CVE-2005-3314

Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code via "long verb arguments."...

CVE-2005-3314

The provided connected sources confirm CVE-2005-3314 as a stack-based buffer overflow in the NetMail IMAP service (Novell NetMail 3.5.2/3.52d) triggered by long verb arguments. Exploitation allows an authenticated remote attacker to execute arbitrary code with the IMAP server process privileges, ...

CVE-2005-3355

The CVE-2005-3355 issue affects gnump3d, where the theme parameter in HTTP requests can be used for path traversal. Technical details across connected sources confirm this vulnerability in gnump3d prior to version 2.9.8, caused by inadequate validation of CGI input causing unauthorized file acces...

CVE-2005-3349

CVE-2005-3349 affects gnump3d prior to 2.9.8, where insecure temporary-file handling (index.lok) enables local attackers to create symlink attacks and overwrite or delete files. Multiple advisories assess this as a local, path/temporary-file vulnerability in gnump3d and note related issues (CVE-2...

CVE-2005-3668

Multiple buffer overflows in multiple unspecified implementations of Internet Key Exchange version 1 IKEv1 have multiple unspecified attack vectors and impacts related to denial of service, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information in the...

CVE-2005-3671

The Internet Key Exchange version 1 IKEv1 implementation in Openswan 2 openswan-2 before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.041.5.4-1.23, allow remote attackers to cause a denial of service via 1 a crafted packet using 3DES with an invalid key length, or 2 unspecified inputs when...

CVE-2005-3673

CVE-2005-3673 relates to an IKEv1 DoS in Check Point products via crafted IKEv1 packets. Connected sources show a broader set of IKEv1 issues (CVE-2005-3666/3667/3668) with remote denial-of-service effects in multiple implementations (notably ipsec-tools’ racoon). The Proton/PROTOS test suite is ...

CVE-2005-3670

CVE-2005-3670 covers multiple unspecified IKEv1 vulnerabilities in HP-UX IPSec, HP Jetdirect 635n, and HP Tru64 UNIX implementations that allow remote DoS via certain IKE packets (PROTOS IKEv1 test). The HP advisory does not specify which sub-CVE (CVE-2005-3666/3667/3668) applies. Related connect...

CVE-2005-3674

CVE-2005-3674 concerns the IKEv1 implementation (libike) in Sun Solaris 9/10, where remote crafted IKE packets can crash iked, causing a denial of service. The advisory notes uncertainty about whether this maps to CVE-2005-3666, -3667, or -3668. Connected sources describe related IKEv1 issues in ...

CVE-2005-3671

CVE-2005-3671 affects OpenSwan 2.x (pre-2.4.4) and Freeswan in SUSE Linux 9.1 (before 2.04_1.5.4-1.23). The vulnerability allows a remote attacker to cause a Denial of Service by processing specially crafted ISAKMP/IKEv1 data: (1) a crafted packet using 3DES with an invalid key length, or (2) uns...

CVE-2005-3666

Multiple unspecified format string vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 IKEv1 have multiple unspecified attack vectors and impacts, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information in the original...

CVE-2005-3672

CVE-2005-3672 concerns the Internet Key Exchange version 1 (IKEv1) implementation in Stonesoft StoneGate Firewall before 2.6.1. A remote attacker can cause a denial of service by sending certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. The Stonesoft advisory...

CVE-2005-3669

CVE-2005-3669 covers multiple unspecified vulnerabilities in the Internet Key Exchange v1 (IKEv1) implementation in Cisco products that cause a denial of service (device reset) via malformed IKE packets, demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. The Cisco advisory lacks details to m...

CVE-2005-3668

CVE-2005-3668 is described as multiple buffer overflows in IKEv1 implementations with several attacker vectors that can lead to a denial of service. Connected sources tie this to ipsec-tools racoon (IPsec-tools) in Red Hat/CentOS advisories and Debian/Nessus findings, indicating a remote DoS via ...

CVE-2005-3674

The Internet Key Exchange version 1 IKEv1 implementation in the libike library in Sun Solaris 9 and 10 allows remote attackers to cause a denial of service in.iked crash via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in...

CVE-2005-3669

Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 IKEv1 implementation in multiple Cisco products allow remote attackers to cause a denial of service device reset via certain malformed IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to t...

CVE-2005-3666

Technical details (affected implementations, exact root cause, impact, and fixes for CVE-2005-3666) are not publicly available in the provided documents. Monitor for updates as new information becomes available.

CVE-2005-3664

The CVE-2005-3664 entry describes a heap-based buffer overflow in the Kaspersky Anti-Virus Engine, used by Kaspersky Personal 5.0.227, Anti-Virus On-Demand Scanner for Linux 5.0.5, and F-Secure Anti-Virus for Linux 4.50, allowing remote code execution via a crafted CHM file. The provided referenc...

CVE-2005-3116

Stack-based buffer overflow in a shared library as used by the Volume Manager daemon vmd in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute arbitrary code via a crafted packet...

CVE-2005-3663

CVE-2005-3663 describes an unquoted Windows search path vulnerability in Kaspersky Anti-Virus 5.0 that could allow local users to gain privileges via a malicious "program.exe" placed in the C:\ folder. Affected software: Kaspersky Anti-Virus 5.0 (Windows). Underlying cause: unquoted search path h...