deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-0733
Published: 2005-05-02
Description: PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html; http://secunia.com/advisories/14553; http://secway.org/advisory/ad20050104.txt
CVE: CVE-2005-0734
Published: 2005-05-02
Description: PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service (memory exhaustion and process crash) via a large number of HTTP requests.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html; http://secunia.com/advisories/14553; http://secway.org/advisory/ad20050104.txt
CVE: CVE-2005-0735
Published: 2005-05-02
Description: newsscript.pl for NewsScript allows remote attackers to gain privileges by setting the mode parameter to admin.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/12761; http://www.securityfocus.com/bid/12761
CVE: CVE-2005-0737
Published: 2005-05-02
Description: Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode.
CVSS Score: 7.5 (HIGH)
References: http://seclists.org/lists/fulldisclosure/2005/Mar/0284.html; http://www.securityfocus.com/bid/12750; http://seclists.org/lists/fulldisclosure/2005/Mar/0284.html
CVE: CVE-2005-0738
Published: 2005-05-02
Description: Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) by deleting or moving a folder with deeply nested subfolders, which causes Microsoft Exchange Information Store service (Store.exe) to hang as a result of a large number of recursive calls.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-400
References: http://secunia.com/advisories/14543; http://support.microsoft.com/?kbid=891504; http://secunia.com/advisories/14543
CVE: CVE-2005-0739
Published: 2005-05-02
Description: The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could leave it vulnerable to buffer overflows, as demonstrated using modified length values that are not properly handled by the dissect_pdus and pduval_to_str functions.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://anonsvn.ethereal.com/viewcvs/viewcvs.py?view=rev&rev=13707; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6551&w=2; http://security.lss.hr/index.php?page=details&ID=LSS-2005-03-05
CVE: CVE-2005-0742
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in Sun Java System Application Server 7 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-57742-1; http://sunsolve.sun.com/search/document.do?assetkey=1-66-200314-1; http://www.securityfocus.com/bid/12775
CVE: CVE-2005-0743
Published: 2005-05-02
Description: The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote attackers to upload arbitrary PHP scripts, whose file extensions are not filtered.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14520; http://www.securityfocus.com/archive/1/392626; http://www.securityfocus.com/bid/12754
CVE: CVE-2005-0744
Published: 2005-05-02
Description: The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privileges by (1) sniffing the connection on TCP port 51100 and replaying the authentication information or (2) obtaining and replaying the PCZQX02 authentication cookie from the browser.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/14527; http://securitytracker.com/id?1013406; http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096885.htm
CVE: CVE-2005-0746
Published: 2005-05-02
Description: The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3359&w=2; http://secunia.com/advisories/14537; http://securitytracker.com/id?1013407
CVE: CVE-2005-0760
Published: 2005-05-02
Description: The TIFF decoder in ImageMagick before 6.0 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1013550; http://www.debian.org/security/2005/dsa-702; http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html
CVE: CVE-2005-0762
Published: 2005-05-02
Description: Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI image file.
CVSS Score: 7.5 (HIGH)
References: http://rhn.redhat.com/errata/RHSA-2005-070.html; http://securitytracker.com/id?1013550; http://www.debian.org/security/2005/dsa-702
CVE: CVE-2005-0763
Published: 2005-05-02
Description: Buffer overflow in Midnight Commander (mc) 4.5.55 and earlier may allow attackers to execute arbitrary code.
CVSS Score: 4.6 (MEDIUM)
References: http://www.debian.org/security/2005/dsa-698; http://www.redhat.com/support/errata/RHSA-2005-512.html; http://www.debian.org/security/2005/dsa-698
CVE: CVE-2005-0764
Published: 2005-05-02
Description: Buffer overflow in command.C for rxvt-unicode before 5.3 allows remote attackers to execute arbitrary code via a crafted file containing long escape sequences.
CVSS Score: 7.5 (HIGH)
References: http://bugs.gentoo.org/show_bug.cgi?id=84680; http://www.gentoo.org/security/en/glsa/glsa-200503-23.xml; http://bugs.gentoo.org/show_bug.cgi?id=84680
CVE: CVE-2005-0766
Published: 2005-05-02
Description: Unknown vulnerability in the sFlow dissector in Ethereal 0.9.14 through 0.10.9 allows remote attackers to cause a denial of service (application crash).
CVSS Score: 5.0 (MEDIUM)
References: http://www.ethereal.com/appnotes/enpa-sa-00018.html; http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml; http://www.mandriva.com/security/advisories?name=MDKSA-2005:053
CVE: CVE-2005-0768
Published: 2005-05-02
Description: Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions before 5.0.7, allows remote attackers to execute arbitrary code via a long string to port 2380.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5193&w=2; http://unsecure.altervista.org/security/goodtechtelnet.htm; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5193&w=2
CVE: CVE-2005-0769
Published: 2005-05-02
Description: Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14561; http://secunia.com/advisories/22128; http://www.gentoo.org/security/en/glsa/glsa-200503-25.xml
CVE: CVE-2005-0770
Published: 2005-05-02
Description: Format string vulnerability in DataRescue Interactive Disassembler and Debugger (IDA) Pro 4.7.0.830 allows remote attackers or local users to cause a denial of service (CPU consumption or application crash) and possibly execute arbitrary code via format string specifiers in a dynamic link library (DLL) name.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2216&w=2; http://pb.specialised.info/all/adv/ida-debugger-adv.txt; http://secunia.com/advisories/14610
CVE: CVE-2005-0775
Published: 2005-05-02
Description: The reportpost action in misc.php for PhotoPost PHP 5.0 RC3 does not limit the logging data that is sent to the administrator, which allows remote attackers to send large amounts of email to the administrator.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2859&w=2; http://secunia.com/advisories/14576; http://www.securityfocus.com/bid/12779
CVE: CVE-2005-0776
Published: 2005-05-02
Description: adm-photo.php in PhotoPost PHP 5.0 RC3 does not properly verify administrative privileges before manipulating photos, which could allow remote attackers to manipulate other users' photos.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2859&w=2; http://secunia.com/advisories/14576; http://www.securityfocus.com/bid/12779
CVE: CVE-2005-0777
Published: 2005-05-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP 5.0 RC3 allow remote attackers to inject arbitrary web script or HTML via (1) the check_tags function or (2) the editbio field in the user profile.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2859&w=2; http://secunia.com/advisories/14576; http://www.securityfocus.com/bid/12779
CVE: CVE-2005-0778
Published: 2005-05-02
Description: PhotoPost PHP 5.0 RC3 does not fully verify that an uploaded file is an image file, which allows remote attackers to inject arbitrary Javascript by uploading non-image files with an image extension such as .gif.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2859&w=2; http://secunia.com/advisories/14576; http://www.securityfocus.com/bid/12779
CVE: CVE-2005-0779
Published: 2005-05-02
Description: PlatinumFTP 1.0.18, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via multiple connection attempts with a \ (backslash) in the username.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5249&w=2; http://www.securityfocus.com/archive/1/455609/100/0/threaded; http://www.securityfocus.com/bid/12790
CVE: CVE-2005-0781
Published: 2005-05-02
Description: SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter to pafiledb.php.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5043&w=2; http://www.securityfocus.com/bid/12788; https://exchange.xforce.ibmcloud.com/vulnerabilities/19688
CVE: CVE-2005-0782
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in (1) viewall.php and (2) category.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the start parameter to pafiledb.php.
CVSS Score: 4.3 (MEDIUM)
References: http://digitalparadox.org/advisories/pafdb.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5043&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7161&w=2
CVE: CVE-2005-0783
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in Phorum before 5.0.14a allows remote attackers to inject arbitrary web script or HTML via the filename of an attached file.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1544&w=2; http://secunia.com/advisories/14554; http://www.securityfocus.com/bid/12800
CVE: CVE-2005-0784
Published: 2005-05-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in Phorum before 5.0.15 allow remote attackers to inject arbitrary web script or HTML via (1) the subject line to follow.php or (2) the subject line in the user's personal control panel.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1544&w=2; http://secunia.com/advisories/14554; http://www.securityfocus.com/bid/12800
CVE: CVE-2005-0785
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in usersrecentposts in YaBB 2.0 rc1 allows remote attackers to inject arbitrary web script or HTML via the username parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1759&w=2; http://securitytracker.com/id?1013420; http://www.securityfocus.com/bid/12756
CVE: CVE-2005-0787
Published: 2005-05-02
Description: Wine 20050211 and earlier creates temp files with world readable permissions and predictable file names, which allows local users to obtain sensitive information, such as passwords.
CVSS Score: 2.1 (LOW)
References: http://bugs.winehq.org/show_bug.cgi?id=2715; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9842&w=2; http://securitytracker.com/id?1013428
CVE: CVE-2005-0796
Published: 2005-05-02
Description: Directory traversal vulnerability in HolaCMS 1.4.9-1 allows remote attackers to overwrite arbitrary files via a "holaDB/votes" followed by a .. (dot dot) in the vote_filename parameter, which bypasses the check by HolaCMS to ensure that the file is in the holaDB/votes directory.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5089&w=2; http://secunia.com/advisories/14566; http://www.holacms.de/?content=changelog
CVE: CVE-2005-0800
Published: 2005-05-02
Description: PHP remote file inclusion vulnerability in install.php in mcNews 1.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the l parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2005-0720.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2438&w=2; http://secunia.com/advisories/14528; http://www.securityfocus.com/archive/1/445606/100/0/threaded
CVE: CVE-2005-0801
Published: 2005-05-02
Description: Directory traversal vulnerability in includer.cgi in The Includer allows remote attackers to read arbitrary files via (1) a .. (dot dot) or (2) a full pathname in the URL.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1557&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1557&w=2
CVE: CVE-2005-0802
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in search.asp in ACS Blog 0.8 through 1.1b allows remote attackers to execute arbitrary web script or HTML via the search parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1698&w=2; http://secunia.com/advisories/14625/; http://securitytracker.com/id?1013470
CVE: CVE-2005-0803
Published: 2005-05-02
Description: The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (application crash) via a crafted Enhanced Metafile (EMF) file that causes invalid (1) end, (2) emreof, or (3) palent offsets to be used, aka "Enhanced Metafile Vulnerability."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7497&w=2; http://secunia.com/advisories/14631; http://secunia.com/advisories/17223
CVE: CVE-2005-0804
Published: 2005-05-02
Description: Format string vulnerability in MailEnable 1.8 allows remote attackers to cause a denial of service (application crash) via format string specifiers in the mailto field.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1738&w=2; http://secunia.com/advisories/14627; http://www.securityfocus.com/bid/12833
CVE: CVE-2005-0805
Published: 2005-05-02
Description: SQL injection vulnerability in index.php in Subdreamer Light, when magic_quotes_gpc is enabled, allows remote attackers to execute arbitrary SQL commands via certain parameters that are used as global variables, as demonstrated using the imageid parameter, which is not properly handled by imagegallery.php.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0230&w=2; http://www.securityfocus.com/archive/1/437983/100/200/threaded; http://www.securityfocus.com/bid/12839
CVE: CVE-2005-0806
Published: 2005-05-02
Description: Evolution 2.0.3 allows remote attackers to cause a denial of service (application crash or hang) via crafted messages, possibly involving charsets in attachment filenames.
CVSS Score: 5.0 (MEDIUM)
References: http://bugzilla.ximian.com/show_bug.cgi?id=72609; http://www.mandriva.com/security/advisories?name=MDKSA-2005:059; http://www.redhat.com/support/errata/RHSA-2005-397.html
CVE: CVE-2005-0807
Published: 2005-05-02
Description: Multiple buffer overflows in Cain & Abel before 2.67 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via (1) an IKE packet with a large ID field that is not properly handled by the PSK sniffer filter, (2) the HTTP sniffer filter, or the (3) POP3, (4) SMTP, (5) IMAP, (6) NNTP, or (7) TDS sniffer filters.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3427&w=2; http://secunia.com/advisories/14630; http://securitytracker.com/id?1013476
CVE: CVE-2005-0808
Published: 2005-05-02
Description: Apache Tomcat before 5.x allows remote attackers to cause a denial of service (application crash) via a crafted AJP12 packet to TCP port 8007.
CVSS Score: 5.0 (MEDIUM)
References: http://www.hitachi-support.com/security_e/vuls_e/HS05-006_e/index-e.html; http://www.kb.cert.org/vuls/id/204710; http://www.kb.cert.org/vuls/id/JGEI-6A2LEF
CVE: CVE-2005-0809
Published: 2005-05-02
Description: NotifyLink, when configured for client key retrieval, allows remote attackers to obtain AES keys via a direct request to /hwp/get.asp, then uses a weak encryption scheme (fixed byte reordering) to protect the key, which allows remote attackers to obtain the key via a brute force attack.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14617; http://www.kb.cert.org/vuls/id/581068; http://www.securityfocus.com/bid/12843
CVE: CVE-2005-0810
Published: 2005-05-02
Description: SQL injection vulnerability in NotifyLink before 3.0 allows remote attackers to execute arbitrary SQL commands via the URL.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14617; http://www.kb.cert.org/vuls/id/264097; http://www.securityfocus.com/bid/12843
CVE: CVE-2005-0811
Published: 2005-05-02
Description: The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, which allows remote authenticated users to bypass intended restrictions via a direct request to certain URLs.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/14617; http://www.kb.cert.org/vuls/id/131828; http://www.securityfocus.com/bid/12843
CVE: CVE-2005-0812
Published: 2005-05-02
Description: The web interface in NotifyLink 3.0 displays passwords in cleartext on the administrative page, which could allow remote attackers or local users to obtain sensitive information.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/14617; http://www.kb.cert.org/vuls/id/770532; http://www.securityfocus.com/bid/12843
CVE: CVE-2005-0813
Published: 2005-05-02
Description: Buffer overflow in Initial Redirect (ir) Squid Proxy Plug-In 0.1 and 0.2 may allow attackers to cause a denial of service and execute arbitrary code via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/13674; http://www.osvdb.org/14832; http://www.securityfocus.com/bid/12827
CVE: CVE-2005-0814
Published: 2005-05-02
Description: Unknown vulnerability in lshd in Lysator LSH 1.x and 2.x before 2.0.1 allows remote attackers to cause a denial of service via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.lysator.liu.se/pipermail/lsh-bugs/2005q1/000328.html; http://secunia.com/advisories/14609; http://www.debian.org/security/2005/dsa-717
CVE: CVE-2005-0815
Published: 2005-05-02
Description: Multiple "range checking flaws" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may allow attackers to cause a denial of service or corrupt memory via a crafted filesystem.
CVSS Score: 6.4 (MEDIUM)
References: http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.12-rc1; http://secunia.com/advisories/17002; http://secunia.com/advisories/18684
CVE: CVE-2005-0816
Published: 2005-05-02
Description: Buffer overflow in newgrp in Solaris 7 through 9 allows local users to gain root privileges.
CVSS Score: 7.2 (HIGH)
References: http://securitytracker.com/id?1013462; http://sunsolve.sun.com/search/document.do?assetkey=1-26-57710-1; http://www.securityfocus.com/bid/12838
CVE: CVE-2005-0817
Published: 2005-05-02
Description: Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and VelociRaptor 1100/1200/1300 1.5, allows remote attackers to poison the DNS cache and redirect users to malicious sites.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2004-06/0225.html; http://secunia.com/advisories/14595; http://securityresponse.symantec.com/avcenter/security/Content/2005.03.15.html
CVE: CVE-2005-0818
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in PunBB 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) email or (2) Jabber parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://securitytracker.com/id?1013446; https://exchange.xforce.ibmcloud.com/vulnerabilities/19725; http://securitytracker.com/id?1013446
CVE: CVE-2005-0819
Published: 2005-05-02
Description: The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1013460; http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971038.htm; http://www.securityfocus.com/bid/12831
CVE: CVE-2005-0820
Published: 2005-05-02
Description: Microsoft Office InfoPath 2003 SP1 includes sensitive information in the Manifest.xsf file in a custom .xsn form, which allows attackers to obtain printer and network information, obtain the database name, username, and password, or obtain the internal web server name.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1013454; http://support.microsoft.com/kb/867443; http://www.osvdb.org/14882
CVE: CVE-2005-0821
Published: 2005-05-02
Description: Unknown vulnerability in Citrix MetaFrame Conferencing Manager 3.0 allows conference members to bypass organizer restrictions to control the keyboard and mouse.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1013457; http://support.citrix.com/kb/entry.jspa?externalID=CTX105574; http://www.securityfocus.com/bid/12821
CVE: CVE-2005-0822
Published: 2005-05-02
Description: Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy.
CVSS Score: 2.1 (LOW)
References: http://securitytracker.com/id?1018077; http://support.citrix.com/article/CTX105800; http://support.citrix.com/kb/entry.jspa?entryID=5970&categoryID=254
CVE: CVE-2005-0823
Published: 2005-05-02
Description: ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.txt file, which allows local users to gain privileges.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/14629; http://securitytracker.com/id?1013458; http://securitytracker.com/id?1013459
CVE: CVE-2005-0824
Published: 2005-05-02
Description: The internal_dump function in Mathopd before 1.5p5, and 1.6x before 1.6b6 BETA, when Mathopd is running with the -n option, allows local users to overwrite arbitrary files via a symlink attack on dump files that are triggered by a SIGWINCH signal.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: http://secunia.com/advisories/14524; http://www.mail-archive.com/mathopd%40mathopd.org/msg00272.html; http://secunia.com/advisories/14524
CVE: CVE-2005-0825
Published: 2005-05-02
Description: Buffer overflow in LTris before 1.0.10 allows local users to execute arbitrary code via a crafted highscores file.
CVSS Score: 7.5 (HIGH)
References: http://bugs.gentoo.org/show_bug.cgi?id=85770; http://lgames.sourceforge.net/index.php?action=show_news&news_action=show_item&item_id=108; http://secunia.com/advisories/14635
CVE: CVE-2005-0826
Published: 2005-05-02
Description: OllyDbg 1.10 and earlier allows remote attackers to cause a denial of service (application crash) via a dynamic link library (DLL) with a long filename.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1262&w=2; http://securitytracker.com/id?1013478; http://www.securityfocus.com/bid/12850