deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-1745
Published: 2005-05-24
Description: The UserLogin control in BEA WebLogic Portal 8.1 through Service Pack 3 prints the password to standard output when an incorrect login attempt is made, which could make it easier for attackers to guess the correct password.
CVSS Score: 4.6 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/128; http://secunia.com/advisories/15486; http://securitytracker.com/id?1014049
CVE: CVE-2005-1746
Published: 2005-05-24
Description: The cluster cookie parsing code in BEA WebLogic Server 7.0 through Service Pack 5 attempts to contact any host or port specified in a cookie, even when it is not in the cluster, which allows remote attackers to cause a denial of service (cluster slowdown) via modified cookies.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/129; http://secunia.com/advisories/15486; http://securitytracker.com/id?1014049
CVE: CVE-2005-1747
Published: 2005-05-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 6, allow remote attackers to inject arbitrary web script or HTML, and possibly gain administrative privileges, via the (1) j_username or (2) j_password parameters in the login page (LoginForm.jsp), (3) parameters to the error page in the Administration Console, (4) unknown vectors in the Server Console while the administrator has an active session to obtain the ADMINCONSOLESESSION cookie, or (5) an alternate vector in the Server Console that does not require an active session but also leaks the username and password.
CVSS Score: 6.8 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/130; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3328&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2456&w=2
CVE: CVE-2005-1748
Published: 2005-05-24
Description: The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 5, allows remote anonymous binds, which may allow remote attackers to view user entries or cause a denial of service.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/131; http://secunia.com/advisories/15486; http://securitytracker.com/id?1014049
CVE: CVE-2005-1749
Published: 2005-05-24
Description: Buffer overflow in BEA WebLogic Server and WebLogic Express 6.1 Service Pack 4 allows remote attackers to cause a denial of service (CPU consumption from thread looping).
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/132; http://secunia.com/advisories/15486; http://www.securityfocus.com/bid/13717
CVE: CVE-2005-1151
Published: 2005-05-25
Description: qpopper 4.0.5 and earlier does not properly drop privileges before processing certain user-supplied files, which allows local users to overwrite or create arbitrary files as root.
CVSS Score: 7.2 (HIGH)
References: http://bugs.gentoo.org/show_bug.cgi?id=90622; http://secunia.com/advisories/15475; http://secunia.com/advisories/15478
CVE: CVE-2005-1152
Published: 2005-05-25
Description: popauth.c in qpopper 4.0.5 and earlier does not properly set the umask, which may cause qpopper to create files with group or world-writable permissions.
CVSS Score: 2.1 (LOW)
References: http://bugs.gentoo.org/attachment.cgi?id=58329&action=view; http://bugs.gentoo.org/show_bug.cgi?id=90622; http://secunia.com/advisories/15475
CVE: CVE-2005-1249
Published: 2005-05-25
Description: The IMAP daemon (IMAPD32.EXE) in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (CPU consumption) via an LSUB command with a large number of null characters, which causes an infinite loop.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1014047; http://www.idefense.com/application/poi/display?id=245&type=vulnerabilities; http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html
CVE: CVE-2005-1252
Published: 2005-05-25
Description: Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote attackers to read arbitrary files via "..\" (dot dot backslash) sequences in the query string argument in a GET request to a non-existent .jsp file.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1014047; http://www.idefense.com/application/poi/display?id=242&type=vulnerabilities; http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html
CVE: CVE-2005-1254
Published: 2005-05-25
Description: Stack-based buffer overflow in the IMAP server for Ipswitch IMail 8.12 and 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to cause a denial of service (crash) via a SELECT command with a large argument.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1014047; http://www.idefense.com/application/poi/display?id=241&type=vulnerabilities; http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html
CVE: CVE-2005-1255
Published: 2005-05-25
Description: Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allow remote attackers to execute arbitrary code via a LOGIN command with (1) a long username argument or (2) a long username argument that begins with a special character.
CVSS Score: 10.0 (HIGH)
References: http://securitytracker.com/id?1014047; http://www.idefense.com/application/poi/display?id=243&type=vulnerabilities; http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html
CVE: CVE-2005-1256
Published: 2005-05-25
Description: Stack-based buffer overflow in the IMAP daemon (IMAPD32.EXE) in IMail 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to execute arbitrary code via a STATUS command with a long mailbox name.
CVSS Score: 10.0 (HIGH)
References: http://securitytracker.com/id?1014047; http://www.idefense.com/application/poi/display?id=244&type=vulnerabilities; http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html
CVE: CVE-2005-1543
Published: 2005-05-25
Description: Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENworks 6.5 Desktop and Server Management, ZENworks for Desktops 4.x, ZENworks for Servers 3.x, and Remote Management allows remote attackers to execute arbitrary code via (1) unspecified vectors, (2) type 1 authentication requests, and (3) type 2 authentication requests.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3662&w=2; http://secunia.com/advisories/15433; http://securitytracker.com/id?1014005
CVE: CVE-2005-1750
Published: 2005-05-25
Description: SQL injection vulnerability in login.asp in ezdwc NewsletterEz 3.0 allows remote attackers to execute arbitrary SQL commands via the password parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15469; http://securitytracker.com/id?1014038; http://www.securityfocus.com/bid/13730
CVE: CVE-2005-1751
Published: 2005-05-25
Description: Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack on the .shtool.$$ temporary file, a different vulnerability than CVE-2005-1759.
CVSS Score: 3.7 (LOW)
References: http://bugs.gentoo.org/show_bug.cgi?id=93782; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2637&w=2; http://secunia.com/advisories/15496
CVE: CVE-2005-1786
Published: 2005-05-25
Description: SQL injection vulnerability in admin.asp in FunkyASP AD System 1.1 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15494; http://securitytracker.com/id?1014056; http://www.funkyasp.co.uk/product.asp?prod=1&currency=USD
CVE: CVE-2005-0150
Published: 2005-05-26
Description: Firefox before 1.0 allows the user to store a (1) javascript: or (2) data: URLs as a Livefeed bookmark, then executes it in the security context of the currently loaded page when the user later accesses the bookmark, which could allow remote attackers to execute arbitrary code.
CVSS Score: 5.0 (MEDIUM)
References: http://www.mozilla.org/security/announce/mfsa2005-12.html; http://www.securityfocus.com/bid/12407; https://bugzilla.mozilla.org/show_bug.cgi?id=265668
CVE: CVE-2005-1408
Published: 2005-05-26
Description: Apple Keynote 2.0 and 2.0.1 allows remote attackers to read arbitrary files via the keynote: URI handler in a crafted Keynote presentation.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005/May/msg00005.html; http://remahl.se/david/vuln/016/; http://secunia.com/advisories/15508
CVE: CVE-2005-1520
Published: 2005-05-26
Description: Buffer overflow in the header_get_field_name function in header.c for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via a crafted e-mail.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15442; http://securitytracker.com/id?1014052; http://www.debian.org/security/2005/dsa-732
CVE: CVE-2005-1521
Published: 2005-05-26
Description: Integer overflow in the fetch_io function of the imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via a partial message request with a large value in the END parameter, which leads to a heap-based buffer overflow.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15442; http://securitytracker.com/id?1014052; http://www.debian.org/security/2005/dsa-732
CVE: CVE-2005-1522
Published: 2005-05-26
Description: The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service (CPU consumption) via a large range value in the FETCH command.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/15442; http://securitytracker.com/id?1014052; http://www.debian.org/security/2005/dsa-732
CVE: CVE-2005-1523
Published: 2005-05-26
Description: Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string specifiers in the command tag for IMAP commands.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15442; http://securitytracker.com/id?1014052; http://www.debian.org/security/2005/dsa-732
CVE: CVE-2005-1782
Published: 2005-05-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary web script or HTML via the node parameter to (1) add_review.htm, (2) suggest_review.htm, (3) suggest_category.htm, (4) add_booklist.htm, or (5) add_url.htm, the isbn parameter to (6) add_review.htm, (7) add_contents.htm, (8) add_classification.htm, the (9) chapters parameter to the add_contents page in index.php (aka add_contents.htm), (10) the user parameter to contact.htm, or (11) the submit[string] parameter to search.htm. NOTE: it is not clear whether BookReview is available to the public. If not, then it should not be included in CVE.
CVSS Score: 4.3 (MEDIUM)
References: http://lostmon.blogspot.com/2005/05/bookreview-10-multiple-variable-xss.html; http://securitytracker.com/id?1014058; http://www.osvdb.org/16871
CVE: CVE-2005-1797
Published: 2005-05-26
Description: The design of Advanced Encryption Standard (AES), aka Rijndael, allows remote attackers to recover AES keys via timing attacks on S-box lookups, which are difficult to perform in constant time in AES implementations.
CVSS Score: 5.1 (MEDIUM)
References: http://cr.yp.to/antiforgery/cachetiming-20050414.pdf; http://www.securityfocus.com/bid/13785; http://cr.yp.to/antiforgery/cachetiming-20050414.pdf
CVE: CVE-2005-1801
Published: 2005-05-26
Description: The vCard viewer in Nokia 9500 allows attackers to cause a denial of service (crash) via a vCard with a long Name field, which causes the crash when the user views it.
CVSS Score: 2.6 (LOW)
References: http://www.securityfocus.com/bid/13784; http://www.securityfocus.com/infocus/1836; http://www.securityfocus.com/bid/13784
CVE: CVE-2005-1827
Published: 2005-05-26
Description: D-Link DSL-504T allows remote attackers to bypass authentication and gain privileges, such as upgrade firmware, restart the router or restore a saved configuration, via a direct request to firmwarecfg.
CVSS Score: 7.5 (HIGH)
CWE: CWE-425
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5478&w=2; http://secunia.com/advisories/15422; http://www.securityfocus.com/bid/13679
CVE: CVE-2005-1828
Published: 2005-05-26
Description: D-Link DSL-504T stores usernames and passwords in cleartext in the router configuration file, which allows remote attackers to obtain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5478&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5478&w=2
CVE: CVE-2005-1784
Published: 2005-05-27
Description: Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress parameter in an updateprofile action for UserProfile.asp.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1014062; http://securitytracker.com/id?1014062
CVE: CVE-2005-1787
Published: 2005-05-27
Description: setup.php in phpStat 1.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the $check variable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6958&w=2; http://secunia.com/advisories/15516; http://securitytracker.com/id?1014064
CVE: CVE-2005-1795
Published: 2005-05-27
Description: The filecopy function in misc.c in Clam AntiVirus (ClamAV) before 0.85, on Mac OS, allows remote attackers to execute arbitrary code via a virus in a filename that contains shell metacharacters, which are not properly handled when HFS permissions prevent the file from being deleted and ditto is invoked.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://securitytracker.com/id?1014070; http://www.sentinelchicken.com/advisories/clamav; http://securitytracker.com/id?1014070
CVE: CVE-2005-1802
Published: 2005-05-27
Description: Nortel VPN Router (aka Contivity) allows remote attackers to cause a denial of service (crash) via an IPsec IKE packet with a malformed ISAKMP header.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1014068; http://www.nta-monitor.com/news/vpn-flaws/nortel/vpn-router-dos/; http://www.securityfocus.com/archive/1/399423
CVE: CVE-2005-1791
Published: 2005-05-28
Description: Microsoft Internet Explorer 6 SP2 (6.0.2900.2180) crashes when the user attempts to add a URI to the restricted zone, in which the full domain name of the URI begins with numeric sequences similar to an IP address.  NOTE: if there is not an exploit scenario in which an attacker can trigger this behavior, then perhaps this issue should not be included in CVE.
CVSS Score: 2.6 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9720&w=2; http://www.securityfocus.com/bid/13798; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9720&w=2
CVE: CVE-2005-1800
Published: 2005-05-28
Description: Cross-site scripting (XSS) vulnerability in Jaws Glossary gadget 0.4 to 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the term parameter in a view or ViewTerm action to index.php.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/034354.html; http://www.securityfocus.com/bid/13796; http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/034354.html
CVE: CVE-2005-1805
Published: 2005-05-28
Description: SQL injection vulnerability in login.asp in an unknown product by Online Solutions for Educators (OS4E) allows remote attackers to execute arbitrary SQL commands via the password.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1014072; http://www.securityfocus.com/bid/13804; http://www.under9round.com/os4e.txt
CVE: CVE-2005-1806
Published: 2005-05-28
Description: Format string vulnerability in PeerCast 0.1211 and earlier allows remote attackers to execute arbitrary code via format strings in the URL.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9979&w=2; http://secunia.com/advisories/15536; http://secunia.com/advisories/15753
CVE: CVE-2005-1807
Published: 2005-05-28
Description: The Data function in class.smtp.php in PHPMailer 1.7.2 and earlier allows remote attackers to cause a denial of service (infinite loop leading to memory and CPU consumption) via a long header field.
CVSS Score: 5.0 (MEDIUM)
References: http://seclists.org/lists/bugtraq/2005/May/0337.html; http://secunia.com/advisories/15543; http://secunia.com/advisories/18732
CVE: CVE-2005-1829
Published: 2005-05-28
Description: Microsoft Internet Explorer 6 SP2 allows remote attackers to cause a denial of service (infinite loop and application crash) via two embedded files that call each other.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0149&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0149&w=2
CVE: CVE-2005-1789
Published: 2005-05-29
Description: SQL injection vulnerability in SignIn.asp in India Software Solution shopping cart allows remote attackers to execute arbitrary SQL commands via the password.
CVSS Score: 7.5 (HIGH)
References: http://ir-hackers.com/indsc.txt; http://securitytracker.com/id?1014074; http://ir-hackers.com/indsc.txt
CVE: CVE-2005-1798
Published: 2005-05-29
Description: Directory traversal vulnerability in ServersCheck Monitoring Software 5.9.0 to 5.10.0 allows remote attackers to read arbitrary files via .. (dot dot) sequences in an HTTP request.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1014075; http://www.rgod.altervista.org/hacking/news/serverscheck.html; http://securitytracker.com/id?1014075
CVE: CVE-2005-1803
Published: 2005-05-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to inject arbitrary web script or HTML via the language parameter to (1) admin.php, or (2) powerpack_f.php, (3) the sitename parameter to sdv_infos.php, (4) the categories parameter to faq.php, (5) the lettre parameter to the glossaire module, (6) the title parameter to reviews.php, or (7) the image_subject parameter to reply.php.
CVSS Score: 4.3 (MEDIUM)
References: http://securitytracker.com/id?1014073; http://www.npds.org/download.php?op=geninfo&did=115; http://www.osvdb.org/16464
CVE: CVE-2005-1804
Published: 2005-05-29
Description: Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to execute arbitrary SQL commands via the (1) terme parameter in the glossaire module (glossaire.php) or (2) query parameter to links.php.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1014073; http://www.npds.org/download.php?op=geninfo&did=115; http://securitytracker.com/id?1014073
CVE: CVE-2005-1830
Published: 2005-05-29
Description: The DbgMsg.sys driver in Compuware SoftICE DriverStudio 3.1 and 3.2 allows remote attackers to cause a denial of service (application crash) via an invalid Debug Message pointer.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7861&w=2; http://pb.specialised.info/all/adv/sice-adv.txt; http://secunia.com/advisories/15522
CVE: CVE-2005-1808
Published: 2005-05-30
Description: Firefly Studios Stronghold 2 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large size value for the nickname, which causes a memory allocation failure and generates an exception.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/strong2boom-adv.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6999&w=2; http://secunia.com/advisories/15556
CVE: CVE-2005-0356
Published: 2005-05-31
Description: Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:15.tcp.asc; ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.64/SCOSA-2005.64.txt; http://secunia.com/advisories/15393
CVE: CVE-2005-1765
Published: 2005-05-31
Description: syscall in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform, when running in 32-bit compatibility mode, allows local users to cause a denial of service (kernel hang) via crafted arguments.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/18056; http://www.debian.org/security/2005/dsa-922; http://www.novell.com/linux/security/advisories/2005_29_kernel.html
CVE: CVE-2005-1770
Published: 2005-05-31
Description: Buffer overflow in the Aavmker4 device driver in Avast! Antivirus 4.6 and possibly other versions allows local users to cause a denial of service (system crash) and possibly execute arbitrary code via certain signals combined with crafted input.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0031&w=2; http://pb.specialised.info/all/adv/avast-adv.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0031&w=2
CVE: CVE-2005-1771
Published: 2005-05-31
Description: Unknown vulnerability in HP-UX trusted systems B.11.00 through B.11.23 allows remote attackers to gain unauthorized access, possibly involving remshd and/or telnet -t.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4478&w=2; http://securitytracker.com/id?1014060; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4478&w=2
CVE: CVE-2005-1772
Published: 2005-05-31
Description: Buffer overflow in the client cd-key hash in Terminator 3: War of the Machines 1.16 and earlier allows remote attackers to cause a denial of service (application crash) via a long client cd-key hash value, a different vulnerability than CVE-2005-1556.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/t3wmbof-adv.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7479&w=2; http://secunia.com/advisories/15520
CVE: CVE-2005-1773
Published: 2005-05-31
Description: Multiple unknown vulnerabilities in L-Soft LISTSERV 14.3, 1.8e, and 1.8d allow remote attackers to execute arbitrary code or cause a denial of service.  NOTE: this candidate may be SPLIT in the future when more precise technical details become available.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8546&w=2; http://secunia.com/advisories/15498; http://securitytracker.com/id?1014051
CVE: CVE-2005-1774
Published: 2005-05-31
Description: WEB-DAV Linux File System (davfs2) 0.2.3 does not properly enforce Unix permissions, which allows local users to write arbitrary files on a davfs2 mounted filesystem.
CVSS Score: 2.1 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=310757; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8096&w=2; http://secunia.com/advisories/15497
CVE: CVE-2005-1775
Published: 2005-05-31
Description: Terminator 3: War of the Machines 1.16 and earlier allows remote attackers to cause a denial of service (application crash) via a large nickname.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7479&w=2; http://secunia.com/advisories/15520; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7479&w=2
CVE: CVE-2005-1776
Published: 2005-05-31
Description: Buffer overflow in the READ_TCP_STRING function in game_message_functions.cpp in the network plugin for C'Nedra 0.4.0 and earlier allows remote attackers to execute arbitrary code via a long text string.
CVSS Score: 7.5 (HIGH)
References: http://aluigi.altervista.org/adv/cnedrabof-adv.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2601&w=2; http://secunia.com/advisories/15519