secunia.com/advisories/16286; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5
CVE: CVE-2005-2464
Published: 2005-12-31
Description: login.php in PCXP/TOPPE CMS allows remote attackers to bypass authentication and gain privileges by modifying the cookie to match the target userid.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1106&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1106&w=2
CVE: CVE-2005-2465
Published: 2005-12-31
Description: Cross-site scripting (XSS) vulnerability in pm.php in PCXP/TOPPE CMS allows remote attackers to inject arbitrary web script or HTML via the msg variable.
CVSS Score: 5.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1106&w=2; http://www.osvdb.org/18715; http://www.securityfocus.com/bid/14428
CVE: CVE-2005-2466
Published: 2005-12-31
Description: Multiple SQL injection vulnerabilities in the auth_user function in admin.php in OpenBook 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9785&w=2; http://securitytracker.com/id?1014606; http://www.osvdb.org/18475
CVE: CVE-2005-2467
Published: 2005-12-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to view.php, (2) release parameter to list.php, or (3) F parameter to get_jsrs_data.php.
CVSS Score: 5.8 (MEDIUM)
References: http://lists.mysql.com/eventum-users/2072; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7958&w=2; http://secunia.com/advisories/16304
CVE: CVE-2005-2468
Published: 2005-12-31
Description: Multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) isCorrectPassword or (2) userExist function in class.auth.php, getCustomFieldReport function in (4) custom_fields.php, (5) custom_fields_graph.php, or (6) class.report.php, or the insert function in (7) releases.php or (8) class.release.php.
CVSS Score: 6.4 (MEDIUM)
References: http://lists.mysql.com/eventum-users/2072; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7958&w=2; http://secunia.com/advisories/16304
CVE: CVE-2005-2527
Published: 2005-12-31
Description: Race condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to corrupt files or create arbitrary files via unspecified attack vectors related to a temporary directory, possibly due to a symlink attack.
CVSS Score: 1.2 (LOW)
CWE: CWE-59
References: http://docs.info.apple.com/article.html?artnum=302266; http://lists.apple.com/archives/security-announce/2005/Sep/msg00001.html; http://secunia.com/advisories/16808
CVE: CVE-2005-2529
Published: 2005-12-31
Description: Unspecified vulnerability in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to gain privileges via unspecified attack vectors relating to "the utility used to update Java shared archives."
CVSS Score: 10.0 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=302266; http://lists.apple.com/archives/Security-announce/2005/Sep/msg00000.html; http://secunia.com/advisories/16808
CVE: CVE-2005-2530
Published: 2005-12-31
Description: Unspecified vulnerability in Java 1.3.1 before 1.3.1_16 on Apple Mac OS X allows an untrusted applet to gain privileges, related to "Mac OS X specific extensions."
CVSS Score: 10.0 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=302265; http://lists.apple.com/archives/security-announce/2005/Sep/msg00001.html; http://secunia.com/advisories/16808
CVE: CVE-2005-2618
Published: 2005-12-31
Description: Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via (1) a UUE file containing an encoded file with a long filename handled by uudrdr.dll, (2) a compressed ZIP file with a long filename handled by kvarcve.dll, (3) a TAR archive with a long filename that is extracted to a directory with a long path handled by the TAR reader (tarrdr.dll), (4) an email that contains a long HTTP, FTP, or // link handled by the HTML speed reader (htmsr.dll) or (5) an email containing a crafted long link handled by the HTML speed reader (htmsr.dll).
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/16100; http://secunia.com/advisories/16280; http://secunia.com/secunia_research/2005-32/advisory/
CVE: CVE-2005-2619
Published: 2005-12-31
Description: Directory traversal vulnerability in kvarcve.dll in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allows remote attackers to delete arbitrary files via a (1) ZIP, (2) UUE or (3) TAR archive that contains a .. (dot dot) in the filename, which is not properly handled when generating a preview.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/16100; http://secunia.com/advisories/16280; http://secunia.com/secunia_research/2005-30/advisory/
CVE: CVE-2005-2711
Published: 2005-12-31
Description: ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges before launching help from the "More Info" button in the "Application Protection" dialog, which allows local users to execute arbitrary programs as SYSTEM.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/19327; http://securitytracker.com/id?1015820; http://securitytracker.com/id?1015821
CVE: CVE-2005-2712
Published: 2005-12-31
Description: The LDAP server (nldap.exe) in IBM Lotus Domino before 7.0.1, 6.5.5, and 6.5.4 FP2 allows remote attackers to cause a denial of service (crash) via a long bind request, which triggers a null dereference.
CVSS Score: 7.8 (HIGH)
References: http://securitytracker.com/id?1015611; http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21229907; http://www.idefense.com/intelligence/vulnerabilities/display.php?id=389
CVE: CVE-2005-2713
Published: 2005-12-31
Description: passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to create arbitrary world-writable files as root by specifying an alternate file in the password database option.
CVSS Score: 6.8 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=303382; http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html; http://secunia.com/advisories/19064
CVE: CVE-2005-2714
Published: 2005-12-31
Description: passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to overwrite arbitrary files via a symlink attack on the .pwtmp.[PID] temporary file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-59
References: http://docs.info.apple.com/article.html?artnum=303382; http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html; http://secunia.com/advisories/19064
CVE: CVE-2005-2738
Published: 2005-12-31
Description: Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X does not prevent multiple programs from opening the same port as a Java ServerSocket, which allows local users to operate a Java program that intercepts network data intended for the ServerSocket of a different Java program.
CVSS Score: 5.0 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=302265; http://lists.apple.com/archives/security-announce/2005/Sep/msg00001.html; http://secunia.com/advisories/16808
CVE: CVE-2005-2762
Published: 2005-12-31
Description: Avaya VPNRemote before 4.2.33 stores credentials in cleartext in process memory, which allows attackers to obtain the VPN user's credentials.
CVSS Score: 2.1 (LOW)
References: http://support.avaya.com/elmodocs2/security/ASA-2005-230.pdf; http://support.avaya.com/elmodocs2/security/ASA-2005-230.pdf
CVE: CVE-2005-2922
Published: 2005-12-31
Description: Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, and Helix Player allows remote malicious servers to cause a denial of service (crash) and possibly execute arbitrary code via a chunked Transfer-Encoding HTTP response in which either (1) the chunk header length is specified as -1, (2) the chunk header with a length that is less than the actual amount of sent data, or (3) a missing chunk header.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/19358; http://secunia.com/advisories/19365; http://securitytracker.com/id?1015808
CVE: CVE-2005-2932
Published: 2005-12-31
Description: Multiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security Suite 5.5.062.004 and 6.5.737, use insecure default permissions for critical files, which allows local users to gain privileges or bypass security controls.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=584; http://secunia.com/advisories/26513; http://securitytracker.com/id?1018588
CVE: CVE-2005-2934
Published: 2005-12-31
Description: Unspecified vulnerability in ptrace in SCO UnixWare 7.1.3 and 7.1.4 allows local users to gain privileges via unspecified vectors.
CVSS Score: 7.2 (HIGH)
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.9/SCOSA-2006.9.txt; http://secunia.com/advisories/18958; http://securitytracker.com/id?1015676
CVE: CVE-2005-3057
Published: 2005-12-31
Description: The FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and other versions before 3.0 MR1, allows remote attackers to bypass the Fortinet FTP anti-virus engine by sending a STOR command and uploading a file before the FTP server response has been sent, as demonstrated using LFTP.
CVSS Score: 10.0 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042139.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8103&w=2; http://secunia.com/advisories/18844
CVE: CVE-2005-3058
Published: 2005-12-31
Description: Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via an (1) HTTP request terminated with a line feed (LF) and not carriage return line feed (CRLF) or (2) HTTP request with no Host field, which is still processed by most web servers without violating RFC2616.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042140.html; http://secunia.com/advisories/18844; http://www.fortiguard.com/advisory/FGA-2006-10.html