deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-1847
Published: 2005-01-20
Description: Multiple buffer overflows in YaMT before 0.5_2 allow attackers to execute arbitrary code via the (1) rename or (2) sort options.
CVSS Score: 7.5 (HIGH)
References: http://rpmfind.net/linux/RPM/suse/updates/8.2/i386/rpm/i586/yamt-0.5-1277.i586.html; http://www.vuxml.org/freebsd/99b5cfa5-d3d2-11d9-8ffb-00061bc2ad93.html; http://rpmfind.net/linux/RPM/suse/updates/8.2/i386/rpm/i586/yamt-0.5-1277.i586.html
CVE: CVE-2004-1057
Published: 2005-01-21
Description: Multiple drivers in Linux kernel 2.4.19 and earlier do not properly mark memory with the VM_IO flag, which causes incorrect reference counts and may lead to a denial of service (kernel panic) when accessing freed kernel pages.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/18562; http://www.kernel.org/pub/linux/kernel/people/andrea/kernels/v2.4/2.4.23aa3/00_VM_IO-4; http://www.redhat.com/support/errata/RHSA-2005-016.html
CVE: CVE-2004-1184
Published: 2005-01-21
Description: The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2009/May/msg00002.html; http://secunia.com/advisories/35074; http://securitytracker.com/id?1012965
CVE: CVE-2004-1185
Published: 2005-01-21
Description: Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2009/May/msg00002.html; http://secunia.com/advisories/35074; http://securitytracker.com/id?1012965
CVE: CVE-2005-0193
Published: 2005-01-22
Description: Buffer overflow in the (1) -v and (2) -a switches in mRouter in iSync 1.5 in Mac OS X 10.3.7 and earlier allows local users to execute arbitrary code.
CVSS Score: 7.2 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005/Apr/msg00001.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8425&w=2; http://secunia.com/advisories/13965
CVE: CVE-2005-0566
Published: 2005-01-22
Description: Buffer overflow in Golden FTP Server Pro (goldenftpd) 2.x allows remote attackers to execute arbitrary code via a long RNTO command.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031098.html; http://secunia.com/advisories/13966/; http://securitytracker.com/id?1012973
CVE: CVE-2005-0072
Published: 2005-01-24
Description: zhcon before 0.2 does not drop privileges before reading a user configuration file, which allows local users to read arbitrary files.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/13977; http://secunia.com/advisories/13982; http://secunia.com/advisories/13987
CVE: CVE-2005-0102
Published: 2005-01-24
Description: Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte memory allocation and a buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000925; http://secunia.com/advisories/13830; http://security.gentoo.org/glsa/glsa-200501-35.xml
CVE: CVE-2005-0103
Published: 2005-01-24
Description: PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to execute arbitrary PHP code by modifying a URL parameter to reference a URL on a remote web server that contains the code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4662&w=2; http://secunia.com/advisories/13962/
CVE: CVE-2005-0115
Published: 2005-01-24
Description: Stack-based buffer overflow in DataRescue Interactive Disassembler (IDA) Pro 4.7 allows attackers to execute arbitrary code via a PE file with an Import Address Table containing a long import library name.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/13980; http://securitytracker.com/id?1012975; http://www.datarescue.com/ubb/ultimatebb.php?/topic/2/146.html
CVE: CVE-2005-0145
Published: 2005-01-24
Description: Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Javascript to bypass the file download prompt when the user uses the Alt-click feature.
CVSS Score: 2.6 (LOW)
References: http://www.mozilla.org/security/announce/mfsa2005-07.html; http://www.securityfocus.com/bid/12407; https://bugzilla.mozilla.org/show_bug.cgi?id=265176
CVE: CVE-2005-0308
Published: 2005-01-24
Description: Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to execute arbitrary code via a large import or export function name.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8205&w=2; http://secunia.com/advisories/13986; http://securitytracker.com/id?1012997
CVE: CVE-2005-0096
Published: 2005-01-25
Description: Memory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (memory consumption).
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923; http://fedoranews.org/updates/FEDORA--.shtml; http://security.gentoo.org/glsa/glsa-200501-25.xml
CVE: CVE-2005-0306
Published: 2005-01-25
Description: MercuryBoard 1.1.1 allows remote attackers to gain sensitive information via an HTTP request with the n parameter set to 0, which causes a divide-by-zero error and reveals the path in the resulting error message.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2354&w=2; http://www.securityfocus.com/bid/12359; https://exchange.xforce.ibmcloud.com/vulnerabilities/19048
CVE: CVE-2005-0307
Published: 2005-01-25
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) s, (2) l, (3) a, (4) t, (5) to, or (6) re parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2354&w=2; http://www.securityfocus.com/bid/12359; https://exchange.xforce.ibmcloud.com/vulnerabilities/19050
CVE: CVE-2005-0309
Published: 2005-01-25
Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) mod.php in Exponent 0.95 allow remote attackers to inject arbitrary web script or HTML via the module parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7073&w=2; http://www.osvdb.org/13188; http://www.osvdb.org/13190
CVE: CVE-2003-1021
Published: 2005-01-26
Description: The scosession program in OpenServer 5.0.6 and 5.0.7 allows local users to gain privileges via crafted strings on the commandline.
CVSS Score: 7.2 (HIGH)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.5/SCOSA-2005.5.txt; http://secunia.com/advisories/14012/; http://www.kb.cert.org/vuls/id/972598
CVE: CVE-2004-1340
Published: 2005-01-26
Description: Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pam_radius_auth.conf set to be world-readable, which allows local users to obtain sensitive information.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/14046; http://securitytracker.com/id?1013030; http://www.debian.org/security/2005/dsa-659
CVE: CVE-2005-0162
Published: 2005-01-26
Description: Stack-based buffer overflow in the get_internal_addresses function in the pluto application for Openswan 1.x before 1.0.9, and Openswan 2.x before 2.3.0, when compiled with XAUTH and PAM enabled, allows remote authenticated attackers to execute arbitrary code.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/14038; http://secunia.com/advisories/14062; http://securitytracker.com/id?1013014
CVE: CVE-2004-0880
Published: 2005-01-27
Description: getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file.
CVSS Score: 1.2 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0372&w=2; http://security.gentoo.org/glsa/glsa-200409-32.xml; http://www.debian.org/security/2004/dsa-553
CVE: CVE-2004-0881
Published: 2005-01-27
Description: getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0372&w=2; http://security.gentoo.org/glsa/glsa-200409-32.xml; http://www.debian.org/security/2004/dsa-553
CVE: CVE-2004-0882
Published: 2005-01-27
Description: Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a small "maximum data bytes" value.
CVSS Score: 10.0 (HIGH)
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.17/SCOSA-2005.17.txt; ftp://patches.sgi.com/support/free/security/advisories/20041201-01-P; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000899
CVE: CVE-2004-0884
Published: 2005-01-27
Description: The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to find all available SASL plug-ins, which allows local users to execute arbitrary code by modifying the SASL_PATH to point to malicious programs.
CVSS Score: 7.2 (HIGH)
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=134657; http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7214&w=2
CVE: CVE-2004-0886
Published: 2005-01-27
Description: Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect malloc calls.
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000888; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1929&w=2; http://secunia.com/advisories/12818
CVE: CVE-2004-0887
Published: 2005-01-27
Description: SUSE Linux Enterprise Server 9 on the S/390 platform does not properly handle a certain privileged instruction, which allows local users to gain root privileges.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/19369; http://www.debian.org/security/2006/dsa-1018; http://www.novell.com/linux/security/advisories/2004_37_kernel.html
CVE: CVE-2004-0888
Published: 2005-01-27
Description: Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.
CVSS Score: 10.0 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000886; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6773&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7883&w=2
CVE: CVE-2004-0889
Published: 2005-01-27
Description: Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0888.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6773&w=2; http://www.gentoo.org/security/en/glsa/glsa-200410-20.xml; http://www.gentoo.org/security/en/glsa/glsa-200410-30.xml
CVE: CVE-2004-0891
Published: 2005-01-27
Description: Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer.
CVSS Score: 10.0 (HIGH)
References: http://gaim.sourceforge.net/security/?id=9; http://www.gentoo.org/security/en/glsa/glsa-200410-23.xml; http://www.redhat.com/support/errata/RHSA-2004-604.html
CVE: CVE-2004-0892
Published: 2005-01-27
Description: Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/11605; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-039; https://exchange.xforce.ibmcloud.com/vulnerabilities/17906
CVE: CVE-2004-0902
Published: 2005-01-27
Description: Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via (1) the "Send page" functionality, (2) certain responses from a malicious POP3 server, or (3) a link containing a non-ASCII hostname.
CVSS Score: 10.0 (HIGH)
References: http://bugzilla.mozilla.org/show_bug.cgi?id=226669; http://bugzilla.mozilla.org/show_bug.cgi?id=245066; http://bugzilla.mozilla.org/show_bug.cgi?id=256316
CVE: CVE-2004-0903
Published: 2005-01-27
Description: Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing a message.
CVSS Score: 10.0 (HIGH)
References: http://bugzilla.mozilla.org/show_bug.cgi?id=257314; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4418&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9363&w=2
CVE: CVE-2004-0916
Published: 2005-01-27
Description: Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containing .. (dot dot) sequences in a filename.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/12882/; http://www.debian.org/security/2004/dsa-574; http://www.kyz.uklinux.net/cabextract.php#changes
CVE: CVE-2004-0917
Published: 2005-01-27
Description: The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirements, which allows remote attackers to gain sensitive information, such as server and OS version, and conduct unauthorized activities via an HTTP request to /diag.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1011447; http://www.atstake.com/research/advisories/2004/a092804-1.txt; http://www.securityfocus.com/bid/11267
CVE: CVE-2004-0918
Published: 2005-01-27
Description: The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via certain SNMP packets with negative length fields that trigger a memory allocation error.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.16/SCOSA-2005.16.txt; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923; http://fedoranews.org/updates/FEDORA--.shtml
CVE: CVE-2004-0921
Published: 2005-01-27
Description: AFP Server on Mac OS X 10.3.x to 10.3.5, when a guest has mounted an AFP volume, allows the guest to "terminate authenticated user mounts" via modified SessionDestroy packets.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html; http://www.securityfocus.com/bid/11322; http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html
CVE: CVE-2004-0922
Published: 2005-01-27
Description: AFP Server on Mac OS X 10.3.x to 10.3.5, under certain conditions, does not properly set the guest group ID, which causes AFP to change a write-only AFP Drop Box to be read-write when the Drop Box is on a share that is mounted by a guest, which allows attackers to read the Drop Box.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html; http://www.securityfocus.com/bid/11322; http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html
CVE: CVE-2004-0923
Published: 2005-01-27
Description: CUPS 1.1.20 and earlier records authentication information for a device URI in the error_log file, which allows local users to obtain user names and passwords.
CVSS Score: 2.1 (LOW)
References: http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html; http://www.ciac.org/ciac/bulletins/p-002.shtml; http://www.debian.org/security/2004/dsa-566
CVE: CVE-2004-0924
Published: 2005-01-27
Description: NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an initial root login, reports the root account as being disabled, even when it has not.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html; http://www.securityfocus.com/bid/11322; http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html
CVE: CVE-2004-0925
Published: 2005-01-27
Description: Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html; http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html
CVE: CVE-2004-0926
Published: 2005-01-27
Description: Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attackers to execute arbitrary code via a certain BMP image.
CVSS Score: 10.0 (HIGH)
References: http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html; http://lists.apple.com/archives/security-announce/2004/Oct/msg00001.html; http://www.securityfocus.com/bid/11322
CVE: CVE-2004-0927
Published: 2005-01-27
Description: ServerAdmin in Mac OS X 10.2.8 through 10.3.5 uses the same example self-signed certificate on each system, which allows remote attackers to decrypt sessions.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html; http://www.securityfocus.com/bid/11322; http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html
CVE: CVE-2004-0929
Published: 2005-01-27
Description: Heap-based buffer overflow in the OJPEGVSetField function in tif_ojpeg.c for libtiff 3.6.1 and earlier, when compiled with the OJPEG_SUPPORT (old JPEG support) option, allows remote attackers to execute arbitrary code via a malformed TIFF image.
CVSS Score: 10.0 (HIGH)
References: http://www.idefense.com/application/poi/display?id=154&type=vulnerabilities; http://www.kb.cert.org/vuls/id/129910; http://www.novell.com/linux/security/advisories/2004_38_libtiff.html
CVE: CVE-2004-0930
Published: 2005-01-27
Description: The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple * (wildcard) characters.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.17/SCOSA-2005.17.txt; ftp://patches.sgi.com/support/free/security/advisories/20041201-01-P; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000899
CVE: CVE-2004-0932
Published: 2005-01-27
Description: McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
CVSS Score: 7.5 (HIGH)
References: http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true; http://www.securityfocus.com/bid/11448; https://exchange.xforce.ibmcloud.com/vulnerabilities/17761
CVE: CVE-2004-0933
Published: 2005-01-27
Description: Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-Antivirus 6.1 through 6.3 allow remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
CVSS Score: 7.5 (HIGH)
References: http://supportconnectw.ca.com/public/ca_common_docs/arclib_vuln.asp; http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true; http://www.securityfocus.com/bid/11448
CVE: CVE-2004-0934
Published: 2005-01-27
Description: Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
CVSS Score: 7.5 (HIGH)
References: http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true; http://www.kb.cert.org/vuls/id/968818; http://www.securityfocus.com/bid/11448
CVE: CVE-2004-0935
Published: 2005-01-27
Description: Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
CVSS Score: 7.5 (HIGH)
References: http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true; http://www.kb.cert.org/vuls/id/968818; http://www.securityfocus.com/bid/11448
CVE: CVE-2004-0936
Published: 2005-01-27
Description: RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
CVSS Score: 7.5 (HIGH)
References: http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true; http://www.kb.cert.org/vuls/id/968818; http://www.securityfocus.com/bid/11448
CVE: CVE-2005-0312
Published: 2005-01-27
Description: WarFTPD 1.82 RC9, when running as an NT service, allows remote authenticated users to cause a denial of service (access violation) via a CWD command with a crafted pathname, as demonstrated using a large string of "%s" sequences, possibly indicating a format string vulnerability.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2039&w=2; http://support.jgaa.com/index.php?cmd=ShowReport&ID=02643; http://www.securityfocus.com/bid/12384
CVE: CVE-2005-0313
Published: 2005-01-27
Description: Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to (1) upload arbitrary files via certain parameters to upload.php or (2) read arbitrary files via certain parameters to download.php, and remote authenticated users to read, create, or delete arbitrary directories and files via the IMAP commands (3) CREATE, (4) EXAMINE, (5) SELECT, or (6) DELETE.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5461&w=2; http://secunia.com/advisories/14053; http://securitytracker.com/id?1013017
CVE: CVE-2005-0314
Published: 2005-01-27
Description: Cross-site scripting (XSS) vulnerability in user.php in Magic Winmail Server 4.0 Build 1112 allows remote attackers to inject arbitrary web script or HTML via the personal information fields.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5461&w=2; http://secunia.com/advisories/14053; http://securitytracker.com/id?1013017