deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-0637
Published: 2005-05-02
Description: The copy functions in locore.s such as copyout in OpenBSD 3.5 and 3.6, and possibly other BSD based operating systems, may allow attackers to exceed certain address boundaries and modify kernel memory.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/14432; http://securitytracker.com/id?1013333; http://www.openbsd.org/errata.html#copy
CVE: CVE-2005-0642
Published: 2005-05-02
Description: SQL injection vulnerability in the Query Designer for Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 allows remote attackers to execute arbitrary SQL via an imported file.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14454; http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=Qo64323; http://secunia.com/advisories/14454
CVE: CVE-2005-0643
Published: 2005-05-02
Description: Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4357 allows remote attackers to execute arbitrary code via crafted LHA files.
CVSS Score: 7.5 (HIGH)
References: http://images.mcafee.com/misc/McAfee_Security_Bulletin_05-march-17.pdf; http://secunia.com/advisories/14628; http://www.securityfocus.com/bid/10243
CVE: CVE-2005-0644
Published: 2005-05-02
Description: Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4436 allows remote attackers to execute arbitrary code via a malformed LHA file with a type 2 header file name field, a variant of CVE-2005-0643.
CVSS Score: 7.5 (HIGH)
References: http://images.mcafee.com/misc/McAfee_Security_Bulletin_05-march-17.pdf; http://secunia.com/advisories/14628; http://securitytracker.com/id?1013463
CVE: CVE-2005-0645
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in show.inc.php in cuteNews 1.3.6 allows remote attackers to inject arbitrary HTML, web script, and PHP code via the (1) CLIENT-IP or (2) X-FORWARDED-FOR header in an HTTP POST request to show_news.php.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2370&w=2; http://www.kernelpanik.org/docs/kernelpanik/cutenews.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2370&w=2
CVE: CVE-2005-0646
Published: 2005-05-02
Description: SQL injection vulnerability in auth.php in paNews 2.0.4b allows remote attackers to execute arbitrary SQL via the mysql_prefix parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2370&w=2; http://www.kernelpanik.org/docs/kernelpanik/panews.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2370&w=2
CVE: CVE-2005-0647
Published: 2005-05-02
Description: admin_setup.php in paNews 2.0.4b allows remote attackers to inject arbitrary PHP code via the (1) $form[comments] or (2) $form[autoapprove] parameters, which are written to config.php.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2370&w=2; http://www.kernelpanik.org/docs/kernelpanik/panews.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2370&w=2
CVE: CVE-2005-0648
Published: 2005-05-02
Description: Multiple vulnerabilities in Pixel-Apes SafeHTML before 1.3.0 allow remote attackers to bypass cross-site scripting (XSS) protection via (1) "decimal HTML entities" or (2) "the \x00 symbol."
CVSS Score: 4.3 (MEDIUM)
References: http://pixel-apes.com/safehtml/feed; http://securitytracker.com/id?1013315; http://pixel-apes.com/safehtml/feed
CVE: CVE-2005-0649
Published: 2005-05-02
Description: Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to bypass cross-site scripting (XSS) protection via "hexadecimal HTML entities."
CVSS Score: 4.3 (MEDIUM)
References: http://pixel-apes.com/safehtml/feed; http://secunia.com/advisories/13869; http://pixel-apes.com/safehtml/feed
CVE: CVE-2005-0650
Published: 2005-05-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to inject arbitrary web script or HTML via (1) the pages parameter to divers.php (incorrectly referred to as "drivers.php" by some sources), (2) in the search feature text area, (3) forum name, (4) site name or (5) the maximum avatar size in the option section, (5) new category or (6) new forum fields in the forum section.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0270&w=2; http://secunia.com/advisories/14533; http://securitytracker.com/id?1013332
CVE: CVE-2005-0651
Published: 2005-05-02
Description: Multiple SQL injection vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to execute arbitrary SQL commands via (1) liste or (2) desc parameters to divers.php (incorrectly referred to as "drivers.php" by some sources), (3) the search feature text area, (4) post name in the post creation feature, (5) City, (6) Homepage, (7) ICQ, (8) AOL, (9) Yahoo!, (10) MSN, or (11) e-mail fields in the profile feature or (12) the new field in the moderator section.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0270&w=2; http://secunia.com/advisories/14533; http://securitytracker.com/id?1013332
CVE: CVE-2005-0652
Published: 2005-05-02
Description: Unknown vulnerability in HP OpenVMS VAX 7.x and 6.x and OpenVMS Alpha 7.x or 6.x allows local users to access privileged files.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1451&w=2; http://secunia.com/advisories/14444; https://exchange.xforce.ibmcloud.com/vulnerabilities/19566
CVE: CVE-2005-0653
Published: 2005-05-02
Description: phpMyAdmin 2.6.1 does not properly grant permissions on tables with an underscore in the name, which grants remote authenticated users more privileges than intended.
CVSS Score: 4.6 (MEDIUM)
References: http://bugs.gentoo.org/show_bug.cgi?id=83792; http://www.gentoo.org/security/en/glsa/glsa-200503-07.xml; http://bugs.gentoo.org/show_bug.cgi?id=83792
CVE: CVE-2005-0654
Published: 2005-05-02
Description: gifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4 allows remote attackers or local users to cause a denial of service (application crash) via the image descriptor (1) height or (2) width fields set to zero.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8830&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8830&w=2
CVE: CVE-2005-0655
Published: 2005-05-02
Description: auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to (1) teman.php, (2) hal.php, or (3) arsip.php, which reveals the path in a PHP error message.
CVSS Score: 5.0 (MEDIUM)
References: http://echo.or.id/adv/adv011-y3dips-2005.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5750&w=2; http://securitytracker.com/id?1013357
CVE: CVE-2005-0656
Published: 2005-05-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in auraCMS 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) hits parameter to hits.php, (2) query parameter to index.php, or (3) theCount parameter to counter.php.
CVSS Score: 4.3 (MEDIUM)
References: http://echo.or.id/adv/adv011-y3dips-2005.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5750&w=2; http://secunia.com/advisories/14458
CVE: CVE-2005-0657
Published: 2005-05-02
Description: Directory traversal vulnerability in Computalynx CProxy 3.3.x and 3.4.x through 3.4.4 allows remote attackers to read arbitrary files or cause a denial of service (application crash) via a .. (dot dot) in an HTTP request.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4013&w=2; http://secunia.com/advisories/14461; https://exchange.xforce.ibmcloud.com/vulnerabilities/19573
CVE: CVE-2005-0658
Published: 2005-05-02
Description: SQL injection vulnerability in a third party extension to TYPO3 allows remote attackers to execute arbitrary SQL commands via the category_uid parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8892&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9649&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0069&w=2
CVE: CVE-2005-0659
Published: 2005-05-02
Description: phpBB 2.0.13 and earlier allows remote attackers to obtain sensitive information via a direct request to oracle.php, which reveals the path in a PHP error message.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0134&w=2; http://neosecurityteam.net/Advisories/Advisory-09.txt; http://neosecurityteam.tk/index.php?pagina=advisories&id=9
CVE: CVE-2005-0660
Published: 2005-05-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in D-Forum 1.11 allows remote attackers to inject arbitrary web script or HTML via certain fields, as demonstrated using the page parameter in nav.php3.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/14464; http://securitytracker.com/id?1013349; http://secunia.com/advisories/14464
CVE: CVE-2005-0661
Published: 2005-05-02
Description: SQL injection vulnerability in the getwbbuserdata function in session.php for Woltlab Burning Board 2.0.3 through 2.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) lastvisit cookie.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14450; http://securitytracker.com/id?1013351; http://secunia.com/advisories/14450
CVE: CVE-2005-0662
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the Avatar field.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/14414; http://www.osvdb.org/14308; http://secunia.com/advisories/14414
CVE: CVE-2005-0663
Published: 2005-05-02
Description: SQL injection vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary SQL commands via the f parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14414; http://www.osvdb.org/14308; https://exchange.xforce.ibmcloud.com/vulnerabilities/19051
CVE: CVE-2005-0664
Published: 2005-05-02
Description: Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/17705; http://securitytracker.com/id?1013398; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102041-1
CVE: CVE-2005-0665
Published: 2005-05-02
Description: Format string vulnerability in xv before 3.10a allows remote attackers to execute arbitrary code via format string specifiers in a filename.
CVSS Score: 5.1 (MEDIUM)
References: http://bugs.gentoo.org/show_bug.cgi?id=83686; http://www.gentoo.org/security/en/glsa/glsa-200503-09.xml; http://bugs.gentoo.org/show_bug.cgi?id=83686
CVE: CVE-2005-0666
Published: 2005-05-02
Description: Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC and VMA mirroring, allows local users and possibly remote attackers to bypass intended access restrictions and execute arbitrary code.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/14489; http://www.securityfocus.com/archive/1/392348; http://www.securityfocus.com/bid/12729
CVE: CVE-2005-0669
Published: 2005-05-02
Description: Multiple SQL injection vulnerabilities in mod.php for phpCOIN 1.2.0 through 1.2.1b allow remote attackers to execute arbitrary SQL commands via the (1) the faq_id in the faq mod, (2) the id parameter in the pages mod, (3) the id parameter in the siteinfo module, (4) the topic_id parameter in the articles module, (5) the ord_id in the orders module, (6) the dom_id parameter in the domains module, or (7) the invd_id parameter in the invoices module.
CVSS Score: 7.5 (HIGH)
References: http://forums.phpcoin.com/index.php?showtopic=4101; http://forums.phpcoin.com/index.php?showtopic=4116; http://forums.phpcoin.com/index.php?showtopic=4118
CVE: CVE-2005-0670
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in phpCOIN 1.2.0 through 1.2.1b allows remote attackers to inject arbitrary web script or HTML via (1) the new parameter to mod.php, (2) the w parameter to mod.php, (3) the e parameter to login.php, (4) the o parameter to login.php, and possibly other scripts.
CVSS Score: 4.3 (MEDIUM)
References: http://forums.phpcoin.com/index.php?showtopic=4101; http://forums.phpcoin.com/index.php?showtopic=4116; http://forums.phpcoin.com/index.php?showtopic=4118
CVE: CVE-2005-0672
Published: 2005-05-02
Description: Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via text strings that are not null terminated, which triggers a null dereference.
CVSS Score: 7.5 (HIGH)
References: http://aluigi.altervista.org/adv/ca3dex-adv.txt; http://secunia.com/advisories/14483; http://securitytracker.com/id?1013361
CVE: CVE-2005-0673
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in usercp_register.php for phpBB 2.0.13 allows remote attackers to inject arbitrary web script or HTML by setting the (1) allowhtml, (2) allowbbcode, or (3) allowsmilies parameters to inject HTML into signatures for personal messages, possibly when they are processed by privmsg.php or viewtopic.php.
CVSS Score: 4.3 (MEDIUM)
References: http://neosecurityteam.tk/index.php?pagina=advisories&id=8; http://secunia.com/advisories/14475; http://securitytracker.com/id?1013362
CVE: CVE-2005-0675
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.5 allows remote attackers to inject arbitrary web script or HTML via the (1) list or (2) frommethod parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/9497; http://securitytracker.com/id?1013365; http://secunia.com/advisories/9497
CVE: CVE-2005-0677
Published: 2005-05-02
Description: index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1013365; http://securitytracker.com/id?1013365
CVE: CVE-2005-0678
Published: 2005-05-02
Description: PHP remote file inclusion vulnerability in formmail.inc.php for Form Mail Script 2.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the script_root to reference a URL on a remote web server that contains the code.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0035&w=2; http://secunia.com/advisories/14505; http://securitytracker.com/id?1013378
CVE: CVE-2005-0679
Published: 2005-05-02
Description: PHP remote file inclusion vulnerability in tell_a_friend.inc.php for Tell A Friend Script 2.7 before 20050305 allows remote attackers to execute arbitrary PHP code by modifying the script_root parameter to reference a URL on a remote web server that contains the code.  NOTE: it was later reported that 2.4 is also affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://arfis.wordpress.com/2007/09/13/rfi-02-openelibrary/; http://securitytracker.com/id?1013390; http://www.osvdb.org/14628
CVE: CVE-2005-0682
Published: 2005-05-02
Description: Cross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via certain inputs.
CVSS Score: 4.3 (MEDIUM)
References: http://drupal.org/drupal-4.5.2; http://drupal.org/files/drupal-4.5-xss-fix.patch; http://secunia.com/advisories/14515
CVE: CVE-2005-0683
Published: 2005-05-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-0659.  Reason: This candidate is a duplicate of CVE-2005-0659.  Notes: All CVE users should reference CVE-2005-0659 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-0704
Published: 2005-05-02
Description: Buffer overflow in the Etheric dissector in Ethereal 0.10.7 through 0.10.9 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://www.ethereal.com/appnotes/enpa-sa-00018.html; http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml; http://www.mandriva.com/security/advisories?name=MDKSA-2005:053
CVE: CVE-2005-0705
Published: 2005-05-02
Description: The GPRS-LLC dissector in Ethereal 0.10.7 through 0.10.9, with the "ignore cipher bit" option enabled. allows remote attackers to cause a denial of service (application crash).
CVSS Score: 5.0 (MEDIUM)
References: http://www.ethereal.com/appnotes/enpa-sa-00018.html; http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml; http://www.mandriva.com/security/advisories?name=MDKSA-2005:053
CVE: CVE-2005-0706
Published: 2005-05-02
Description: Buffer overflow in discdb.c for grip 3.1.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the cddb lookup to return more matches than expected.
CVSS Score: 7.5 (HIGH)
References: http://rpmfind.net/linux/RPM/suse/9.3/i386/suse/i586/gnome-vfs-1.0.5-816.2.i586.html; http://secunia.com/advisories/32803; http://secunia.com/advisories/33389
CVE: CVE-2005-0707
Published: 2005-05-02
Description: Buffer overflow in the IMAP daemon (IMAP4d32.exe) for Ipswitch Collaboration Suite (ICS) before 8.15 Hotfix 1 allows remote authenticated users to execute arbitrary code via a long EXAMINE command.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/14546; http://securitytracker.com/id?1013410; http://www.idefense.com/application/poi/display?id=216&type=vulnerabilities
CVE: CVE-2005-0708
Published: 2005-05-02
Description: The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer portions of kernel memory if a file is truncated while it is being sent, which could allow remote attackers to obtain sensitive information.
CVSS Score: 10.0 (HIGH)
References: https://www.freebsd.org/security/advisories/FreeBSD-SA-05:02.sendfile.asc; https://www.freebsd.org/security/advisories/FreeBSD-SA-05:02.sendfile.asc
CVE: CVE-2005-0709
Published: 2005-05-02
Description: MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-94
References: http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0084.html; http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
CVE: CVE-2005-0710
Published: 2005-05-02
Description: MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute arbitrary libraries by using INSERT INTO to modify the mysql.func table, which is processed by the udf_init function.
CVSS Score: 4.6 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0083.html; http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
CVE: CVE-2005-0711
Published: 2005-05-02
Description: MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack.
CVSS Score: 2.1 (LOW)
References: http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0082.html; http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
CVE: CVE-2005-0712
Published: 2005-05-02
Description: Mac OS X before 10.3.8 users world-writable permissions for certain directories, which may allow local users to gain privileges, possibly via the receipt cache or ColorSync profiles.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html
CVE: CVE-2005-0714
Published: 2005-05-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-0340.  Reason: This candidate is a reservation duplicate of CVE-2005-0340.  Notes: All CVE users should reference CVE-2005-0340 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-0721
Published: 2005-05-02
Description: PHP remote file inclusion vulnerability in modules.php in eXPerience2 allows remote attackers to execute arbitrary PHP code by modifying the file parameter to reference a URL on a remote web server that contains the code.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4600&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4600&w=2
CVE: CVE-2005-0724
Published: 2005-05-02
Description: paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via (1) an invalid str parameter to pafiledb.php, or a direct request to (2) viewall.php, (3) stats.php, (4) search.php, (5) rate.php, (6) main.php, (7) license.php, (8) category.php, (9) download.php, (10) file.php, (11) email.php, or (12) admin.php, which reveals the path in a PHP error message.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2851&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2851&w=2
CVE: CVE-2005-0726
Published: 2005-05-02
Description: SQL injection vulnerability in editpost.php in UBB.threads 6.0 allows remote attackers to execute arbitrary SQL commands via the Number parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8279&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8279&w=2
CVE: CVE-2005-0727
Published: 2005-05-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-0735.  Reason: This candidate is a duplicate of CVE-2005-0735.  Notes: All CVE users should reference CVE-2005-0727 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-0728
Published: 2005-05-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-0736.  Reason: This candidate is a duplicate of CVE-2005-0736.  Notes: All CVE users should reference CVE-2005-0736 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-0729
Published: 2005-05-02
Description: Format string vulnerability in Xpand Rally 1.1.0.0 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a message.
CVSS Score: 7.5 (HIGH)
References: http://aluigi.altervista.org/adv/xprallyfs-adv.txt; http://secunia.com/advisories/14545; http://www.securiteam.com/windowsntfocus/5DP0G00F5Q.html
CVE: CVE-2005-0730
Published: 2005-05-02
Description: PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service via a request to a file on the floppy drive, as demonstrated using A:\a.txt.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html; http://secunia.com/advisories/14553; http://secway.org/advisory/ad20050104.txt
CVE: CVE-2005-0732
Published: 2005-05-02
Description: PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to obtain the full path of the web server via a request for a non-existent filename, which leaks the full path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html; http://secunia.com/advisories/14553; http://secway.org/advisory/ad20050104.txt