deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-0544
Published: 2005-05-02
Description: phpMyAdmin 2.6.1 allows remote attackers to obtain the full path of the server via direct requests to (1) sqlvalidator.lib.php, (2) sqlparser.lib.php, (3) select_theme.lib.php, (4) select_lang.lib.php, (5) relation_cleanup.lib.php, (6) header_meta_style.inc.php, (7) get_foreign.lib.php, (8) display_tbl_links.lib.php, (9) display_export.lib.php, (10) db_table_exists.lib.php, (11) charset_conversion.lib.php, (12) ufpdf.php, (13) mysqli.dbi.lib.php, (14) setup.php, or (15) cookie.auth.lib.php, which reveals the path in a PHP error message.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/14382; http://sourceforge.net/tracker/index.php?func=detail&aid=1149383&group_id=23067&atid=377408; http://www.gentoo.org/security/en/glsa/glsa-200503-07.xml
CVE: CVE-2005-0545
Published: 2005-05-02
Description: Microsoft Windows XP Pro SP2 and Windows 2000 Server SP4 running Active Directory allow local users to bypass group policies that restrict access to hidden drives by using the browse feature in Office 10 applications such as Word or Excel, or using a flash drive.  NOTE: this issue has been disputed in a followup post.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1930&w=2; http://www.securityfocus.com/archive/1/391332; http://www.securityfocus.com/bid/12641
CVE: CVE-2005-0546
Published: 2005-05-02
Description: Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imapd annotate extension, (2) an off-by-one error in "cached header handling," (3) a stack-based buffer overflow in fetchnews, or (4) a stack-based buffer overflow in imapd.
CVSS Score: 7.5 (HIGH)
References: http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&msg=33723; http://bugs.gentoo.org/show_bug.cgi?id=82404; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000937
CVE: CVE-2005-0549
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the "View Log Files" function.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1628&w=2; http://sunsolve.sun.com/search/document.do?assetkey=1-26-57737-1; http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000230.1-1
CVE: CVE-2005-0550
Published: 2005-05-02
Description: Buffer overflow in Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to cause a denial of service (i.e., system crash) via a malformed request, aka "Object Management Vulnerability".
CVSS Score: 2.1 (LOW)
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1271; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2043
CVE: CVE-2005-0551
Published: 2005-05-02
Description: Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window information with a long FaceName value.
CVSS Score: 10.0 (HIGH)
References: http://www.idefense.com/application/poi/display?id=230&type=vulnerabilities; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1822
CVE: CVE-2005-0553
Published: 2005-05-02
Description: Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail, aka "DHTML Object Memory Corruption Vulnerability".
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/14922/; http://www.idefense.com/application/poi/display?id=228&type=vulnerabilities; http://www.kb.cert.org/vuls/id/774338
CVE: CVE-2005-0554
Published: 2005-05-02
Description: Buffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL with a long hostname, aka "URL Parsing Memory Corruption Vulnerability."
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14922/; http://www.idefense.com/application/poi/display?id=229&type=vulnerabilities; http://www.kb.cert.org/vuls/id/756122
CVE: CVE-2005-0558
Published: 2005-05-02
Description: Buffer overflow in Microsoft Word 2000, Word 2002, and Word 2003 allows remote attackers to execute arbitrary code via a crafted document.
CVSS Score: 5.1 (MEDIUM)
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-023; https://exchange.xforce.ibmcloud.com/vulnerabilities/19828; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1236
CVE: CVE-2005-0560
Published: 2005-05-02
Description: Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers to execute arbitrary code via a crafted X-LINK2STATE extended verb request to the SMTP port.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3420&w=2; http://secunia.com/advisories/14920/; http://www.kb.cert.org/vuls/id/275193
CVE: CVE-2005-0565
Published: 2005-05-02
Description: The Announce module in phpWebSite 0.10.0 and earlier allows remote attackers to execute arbitrary PHP code by setting the Image field to reference a PHP file whose name contains a .gif.php extension.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0828&w=2; http://secunia.com/advisories/14399; http://securitytracker.com/id?1013298
CVE: CVE-2005-0567
Published: 2005-05-02
Description: Multiple PHP remote file inclusion vulnerabilities in phpMyAdmin 2.6.1 allow remote attackers to execute arbitrary PHP code by modifying the (1) theme parameter to phpmyadmin.css.php or (2) cfg[Server][extension] parameter to database_interface.lib.php to reference a URL on a remote web server that contains the code.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1154&w=2; http://secunia.com/advisories/14382/; http://sourceforge.net/tracker/index.php?func=detail&aid=1149381&group_id=23067&atid=377408
CVE: CVE-2005-0568
Published: 2005-05-02
Description: Soldier of Fortune II 1.03 gold allows remote attackers to cause a denial of service (application crash) via a large cl_guid value, which results in an invalid pointer dereference.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/sof2guidboom-adv.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3807&w=2; http://secunia.com/advisories/13289
CVE: CVE-2005-0569
Published: 2005-05-02
Description: Multiple SQL injection vulnerabilities in PunBB 1.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) language parameter to register.php, (2) change email feature in profile.php, (3) posts or (4) topics parameter to moderate.php.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0666&w=2; http://secunia.com/advisories/14394; http://secunia.com/advisories/14538
CVE: CVE-2005-0570
Published: 2005-05-02
Description: profile.php in PunBB 1.2.1 allows remote attackers to cause a denial of service (account lockout) by setting the user's password to NULL.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0666&w=2; http://secunia.com/advisories/14394; http://www.securityfocus.com/bid/12652
CVE: CVE-2005-0571
Published: 2005-05-02
Description: admin_loader.php in PunBB 1.2.1 allows remote attackers to read arbitrary files via the plugin parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0666&w=2; http://secunia.com/advisories/14394; http://www.punbb.org/changelogs/1.2.1_to_1.2.2.txt
CVE: CVE-2005-0572
Published: 2005-05-02
Description: index.php in phpWebSite 0.10.0 and earlier allows remote attackers to obtain sensitive information via an invalid SEA_search_module parameter, which reveals the path in a PHP error message.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6369&w=2; http://neossecurity.net/Advisories/Advisory-05.txt; http://www.gentoo.org/security/en/glsa/glsa-200503-04.xml
CVE: CVE-2005-0573
Published: 2005-05-02
Description: Gaim 1.1.3 on Windows systems allows remote attackers to cause a denial of service (client crash) via a file transfer in which the filename contains "(" or ")" (parenthesis) characters.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]1841&w=2; http://securitytracker.com/id?1013300; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]1841&w=2
CVE: CVE-2005-0574
Published: 2005-05-02
Description: Directory traversal vulnerability in CIS WebServer 3.5.13 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the URL.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/391560; http://www.securityfocus.com/bid/12662; http://www.securityfocus.com/archive/1/391560
CVE: CVE-2005-0575
Published: 2005-05-02
Description: Buffer overflow in Stormy Studios Knet 1.04c and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP GET request.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5666&w=2; http://secunia.com/advisories/14400; http://www.exploit-db.com/exploits/24897
CVE: CVE-2005-0576
Published: 2005-05-02
Description: Unknown vulnerability in Standard Type Services Framework (STSF) Font Server Daemon (stfontserverd) in Solaris 9 allows local users to modify or delete arbitrary files.
CVSS Score: 3.6 (LOW)
References: http://secunia.com/advisories/14381; http://sunsolve.sun.com/search/document.do?assetkey=1-26-57738-1; http://www.securityfocus.com/bid/12656
CVE: CVE-2005-0577
Published: 2005-05-02
Description: Format string vulnerability in DNA MKBold-MKItalic 0.06_1 and earlier allows remote attackers to execute arbitrary code via crafted BDF font files.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/14398; http://www.freshports.org/x11-fonts/mkbold-mkitalic/; http://www.vuxml.org/freebsd/32d4f0f1-85c3-11d9-b6dc-0007e900f747.html
CVE: CVE-2005-0578
Published: 2005-05-02
Description: Firefox before 1.0.1 and Mozilla Suite before 1.7.6 use a predictable filename for the plugin temporary directory, which allows local users to delete arbitrary files of other users via a symlink attack on the plugtmp directory.
CVSS Score: 2.1 (LOW)
References: http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml; http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml; http://www.mozilla.org/security/announce/mfsa2005-28.html
CVE: CVE-2005-0581
Published: 2005-05-02
Description: Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code via (1) certain long fields in the Checksum item in a GCR request, (2) a long IP address, hostname, or netmask values in a GCR request, (3) a long last parameter in a GETCONFIG packet, or (4) long values in a request with an invalid format.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8704&w=2; http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp; http://www.idefense.com/application/poi/display?id=210&type=vulnerabilities
CVE: CVE-2005-0582
Published: 2005-05-02
Description: Buffer overflow in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in a PUTOLF request.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8704&w=2; http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp; http://www.idefense.com/application/poi/display?id=211&type=vulnerabilities
CVE: CVE-2005-0583
Published: 2005-05-02
Description: Directory traversal vulnerability in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to create arbitrary files via .. (dot dot) sequences in a PUTOLF request.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8704&w=2; http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp; http://www.idefense.com/application/poi/display?id=212&type=vulnerabilities
CVE: CVE-2005-0584
Published: 2005-05-02
Description: Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that generated the prompt, which could facilitate spoofing and phishing attacks.
CVSS Score: 2.6 (LOW)
References: http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml; http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml; http://www.mozilla.org/security/announce/mfsa2005-24.html
CVE: CVE-2005-0586
Published: 2005-05-02
Description: Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the extensions of files to download via the Content-Disposition header, which could be used to trick users into downloading dangerous content.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/13258; http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml; http://www.mozilla.org/security/announce/mfsa2005-22.html
CVE: CVE-2005-0588
Published: 2005-05-02
Description: Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system.
CVSS Score: 5.0 (MEDIUM)
References: http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml; http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml; http://www.mozilla.org/security/announce/mfsa2005-20.html
CVE: CVE-2005-0589
Published: 2005-05-02
Description: The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that monitors the values that are generated by the autocomplete capability.
CVSS Score: 5.0 (MEDIUM)
References: http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml; http://www.mozilla.org/security/announce/mfsa2005-19.html; http://www.redhat.com/support/errata/RHSA-2005-176.html
CVE: CVE-2005-0590
Published: 2005-05-02
Description: The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long "user:pass" sequence in the URL, which appears before the real hostname.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/19823; http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml; http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml
CVE: CVE-2005-0591
Published: 2005-05-02
Description: Firefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka "Firespoofing."
CVSS Score: 2.6 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2188&w=2; http://secunia.com/advisories/13786; http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml
CVE: CVE-2005-0595
Published: 2005-05-02
Description: Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand parameter.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-02/0599.html; http://secunia.com/advisories/14405; http://www.securityfocus.com/bid/12673
CVE: CVE-2005-0596
Published: 2005-05-02
Description: PHP 4 (PHP4) allows attackers to cause a denial of service (daemon crash) by using the readfile function on a file whose size is a multiple of the page size.
CVSS Score: 2.1 (LOW)
References: http://www.linuxcompatible.org/story42495.html; http://www.securityfocus.com/bid/12665; http://www.linuxcompatible.org/story42495.html
CVE: CVE-2005-0597
Published: 2005-05-02
Description: Cisco devices running Application and Content Networking System (ACNS) 5.0 before 5.0.17.6 and 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service (process restart) via a "crafted TCP connection."
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/14395; http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml; http://www.securityfocus.com/bid/12648
CVE: CVE-2005-0599
Published: 2005-05-02
Description: Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, or 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service (CPU consumption) via malformed IP packets.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/14395; http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml; http://www.securityfocus.com/bid/12648
CVE: CVE-2005-0601
Published: 2005-05-02
Description: Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, 5.1, or 5.2 use a default password when the setup dialog has not been run, which allows remote attackers to gain access.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14395; http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml; http://www.securityfocus.com/bid/12648
CVE: CVE-2005-0602
Published: 2005-05-02
Description: Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges.
CVSS Score: 6.2 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1943&w=2; http://secunia.com/advisories/17045; http://secunia.com/advisories/17342
CVE: CVE-2005-0604
Published: 2005-05-02
Description: lnss.exe in GFI Languard Network Security Scanner 5.0 stores the username and password in memory in plaintext, which could allow local administrators to obtain domain administrator credentials.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1528&w=2; http://www.hat-squad.com/en/000160.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1528&w=2
CVE: CVE-2005-0606
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in settings.inc.php for CubeCart 2.0.0 through 2.0.5, as used in multiple PHP files, allows remote attackers to inject arbitrary HTML or web script via the (1) cat_id, (2) PHPSESSID, (3) view_doc, (4) product, (5) session, (6) catname, (7) search, or (8) page parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://lostmon.blogspot.com/2005/02/cubecart-20x-multiple-variable-xss.html; http://secunia.com/advisories/14416; http://securitytracker.com/id?1013304
CVE: CVE-2005-0607
Published: 2005-05-02
Description: CubeCart 2.0.0 through 2.0.5 allows remote attackers to determine the full path of the server via direct calls without parameters to (1) information.php, (2) language.php, (3) list_docs.php, (4) popular_prod.php, (5) sale.php, (6) subfooter.inc.php, (7) subheader.inc.php, (8) cat_navi.php, or (9) check_sum.php, which reveals the path in a PHP error message.
CVSS Score: 5.0 (MEDIUM)
References: http://lostmon.blogspot.com/2005/02/cubecart-20x-multiple-variable-xss.html; http://securitytracker.com/id?1013304; http://www.cubecart.com/site/forums/index.php?showtopic=6032
CVE: CVE-2005-0611
Published: 2005-05-02
Description: Heap-based buffer overflow in RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2834&w=2; http://marc.info/?l=vulnwatch&m=[PII_REDACTED]9314&w=2; http://service.real.com/help/faq/security/050224_player/EN/
CVE: CVE-2005-0612
Published: 2005-05-02
Description: Cisco IP/VC Videoconferencing System 3510, 3520, 3525 and 3530 contain hard-coded default SNMP community strings, which allows remote attackers to gain access, cause a denial of service, and modify configuration.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14122; http://securitytracker.com/id?1013067; http://www.cisco.com/public/technotes/cisco-sa-20050202-ipvc.shtml
CVE: CVE-2005-0614
Published: 2005-05-02
Description: sessions.php in phpBB 2.0.12 and earlier allows remote attackers to gain administrator privileges via the autologinid value in a cookie.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0206&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0739&w=2; http://secunia.com/advisories/14413
CVE: CVE-2005-0615
Published: 2005-05-02
Description: Multiple SQL injection vulnerabilities in (1) index.php, (2) modules.php, or (3) admin.php in PostNuke 0.760-RC2 allow remote attackers to execute arbitrary SQL code via the catid parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2255&w=2; http://news.postnuke.com/Article2669.html; http://securitytracker.com/id?1013324
CVE: CVE-2005-0617
Published: 2005-05-02
Description: SQL injection vulnerability in dl-search.php in PostNuke 0.750 and 0.760-RC2 allows remote attackers to execute arbitrary SQL commands via the show parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5864&w=2; http://news.postnuke.com/Article2669.html; http://securitytracker.com/id?1013324
CVE: CVE-2005-0618
Published: 2005-05-02
Description: The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460/460R firmware before vuild 858, and Nexland Pro800turbo, when configured for load balancing between two WANs, might send SMTP traffic to a trusted network through an untrusted network.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/14428; http://securityresponse.symantec.com/avcenter/security/Content/2005.02.28.html; http://secunia.com/advisories/14428
CVE: CVE-2005-0621
Published: 2005-05-02
Description: Scrapland 1.0 and earlier allows remote attackers to cause a denial of service (server termination) by triggering an error, which is treated as a fatal error by the server, as demonstrated using (1) signed integers for size values, (2) an invalid model, (3) a "newpos" value that is less than or equal to a size value, or (4) partial packets.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/scrapboom-adv.txt; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]4928&w=2; http://secunia.com/advisories/14435
CVE: CVE-2005-0627
Published: 2005-05-02
Description: Qt before 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to load shared libraries regardless of the LD_LIBRARY_PATH environment variable, which allows local users to execute arbitrary programs.
CVSS Score: 4.6 (MEDIUM)
References: http://bugs.gentoo.org/show_bug.cgi?id=75181; http://www.gentoo.org/security/en/glsa/glsa-200503-01.xml; http://www.securityfocus.com/bid/12695
CVE: CVE-2005-0634
Published: 2005-05-02
Description: Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command.
CVSS Score: 7.5 (HIGH)
References: http://retrogod.altervista.org/golden_heap.html; http://secunia.com/advisories/23323; http://www.securityfocus.com/archive/1/391987
CVE: CVE-2005-0635
Published: 2005-05-02
Description: Buffer overflow in Foxmail Server 2.0 allows remote attackers to execute arbitrary code via a long USER command.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/14145; http://securitytracker.com/id?1013356; http://www.securityfocus.com/archive/1/391960