CVE-2005-3546

suid.cgi scripts in F-Secure 1 Internet Gatekeeper for Linux before 2.15.484 and 2 Anti-Virus Linux Gateway before 2.16 are installed SUID with world-executable permissions, which allows local users to gain privilege...

CVE-2005-3577

Cross-site scripting vulnerability XSS in ts.exe aka ts.cgi in Walla TeleSite 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the sug parameter...

CVE-2005-3587

Improper boundary checks in petite.c in Clam AntiVirus ClamAV before 0.87.1 allows attackers to perform unknown attacks via unknown vectors...

CVE-2005-3562

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2955. Reason: This candidate is a reservation duplicate of CVE-2005-2955. Notes: All CVE users should reference CVE-2005-2955 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2005-3542

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3508. Reason: This candidate is a reservation duplicate of CVE-2005-3508. Notes: All CVE users should reference CVE-2005-3508 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2005-3573

Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service application crash...

CVE-2005-3567

slapd daemon in IBM Tivoli Directory Server ITDS 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data via unknown attack vectors...

CVE-2005-3584

Cross-site scripting XSS vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to inject arbitrary web script or HTML via the forum parameter...

CVE-2005-3564

The CVE-2005-3564 entry concerns the HP-UX envd daemon. Affected product: HP-UX envd (HP-UX B.11.00–B.11.11). Issue: local users can obtain privileges; root cause described as unknown attack vectors. Public details in connected docs include HP patch references HPSBUX02073 (SSRT051012 rev.2) and p...

CVE-2005-3588

SQL injection vulnerability in admin.php in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privileges via the username field...

CVE-2005-3584

Cross-site scripting XSS vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to inject arbitrary web script or HTML via the forum parameter...

CVE-2005-3546

The CVE-2005-3546 entry concerns F-Secure products: Internet Gatekeeper for Linux prior to 2.15.484 and Anti-Virus Linux Gateway prior to 2.16. The issue arises from SUID scripts (suid.cgi) being installed with world-executable permissions, enabling local users to gain privilege. The root cause i...

CVE-2005-3562

...

CVE-2005-3559

CVE-2005-3559 is a directory traversal vulnerability in vmail.cgi of Asterisk, affecting 1.0.9 through 1.2.0-beta1 and enabling remote access to WAV files via a .. in the folder parameter. The issue is documented across multiple feeds (Debian DSA-1048-1 and SUSE/Nessus entries) with remediation g...

CVE-2005-3580

CVE-2005-3580 affects QDBM prior to 1.8.33-r2. Local users in the portage group can escalate privileges by placing a malicious shared object in the Portage temporary build directory, which is added to the runtime search path and loaded by dependent executables. The issue is confirmed in Gentoo GL...

CVE-2005-3588

The CVE-2005-3588 entry describes an SQL injection in Advanced Guestbook 2.2, exploitable via the username field in admin.php. The vulnerability is remote and allows execution of arbitrary SQL commands and privilege escalation. Documents indicate affected software is Advanced Guestbook 2.2; no sp...

CVE-2005-3595

CVE-2005-3595 concerns Windows XP Home Edition, where the default installation includes a blank Administrator password. This enables remote attackers to gain control of the machine without authentication, as described in the CVE records. The related connected documents corroborate that the vulner...

CVE-2005-3543

CVE-2005-3543 : SQL injection in Phorum web forum software via search.php (versions 5.0.0alpha–5.0.20) when register_globals is enabled. The vulnerability allows remote attackers to modify/exfiltrate data by injecting SQL through the forum_ids parameter. Affected: Phorum 5.0.0alpha up to 5.0.20. ...

CVE-2005-3581

CVE-2005-3581 concerns GDAL prior to 1.3.0-r1 where a local user in the portage group could escalate privileges by placing a malicious shared object in the Portage temporary build directory that gets loaded at runtime via PATH/RUNPATH. The connected sources confirm the vulnerability exists in GDA...

CVE-2005-3571

CVE-2005-3571 affects CodeGrrl PHP applications (PHPCalendar 1.0, PHPClique 1.0, PHPCurrently 2.0, PHPFanBase 2.1, PHPQuotes 1.0; PHPFanBase 2.2 also affected). The vulnerability is a PHP file-inclusion flaw in protection.php where the siteurl parameter is unsafely used in a PHP include when regi...