deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-4693
Published: 2005-12-31
Description: Gaim-Encryption 2.38-1 on Debian Linux allows remote attackers to cause a denial of service (crash) via a crafted message from an ICQ buddy, possibly involving the GE_received_key function in keys.c.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=337127; http://secunia.com/advisories/17739; http://www.osvdb.org/21233
CVE: CVE-2005-4694
Published: 2005-12-31
Description: Unspecified vulnerability in the www_add method in Asset.pm in Plain Black WebGUI 6.3.0 and other versions before 6.7.6 allows attackers to execute arbitrary code via unknown attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17158; http://www.osvdb.org/19933; http://www.plainblack.com/getwebgui/advisories/security-exploit-patch-for-6.3-and-above
CVE: CVE-2005-4695
Published: 2005-12-31
Description: Symantec Brightmail AntiSpam 6.0 build 1 and 2 allows remote attackers to cause a denial of service (bmserver component termination) via malformed MIME messages.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/17170; http://securitytracker.com/id?1015051; http://www.osvdb.org/19953
CVE: CVE-2005-4696
Published: 2005-12-31
Description: The Microsoft Wireless Zero Configuration system (WZCS) stores WEP keys and pair-wise Master Keys (PMK) of the WPA pre-shared key in plaintext in memory of the explorer process, which allows attackers with access to process memory to steal the keys and access the network.
CVSS Score: 2.1 (LOW)
References: http://archives.neohapsis.com/archives/bugtraq/2005-10/0016.html; http://secunia.com/advisories/17064; http://securityreason.com/securityalert/46
CVE: CVE-2005-4697
Published: 2005-12-31
Description: The Microsoft Wireless Zero Configuration system (WZCS) allows local users to access WEP keys and pair-wise Master Keys (PMK) of the WPA pre-shared key via certain calls to the WZCQueryInterface API function in wzcsapi.dll.
CVSS Score: 2.1 (LOW)
References: http://archives.neohapsis.com/archives/bugtraq/2005-10/0016.html; http://secunia.com/advisories/17064; http://securityreason.com/securityalert/46
CVE: CVE-2005-4698
Published: 2005-12-31
Description: Cross-site scripting (XSS) vulnerability in TellMe 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the 91) q_IP (IP) or (2) q_Host (HOST) parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0107.html; http://exploitlabs.com/files/advisories/EXPL-A-2005-015-tellme.txt; http://kimihia.org.nz/projects/tellme/files/tellme-1.2-1.3.diff
CVE: CVE-2005-4699
Published: 2005-12-31
Description: Argument injection vulnerability in TellMe 1.2 and earlier allows remote attackers to modify command line arguments for the Whois program and obtain sensitive information via "--" style options in the q_Host parameter.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-88
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0107.html; http://exploitlabs.com/files/advisories/EXPL-A-2005-015-tellme.txt; http://kimihia.org.nz/projects/tellme/files/tellme-1.2-1.3.diff
CVE: CVE-2005-4700
Published: 2005-12-31
Description: TellMe 1.2 and earlier, when the Server (o_Server) and HEAD (o_Head) options are enabled, allows remote attackers to obtain sensitive information via an invalid q_Host parameter, which reveals the full pathname of the application in an fsockopen error message.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0107.html; http://exploitlabs.com/files/advisories/EXPL-A-2005-015-tellme.txt; http://secunia.com/advisories/17078
CVE: CVE-2005-4701
Published: 2005-12-31
Description: Unspecified vulnerability in Process File System (procfs) in Sun Solaris 10 allows local users to obtain sensitive information such as process working directories via unknown attack vectors, possibly pwdx.
CVSS Score: 2.1 (LOW)
References: http://securitytracker.com/id?1015053; http://sunsolve.sun.com/search/document.do?assetkey=1-26-101949-1; http://www.osvdb.org/19976
CVE: CVE-2005-4702
Published: 2005-12-31
Description: SQL injection vulnerability in the favorites module in index.php in IPBProArcade 2.5.2 allows remote attackers to inject arbitrary SQL commands via the gameid parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. In addition, the demonstration code as used by third parties suggests that this might be a different type of vulnerability related to shell metacharacters.  Finally, this could be a rediscovery of CVE-2004-1430.
CVSS Score: 6.4 (MEDIUM)
References: http://www.securityfocus.com/bid/15205; http://www.securityfocus.com/bid/15205
CVE: CVE-2005-4703
Published: 2005-12-31
Description: Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Nikto.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/ref/20/20033-tomcat-dos-path_disclosure.txt; http://tomcat.apache.org/security-4.html; http://www.osvdb.org/20033
CVE: CVE-2005-4704
Published: 2005-12-31
Description: Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 through SP3, 7.0 through SP6, and 6.1 through SP7, when SSL is intended to be used, causes an unencrypted protocol to be used in certain unspecified circumstances, which causes user credentials to be sent across the network in cleartext and allows remote attackers to gain privileges.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/140; http://www.osvdb.org/20094; http://dev2dev.bea.com/pub/advisory/140
CVE: CVE-2005-4705
Published: 2005-12-31
Description: BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7, when a Java client application creates an SSL connection to the server after it has already created an insecure connection, will use the insecure connection, which allows remote attackers to sniff the connection.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/141; http://www.osvdb.org/20095; http://dev2dev.bea.com/pub/advisory/141
CVE: CVE-2005-4706
Published: 2005-12-31
Description: Unspecified vulnerability in the "privilege management" feature of Sun Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors that trigger a null dereference in the secpolicy_fs_common function.
CVSS Score: 2.1 (LOW)
References: http://securitytracker.com/id?1015052; http://sunsolve.sun.com/search/document.do?assetkey=1-26-101895-1; http://www.osvdb.org/19975
CVE: CVE-2005-4707
Published: 2005-12-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP GEN before 1.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/17560; http://secunia.com/advisories/18715; http://www.eyce.be/php_gen/NEWS
CVE: CVE-2005-4708
Published: 2005-12-31
Description: Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group permitted to configure the service, including the path to executable, which allows local users to execute arbitrary code as Local System.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/15654; http://securitytracker.com/id?1014158; http://securitytracker.com/id?1014159
CVE: CVE-2005-4709
Published: 2005-12-31
Description: The popSubjectContext method in the SecurityAssociation class in JBoss Enterprise Java Beans (EJB) 3.0 RC3 maintains the threadPrincipal and threadCredential values from a previous client's authentication after termination of a client session, which allows remote attackers to gain the roles of an arbitrary previous client who had the same JBoss server thread.
CVSS Score: 5.0 (MEDIUM)
References: http://jira.jboss.com/jira/browse/EJBTHREE-384; http://www.vupen.com/english/advisories/2006/0374; https://exchange.xforce.ibmcloud.com/vulnerabilities/24384
CVE: CVE-2005-4710
Published: 2005-12-31
Description: Unspecified vulnerability in multiple Autodesk and AutoCAD products and product families from 2006 and earlier allows remote attackers to "gain inappropriate access to another local user's computer," aka ID DL5549329.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/18682; http://usa.autodesk.com/adsk/servlet/ps/dl/item?siteID=123112&id=5549329&linkID=4183232; http://www.securityfocus.com/bid/16472
CVE: CVE-2005-4711
Published: 2005-12-31
Description: SQL injection vulnerability in Neocrome Land Down Under (LDU) 801 allows remote attackers to execute arbitrary SQL commands via an HTTP Referer header.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/16878; http://www.osvdb.org/19585; https://exchange.xforce.ibmcloud.com/vulnerabilities/22352
CVE: CVE-2005-4712
Published: 2005-12-31
Description: CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter.  NOTE: the vendor has disputed CVE-2005-3497, and it is possible that the dispute was intended to include this issue as well.
CVSS Score: 5.0 (MEDIUM)
References: http://www.zone-h.org/advisories/read/id=8360; http://www.zone-h.org/advisories/read/id=8360
CVE: CVE-2005-4713
Published: 2005-12-31
Description: Unspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors, probably involving the pam_mysql_sql_log function when being used in vsftpd, which does not include the IP address argument to an sprintf call.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/18598; http://secunia.com/advisories/20690; http://sourceforge.net/forum/forum.php?forum_id=499394
CVE: CVE-2005-4714
Published: 2005-12-31
Description: Format string vulnerability in the vmps_log function in OpenVMPS (VLAN Management Policy Server) 1.3 allows remote attackers to execute arbitrary code via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17128; http://www.osvdb.org/19910; http://www.securiteam.com/unixfocus/6I00F00EAI.html
CVE: CVE-2005-4715
Published: 2005-12-31
Description: Multiple SQL injection vulnerabilities in modules.php in PHP-Nuke 7.8, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) name, (2) sid, and (3) pid parameters in a POST request, which bypasses security checks that are performed for GET requests.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2005-09/0119.html; http://archives.neohapsis.com/archives/bugtraq/2005-09/0167.html; http://archives.neohapsis.com/archives/bugtraq/2005-09/0176.html
CVE: CVE-2005-4716
Published: 2005-12-31
Description: Hitachi TP1/Server Base and TP1/NET/Library 2 on IBM AIX allow remote attackers to (1) cause a denial of service (OpenTP1 system outage) via invalid data to a port used by a system-server process, and (2) cause a denial of service (process failure) via invalid data to a port used by any of certain other processes.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/17185; http://securitytracker.com/id?1015058; http://www.hitachi-support.com/security_e/vuls_e/HS05-020_e/index-e.html
CVE: CVE-2005-4717
Published: 2005-12-31
Description: Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of service (client crash) via a certain combination of a malformed HTML file and a CSS file that triggers a null dereference, probably related to rendering of a DIV element that contains a malformed IMG tag, as demonstrated by IEcrash.htm and IEcrash.rar.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0673.html; http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0127.html; http://www.securityfocus.com/bid/15268
CVE: CVE-2005-4718
Published: 2005-12-31
Description: Opera 8.02 and earlier allows remote attackers to cause a denial of service (client crash) via (1) a crafted HTML file with a "content: url(0);" style attribute, a "bodyA" tag, a long string, and a "u" tag with a long attribute, as demonstrated by opera.html; and (2) a BGSOUND element with a "margin:-99;" STYLE attribute.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1015067; http://www.addict3d.org/index.php?page=viewarticle&type=security&ID=5054; http://www.addict3d.org/index.php?page=viewarticle&type=security&ID=5055
CVE: CVE-2005-4719
Published: 2005-12-31
Description: Multiple SQL injection vulnerabilities in Sysbotz Systems Panel 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the cid parameter in knowledgebase/index.php, (2) the aid parameter in knowledgebase/view.php, (3) the cid parameter in contact/update.php, (4) the letter parameter in links/index.php, (5) the mid parameter in messageboard/view.php, and (6) the tid parameter in tickets/view.php.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2005/11/systems-panel-v10x-multiple-sql-inj.html; http://www.osvdb.org/21320; http://www.osvdb.org/21321
CVE: CVE-2005-4720
Published: 2005-12-31
Description: Mozilla Firefox 1.0.7 and earlier on Linux allows remote attackers to cause a denial of service (client crash) via an IFRAME element with a large value of the WIDTH attribute, which triggers a problem related to representation of floating-point numbers, leading to an infinite loop of widget resizes and a corresponding large number of function calls on the stack.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/17071; http://security-protocols.com/modules.php?name=News&file=article&sid=2978; http://securitytracker.com/id?1015011
CVE: CVE-2005-4721
Published: 2005-12-31
Description: Cross-site scripting (XSS) vulnerability in search.cfm in tmsPUBLISHER 3.3 allows remote attackers to inject arbitrary web script or HTML via the q parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://developer.tmsasia.com/page.cfm?name=security; http://metawire.org/~adli/advisories/250405_tmspublisher_vulnerablility.signed.txt; http://www.osvdb.org/23014
CVE: CVE-2005-4722
Published: 2005-12-31
Description: _Request_Message.cfm in tmsPUBLISHER 3.3 allows remote attackers to obtain sensitive information via an invalid id argument to pagename.cfm, which reveals the installation path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://developer.tmsasia.com/page.cfm?name=security; http://metawire.org/~adli/advisories/250405_tmspublisher_vulnerablility.signed.txt; http://www.osvdb.org/23298
CVE: CVE-2005-4723
Published: 2005-12-31
Description: D-Link DI-524 Wireless Router, DI-624 Wireless Router, and DI-784 allow remote attackers to cause a denial of service (device reboot) via a series of crafted fragmented UDP packets, possibly involving a missing fragment.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0188.html; http://secunia.com/advisories/18833; http://www.securityfocus.com/bid/16621
CVE: CVE-2005-4724
Published: 2005-12-31
Description: SQL injection vulnerability in post.php in PhpTagCool 1.0.3 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field in an HTTP header.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/alerts/2005/Sep/1014878.html; http://www.osvdb.org/19437; https://exchange.xforce.ibmcloud.com/vulnerabilities/22228
CVE: CVE-2005-4725
Published: 2005-12-31
Description: Geeklog before 1.3.11sr3 allows remote attackers to bypass intended access restrictions and comment on an arbitrary story or topic by guessing the story ID.
CVSS Score: 7.5 (HIGH)
References: http://www.geeklog.net/article.php/geeklog-1.3.11sr3; http://www.geeklog.net/forum/viewtopic.php?showtopic=61457; http://www.geeklog.net/article.php/geeklog-1.3.11sr3
CVE: CVE-2005-4726
Published: 2005-12-31
Description: MUTE 0.4 uses improper flood protection algorithms, which allows remote attackers to obtain sensitive information (privacy leak and search result data) by controlling a drop chain neighbor that is near the end of a message chain.
CVSS Score: 5.0 (MEDIUM)
References: http://sourceforge.net/mailarchive/message.php?msg_id=11184523; http://sourceforge.net/mailarchive/message.php?msg_id=11200225; http://www.osvdb.org/23335
CVE: CVE-2005-4727
Published: 2005-12-31
Description: Cross-site scripting (XSS) vulnerability in gbook.cgi in gBook before 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header field.
CVSS Score: 5.1 (MEDIUM)
References: http://gbook.sourceforge.net/sec/14725; http://secunia.com/advisories/16668; http://sourceforge.net/project/shownotes.php?release_id=353531
CVE: CVE-2005-4728
Published: 2005-12-31
Description: Untrusted search path vulnerability (RPATH) in amaya 9.2.1 on Debian GNU/Linux allows local users to gain privileges via a malicious Mesa library in the /home/anand directory.
CVSS Score: 4.6 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=341424; http://www.securityfocus.com/bid/16945; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=341424
CVE: CVE-2005-4729
Published: 2005-12-31
Description: SQL injection vulnerability in show.php in VBZooM Forum allows remote attackers to execute arbitrary SQL commands via the SubjectID parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/16220; http://securitytracker.com/id?1014585; http://www.osvdb.org/18296
CVE: CVE-2005-4730
Published: 2005-12-31
Description: Unspecified vulnerability in PEAR Text_Password 1.0 has unknown impact and attack vectors, related to "problematic seeding" of the random number generator, possibly predictable seeds.
CVSS Score: 10.0 (HIGH)
References: http://pear.php.net/package/Text_Password/download/; http://www.osvdb.org/23825; http://pear.php.net/package/Text_Password/download/
CVE: CVE-2005-4731
Published: 2005-12-31
Description: The Next action in PEAR HTML_QuickForm_Controller 1.0.4 includes the SID in the URL even when session.use_only_cookies is configured, which allows remote attackers to obtain the SID via an HTTP Referer field and possibly other vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://pear.php.net/bugs/bug.php?id=3443; http://pear.php.net/package/HTML_QuickForm_Controller/download; http://www.osvdb.org/23766
CVE: CVE-2005-4732
Published: 2005-12-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Tux Racer TuxBank 0.7x and 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) description parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/ref/20/20696-tux.txt; http://tuxbank.sourceforge.net/CHANGES.txt; http://www.osvdb.org/20696
CVE: CVE-2005-4733
Published: 2005-12-31
Description: NetBSD 2.0 before 20050316 and NetBSD-current before 20050112 allow local users to cause a denial of service (infinite loop and system hang) by calling the F_CLOSEM fcntl with a parameter value of 0.
CVSS Score: 4.9 (MEDIUM)
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2005-003.txt.asc; http://mail-index.netbsd.org/source-changes/2005/01/12/0059.html; http://www.osvdb.org/20755
CVE: CVE-2005-4734
Published: 2005-12-31
Description: Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows remote attackers to execute arbitrary code via a long url parameter in the Redirect method.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/17281; http://www.metasploit.com/projects/Framework/exploits.html#rsa_iiswebagent_redirect; http://www.osvdb.org/20151
CVE: CVE-2005-4735
Published: 2005-12-31
Description: IBM DB2 Universal Database (UDB) 810 before 8.1 FP10 allows remote authenticated users to cause a denial of service (application crash) via (1) certain equality predicates that trigger self-removal, aka IY70808; and (2) a query with more than 32000 elements in the IN-list, aka LI70817.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/17031; http://www-1.ibm.com/support/docview.wss?uid=swg1IY70808; http://www-1.ibm.com/support/docview.wss?uid=swg1LI70817
CVE: CVE-2005-4736
Published: 2005-12-31
Description: IBM DB2 Universal Database (UDB) 820 before 8.2 FP10 allows remote authenticated users to cause a denial of service (disk consumption) via a hash join (hsjn) that triggers an infinite loop in sqlri_hsjnFlushBlocks.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/17031; http://www-1.ibm.com/support/docview.wss?uid=swg1IY70561; http://www.securityfocus.com/bid/15126
CVE: CVE-2005-4737
Published: 2005-12-31
Description: IBM DB2 Universal Database (UDB) 820 before ESE AIX 5765F4100 allows remote authenticated users to cause a denial of service (CPU consumption) by "abnormally" terminating a connection, which prevents db2agents from being properly cleared.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17031; http://www-1.ibm.com/support/docview.wss?uid=swg1IY71587; http://www.securityfocus.com/bid/15126
CVE: CVE-2005-4738
Published: 2005-12-31
Description: IBM DB2 Universal Database (UDB) 810 before ESE AIX 5765F4100 does not ensure that a user has execute privileges before permitting object creation based on routines, which allows remote authenticated users to gain privileges.
CVSS Score: 6.5 (MEDIUM)
References: http://secunia.com/advisories/17031; http://www-1.ibm.com/support/docview.wss?uid=swg1IY71865; http://www.securityfocus.com/bid/15126
CVE: CVE-2005-4739
Published: 2005-12-31
Description: IBM DB2 Universal Database (UDB) 820 before version 8 FixPak 10 (s050811) allows remote authenticated users to cause a denial of service (application crash) by using a table function for an instance of snapshot_tbreorg, which triggers a trap in sqlnr_EStoE_action.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/17031; http://www-1.ibm.com/support/docview.wss?uid=swg1IY72588; http://www.securityfocus.com/bid/15126
CVE: CVE-2005-4740
Published: 2005-12-31
Description: IBM DB2 Universal Database (UDB) 810 before version 8 FixPak 10 allows remote authenticated users to cause a denial of service (db2jd service crash) by "connecting from a downlevel client."
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/17031; http://www-1.ibm.com/support/docview.wss?uid=swg1JR21329; http://www.securityfocus.com/bid/15126
CVE: CVE-2005-4741
Published: 2005-12-31
Description: NetBSD 1.6, NetBSD 2.0 through 2.1, and NetBSD-current before 20051031 allows local users to gain privileges by attaching a debugger to a setuid/setgid (P_SUGID) process that performs an exec without a reset of real credentials.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2005-013.txt.asc; http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0157.html; http://mail-index.netbsd.org/source-changes/2005/10/31/0001.html
CVE: CVE-2005-4742
Published: 2005-12-31
Description: Unspecified vulnerability in Echelog 0.6.2 allows attackers to "exploit function stacks on some architectures," with unknown impact and attack vectors.
CVSS Score: 4.9 (MEDIUM)
References: http://sourceforge.net/project/shownotes.php?release_id=365508; http://www.osvdb.org/20244; http://sourceforge.net/project/shownotes.php?release_id=365508