CVE-2005-3532

The CVE-2005-3532 issue affects courier-authdaemon (Courier Mail Server) versions 0.37.3 through 0.52.1, where authentication using pam_tally does not invoke pam_acct_mgmt to verify account status. This allows authentication to succeed for accounts that have been disabled. The vulnerability is do...

CVE-2005-3651

Stack-based buffer overflow in the dissectospfv3addressprefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets...

CVE-2005-4150

Cross-site scripting XSS vulnerability in the portal login page in Computer Associates CleverPath 4.7 allows remote attackers to execute Javascript via unknown vectors...

CVE-2005-4144

CVE-2005-4144 affects Lyris ListManager 5.0–8.9a. The vulnerability arises from improper handling of whitespace in the orderby parameter, allowing remote attackers to modify SQL queries by injecting ORDER BY clauses (e.g., via newlines or 0xFF characters). Documents consistently identify this as ...

CVE-2005-4142

CVE-2005-4142 affects Lyris ListManager 5.0–8.8b. The vulnerability lies in the web-based subscription form where the pw parameter can be crafted to inject arbitrary list-administration commands via LFCR sequences, exploiting insufficient input sanitization. This can allow an unauthenticated atta...

CVE-2005-4149

CVE-2005-4149 affects Lyris ListManager 8.8–8.9b, where remote attackers can trigger errors in TML scripts to leak sensitive data in diagnostic messages (installation path, SQL queries, product code). Impact is information disclosure via error messages exposed by normal requests to nonexistent pa...

CVE-2005-4143

CVE-2005-4143 affects Lyris ListManager versions 5.0 through 8.9a. The vulnerability is a SQL injection that allows a remote attacker to execute arbitrary SQL commands via SQL code appended after a numeric argument in a “/read/attachment” URL. Documented impact indicators in the sources show part...

CVE-2005-4150

The CVE-2005-4150 entry describes a Cross-site scripting (XSS) vulnerability in the portal login page of Computer Associates CleverPath 4.7. Affects CleverPath 4.7; the vectors are described as unknown in the provided description. The NVD metrics list a CVSS v2 base score of 4.3 (Medium) with imp...

CVE-2005-4148

CVE-2005-4148 affects Lyris ListManager 8.5 and possibly earlier than 8.8. The flaw is an information disclosure where sensitive data is exposed via an env hidden variable; a remote attacker can cause the server to return a non-existent page and read the env variable from the error page, revealin...

CVE-2005-4147

The TCLHTTPd component of Lyris ListManager (pre-8.9b) is vulnerable: remote attackers can obtain source code for arbitrary .tml TCL files via a request containing a trailing null byte (%00), with a possible authentication bypass involving a username ending in “@”. Affected product/version: ListM...

CVE-2005-4145

Lyris ListManager MSDE (MSDE-backed ListManager 5.0–8.9b) exposes a weak sa password: “lyris” followed by up to five digits (likely the installer’s process ID). This enables remote brute-force access to the SA account in the SQL Server backend, allowing database administrator access. Public sourc...

CVE-2005-3651

CVE-2005-3651 is a vulnerability in Ethereal (Wireshark) 0.10.12 affecting the OSPF v3 address prefix dissector. The stack-based buffer overflow can be triggered by crafting OSPF packets sent over the network, allowing remote code execution. Multiple advisories confirm this issue and reference af...

CVE-2005-4146

CVE-2005-4146 affects Lyris ListManager prior to version 8.9b. The vulnerability resides in the TCLHTTPd status module, which can be queried remotely to disclose sensitive server configuration information. The issue enables an unauthenticated, remote attacker to obtain partial confidentiality imp...

SugarCRM <= 4.0 beta acceptDecline.php Remote File Inclusion

SugarCRM is a Customer Relationship Manager written in PHP. The version of SugarCRM installed on the remote host does not properly sanitize user input in the 'beanFiles' parameter in the 'acceptDecline.php' file. A attacker can use this flaw to display sensitive information and to include malicio...

CVE-2005-4138

ThWboard vulnerable to multiple XSS flaws in versions before 3 Beta 2.84. Attack vectors include (1) Wohnort and (2) Beruf fields in editprofile.php, (3) user parameter array in v_profile.php, and (4) the action parameter in misc.php. These allow remote attackers to inject arbitrary web script/HT...

CVE-2005-4141

CVE-2005-4141 is an SQL injection in ASPMForum. The vulnerability allows remote attackers to execute arbitrary SQL via the parameters harf in include/listing (kullaniciListesi.asp) and baslik in forum.asp. Connected sources confirm these vectors and note a high-severity impact (base score 7.5) wi...

CVE-2005-4134

CVE-2005-4134 affects Mozilla Firefox 1.5, Netscape 8.x (8.0.4 and 7.2) and K-Meleon prior to 0.9.12. A remote attacker can cause a denial of service (high CPU usage and delayed startup) by presenting a website with a large title, which is stored in history.dat but not efficiently processed durin...

CVE-2005-4136

CVE-2005-4136 describes a Cross-site Scripting (XSS) vulnerability in DRZES HMS 3.2, specifically in login.php where the customerEmailAddress parameter can be exploited to inject arbitrary web script/HTML. The issue affects the login process and can be triggered remotely, with a NVD base score of...

CVE-2005-4133

Sun Update Connection in Solaris 10, when configured to use a web proxy, may allow local users to obtain the proxy authentication password through an unspecified vector and proxy log files. The available sources describe the affected component and the impact (exposure of proxy credentials to loca...

CVE-2005-4135

CVE-2005-4135 affects SimpleBBS 1.1 and earlier. The vulnerability is a direct static code injection in includes/newtopic.php that allows remote code execution via shell metacharacters in the Host header (potentially the name parameter or variable), which is then written to data/topics.php. This ...