deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-0367
Published: 2005-02-09
Description: Multiple directory traversal vulnerabilities in ArGoSoft Mail Server 1.8.7.3 allow remote authenticated users to read, delete, or upload arbitrary files via a .. (dot dot) in (1) the filename of an e-mail attachment, (2) the _msgatt.rec file, (3) and the /msg, /delete, /folderadd, and /folderdelete operations for the Folder parameter.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1699&w=2; http://www.security.org.sg/vuln/argosoftmail1873.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1699&w=2
CVE: CVE-2005-0261
Published: 2005-02-10
Description: lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which allows local users to read one line of arbitrary files.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/14232; http://www-1.ibm.com/support/search.wss?rs=0&q=IY67457&apar=only; http://www-1.ibm.com/support/search.wss?rs=0&q=IY67655&apar=only
CVE: CVE-2005-0364
Published: 2005-02-10
Description: Unknown vulnerability in BIND 9.2.0 in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to cause a denial of service.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0470&w=2; http://secunia.com/advisories/14220/; https://exchange.xforce.ibmcloud.com/vulnerabilities/19276
CVE: CVE-2005-0074
Published: 2005-02-11
Description: Buffer overflow in pcdsvgaview in xpcd 2.08 allows local users to execute arbitrary code.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/14248; http://secunia.com/advisories/14250; http://securitytracker.com/id?1013162
CVE: CVE-2005-0114
Published: 2005-02-11
Description: vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Client 4.x before 4.5.122.000 and 5.x before 5.1.556.166 do not properly verify that the ServerPortName argument to the NtConnectPort function is a valid memory address, which allows local users to cause a denial of service (system crash) when ZoneAlarm attempts to dereference an invalid pointer.
CVSS Score: 2.1 (LOW)
References: http://download.zonelabs.com/bin/free/securityAlert/19.html; http://secunia.com/advisories/14256; http://www.idefense.com/application/poi/display?id=199&type=vulnerabilities
CVE: CVE-2005-0430
Published: 2005-02-12
Description: The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service (shutdown game server) and possibly crash the server via a long infostring, possibly triggering a buffer overflow.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/q3infoboom-adv.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4025&w=2; http://www.securityfocus.com/bid/12534
CVE: CVE-2005-0406
Published: 2005-02-14
Description: A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-212
References: http://seclists.org/lists/fulldisclosure/2005/Feb/0343.html; http://www.redteam-pentesting.de/advisories/rt-sa-2005-008.txt; http://seclists.org/lists/fulldisclosure/2005/Feb/0343.html
CVE: CVE-2005-0408
Published: 2005-02-14
Description: CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the id_hash cookie, which allows remote attackers to bypass authentication and gain privileges by calculating the MD5 checksum of the user name combined with the "boogaadeeboo" string, which is hard-coded in the $hidden_hash variable.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-916
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031707.html; http://www.redteam-pentesting.de/advisories/rt-sa-2005-002.txt; http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031707.html
CVE: CVE-2005-0409
Published: 2005-02-14
Description: CitrusDB 0.3.6 and earlier does not verify authorization for the (1) importcc.php and (2) uploadcc.php, which allows remote attackers to upload credit card data and obtain sensitive information such as the pathnames for temporary files that store credit card data, and facilitates the exploitation of other vulnerabilities.
CVSS Score: 6.4 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031707.html; http://www.redteam-pentesting.de/advisories/rt-sa-2005-003.txt; http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031707.html
CVE: CVE-2005-0410
Published: 2005-02-14
Description: SQL injection vulnerability in importcc.php for CitrusDB 0.3.6 and earlier allows remote attackers to inject data via the fields of a CSV file.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031709.html; http://www.redteam-pentesting.de/advisories/rt-sa-2005-004.txt; http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031709.html
CVE: CVE-2005-0411
Published: 2005-02-14
Description: Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote attackers and local users to include arbitrary PHP files via .. (dot dot) sequences in the load parameter.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031710.html; http://www.redteam-pentesting.de/advisories/rt-sa-2005-005.txt; http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031710.html
CVE: CVE-2005-0444
Published: 2005-02-14
Description: VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries using a path that includes the rrdharan world-writable temporary directory, which allows local users to execute arbitrary code.
CVSS Score: 4.6 (MEDIUM)
References: http://security.gentoo.org/glsa/glsa-200502-18.xml; http://security.gentoo.org/glsa/glsa-200502-18.xml
CVE: CVE-2005-0149
Published: 2005-02-15
Description: Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/19823; http://www.mozilla.org/security/announce/mfsa2005-11.html; http://www.novell.com/linux/security/advisories/2006_04_25.html
CVE: CVE-2005-0176
Published: 2005-02-15
Description: The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released.
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U; http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]1365&w=2
CVE: CVE-2005-0433
Published: 2005-02-15
Description: Php-Nuke 7.5 allows remote attackers to determine the full path of the web server via invalid or missing arguments to (1) db.php, (2) mainfile.php, (3) Downloads/index.php, or (4) Web_Links/index.php, which lists the path in a PHP error message.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/12561; http://www.waraxe.us/advisory-40.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/19344
CVE: CVE-2005-0434
Published: 2005-02-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 7.5 allow remote attackers to inject arbitrary HTML or web script via (1) the newdownloadshowdays parameter in a NewDownloads operation or (2) the newlinkshowdays parameter in a NewLinks operation.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/12561; http://www.waraxe.us/advisory-40.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/19346
CVE: CVE-2005-0447
Published: 2005-02-15
Description: Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (hang) via a flood of certain ARP packets.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/14286; http://securitytracker.com/id?1013179; http://sunsolve.sun.com/search/document.do?assetkey=1-26-57673-1
CVE: CVE-2005-0105
Published: 2005-02-16
Description: Unknown vulnerability in typespeed 0.4.1 and earlier allows local users to gain privileges.
CVSS Score: 4.6 (MEDIUM)
References: http://www.debian.org/security/2005/dsa-684; http://www.debian.org/security/2005/dsa-684
CVE: CVE-2005-0452
Published: 2005-02-16
Description: Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<".
CVSS Score: 4.3 (MEDIUM)
References: http://it-project.ru/andir/docs/aspxvuln/aspxvuln.en.xml; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4913&w=2; http://secunia.com/advisories/14214
CVE: CVE-2005-0453
Published: 2005-02-16
Description: The buffer_urldecode function in Lighttpd 1.3.7 and earlier does not properly handle control characters, which allows remote attackers to obtain the source code for CGI and FastCGI scripts via a URL with a %00 (null) character after the file extension.
CVSS Score: 5.0 (MEDIUM)
References: http://article.gmane.org/gmane.comp.web.lighttpd/1171; http://secunia.com/advisories/14297; http://security.gentoo.org/glsa/glsa-200502-21.xml
CVE: CVE-2005-0243
Published: 2005-02-17
Description: Yahoo! Messenger 6.0.0.1750, and possibly other versions before 6.0.0.1921, does not properly display long filenames in file dialog boxes, which could allow remote attackers to trick users into downloading and executing programs via file names containing a large number of spaces and multiple file extensions.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/13712; http://secunia.com/secunia_research/2005-2/advisory/; http://secunia.com/advisories/13712
CVE: CVE-2005-0462
Published: 2005-02-17
Description: Cross-site scripting (XSS) vulnerability in MercuryBoard 1.0.x and 1.1.x allows remote attackers to inject arbitrary HTML and web script via the f parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://lostmon.blogspot.com/2005/02/mercuryboard-forumphp-f-variable-xss.html; http://secunia.com/advisories/13937; http://lostmon.blogspot.com/2005/02/mercuryboard-forumphp-f-variable-xss.html
CVE: CVE-2005-0242
Published: 2005-02-18
Description: The Audio Setup Wizard (asw.dll) in Yahoo! Messenger 6.0.0.1750, and possibly other versions, allows attackers to arbitrary code by placing a malicious ping.exe program into the Messenger program directory, which is installed with weak default permissions.
CVSS Score: 4.6 (MEDIUM)
References: http://messenger.yahoo.com/security/update6.html; http://secunia.com/advisories/11815; http://secunia.com/secunia_research/2004-6/advisory/
CVE: CVE-2005-0502
Published: 2005-02-18
Description: Directory traversal vulnerability in Xinkaa 1.0.3 and earlier allows remote attackers to read arbitrary files via (1) ../ and (2) ..\ characters in an HTTP request.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/xinkaa-adv.txt; http://secunia.com/advisories/14349; http://www.securityfocus.com/bid/12606
CVE: CVE-2005-0519
Published: 2005-02-18
Description: ArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a ZIP file containing a shortcut (.LNK) file, using SITE UNZIP to extract the .LNK file onto the server, then accessing the file, a different vulnerability than CVE-2005-0520.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/14172; http://www.argosoft.com/ftpserver/changelist.aspx; http://www.osvdb.org/13614
CVE: CVE-2005-0092
Published: 2005-02-19
Description: Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when running on x86 with the hugemem kernel, allows local users to cause a denial of service (crash).
CVSS Score: 2.1 (LOW)
References: http://www.redhat.com/support/errata/RHSA-2005-092.html; http://www.securityfocus.com/bid/12599; https://exchange.xforce.ibmcloud.com/vulnerabilities/20620
CVE: CVE-2005-0495
Published: 2005-02-19
Description: Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the (1) sn1, (2) year, or (3) page parameter to zboard.php or (4) filename to view_image.php.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5513&w=2; http://securitytracker.com/id?1013243; https://exchange.xforce.ibmcloud.com/vulnerabilities/19420
CVE: CVE-2005-0513
Published: 2005-02-19
Description: PHP remote file inclusion vulnerability in mail_autocheck.php in the Email This Entry add-on for pMachine Pro 2.4, and possibly other versions including pMachine Free, allows remote attackers to execute arbitrary PHP code by directly requesting mail_autocheck.php and modifying the pm_path parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2003-1086.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]1802&w=2; http://www.securityfocus.com/bid/12597; http://www.securityfocus.com/bid/15473
CVE: CVE-2005-0499
Published: 2005-02-20
Description: Gigafast router (aka CompUSA router) with the DNS proxy option enabled allows remote attackers to cause a denial of service via malformed DNS queries.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2760&w=2; https://exchange.xforce.ibmcloud.com/vulnerabilities/19426; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2760&w=2
CVE: CVE-2005-0467
Published: 2005-02-21
Description: Multiple integer overflows in the (1) sftp_pkt_getstring and (2) fxp_readdir_recv functions in the PSFTP and PSCP clients for PuTTY 0.56, and possibly earlier versions, allow remote malicious web sites to execute arbitrary code via SFTP responses that corrupt the heap after insufficient memory has been allocated.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14333; http://secunia.com/advisories/17214; http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002414
CVE: CVE-2005-0494
Published: 2005-02-21
Description: The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a does not properly validate the password before performing changes, which allows remote attackers on the LAN to gain access via a direct POST request.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1507&w=2; http://secunia.com/advisories/14353; https://exchange.xforce.ibmcloud.com/vulnerabilities/19387
CVE: CVE-2005-0496
Published: 2005-02-21
Description: Arkeia Network Backup Client 5.x contains hard-coded credentials that effectively serve as a back door, which allows remote attackers to access the file system and possibly execute arbitrary commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6004&w=2; http://metasploit.com/research/arkeia_agent/; http://securitytracker.com/id?1013256
CVE: CVE-2005-0503
Published: 2005-02-21
Description: uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.freedesktop.org/archives/uim/2005-February/000996.html; http://secunia.com/advisories/13981; http://www.mandriva.com/security/advisories?name=MDKSA-2005:046
CVE: CVE-2005-0511
Published: 2005-02-21
Description: misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers to execute arbitrary PHP code via nested variables in the template parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5763&w=2; http://secunia.com/advisories/14326; http://www.securityfocus.com/bid/12622
CVE: CVE-2005-0512
Published: 2005-02-21
Description: PHP remote file inclusion vulnerability in Tar.php in Mambo 4.5.2 allows remote attackers to execute arbitrary PHP code by modifying the mosConfig_absolute_path parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2004-1693.
CVSS Score: 7.5 (HIGH)
References: http://mamboforge.net/frs/download.php/4043/Patch_4.5.2_to_4.5.2.1.zip; http://secunia.com/advisories/14337; http://mamboforge.net/frs/download.php/4043/Patch_4.5.2_to_4.5.2.1.zip
CVE: CVE-2005-0537
Published: 2005-02-21
Description: Multiple SQL injection vulnerabilities in page.php for iGeneric (iG) Shop 1.2 may allow remote attackers to execute arbitrary SQL statements via the (1) cats, (2) l_price, or (3) u_price parameters.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9970&w=2; http://secunia.com/advisories/14369; http://securitytracker.com/id?1013268
CVE: CVE-2005-0160
Published: 2005-02-22
Description: Multiple buffer overflows in unace 1.2b allow attackers to execute arbitrary code via (1) 2 overflows in ACE archives, (2) a long command line argument, or (3) certain "Ready for next volume" messages.
CVSS Score: 5.1 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031908.html; http://secunia.com/advisories/14359; http://www.kb.cert.org/vuls/id/215006
CVE: CVE-2005-0161
Published: 2005-02-22
Description: Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archive containing (1) ../ sequences or (2) absolute pathnames.
CVSS Score: 2.1 (LOW)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031908.html; http://secunia.com/advisories/14359; http://www.novell.com/linux/security/advisories/2005_16_sr.html
CVE: CVE-2005-0514
Published: 2005-02-22
Description: Cross-site scripting (XSS) vulnerability in Verity Ultraseek before 5.3.3 allows remote attackers to inject arbitrary HTML and web script via search parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html; http://secunia.com/advisories/14367; http://www.kb.cert.org/vuls/id/716144
CVE: CVE-2005-0535
Published: 2005-02-22
Description: Cross-site request forgery (CSRF) vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14360; http://securitytracker.com/id?1013260; http://sourceforge.net/project/shownotes.php?release_id=307067
CVE: CVE-2005-0937
Published: 2005-02-22
Description: Some futex functions in futex.c for Linux kernel 2.6.x perform get_user calls while holding the mmap_sem semaphore, which could allow local users to cause a deadlock condition in do_page_fault by triggering get_user faults while another thread is executing mmap or other functions.
CVSS Score: 1.2 (LOW)
References: http://linux.bkbits.net:8080/linux-2.6/cset%40421cfc11zFsK9gxvSJ2t__FCmuUd3Q; http://lkml.org/lkml/2005/2/22/123; http://www.redhat.com/support/errata/RHSA-2005-420.html
CVE: CVE-2004-0481
Published: 2005-02-23
Description: The logging feature in kcms_configure in the KCMS package on Solaris 8 and 9, and possibly other versions, allows local users to corrupt arbitrary files via a symlink attack on the KCS_ClogFile file.
CVSS Score: 2.1 (LOW)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-57706-1; http://www.idefense.com/application/poi/display?id=206&type=vulnerabilities; http://sunsolve.sun.com/search/document.do?assetkey=1-26-57706-1
CVE: CVE-2005-0516
Published: 2005-02-23
Description: The ImageGalleryPlugin (ImageGalleryPlugin.pm) in Twiki allows remote attackers to execute arbitrary commands via certain commands that generate thumbnails.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5288&w=2; http://secunia.com/advisories/14384; http://static.enyo.de/fw/patches/twiki/imagegallery-robustness-20041128.diff
CVE: CVE-2005-0517
Published: 2005-02-23
Description: PeerFTP_5 stores sensitive information such as passwords in plaintext in the PeerFTP.ini files, which allows local users to gain privileges.
CVSS Score: 2.1 (LOW)
References: http://securitytracker.com/id?1013263; http://securitytracker.com/id?1013263
CVE: CVE-2005-0518
Published: 2005-02-23
Description: eXeem 0.21 stores sensitive information such as passwords in plaintext in the Exeem registry key, which allows local users to gain privileges via the proxy_user and proxy_password values.
CVSS Score: 2.1 (LOW)
References: http://securitytracker.com/id?1013266; http://securitytracker.com/id?1013266
CVE: CVE-2005-0520
Published: 2005-02-23
Description: ArGoSoft FTP Server before 1.4.2.8 allows remote attackers to read arbitrary files via shortcut (.LNK) files in the SITE COPY command, a different vulnerability than CVE-2005-0519.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/14372; http://www.argosoft.com/ftpserver/changelist.aspx; http://www.osvdb.org/14061
CVE: CVE-2005-0521
Published: 2005-02-23
Description: SendLink 1.5 stores sensitive information, possibly including passwords, in plaintext in the data.eat file, which allows local users to gain privileges.
CVSS Score: 2.1 (LOW)
References: http://securitytracker.com/id?1013269; http://securitytracker.com/id?1013269
CVE: CVE-2005-0543
Published: 2005-02-24
Description: Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via (1) the strServer, cfg[BgcolorOne], or strServerChoice parameters in select_server.lib.php, (2) the bg_color or row_no parameters in display_tbl_links.lib.php, the left_font_family parameter in theme_left.css.php, or the right_font_family parameter in theme_right.css.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1154&w=2; http://secunia.com/advisories/14382; http://sourceforge.net/tracker/index.php?func=detail&aid=1149383&group_id=23067&atid=377408
CVE: CVE-2005-0547
Published: 2005-02-24
Description: Unknown vulnerability in ftpd on HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23 allows remote authenticated users to gain "unauthorized access to files."
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1549&w=2; http://www.securityfocus.com/bid/12651; https://exchange.xforce.ibmcloud.com/vulnerabilities/19467
CVE: CVE-2005-0598
Published: 2005-02-24
Description: The RealServer RealSubscriber on Cisco devices running Application and Content Networking System (ACNS) 5.1 allow remote attackers to cause a denial of service (CPU consumption) via malformed packets.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/14395; http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml; http://www.kb.cert.org/vuls/id/579240
CVE: CVE-2005-0600
Published: 2005-02-24
Description: Cisco devices running Application and Content Networking System (ACNS) 5.0, 5.1 before 5.1.13.7, or 5.2 before 5.2.3.9 allow remote attackers to cause a denial of service (bandwidth consumption) via "crafted IP packets" that are continuously forwarded.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/14395; http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml; http://www.securityfocus.com/bid/12648
CVE: CVE-2005-0107
Published: 2005-02-25
Description: bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execute arbitrary commands.
CVSS Score: 7.5 (HIGH)
References: http://www.debian.org/security/2005/dsa-690; http://www.debian.org/security/2005/dsa-690