CVE-2005-3488

Scorched 3D 39.1 bf and earlier allows remote attackers to cause a denial of service long loop and server hang via a negative numplayers value that bypasses a signed check in ServerConnectHandler.cpp...

CVE-2005-3487

CVE-2005-3487 affects Scorched 3D 39.1 (bf) and earlier. Multiple buffer overflows allow remote attackers to execute arbitrary code via (1) GLConsole::addLine, (2) ServerCommon::sendString, (3) ServerCommon::serverLog, (4) a long command handled poorly in ComsMessageHandler.cpp when generating an...

CVE-2005-3485

CVE-2005-3485 describes a buffer overflow in Glider Collect’n kill 1.0.0.0 that allows remote attackers to execute arbitrary code via a long gl_playerEnter command (player name). The description across the NVD/CVE records confirms the vulnerability is triggered by an excessively long player name ...

CVE-2005-3486

CVE-2005-3486 affects Scorched 3D 39.1 (bf) and earlier. The vulnerability is a format-string issue in the game server components, including GLConsole::addLine, ServerCommon::sendString, and ServerCommon::serverLog, which can allow remote code execution. Public advisories (Gentoo GLSA 200511-12, ...

CVE-2005-3488

The CVE-2005-3488 entry concerns Scorched 3D version 39.1 (bf) and earlier. A remote attacker could cause a denial of service by sending a negative numplayers value that bypasses a signed check in ServerConnectHandler.cpp, leading to a long loop and server hang. Public sources identify this vulne...

CVE-2005-3483

GO-Global for Windows (3.1.0.3270 and earlier) is affected by a remote buffer overflow in the GO-Global remote display server/client. The issue occurs when a data block longer than the specified data block size is processed, potentially allowing arbitrary code execution or a crash on the remote h...

CVE-2005-3480

login.asp in Ringtail CaseBook 6.1.0 displays different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames...

CVE-2005-3480

login.asp in Ringtail CaseBook 6.1.0 displays different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames...

CVE-2005-3480

CVE-2005-3480 affects Ringtail CaseBook 6.1.0 where login.asp returns distinct error messages for valid vs. invalid usernames, enabling remote attackers to enumerate valid usernames. The connected documents corroborate that the issue is an informational disclosure in authentication messages, with...

CVE-2005-3474

The CVE-2005-3474 entry concerns the aries.sys driver in Sony First4Internet XCP DRM software. The driver hides any file, registry key, or process whose name begins with "$sys$", enabling an attacker to conceal activity on a system using XCP. Affected component: aries.sys within the XCP DRM stack...

CVE-2005-3482

Affected devices are Cisco 1200, 1131, and 1240 series Access Points operating in LWAPP mode and controlled by 2000/4400 series Airespace controllers running 3.1.59.24. The vulnerability allows remote attackers to send unencrypted traffic to a secure network by using frames with the MAC address o...

CVE-2005-3479

CVE-2005-3479 describes a cross-site scripting (XSS) flaw in Ringtail CaseBook 6.1.0, specifically in login.asp where an attacker can inject arbitrary script via the users parameter. Affected software is Ringtail CaseBook 6.1.0; the vulnerability arises from improper handling of the users input, ...

CVE-2005-3481

CVE-2005-3481 affects Cisco IOS versions 12.0–12.4, where a heap-based buffer overflow in the system timers can allow a remote attacker to execute arbitrary code. The vulnerability stems from the timer subsystem, enabling remote code execution and potential device compromise without user interact...

CVE-2005-3477

Technical details about CVE-2005-3477 are not publicly provided in the supplied documents; monitor for updates.

CVE-2005-3473

The CVE-2005-3473 entry describes multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog

CVE-2005-3475

CVE-2005-3475 affects Hasbani Web Server (WindWeb) 2.0. The issue allows a remote attacker to cause a denial of service by sending crafted HTTP GET requests, which may trigger an infinite loop. CVSS metrics indicate a network attack with low complexity and no authentication, with availability imp...

CVE-2005-3476

The CVE-2005-3476 entry affects HP OpenVMS Integrity 8.2-1 and 8.2, and OpenVMS Alpha 7.3-2 and 8.2. It describes an unspecified vulnerability that allows local users to cause a denial of service. No concrete root-cause, affected component, or remediation details are provided in the available doc...

CVE-2005-3478

CVE-2005-3478 is a SQL injection flaw in PHPCafe.net Tutorials Manager 1.0 Beta 2, exploitable via the id parameter in index.php. The vulnerability enables remote SQL command execution. CVSS v2 metrics from NVD indicate a base score of 7.5 (HIGH) with network attack vector, low attack complexity,...

Simple PHP Blog: Multiple XSS Vulnerabilities

=========================================================== Simple PHP Blog: Multiple XSS Vulnerabilities =========================================================== Technical University of Vienna Security Advisory TUVSA-0511-001, November 2, 2005...

CVE-2005-3350

libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write...