CVE-2005-4708

The CVE-2005-4708 entry concerns Adobe Macromedia MX 2004 products, Captivate, Contribute 2/3, and the eLicensing client. The vulnerability arises from the Macromedia Licensing Service being installed with the Users group allowed to configure the service, including the path to the executable. Thi...

CVE-2005-4562

CVE-2005-4562 entry is rejected/not used; this ID does not represent an active vulnerability.

CVE-2005-4561

...

CVE-2005-4562

...

CVE-2005-4709

The CVE concerns JBoss EJB 3.0 RC3. The popSubjectContext method in SecurityAssociation preserves threadPrincipal and threadCredential from a prior client after the session ends, enabling a remote attacker to assume the roles of that previous client on the same server thread. This is described as...

Mercury Mail Transport System Phonebook service buffer overflow

Added: 02/02/2006 CVE: CVE-2005-4411 BID: 16396 OSVDB: 22103 Background Mercury Mail Transport System is a free mail server for Windows and Netware platforms. It includes a Phone Book service which runs on port 105/TCP. Problem A buffer overflow vulnerability in the Phone Book service allows remo...

Mercury Mail Transport System Phonebook service buffer overflow

Added: 02/02/2006 CVE: CVE-2005-4411 BID: 16396 OSVDB: 22103 Background Mercury Mail Transport System is a free mail server for Windows and Netware platforms. It includes a Phone Book service which runs on port 105/TCP. Problem A buffer overflow vulnerability in the Phone Book service allows remo...

Website Baker Admin Login SQL Injection

The remote host is running Website Baker, a PHP-based content management system. The installed version of Website Baker fails to validate user input to the username parameter of the 'admin/login/index.php' script before using it to generate database queries. An unauthenticated attacker can levera...

CVE-2005-4536

CVE-2005-4536 affects the Mail::Audit Perl module (libmail-audit-perl). The issue is that when logging is enabled, the module creates temporary files with predictable names, enabling a local attacker to overwrite files via a symlink attack on the [PID]-audit.log file. Debian advisories and OpenVA...

CVE-2005-4697

The CVE-2005-4697 entry concerns the Microsoft Wireless Zero Configuration (WZCS) system. It states that local users can access WEP keys and WPA PMKs via WZCQueryInterface in wzcsapi.dll, due to exposure through this API. Affected software/component: Microsoft WZCS and wzcsapi.dll; vulnerability ...

CVE-2005-4706

Technical details about CVE-2005-4706 are not publicly provided in the connected documents. The available sources summarize an unspecified denial-of-service in Solaris 10. Monitor for updated vendor advisories or patch information.

CVE-2005-4694

WebGUI

CVE-2005-4698

The provided records describe a Cross-site scripting (XSS) vulnerability in TellMe 1.2 and earlier, exploitable via the q_IP (IP) or q_Host (HOST) parameters. The root cause is insufficient input sanitization in these parameters, enabling injection of arbitrary web script/HTML. Impact is limited ...

CVE-2005-4697

The Microsoft Wireless Zero Configuration system WZCS allows local users to access WEP keys and pair-wise Master Keys PMK of the WPA pre-shared key via certain calls to the WZCQueryInterface API function in wzcsapi.dll...

CVE-2005-4693

Gaim-Encryption 2.38-1 on Debian Linux is affected by a vulnerability that allows remote attackers to cause a denial of service (crash) via a crafted message from an ICQ buddy, potentially involving the GE_received_key function in keys.c. The description across sources consistently identifies the...

CVE-2005-4705

BEA WebLogic Server/Express insecure connection handling: when a Java client opens an SSL connection after an insecure one, the SSL session may be downgraded and the connection can be sniffed. Affected: WebLogic Server/Express 6.1 SP7, 7.0 SP6, 8.1 SP4 and earlier. Root cause described as returni...

CVE-2005-4703

CVE-2005-4703 affects Apache Tomcat 4.0.3 on Windows. When a request targets a file whose name matches an MS-DOS device name (e.g., lpt9), the server may disclose the pathname in an error message (demonstrated by lpt9.xtp, e.g., via Nikto). Root cause: improper handling of MS-DOS device names lea...

CVE-2005-4707

An XSS vulnerability affects PHP GEN prior to 1.3, allowing remote attackers to inject arbitrary script/HTML via unknown attack vectors. The NVD entry lists a base score of 4.3 (MEDIUM) with Network attack vector, no confidentiality impact, partial integrity impact, and no availability impact. Af...

CVE-2005-4701

CVE-2005-4701 concerns an unspecified vulnerability in Sun Solaris 10’s Process File System (procfs) that could allow local users to obtain sensitive information such as process working directories via unknown attack vectors (possibly pwdx). The NVD/related records assign a low base score (CVSSv2...

CVE-2005-4706

Unspecified vulnerability in the "privilege management" feature of Sun Solaris 10 allows local users to cause a denial of service panic via unknown vectors that trigger a null dereference in the secpolicyfscommon function...