deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-0882
Published: 2005-05-02
Description: SQL injection vulnerability in admincore.php in BirdBlog before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) userpw parameters.
CVSS Score: 7.5 (HIGH)
References: http://birdblog.sourceforge.net/ChangeLog; http://cvs.sourceforge.net/viewcvs.py/birdblog/birdblog/admin/admincore.php?r1=1.4&r2=1.5; http://secunia.com/advisories/14676
CVE: CVE-2005-0884
Published: 2005-05-02
Description: DigitalHive 2.0 allows remote attackers to re-install the product by directly accessing the install script.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1013516; https://exchange.xforce.ibmcloud.com/vulnerabilities/19802; http://securitytracker.com/id?1013516
CVE: CVE-2005-0885
Published: 2005-05-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in XMB Forum 1.9.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Mood or (2) "Send To" fields.
CVSS Score: 4.3 (MEDIUM)
References: http://securitytracker.com/id?1013515; http://www.securityfocus.com/bid/12886; https://docs.xmbforum2.com/index.php?title=Security_Issue_History
CVE: CVE-2005-0886
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in Invision Power Board 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP POST request.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/12888; http://www.securityfocus.com/bid/12888
CVE: CVE-2005-0888
Published: 2005-05-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in functions.inc.php for Double Choco Latte 0.9.4.3 allow remote attackers to inject arbitrary web script or HTML via the (1) class or (2) method name.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/14688; http://securitytracker.com/id?1013559; http://sourceforge.net/project/shownotes.php?release_id=315160
CVE: CVE-2005-0890
Published: 2005-05-02
Description: SQL injection vulnerability in Dream4 Koobi CMS 4.2.3 allows remote attackers to execute arbitrary SQL commands via the area parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14696; http://securitytracker.com/id?1013558; http://www.securityfocus.com/bid/12896
CVE: CVE-2005-0891
Published: 2005-05-02
Description: Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image.
CVSS Score: 7.5 (HIGH)
CWE: CWE-415
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000958; http://secunia.com/advisories/17657; http://www.mandriva.com/security/advisories?name=MDKSA-2005:214
CVE: CVE-2005-0893
Published: 2005-05-02
Description: modes.c in smail 3.2.0.120 implements signal handlers with certain unsafe library calls, which may allow attackers to execute arbitrary code via signal handler race conditions, possibly using xmalloc.
CVSS Score: 7.6 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7717&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7717&w=2
CVE: CVE-2005-0894
Published: 2005-05-02
Description: OpenmosixCollector and OpenMosixView in OpenMosixView 1.5 allow local users to overwrite or delete arbitrary files via a symlink attack on (1) temporary files in the openmosixcollector directory or (2) nodes.tmp.
CVSS Score: 3.6 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3078&w=2; http://secunia.com/advisories/14693; http://www.securityfocus.com/bid/12902
CVE: CVE-2005-0895
Published: 2005-05-02
Description: Netcomm 1300NB DSL Modem allows remote attackers to cause a denial of service (device hang) via a large number of ping packets.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0587&w=2; http://www.securityfocus.com/bid/12901; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0587&w=2
CVE: CVE-2005-0896
Published: 2005-05-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in review.php in phpMyDirectory 10.1.3-rel allow remote attackers to inject arbitrary web script or HTML via the (1) subcat, (2) page, or (3) subsubcat parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3360&w=2; http://secunia.com/advisories/14692; http://www.securityfocus.com/bid/12900
CVE: CVE-2005-0897
Published: 2005-05-02
Description: PHP remote file inclusion vulnerability in catalog.php in E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary PHP code by modifying the menu and main parameters to reference a URL on a remote web server that contains the code.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0509&w=2; http://www.securityfocus.com/bid/12910; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0509&w=2
CVE: CVE-2005-0899
Published: 2005-05-02
Description: AS/400 running OS400 5.2 installs and enables LDAP by default, which allows remote authenticated users to obtain OS/400 user profiles by performing a search.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8029&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8029&w=2
CVE: CVE-2005-0901
Published: 2005-05-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in NukeBookmarks 0.6 for PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via the (1) catname, (2) markname, (3) comment, or (4) category parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9320&w=2; http://nukebookmarks.sourceforge.net/; http://zone-h.org/advisories/read/id=7356
CVE: CVE-2005-0902
Published: 2005-05-02
Description: SQL injection vulnerability in marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the category parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9320&w=2; http://nukebookmarks.sourceforge.net/; http://zone-h.org/advisories/read/id=7356
CVE: CVE-2005-0903
Published: 2005-05-02
Description: Buffer overflow in QuickTime PictureViewer 6.5.1 allows remote attackers to cause a denial of service (application crash) via a JPEG file with crafted Huffman Table (marker DHT) data.
CVSS Score: 2.6 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1713&w=2; http://www.securityfocus.com/bid/12905; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1713&w=2
CVE: CVE-2005-0904
Published: 2005-05-02
Description: Remote Desktop in Windows XP SP1 does not verify the "Force shutdown from a remote system" setting, which allows remote attackers to shut down the system by executing TSShutdn.exe.
CVSS Score: 2.1 (LOW)
CWE: CWE-20
References: http://securitytracker.com/id?1013552; http://support.microsoft.com/kb/889323; https://exchange.xforce.ibmcloud.com/vulnerabilities/19819
CVE: CVE-2005-0905
Published: 2005-05-02
Description: Maxthon 1.2.0 allows remote malicious web sites to obtain potentially sensitive data from the search bar via the m2_search_text property.
CVSS Score: 2.6 (LOW)
References: http://forum.maxthon.com/forum/index.php?showtopic=18207; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]0942&w=2; http://secunia.com/advisories/14712
CVE: CVE-2005-0906
Published: 2005-05-02
Description: Buffer overflow in a player logging function in the Tincat network library 2.x before 2.0.28, as used in games such as Sacred and The Settlers: Heritage of Kings, allows remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://aluigi.altervista.org/adv/tincat2bof-adv.txt; http://secunia.com/advisories/14762; http://secunia.com/advisories/14767
CVE: CVE-2005-0907
Published: 2005-05-02
Description: Multiple SQL injection vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to category.php, (2) the id parameter to item.php, (3) the lang parameter to index.php, (4) the searchQuery parameter to search_result.php, (5) or the searchTopCategoryID parameter to search_result.php.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1013565; http://www.securityfocus.com/archive/1/394406/2005-03-26/2005-04-01/2; http://securitytracker.com/id?1013565
CVE: CVE-2005-0909
Published: 2005-05-02
Description: PHP remote file inclusion vulnerability in shoutact.php for TKai's Shoutbox allows remote attackers to execute arbitrary PHP code via the query parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]8735&w=2; http://seclists.org/lists/fulldisclosure/2005/Mar/0900.html; http://www.securityfocus.com/bid/12914
CVE: CVE-2005-0910
Published: 2005-05-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in exoops allow remote attackers to inject arbitrary web script or HTML via (1) the sortdays parameter to viewforum.php or (2) the viewcat parameter to index.php.
CVSS Score: 4.3 (MEDIUM)
References: http://securitytracker.com/id?1013566; http://securitytracker.com/id?1013566
CVE: CVE-2005-0913
Published: 2005-05-02
Description: Unknown vulnerability in the regex_replace modifier (modifier.regex_replace.php) in Smarty before 2.6.8 allows attackers to execute arbitrary PHP code.
CVSS Score: 7.5 (HIGH)
References: http://news.php.net/php.smarty.dev/2673; http://secunia.com/advisories/14729/; http://security.gentoo.org/glsa/glsa-200503-35.xml
CVE: CVE-2005-0915
Published: 2005-05-02
Description: Webmasters-Debutants WD Guestbook 2.8 allows remote attackers to bypass authentication and perform certain administrator actions via a direct HTTP POST request to (1) ajout_admin2.php or (2) suppr.php.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1013570; http://securitytracker.com/id?1013570
CVE: CVE-2005-0916
Published: 2005-05-02
Description: AIO in the Linux kernel 2.6.11 on the PPC64 or IA64 architectures with CONFIG_HUGETLB_PAGE enabled allows local users to cause a denial of service (system panic) via a process that executes the io_queue_init function but exits without running io_queue_release, which causes exit_aio and is_hugepage_only_range to fail.
CVSS Score: 2.1 (LOW)
References: http://groups-beta.google.com/group/linux.kernel/browse_thread/thread/13b43bd5783842f6/7ce3c5a514a497ab?q=io_queue_init&rnum=3#7ce3c5a514a497ab; http://linux.bkbits.net:8080/linux-2.6/cset%404248c8c0es30_4YVdwa6vteKi7h_nw; http://www.novell.com/linux/security/advisories/2005_50_kernel.html
CVE: CVE-2005-0917
Published: 2005-05-02
Description: PHP remote file inclusion vulnerability in index_header.php for EncapsBB 0.3.2_fixed, and possibly other versions, allows remote attackers to execute arbitrary PHP code via the root parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14761; http://securitytracker.com/id?1013569; http://www.osvdb.org/15078
CVE: CVE-2005-0920
Published: 2005-05-02
Description: Multiple SQL injection vulnerabilities in Bugtracker.NET 2.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://sourceforge.net/project/shownotes.php?release_id=315830; http://www.securityfocus.com/bid/12925; http://sourceforge.net/project/shownotes.php?release_id=315830
CVE: CVE-2005-0921
Published: 2005-05-02
Description: Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy.
CVSS Score: 4.6 (MEDIUM)
References: http://support.microsoft.com/kb/896093; http://www.securityfocus.com/bid/12913; http://support.microsoft.com/kb/896093
CVE: CVE-2005-0922
Published: 2005-05-02
Description: Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (system hang or crash) by triggering a scan of a certain file type.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/14741; http://securityresponse.symantec.com/avcenter/security/Content/2005.03.28.html; http://securitytracker.com/id?1013585
CVE: CVE-2005-0923
Published: 2005-05-02
Description: The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (CPU consumption and system crash) by renaming a file on a network share.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/14741; http://securityresponse.symantec.com/avcenter/security/Content/2005.03.28.html; http://securitytracker.com/id?1013585
CVE: CVE-2005-0925
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in login.asp for Ublog Reload 1.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1387&w=2; http://secunia.com/advisories/14725; http://securitytracker.com/id?1013603
CVE: CVE-2005-0926
Published: 2005-05-02
Description: Buffer overflow in Sylpheed before 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attachments with MIME-encoded file names.
CVSS Score: 5.1 (MEDIUM)
References: http://sylpheed.good-day.net/changelog.html.en; http://sylpheed.good-day.net/changelog.html.en
CVE: CVE-2005-0927
Published: 2005-05-02
Description: Unknown vulnerability in subs.pl for WebAPP 0.9.9 through 0.9.9.2 has unknown impact and attack vectors, probably involving shell metacharacters or .. sequences.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/14716; http://sourceforge.net/project/shownotes.php?release_id=316038; http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=195
CVE: CVE-2005-0928
Published: 2005-05-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 5.x allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) password, (3) ppuser, (4) sort, or (5) si parameters to showgallery.php, the (6) ppuser, (7) sort, or (8) si parameters to showmembers.php, or (9) the photo parameter to slideshow.php.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9640&w=2; http://secunia.com/advisories/14742; http://securitytracker.com/id?1013581
CVE: CVE-2005-0929
Published: 2005-05-02
Description: SQL injection vulnerability in PhotoPost PHP Pro 5.x may allow remote attackers to execute arbitrary SQL commands via (1) the sl parameter to showmembers.php or (2) the photo parameter to showphoto.php.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9640&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7716&w=2; http://secunia.com/advisories/14742
CVE: CVE-2005-0930
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in message.php in Chatness 2.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the user field or (2) the message parameter to message.php.
CVSS Score: 4.3 (MEDIUM)
References: http://securitytracker.com/id?1013604; http://www.persianhacker.net/news/news-2946.html; http://www.securityfocus.com/archive/1/394526
CVE: CVE-2005-0932
Published: 2005-05-02
Description: Multiple SQL injection vulnerabilities in phpCOIN 1.2.1b and earlier allow remote attackers to execute arbitrary SQL commands (1) via the search engine, (2) the username or email fields in the "forgotten password" feature, or (3) the domain name in a package order.
CVSS Score: 7.5 (HIGH)
References: http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5; http://www.securityfocus.com/bid/12917; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5
CVE: CVE-2005-0933
Published: 2005-05-02
Description: Directory traversal vulnerability in auxpage.php for phpCOIN 1.2.1b and earlier allows remote attackers to read arbitrary files via the page parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5; http://www.securityfocus.com/bid/12917; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5
CVE: CVE-2005-0934
Published: 2005-05-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in WackoWiki R4 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/14720; http://wackowiki.com/WackoDownload/InEnglish#h4828-4; http://secunia.com/advisories/14720
CVE: CVE-2005-0935
Published: 2005-05-02
Description: Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL commands via the (1) idpages parameter to pages.php or the (2) id2 parameter to products1.php.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4271&w=2; http://secunia.com/advisories/14711; http://securitytracker.com/id?1013563
CVE: CVE-2005-0936
Published: 2005-05-02
Description: Cross-site scripting vulnerability in products1h.php in ESMI PayPal Storefront allows remote attackers to inject arbitrary web script or HTML via the id parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4271&w=2; http://secunia.com/advisories/14711; http://securitytracker.com/id?1013563
CVE: CVE-2005-0938
Published: 2005-05-02
Description: Ublog Reload 1.0 through 1.0.4 stores ublogreload.mdb under the web root, which allows remote attackers to read usernames and hashed passwords via a direct request to ublogreload.mdb.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1387&w=2; http://secunia.com/advisories/14725; http://securitytracker.com/id?1013603
CVE: CVE-2005-0940
Published: 2005-05-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-0490.  Reason: This candidate was inadvertently referenced in a vendor advisory due to a typo.  Notes: All CVE users should reference CVE-2005-0490 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-0941
Published: 2005-05-02
Description: The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/17027; http://www.gentoo.org/security/en/glsa/glsa-200504-13.xml; http://www.novell.com/linux/security/advisories/2005_21_sr.html
CVE: CVE-2005-0942
Published: 2005-05-02
Description: The XP Server process (xp_server) in Sybase Adaptive Server Enterprise (ASE) XP Server 12.x before 12.5.3 ESD#1 allows attackers to cause a denial of service (process crash) via malformed data sent to the XP Server TCP port.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2004-12/0315.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7194&w=2; http://secunia.com/advisories/13632
CVE: CVE-2005-0944
Published: 2005-05-02
Description: Unknown vulnerability in Microsoft Jet DB engine (msjet40.dll) 4.00.8618.0, related to insufficient data validation, allows remote attackers to execute arbitrary code via a crafted mdb file.
CVSS Score: 7.5 (HIGH)
References: http://blogs.securiteam.com/?p=535; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0199&w=2; http://www.hexview.com/docs/20050331-1.txt
CVE: CVE-2005-0945
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in ACS Blog 1.1.1 allows remote attackers to inject arbitrary web script or HTML via onmouseover or onload events in (1) img, (2) link, or (3) mail tags.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9812&w=2; http://secunia.com/advisories/14744/; http://securitytracker.com/id?1013584
CVE: CVE-2005-0947
Published: 2005-05-02
Description: Directory traversal vulnerability in auxpage.php in phpCoin 1.2.1b and earlier allows remote attackers to read and execute arbitrary files via a .. (dot dot) in the page parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1520&w=2; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5; http://www.securityfocus.com/bid/12917
CVE: CVE-2005-0948
Published: 2005-05-02
Description: SQL injection vulnerability in ad_click.asp for PortalApp allows remote attackers to execute arbitrary SQL commands via the banner_id parameter.
CVSS Score: 7.5 (HIGH)
References: http://icis.digitalparadox.org/~dcrab/portalapp.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8273&w=2; http://secunia.com/advisories/14749
CVE: CVE-2005-0949
Published: 2005-05-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in content.asp in Iatek PortalApp allow remote attackers to inject arbitrary web script or HTML via the (1) contenttype or (2) keywords parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://icis.digitalparadox.org/~dcrab/portalapp.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8273&w=2; http://secunia.com/advisories/14749
CVE: CVE-2005-0951
Published: 2005-05-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: this candidate was created as a result of an analysis error for a researcher advisory for an issue that already existed.  It stated an incorrect parameter, which was not part of the vulnerability at all. Notes: CVE users should not reference this candidate at all
CVE: CVE-2005-0952
Published: 2005-05-02
Description: Cross-site scripting vulnerability in pafiledb.php in PaFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://digitalparadox.org/advisories/pafdb.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7161&w=2; http://www.securityfocus.com/archive/1/448017/100/100/threaded
CVE: CVE-2005-0953
Published: 2005-05-02
Description: Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete.
CVSS Score: 3.7 (LOW)
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-004.txt.asc; ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc; http://docs.info.apple.com/article.html?artnum=307041
CVE: CVE-2005-0954
Published: 2005-05-02
Description: Windows Explorer and Internet Explorer in Windows 2000 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a malformed Windows Metafile (WMF) file.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3788&w=2; http://www.securiteam.com/windowsntfocus/5CP081FFFY.html; http://www.securityfocus.com/bid/9892
CVE: CVE-2005-0955
Published: 2005-05-02
Description: SQL injection vulnerability in InterAKT MX Shop 1.1.1 allows remote attackers to execute arbitrary SQL commands via the id_ctg parameter.
CVSS Score: 7.5 (HIGH)
References: http://icis.digitalparadox.org/~dcrab/mxmk.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7767&w=2; http://secunia.com/advisories/14793
CVE: CVE-2005-0956
Published: 2005-05-02
Description: Multiple SQL injection vulnerabilities in index.php in InterAKT MX Kart 1.1.2 allow remote attackers to execute arbitrary SQL commands via the (1) idp, (2) id_ctg, or (3) id_man parameter.
CVSS Score: 7.5 (HIGH)
References: http://icis.digitalparadox.org/~dcrab/mxmk.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7767&w=2; http://secunia.com/advisories/14793
CVE: CVE-2005-0958
Published: 2005-05-02
Description: Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enabled, allows remote attackers to execute arbitrary code via the CWD command.
CVSS Score: 7.5 (HIGH)
References: http://unl0ck.org/files/papers/mtftpd.txt; http://www.securiteam.com/exploits/5KP0W0AF5K.html; http://www.securityfocus.com/bid/12947