rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-3420 
usercp_register.php in phpBB 2.0.17 allows remote attackers to modify regular expressions and execute PHP code via the signature_bbcode_uid parameter, as demonstrated by injecting an "e" modifier into a preg_replace statement.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-01T21:00:00.000Z
CVE-2005-3421 
estcmd in Hyper Estraier 1.0.1 on Windows systems allows remote attackers to read unauthorized files via a crafted search request for a filename that contains Unicode characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-01T21:00:00.000Z
CVE-2005-3422 
Cross-site scripting (XSS) vulnerability in error.asp in ASP Fast Forum allows remote attackers to inject arbitrary web script or HTML via the error parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-01T21:00:00.000Z
CVE-2005-3423 
Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via (1) the loginusername parameter or (2) cookies to (a) subdreamer.php, (b) ipb2.php, (c) phpbb2.php, (d) vbulletin2.php, and (e) vbulletin3.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-01T22:00:00.000Z
CVE-2005-3424 
Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.5 allows remote attackers to inject arbitrary web script or HTML via 404 error pages, a different vulnerability than CVE-2005-3425.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-01T22:00:00.000Z
CVE-2005-3425 
Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2005-3424.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-01T22:00:00.000Z
CVE-2005-3426 
Cisco CSS 11500 Content Services Switch (CSS) with SSL termination services allows remote attackers to cause a denial of service (memory corruption and device reload) via a malformed client certificate during SSL session negotiation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T00:00:00.000Z
CVE-2005-3427 
The Cisco Management Center (MC) for IPS Sensors (IPS MC) 2.1 can omit port field values while generating the Cisco IOS IPS configuration file, wich can cause some signatures to be disabled and makes it easier for attackers to escape detection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T00:00:00.000Z
CVE-2005-3428 
Cross-site scripting (XSS) vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to inject arbitrary web script or HTML via a message body.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3429 
Rockliffe MailSite Express before 6.1.22, with the option to save login information enabled, saves user passwords in plaintext in cookies, which allows local users to obtain passwords by reading the cookie file, or remote attackers to obtain the cookies via cross-site scripting (XSS) vulnerabilities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3430 
Incomplete blacklist vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to upload and execute arbitrary script files by giving the files specific extensions, such as (1) .unk, (2) .asa, and possibly (3) .htr and (4) .aspx, which are not filtered like the .asp extension.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3431 
Absolute path traversal vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to read arbitrary files via a full pathname in the AttachPath field of a mail message under composition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3432 
MiniGal 2 (MG2) 0.5.1 allows remote attackers to list password protected images via a request to index.php with the list parameter set to * (wildcard) and the page parameter set to all.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3433 
Buffer overflow in Mirabilis ICQ 2003a allows user-assisted attackers to execute arbitrary code by convincing a user to enter long strings into the First Name and Last Name fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3434 
Archilles Newsworld before 1.5.0-rc1 stores (1) account.nwd and (2) session.nwd under the web root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames, hashed passwords, and session IDs, and gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3435 
admin_news.php in Archilles Newsworld up to 1.3.0 allows attackers to bypass authentication by obtaining the password hash for another user, for example through another Newsworld vulnerability, and specifying the hash in the pwd argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3436 
Cross-site scripting (XSS) vulnerability in Nuked-Klan 1.7 allows remote attackers to inject arbitrary web script or HTML via the (1) Search module, (2) certain edit fields in Guestbook, (3) the title in the Forum module, and (4) Textbox.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3437 
Unspecified vulnerability in the PL/SQL component in Oracle Database Server 9i up to 10.1.0.4 has unknown impact and attack vectors, aka Oracle Vuln# DB01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3438 
Multiple unspecified vulnerabilities in Oracle Database Server 9i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB04 in Change Data Capture; (2) DB06 in Data Guard Logical Standby; (3) DB10 in Locale; (4) DB12 in Materialized Views; (5) DB13 in Objects Extension; (6) DB15 in Oracle Label Security; (7) DB27 in Security, possibly due to a buffer overflow in sys.pbsde.init; and (8) DB28 and (9) DB29 in Workspace Manager.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3439 
Multiple unspecified vulnerabilities in Oracle Database Server 10g up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB02, (2) DB03, and (3) DB05 in Change Data Capture; (4) DB07 in Data Pump Export; and (5) DB18, (6) DB19, (7) DB20, (8) DB21, (9) DB22, (10) DB23, (11) DB24, and (12) DB25 in the Spatial component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3440 
Unspecified vulnerability in Database Scheduler in Oracle Database Server 10g up to 10.1.0.3 has unknown impact and attack vectors, aka Oracle Vuln# DB08.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3441 
Unspecified vulnerability in Intelligent Agent in Oracle Database Server 9i up to 9.0.1.5 has unknown impact and attack vectors, aka Oracle Vuln# DB14.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3442 
Multiple unspecified vulnerabilities in Oracle Database Server 8i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB09 in Export, (2) DB11 in Materialized Views, and (3) DB16 in Security Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3443 
Unspecified vulnerability in the Spatial component in Oracle Database Server from 9i up to 10.1.0.3 has unknown impact and attack vectors, aka Oracle Vuln# DB17.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3444 
Multiple unspecified vulnerabilities in the Programmatic Interface in Oracle Database Server from 8i up to 9.2.0.5 have unknown impact and attack vectors, aka Oracle Vuln# DB26.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3445 
Multiple unspecified vulnerabilities in HTTP Server in Oracle Database Server 8i up to 10.1.0.4.2 and Application Server 1.0.2.2 up to 10.1.2.0 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB30 and AS03 or (2) DB31 and AS05.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3446 
Unspecified vulnerability in Internet Directory in Oracle Database Server 9i up to 9.2.0.6 and Application Server 9.0.2.3 up to 10.1.2.0 has unknown impact and attack vectors, aka Oracle Vuln# DB32 and AS06.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3447 
Unspecified vulnerability in Single Sign-On in Oracle Database Server 10g up to 10.1.0.4.2 and Application Server 9.0.2.3 up to 9.0.4.2 has unknown impact and attack vectors, aka Oracle Vuln# DB33 and AS08.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3448 
Unspecified vulnerability in the OC4J Module in Oracle Application Server 9.0 up to 10.1.2.0.2 has unknown impact and attack vectors, as identified by Oracle Vuln# AS01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3449 
Multiple unspecified vulnerabilities in Oracle Application Server 9.0 up to 10.1.2.0 have unknown impact and attack vectors, as identified by Oracle Vuln# (1) AS02 in Containers for J2EE, (2) AS07 in Internet Directory, (3) AS09 in Report Server, and (4) AS11 in Web Cache.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3450 
Unspecified vulnerability in the HTTP Server in Oracle Application Server 1.0 up to 9.0.2.3 has unknown impact and attack vectors, as identified by Oracle Vuln# AS04.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3451 
Unspecified vulnerability in SQL*ReportWriter in Oracle Application Server 9.0 up to 9.0.2.1 has unknown impact and attack vectors, as identified by Oracle Vuln# AS10.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3452 
Unspecified vulnerability in Web Cache in Oracle Application Server 1.0 up to 9.0.4.2 has unknown impact and attack vectors, as identified by Oracle Vuln# AS13.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3453 
Multiple unspecified vulnerabilities in Web Cache in Oracle Application Server 1.0 up to 10.1.2.0 has unknown impact and attack vectors, as identified by Oracle Vuln# (1) AS12 and (2) AS14.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3454 
Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10g Release 1 version 10.1.1 and 9i Release 2 9.0.4.2 have unknown impact and attack vectors, as identified by Oracle Vuln# (1) OCS01, (2) OCS02, (3) OCS03, and (4) OCS04 for Calendar; (5) OCS05, (6) OCS06, (7) OCS07, (8) OCS08, (9) OCS09, and (10) OCS10 for Email Server; and (11) OCS11, (12) OCS12, and (13) OCS13 for Oracle Files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3455 
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5 up to 11.5.10 have unknown impact and attack vectors, as identified by Oracle Vuln# (1) APPS01 in Application Install; (2) APPS02 and (3) APPS03 in Application Object Library; (4) APPS05 and (5) APPS06 in Applications Technology Stack; (6) APPS07 in Applications Utilities; (7) APPS09, (8) APPS10, and (9) APPS11 in HRMS; (10) APPS12 in Mobile Application Foundation; (11) APPS13 in SDP Number Portability; (12) APPS14 in Oracle Service; (13) APPS15 in Service Fulfillment Manage, (14) APPS16 in Universal Work Queue; and (15) APPS20 in Workflow Cartridge.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3456 
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5 up to 11.5.9 have unknown impact and attack vectors, as identified by Oracle Vuln# (1) APPS04 in Application Object Library, and (2) APPS17, (3) APPS18, and (4) APPS21 in Workflow Cartridge.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3457 
Unspecified vulnerability in Oracle E-Business Suite and Applications 11.0 up to 11.5.10 has unknown impact and attack vectors, as identified by Oracle Vuln# APPS08 in HRMS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3458 
Unspecified vulnerability in Oracle E-Business Suite and Applications 11.0 up to 11.5.9 has unknown impact and attack vectors, as identified by Oracle Vuln# APPS19 in Workflow Cartridge.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3459 
Unspecified vulnerability in Oracle E-Business Suite and Applications 4.5 up to 4.5.1 has unknown impact and attack vectors, as identified by Oracle Vuln# APPS22 in Oracle Clinical.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3460 
Unspecified vulnerability in Oracle Agent in Oracle Enterprise Manager 9.0.4.1 up to 10.1.0.4 has unknown impact and attack vectors, as identified by Oracle Vuln# EM01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3461 
Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.42 up to 8.45.17 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3462 
Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.02 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3463 
Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.03 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE03.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3464 
Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE04.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3465 
Unspecified vulnerability in JDEdwards HTML Server in Oracle EnterpriseOne 8.94 OneWorld XE up to 8.95_B1, 8.94_Q1, and SP23_K1 has unknown impact and attack vectors, as identified by Oracle Vuln# JDE01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3466 
Unspecified vulnerability in Enterprise CRM Sales in Oracle 8.81 up to 8.9 has unknown impact and attack vectors, as identified by Oracle Vuln# CRM01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T11:00:00.000Z
CVE-2005-3467 
Serv-U FTP Server before 6.1.0.4 allows attackers to cause a denial of service (crash) via (1) malformed packets and possibly other unspecified issues with unknown impact and attack vectors including (2) use of "~" in a pathname, and (3) memory consumption of the daemon.  NOTE: it is not clear whether items (2) and above are vulnerabilities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T23:00:00.000Z
CVE-2005-3468 
Directory traversal vulnerability in F-Secure Anti-Virus for Microsoft Exchange 6.40 and Internet Gatekeeper 6.40 to 6.42 allows limited remote attackers to bypass Web Console authentication and read files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T23:00:00.000Z
CVE-2005-3469 
SQL injection vulnerability in index.php in News2Net 3.0.0.0 allows remote attackers to execute arbitrary SQL commands via the category parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T23:00:00.000Z
CVE-2005-3470 
SQL injection vulnerability in in the authenticate function in MailWatch for MailScanner 1.0.2 allows remote attackers to execute arbitrary SQL commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T23:00:00.000Z
CVE-2005-3471 
Directory traversal vulnerability in the ruleset view for MailWatch for MailScanner 1.0.2 allows remote attackers to access arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-02T23:00:00.000Z
CVE-2005-3472 
Unspecified vulnerability in Sun Java System Communications Express 2005Q1 and 2004Q2 allows local and remote attackers to read sensitive information from configuration files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-03T02:00:00.000Z
CVE-2005-3473 
Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog 0.4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) entry, (2) blog_subject, and (3) blog_text parameters (involving the temp_subject variable) in (a) preview_cgi.php and (b) preview_static_cgi.php, or (4) scheme_name parameter and (5) bg_color parameters (involving the preset_name and result variables) in (c) colors.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-03T02:00:00.000Z
CVE-2005-3474 
The aries.sys driver in Sony First4Internet XCP DRM software hides any file, registry key, or process with a name that starts with "$sys$", which allows attackers to hide activities on a system that uses XCP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-03T02:00:00.000Z
CVE-2005-3475 
Hasbani Web Server (WindWeb) 2.0 allows remote attackers to cause a denial of service (infinite loop) via HTTP crafted GET requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-03T02:00:00.000Z
CVE-2005-3476 
Unspecified vulnerability in HP OpenVMS Integrity 8.2-1 and 8.2, and OpenVMS Alpha 7.3-2 and 8.2, allows local users to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-03T02:00:00.000Z
CVE-2005-3477 
Multiple interpretation error in the image upload handling code in Invision Gallery 2.0.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML or script in an image whose type does not match its extension, which is rendered by Internet Explorer due to CVE-2005-3312.  NOTE: it could be argued that this vulnerability is due to a design flaw in Internet Explorer and the proper fix should be in that browser; if so, then this should not be treated as a vulnerability in Invision Gallery.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-03T02:00:00.000Z
CVE-2005-3478 
SQL injection vulnerability in index.php in PHPCafe.net Tutorials Manager 1.0 Beta 2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-03T02:00:00.000Z
CVE-2005-3479 
Cross-site scripting (XSS) vulnerability in login.asp in Ringtail CaseBook 6.1.0 allows remote attackers to inject arbitrary web script or HTML via the users parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-03T02:00:00.000Z
CVE-2005-3480 
login.asp in Ringtail CaseBook 6.1.0 displays different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-03T02:00:00.000Z
CVE-2005-3481 
Cisco IOS 12.0 to 12.4 might allow remote attackers to execute arbitrary code via a heap-based buffer overflow in system timers. NOTE: this issue does not correspond to a specific vulnerability, rather a general weakness that only increases the feasibility of exploitation of any vulnerabilities that might exist.  Such design-level weaknesses normally are not included in CVE, so perhaps this issue should be REJECTed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-03T02:00:00.000Z
CVE-2005-3482 
Cisco 1200, 1131, and 1240 series Access Points, when operating in Lightweight Access Point Protocol (LWAPP) mode and controlled by 2000 and 4400 series Airespace WLAN controllers running 3.1.59.24, allow remote attackers to send unencrypted traffic to a secure network using frames with the MAC address of an authenticated end host.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-03T02:00:00.000Z
CVE-2005-3483 
Buffer overflow in GO-Global for Windows 3.1.0.3270 and earlier allows remote attackers to execute arbitrary code via a data block that is longer than the specified data block size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-03T22:00:00.000Z
CVE-2005-3484 
Directory traversal vulnerability in NeroNET 1.2.0.2 and earlier allows remote attackers to read arbitrary files with certain file extensions (such as ZIP, AVI, JPG, TXT, and HTML) via ".." and hex-encoded (1) slash "/" ("%2f") or (2) backslash "\" ("%5c") sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-03T22:00:00.000Z
CVE-2005-3485 
Buffer overflow in Glider Collect'n kill 1.0.0.0 allows remote attackers to execute arbitrary code via a gl_playerEnter command with a long player name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-03T22:00:00.000Z
CVE-2005-3486 
Multiple format string vulnerabilities in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute arbitrary code via various (1) GLConsole::addLine, (2) ServerCommon::sendString, (3) ServerCommon::serverLog functions, and possibly other unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-03T22:00:00.000Z
CVE-2005-3487 
Multiple buffer overflows in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute arbitrary code via various (1) GLConsole::addLine, (2) ServerCommon::sendString, (3) ServerCommon::serverLog functions, (4) a long command that is not properly handled in ComsMessageHandler.cpp when generating an error message, (5) a long UniqueID value in Logger.cpp, and possibly other unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-03T22:00:00.000Z