deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2004-1288
Published: 2005-01-10
Description: Buffer overflow in the parse_html function in o3read.c for o3read 0.0.3 allows remote attackers to execute arbitrary code via a crafted SXW file.
CVSS Score: 10.0 (HIGH)
References: http://tigger.uic.edu/~jlongs2/holes/o3read.txt; http://www.gentoo.org/security/en/glsa/glsa-200501-20.xml; https://exchange.xforce.ibmcloud.com/vulnerabilities/18547
CVE: CVE-2004-1289
Published: 2005-01-10
Description: Multiple buffer overflows in (1) the getline function in pcalutil.c and (2) the get_holiday function in readfile.c for pcal 4.7.1 allow remote attackers to execute arbitrary code via a crafted calendar file.
CVSS Score: 10.0 (HIGH)
References: http://tigger.uic.edu/~jlongs2/holes/pcal.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/18552; http://tigger.uic.edu/~jlongs2/holes/pcal.txt
CVE: CVE-2004-1290
Published: 2005-01-10
Description: Buffer overflow in the process_moves function in pgn2web.c for pgn2web 0.3 allows remote attackers to execute arbitrary code via a crafted PGN file.
CVSS Score: 10.0 (HIGH)
References: http://tigger.uic.edu/~jlongs2/holes/pgn2web.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/18554; http://tigger.uic.edu/~jlongs2/holes/pgn2web.txt
CVE: CVE-2004-1291
Published: 2005-01-10
Description: Buffer overflow in qwik-smtpd allows remote attackers to use the server as an SMTP spam relay via a long HELO command, which overwrites the adjacent localIP data buffer.
CVSS Score: 7.5 (HIGH)
References: http://tigger.uic.edu/~jlongs2/holes/qwik-smtpd.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/18555; http://tigger.uic.edu/~jlongs2/holes/qwik-smtpd.txt
CVE: CVE-2004-1292
Published: 2005-01-10
Description: Buffer overflow in the parse_emelody function in parse_emelody.c for ringtonetools 2.22 allows remote attackers to execute arbitrary code via a crafted eMelody file.
CVSS Score: 10.0 (HIGH)
References: http://tigger.uic.edu/~jlongs2/holes/ringtonetools.txt; http://www.gentoo.org/security/en/glsa/glsa-200503-18.xml; https://exchange.xforce.ibmcloud.com/vulnerabilities/18557
CVE: CVE-2004-1293
Published: 2005-01-10
Description: Buffer overflow in the ReadFontTbl function in reader.c for rtf2latex2e 1.0fc2 allows remote attackers to execute arbitrary code via a crafted RTF file.
CVSS Score: 10.0 (HIGH)
References: http://tigger.uic.edu/~jlongs2/holes/rtf2latex2e.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/18559; http://tigger.uic.edu/~jlongs2/holes/rtf2latex2e.txt
CVE: CVE-2004-1294
Published: 2005-01-10
Description: The mget function in cmds.c for tnftp 20030825 allows remote FTP servers to overwrite arbitrary files via FTP responses containing file names with / (slash) characters.
CVSS Score: 5.0 (MEDIUM)
References: http://tigger.uic.edu/~jlongs2/holes/tnftp.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/18560; http://tigger.uic.edu/~jlongs2/holes/tnftp.txt
CVE: CVE-2004-1295
Published: 2005-01-10
Description: The slip_down function in slip.c for the uml_net program in uml-utilities 20030903, when uml_net is installed setuid root, does not verify whether the calling user has sufficient permission to disable an interface, which allows local users to cause a denial of service (network service disabled).
CVSS Score: 2.1 (LOW)
References: http://tigger.uic.edu/~jlongs2/holes/uml-utilites.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/18562; http://tigger.uic.edu/~jlongs2/holes/uml-utilites.txt
CVE: CVE-2004-1297
Published: 2005-01-10
Description: Buffer overflow in the process_font_table function in convert.c for unrtf 0.19.3 allows remote attackers to execute arbitrary code via a crafted RTF file.
CVSS Score: 10.0 (HIGH)
References: http://tigger.uic.edu/~jlongs2/holes/unrtf.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/18566; http://tigger.uic.edu/~jlongs2/holes/unrtf.txt
CVE: CVE-2004-1298
Published: 2005-01-10
Description: Buffer overflow in the parse function in vb2c.c for vb2c 0.02 allows remote attackers to execute arbitrary code via a crafted FRM file.
CVSS Score: 10.0 (HIGH)
References: http://tigger.uic.edu/~jlongs2/holes/vb2c.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/18605; http://tigger.uic.edu/~jlongs2/holes/vb2c.txt
CVE: CVE-2004-1299
Published: 2005-01-10
Description: Buffer overflow in the get_attr function in html.c for vilistextum 2.6.6 allows remote attackers to execute arbitrary code via a crafted web page.
CVSS Score: 10.0 (HIGH)
References: http://tigger.uic.edu/~jlongs2/holes/vilistextum.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/18610; http://tigger.uic.edu/~jlongs2/holes/vilistextum.txt
CVE: CVE-2004-1300
Published: 2005-01-10
Description: Buffer overflow in the open_aiff_file function in demux_aiff.c for xine-lib (libxine) 1-rc7 allows remote attackers to execute arbitrary code via a crafted AIFF file.
CVSS Score: 10.0 (HIGH)
References: http://tigger.uic.edu/~jlongs2/holes/xine-lib.txt; http://www.mandriva.com/security/advisories?name=MDKSA-2005:011; https://exchange.xforce.ibmcloud.com/vulnerabilities/18611
CVE: CVE-2004-1301
Published: 2005-01-10
Description: Buffer overflow in the book_format_sql function in format.c for xlreader 0.9.0 allows remote attackers to execute arbitrary code via a crafted Excel (XLS) file.
CVSS Score: 10.0 (HIGH)
References: http://tigger.uic.edu/~jlongs2/holes/xlreader.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/18612; http://tigger.uic.edu/~jlongs2/holes/xlreader.txt
CVE: CVE-2004-1302
Published: 2005-01-10
Description: The id3tag_sort function in id3tag.c for YAMT 0.5 allows remote attackers to execute arbitrary commands via an MP3 file with double quotes in the Artist tag.
CVSS Score: 10.0 (HIGH)
References: http://rpmfind.net/linux/RPM/suse/updates/8.2/i386/rpm/i586/yamt-0.5-1277.i586.html; http://secunia.com/advisories/13554; http://securitytracker.com/id?1012583
CVE: CVE-2004-1303
Published: 2005-01-10
Description: Buffer overflow in the get function in get.c for Yanf 0.4 allows remote malicious web servers to execute arbitrary code via crafted HTTP responses.
CVSS Score: 10.0 (HIGH)
References: http://tigger.uic.edu/~jlongs2/holes/yanf.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/18615; http://tigger.uic.edu/~jlongs2/holes/yanf.txt
CVE: CVE-2004-1304
Published: 2005-01-10
Description: Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF file.
CVSS Score: 10.0 (HIGH)
References: http://securitytracker.com/id?1012433; http://www.gentoo.org/security/en/glsa/glsa-200412-07.xml; http://www.securityfocus.com/bid/11771
CVE: CVE-2004-1308
Published: 2005-01-10
Description: Integer overflow in (1) tif_dirread.c and (2) tif_fax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF file containing a TIFF_ASCII or TIFF_UNDEFINED directory entry with a -1 entry count, which leads to a heap-based buffer overflow.
CVSS Score: 10.0 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000920; http://lists.apple.com/archives/security-announce/2005/May/msg00001.html; http://secunia.com/advisories/13776
CVE: CVE-2004-1309
Published: 2005-01-10
Description: Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap (BMP) file containing a large biClrUsed field.
CVSS Score: 10.0 (HIGH)
References: http://www.idefense.com/application/poi/display?id=168; http://www.mandriva.com/security/advisories?name=MDKSA-2004:157; http://www1.mplayerhq.hu/MPlayer/releases/ChangeLog
CVE: CVE-2004-1310
Published: 2005-01-10
Description: Stack-based buffer overflow in the asf_mmst_streaming.c functionality for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a large MMST stream packet.
CVSS Score: 10.0 (HIGH)
References: http://www.idefense.com/application/poi/display?id=167; http://www.mandriva.com/security/advisories?name=MDKSA-2004:157; http://www1.mplayerhq.hu/MPlayer/patches/mmst_fix_20041215.diff
CVE: CVE-2004-1311
Published: 2005-01-10
Description: Integer overflow in the real_setup_and_get_header function in real.c for Unix MPlayer 1.0pre5 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a Real RTSP streaming media file with a -1 content-length field, which leads to a heap-based buffer overflow.
CVSS Score: 10.0 (HIGH)
References: http://www.idefense.com/application/poi/display?id=166; http://www.mandriva.com/security/advisories?name=MDKSA-2004:157; http://www1.mplayerhq.hu/MPlayer/patches/rtsp_fix_20041215.diff
CVE: CVE-2004-1313
Published: 2005-01-10
Description: The Smc.exe process in My Firewall Plus 5.0 build 1117, and possibly other versions, does not drop privileges before invoking help, which allows local users to gain privileges.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/secunia_research/2004-16/; https://exchange.xforce.ibmcloud.com/vulnerabilities/18622; http://secunia.com/secunia_research/2004-16/
CVE: CVE-2004-1314
Published: 2005-01-10
Description: Safari 1.x allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability, a different vulnerability than CVE-2004-1122.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html; http://secunia.com/advisories/13252/; http://secunia.com/multiple_browsers_window_injection_vulnerability_test/
CVE: CVE-2005-0284
Published: 2005-01-10
Description: SQL injection vulnerability in addentry.php in Woltlab Burning Book 1.0 Gold, 1.1.1e, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the user-agent parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1506&w=2; https://exchange.xforce.ibmcloud.com/vulnerabilities/18859; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1506&w=2
CVE: CVE-2005-0287
Published: 2005-01-10
Description: Bottomline Webseries Payment Application allows remote attackers to read arbitrary files on the network via a report template with modified ReportPath or ReportName values.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2462&w=2; http://secunia.com/advisories/13821; http://securitytracker.com/id?1012854
CVE: CVE-2004-0897
Published: 2005-01-11
Description: The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/13802; http://securitytracker.com/id?1012833; http://www.ciac.org/ciac/bulletins/p-095.shtml
CVE: CVE-2004-0991
Published: 2005-01-11
Description: Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or MP3 files.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/13779; http://secunia.com/advisories/13788; http://secunia.com/advisories/13899
CVE: CVE-2004-1039
Published: 2005-01-11
Description: The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests, which causes inetd to launch a separate process for each request.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.1/SCOSA-2005.1.txt; http://secunia.com/advisories/13805; http://www.securityfocus.com/archive/1/386814
CVE: CVE-2005-0097
Published: 2005-01-11
Description: The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a malformed NTLM type 3 message that triggers a NULL dereference.
CVSS Score: 5.0 (MEDIUM)
References: http://fedoranews.org/updates/FEDORA--.shtml; http://secunia.com/advisories/13789; http://security.gentoo.org/glsa/glsa-200501-25.xml
CVE: CVE-2005-0108
Published: 2005-01-11
Description: Apache mod_auth_radius 1.5.4 and libpam-radius-auth allow remote malicious RADIUS servers to cause a denial of service (crash) via a RADIUS_REPLY_MESSAGE with a RADIUS attribute length of 1, which leads to a memcpy operation with a -1 length argument.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2050&w=2; http://secunia.com/advisories/13773; http://secunia.com/advisories/14046
CVE: CVE-2005-0117
Published: 2005-01-11
Description: Buffer overflow in XShisen before 1.36 allows local users to execute arbitrary code via a long GECOS field.
CVSS Score: 4.6 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=289784; http://www.vuxml.org/freebsd/56971fa6-641c-11d9-a097-000854d03344.html; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=289784
CVE: CVE-2005-0288
Published: 2005-01-11
Description: The change password functionality in Bottomline Webseries Payment Application does not require the old password when users enter a new password, which could allow remote authenticated users to change other users' passwords.
CVSS Score: 3.6 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9400&w=2; http://secunia.com/advisories/13821; http://securitytracker.com/id?1012854
CVE: CVE-2005-0376
Published: 2005-01-12
Description: PHP remote file inclusion vulnerability in SGallery 1.01 allows local and possibly remote attackers to execute arbitrary PHP code by modifying the DOCUMENT_ROOT parameter to reference a URL on a remote web server that contains (1) config.php or (2) sql_layer.php.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030844.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0947&w=2; http://secunia.com/advisories/13824
CVE: CVE-2005-0456
Published: 2005-01-12
Description: Opera 7.54 and earlier does not properly validate base64 encoded binary data in a data: (RFC 2397) URL, which causes the URL to be obscured in a download dialog, which may allow remote attackers to trick users into executing arbitrary code.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/13818/; http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml; http://www.kb.cert.org/vuls/id/882926
CVE: CVE-2005-0069
Published: 2005-01-13
Description: The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1863&w=2; http://secunia.com/advisories/13841/; http://securitytracker.com/id?1012938
CVE: CVE-2005-0111
Published: 2005-01-13
Description: Stack-based buffer overflow in the websql CGI program in MySQL MaxDB 7.5.00 allows remote attackers to execute arbitrary code via a long password parameter.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1012893; http://www.idefense.com/application/poi/display?id=181&type=vulnerabilities; http://www.securityfocus.com/bid/12265
CVE: CVE-2005-0381
Published: 2005-01-13
Description: Cross-site scripting (XSS) vulnerability in f.aspx in forumKIT 1.0 allows remote attackers to inject arbitrary web script or HTML via the members parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3994&w=2; http://securitytracker.com/id?1012895; http://www.securityfocus.com/bid/12256
CVE: CVE-2005-0740
Published: 2005-01-13
Description: The TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of service (system panic) via crafted values in the TCP timestamp option, which causes invalid arguments to be used when calculating the retransmit timeout.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/13819; http://securitytracker.com/id?1012861; http://www.openbsd.org/errata35.html
CVE: CVE-2005-0110
Published: 2005-01-14
Description: Internet Explorer 6 on Windows XP SP2 allows remote attackers to bypass the file download warning dialog and possibly trick an unknowledgeable user into executing arbitrary code via a web page with a body element containing an onclick tag, as demonstrated using the createElement function.
CVSS Score: 2.6 (LOW)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]6172&w=2; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]6172&w=2
CVE: CVE-2005-0113
Published: 2005-01-14
Description: inpview in SGI IRIX allows local users to execute arbitrary commands via the SUN_TTSESSION_CMD environment variable, which is executed by inpview without dropping privileges.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/13858; http://securitytracker.com/id?1012894; http://www.idefense.com/application/poi/display?id=182&type=vulnerabilities
CVE: CVE-2005-0094
Published: 2005-01-15
Description: Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses.
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923; http://fedoranews.org/updates/FEDORA--.shtml; http://secunia.com/advisories/13825
CVE: CVE-2005-0095
Published: 2005-01-15
Description: The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU cache numbers.
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923; http://fedoranews.org/updates/FEDORA--.shtml; http://secunia.com/advisories/13825
CVE: CVE-2005-0294
Published: 2005-01-16
Description: minis.php in Minis 0.2.1 allows remote attackers to cause a denial of service (infinite loop) via an HTTP request for a file that the web server does not have permission to read, as demonstrated using the month parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030966.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4025&w=2; http://secunia.com/advisories/13866
CVE: CVE-2005-0221
Published: 2005-01-17
Description: Cross-site scripting (XSS) vulnerability in login.php in Gallery 2.0 Alpha allows remote attackers to inject arbitrary web script or HTML via the g2_form[subject] field.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html; http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2364&w=2
CVE: CVE-2005-0290
Published: 2005-01-17
Description: NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to bypass the filters using hex encoded URLs, as demonstrated using a hex encoded file extension.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030984.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1560&w=2; http://secunia.com/advisories/13787
CVE: CVE-2005-0291
Published: 2005-01-17
Description: Cross-site scripting (XSS) vulnerability in the log viewer in NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via a blocked URL phrase.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030984.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1560&w=2; http://secunia.com/advisories/13787
CVE: CVE-2005-0292
Published: 2005-01-17
Description: Multiple SQL injection vulnerabilities in index.php in PHP Gift Registry (phpGiftReg) 1.4.0, and possibly other versions before 1.5.0b1, allow remote attackers to execute arbitrary SQL commands via the (1) messageid, (2) shopper, (3) shopfor, or (4) itemid parameters.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030965.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7066&w=2; http://secunia.com/advisories/13873
CVE: CVE-2005-0295
Published: 2005-01-17
Description: npptnt2.sys in nProtect Gameguard provides unrestricted I/O to any process that calls it, which allows local users to gain privileges.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9555&w=2; http://secunia.com/advisories/13928; http://www.securityfocus.com/bid/12280
CVE: CVE-2005-0296
Published: 2005-01-17
Description: NOTE: this issue has been disputed by the vendor.  The error module in Novell GroupWise WebAccess allows remote attackers who have not authenticated to read potentially sensitive information, such as the version, via an incorrect login and a modified (1) error or (2) modify parameter that returns template files or the "about" information page.  NOTE: the vendor has disputed this issue
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9814&w=2; http://support.novell.com/servlet/tidfinder/10096251; http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-01/0771.html
CVE: CVE-2005-0116
Published: 2005-01-18
Description: AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir parameter to aswtats.pl.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://awstats.sourceforge.net/docs/awstats_changelog.txt; http://packetstormsecurity.org/0501-exploits/AWStatsVulnAnalysis.pdf; http://secunia.com/advisories/13893/
CVE: CVE-2005-0297
Published: 2005-01-18
Description: SQL injection vulnerability in Oracle Database 9i and 10g allows remote attackers to execute arbitrary SQL commands and gain privileges.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8492&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8492&w=2
CVE: CVE-2005-0186
Published: 2005-01-19
Description: Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service (ITS), CallManager Express (CME) or Survivable Remote Site Telephony (SRST), allows remote attackers to cause a denial of service (device reboot) via a malformed packet to the SCCP port.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/13913; http://securitytracker.com/id?1012945; http://www.cisco.com/warp/public/707/cisco-sa-20050119-itscme.shtml
CVE: CVE-2005-0191
Published: 2005-01-19
Description: Off-by-one buffer overflow in the processing of tags in Real Metadata Package (RMP) files in RealPlayer 10.5 (6.0.12.1040) and earlier could allow remote attackers to execute arbitrary code via a long tag.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2291&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8401&w=2; http://service.real.com/help/faq/security/040928_player/EN/
CVE: CVE-2005-0300
Published: 2005-01-20
Description: Directory traversal vulnerability in session.php in JSBoard 2.0.9 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the table parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0011&w=2; http://secunia.com/advisories/13920; http://securitytracker.com/id?1012949
CVE: CVE-2005-1846
Published: 2005-01-20
Description: Multiple directory traversal vulnerabilities in YaMT before 0.5_2 allow attackers to overwrite arbitrary files via the (1) rename or (2) sort options.
CVSS Score: 5.0 (MEDIUM)
References: http://rpmfind.net/linux/RPM/suse/updates/8.2/i386/rpm/i586/yamt-0.5-1277.i586.html; http://www.vuxml.org/freebsd/99b5cfa5-d3d2-11d9-8ffb-00061bc2ad93.html; http://rpmfind.net/linux/RPM/suse/updates/8.2/i386/rpm/i586/yamt-0.5-1277.i586.html