2005 CVEs (page 43)
Page 43 of 48 — CVEs published in 2005, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2005-0073 | | 2005-05-02 | Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local users to execute arbitrary code. | |
CVE-2005-0071 | | 2005-05-02 | vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files. | |
CVE-2005-0070 | | 2005-05-02 | Synaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not drop privileges before processing configuration and mixer files… | |
CVE-2005-0065 | | 2005-05-02 | The original design of TCP does not check that the TCP sequence number in an ICMP error message is within the range of sequence numbers for data that has been… | |
CVE-2005-0064 | | 2005-05-02 | Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file… | |
CVE-2005-0063 | | 2005-05-02 | The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute… | |
CVE-2005-0061 | | 2005-05-02 | The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via certain access requests. | |
CVE-2005-0060 | | 2005-05-02 | Buffer overflow in the font processing component of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileg… | |
CVE-2005-0059 | | 2005-05-02 | Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary code via a crafted m… | |
CVE-2005-0057 | | 2005-05-02 | The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link that triggers an "u… | |
CVE-2005-0056 | | 2005-05-02 | Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote attackers to obtain se… | |
CVE-2005-0055 | | 2005-05-02 | Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function… | |
CVE-2005-0054 | | 2005-05-02 | Internet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security zone and execute arbitrary code via an HTML page containing URL… | |
CVE-2005-0053 | | 2005-05-02 | Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability." | |
CVE-2005-0051 | | 2005-05-02 | The Server service (srvsvc.dll) in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information (users who are accessing resources) via an an… | |
CVE-2005-0050 | | 2005-05-02 | The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads… | |
CVE-2005-0049 | | 2005-05-02 | Windows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP redirection query, which allows remote atta… | |
CVE-2005-0048 | | 2005-05-02 | Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possi… | |
CVE-2005-0047 | | 2005-05-02 | Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage files, which allows attackers to execute ar… | |
CVE-2005-0045 | | 2005-05-02 | The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote… | |
CVE-2005-0044 | | 2005-05-02 | The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certai… | |
CVE-2005-0043 | | 2005-05-02 | Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files. | |
CVE-2005-0035 | | 2005-05-02 | The Acrobat web control in Adobe Acrobat and Acrobat Reader 7.0 and earlier, when used with Internet Explorer, allows remote attackers to determine the existen… | |
CVE-2005-0034 | | 2005-05-02 | An "incorrect assumption" in the authvalidated validator function in BIND 9.3.0, when DNSSEC is enabled, allows remote attackers to cause a denial of service (… | |
CVE-2005-0033 | | 2005-05-02 | Buffer overflow in the code for recursion and glue fetching in BIND 8.4.4 and 8.4.5 allows remote attackers to cause a denial of service (crash) via queries th… | |
CVE-2005-0022 | | 2005-05-02 | Buffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained from Samba code, and as called by the auth_spa_client function… | |
CVE-2005-0021 | | 2005-05-02 | Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrate… | |
CVE-2005-0018 | | 2005-05-02 | The f2 shell script in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files. | |
CVE-2005-0017 | | 2005-05-02 | The f2c translator in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files. | |
CVE-2005-0015 | | 2005-05-02 | diatheke.pl in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. | |
CVE-2005-0014 | | 2005-05-02 | Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client. | |
CVE-2005-0013 | | 2005-05-02 | nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain… | |
CVE-2005-0012 | | 2005-05-02 | Format string vulnerability in the a_Interface_msg function in Dillo before 0.8.3-r4 allows remote attackers to execute arbitrary code via format string specif… | |
CVE-2005-0011 | | 2005-05-02 | Multiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars support for Instrument Neutral Distributed Interface (INDI) in KDE… | |
CVE-2005-0010 | | 2005-05-02 | Unknown vulnerability in the MMSE dissector in Ethereal 0.10.4 through 0.10.8 allows remote attackers to cause a denial of service by triggering a free of stat… | |
CVE-2005-0009 | | 2005-05-02 | Unknown vulnerability in the Gnutella dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (application crash). | |
CVE-2005-0008 | | 2005-05-02 | Unknown vulnerability in the DNP dissector in Ethereal 0.10.5 through 0.10.8 allows remote attackers to cause "memory corruption." | |
CVE-2005-0007 | | 2005-05-02 | Unknown vulnerability in the DLSw dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (application crash from asse… | |
CVE-2005-0006 | | 2005-05-02 | The COPS dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (infinite loop). | |
CVE-2005-0005 | | 2005-05-02 | Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD im… | |
CVE-2005-0002 | | 2005-05-02 | poppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password correctly, which allows remote attackers to… | |
CVE-2005-0001 | | 2005-05-02 | Race condition in the page fault handler (fault.c) for Linux kernel 2.2.x to 2.2.7, 2.4 to 2.4.29, and 2.6 to 2.6.10, when running on multiprocessor machines… | |
CVE-2005-1063 | | 2005-04-29 | The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers… | |
CVE-2005-0424 | | 2005-04-27 | Unknown vulnerability in the delete.asp program in certain versions of ASPjar Guestbook allows remote attackers to delete messages. NOTE: there is insufficien… | |
CVE-2005-0423 | | 2005-04-27 | SQL injection vulnerability in login.asp in ASPjar Guestbook allows remote attackers to execute arbitrary SQL commands via the password field. | |
CVE-2005-0422 | | 2005-04-27 | DelphiTurk CodeBank (aka KodBank) 3.1 and earlier stores usernames and passwords in the Codebank registry key, which allows local users to gain privileges. | |
CVE-2005-0421 | | 2005-04-27 | DelphiTurk FTP 1.0 stores usernames and passwords in the profile.dat file, which allows local users to gain privileges. | |
CVE-2005-0420 | | 2005-04-27 | Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.a… | |
CVE-2005-0419 | | 2005-04-27 | Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via long FTP commands, as demonstrated using t… | |
CVE-2005-0417 | | 2005-04-27 | Unknown "high risk" vulnerability in DB2 Universal Database 8.1 and earlier has unknown impact and attack vectors. NOTE: due to the delayed disclosure of deta… | |
CVE-2005-0416 | | 2005-04-27 | The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execu… | |
CVE-2005-0415 | | 2005-04-27 | Multiple memory leaks in the MQL parser in Emdros before 1.1.22 allow remote attackers to cause a denial of service (memory consumption) via malformed MQL stat… | |
CVE-2005-0414 | | 2005-04-27 | SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via a reply post action for index.php… | |
CVE-2005-0413 | | 2005-04-27 | Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the fid in forum.php, (2) the member… | |
CVE-2005-0412 | | 2005-04-27 | Cross-site scripting (XSS) vulnerability in Spidean PostWrap allows remote attackers to inject arbitrary HTML and web script via the page parameter. | |
CVE-2005-0229 | | 2005-04-27 | CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers to steal credit card information via a… | |
CVE-2005-0206 | | 2005-04-27 | The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such a… | |
CVE-2005-0159 | | 2005-04-27 | The tpkg-* scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local users to overwrite arbitrary files via a symlink attack on tempora… | |
CVE-2005-0087 | | 2005-04-27 | The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code i… | |
CVE-2005-0085 | | 2005-04-27 | Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config par… | |
CVE-2005-0019 | | 2005-04-27 | Unknown vulnerability in hztty 2.0 and earlier allows local users to execute arbitrary commands. | |
CVE-2005-1281 | | 2005-04-26 | Ethereal 0.10.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4. | |
CVE-2005-1274 | | 2005-04-26 | Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrar… | |
CVE-2005-1270 | | 2005-04-26 | The (1) check_update.sh and (2) rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictable file names, which allows local users… | |
CVE-2005-1317 | | 2005-04-25 | Cross-site scripting (XSS) vulnerability in Horde Chora module before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the parent's fra… | |
CVE-2005-1300 | | 2005-04-25 | Cross-site scripting (XSS) vulnerability in the inserter.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument. | |
CVE-2005-1299 | | 2005-04-25 | The inserter.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. | |
CVE-2005-1298 | | 2005-04-25 | The inserter.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument. | |
CVE-2005-1297 | | 2005-04-25 | Cross-site scripting (XSS) vulnerability in the include.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument. | |
CVE-2005-1296 | | 2005-04-25 | include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. | |
CVE-2005-1295 | | 2005-04-25 | include.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument. | |
CVE-2005-1275 | | 2005-04-25 | Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attackers to cause a denial of service (applic… | |
CVE-2005-0684 | | 2005-04-25 | Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a… | |
CVE-2005-1312 | | 2005-04-24 | PHP remote file inclusion vulnerability in Yappa-NG before 2.3.2 allows remote attackers to execute arbitrary PHP code via unknown vectors. | |
CVE-2005-1303 | | 2005-04-24 | The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument. | |
CVE-2005-1294 | | 2005-04-24 | The affix_sock_register in the Affix Bluetooth Protocol Stack for Linux might allow local users to gain privileges via a socket call with a negative protocol v… | |
CVE-2005-1246 | | 2005-04-24 | Format string vulnerability in the snmppd_log function in snmppd_util.c for snmppd 0.4.5 and earlier may allow remote attackers to cause a denial of service or… | |
CVE-2005-1310 | | 2005-04-23 | SQL injection vulnerability in bBlog 0.7.4 allows remote attackers to execute arbitrary SQL commands via the postid parameter. | |
CVE-2005-1291 | | 2005-04-23 | Multiple SQL injection vulnerabilities in CartWIZ ASP Cart allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) addToCar… | |
CVE-2005-1287 | | 2005-04-23 | Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to member.asp, (2) for… | |
CVE-2005-1285 | | 2005-04-22 | Cross-site scripting (XSS) vulnerability in thread.php in WoltLab Burning Board 2.3.1 and earlier allows remote attackers to inject arbitrary web script or HTM… | |
CVE-2005-1283 | | 2005-04-22 | Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to (1) read arbitrary files via the UIDL para… | |
CVE-2005-0754 | | 2005-04-22 | Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code. | |
CVE-2005-1244 | | 2005-04-20 | Directory traversal vulnerability in the third party tool from NetIQ, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitr… | |
CVE-2005-1241 | | 2005-04-20 | Directory traversal vulnerability in the third party tool from Powertech, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access ar… | |
CVE-2005-1240 | | 2005-04-20 | Directory traversal vulnerability in the third party tool from Castlehill, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access a… | |
CVE-2005-1233 | | 2005-04-20 | Cross-site scripting (XSS) vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary web script or HTML via the (1) dir or (2)… | |
CVE-2005-1227 | | 2005-04-20 | Cross-site scripting (XSS) vulnerability in PHProjekt 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the chatroom text subm… | |
CVE-2005-0755 | | 2005-04-19 | Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to execute arbitrary… | |
CVE-2005-1138 | | 2005-04-18 | Unknown vulnerability in WebMail in Kerio MailServer before 6.0.9 allows remote attackers to cause a denial of service (CPU consumption) via certain e-mail mes… | |
CVE-2005-1107 | | 2005-04-18 | McAfee Internet Security Suite 2005 uses insecure default ACLs for installed files, which allows local users to gain privileges or disable protection by modify… | |
CVE-2005-0753 | | 2005-04-18 | Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code. | |
CVE-2005-0752 | | 2005-04-18 | The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascript: URL in the PLUGINSPAGE attribute of… | |
CVE-2005-1308 | | 2005-04-15 | SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script or HTML. | |
CVE-2005-1142 | | 2005-04-15 | Heap-based buffer overflow in the readpgm function in pnm.c for GOCR 0.40, when it is not using netpbm, allows remote attackers to execute arbitrary code via a… | |
CVE-2005-1141 | Critical | 9.8 | 2005-04-15 | Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM fil… |
CVE-2005-1140 | | 2005-04-15 | Cross-site scripting (XSS) vulnerability in myBloggie 2.1.1 allows remote attackers to inject arbitrary web script or HTML via the comments. | |
CVE-2005-1126 | | 2005-04-15 | The SIOCGIFCONF ioctl (ifconf function) in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not properly clear a buffer before using it, which allows local us… | |
CVE-2005-1139 | | 2005-04-14 | Opera 8 Beta 3, when using first-generation vetted digital certificates, displays the Organizational information of an SSL certificate, which is easily spoofed… | |
CVE-2005-1136 | | 2005-04-14 | Simple PHP Blog (sphpBlog) 0.4.0 stores the (1) password.txt and (2) config.txt files under the web document root, which allows remote attackers to obtain sens… |