CVE-2005-3267

CVE-2005-3267 affects Skype clients on Windows (pre-1.4.x.84), macOS (pre-1.3.x.17), Linux (pre-1.2.x.18), and older 1.1.x.6 and earlier. An integer overflow in handling crafted network data (large Object Counter) triggers a heap-based buffer overflow, leading to remote denial of service (crash);...

CVE-2005-3323

CVE-2005-3323 affects docutils in Zope: Zope 2.6, Zope 2.7 before 2.7.8, and Zope 2.8 before 2.8.2 are vulnerable. The flaw allows remote attackers to include arbitrary files via include directives in RestructuredText functionality. Root cause: insecure handling of include directives in docutils ...

CVE-2005-3325

CVE-2005-3325 concerns SQL injection in ACID/BASE consoles (acidlab/acidbase) due to missing input sanitising and improper parameter validation. Debian and related advisories (DSA-893-1) confirm remote exploitation via base_qry_main.php/acid_qry_main.php and related console components, with fixed...

CVE-2005-3243

Ethereal (Wireshark predecessor)

CVE-2005-3241

Summary: CVE-2005-3241 affects Ethereal 0.10.12 and earlier. The vulnerability involves memory-exhaustion denial of service in the FC-FCS, RSVP, and ISIS-LSP dissectors (and related disclosures across other dissectors). The Debian, Gentoo, OpenVAS, Red Hat, and SLES advisories in the connected do...

CVE-2005-3319

The CVE-2005-3319 description applies to PHP 5.x before 5.1.0 final and PHP 4.4 before 4.4.1 final, specifically via the apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php). It allows a denial of service (segmentation fault) by manipulating the session.save_path option in a .htacc...

CVE-2005-3327

CVE-2005-3327 affects Network Appliance Data ONTAP 7.0 and earlier. A modified iSCSI client can bypass authentication by skipping the Security (Start) mode required by the Login Negotiation protocol and operating in Operational mode without proving identity, exposing partial confidentiality, inte...

CVE-2005-3330

The httpsrequest function in Snoopy 1.2, as used in products such as 1 MagpieRSS, 2 WordPress, 3 Ampache, and 4 Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function...

CVE-2005-3336

CVE-2005-3336 is an SQL injection vulnerability in MantisBT (Mant is bug-tracking software), affecting 1.0.0RC2 and 0.19.2. Public advisories (Debian DSA-905-1, GLSA 200510-24, OpenVAS entries) describe remote execution of arbitrary SQL commands due to injection vectors in MantisBT core. Debian/G...

CVE-2005-3321

Affected software: SuSE Linux 9.0–10.0. Vulnerable component: chkstat. Local users can cause weaker file permissions by creating a hardlink to a file from a world-writable directory, which reduces the link count to 1 when the original file is deleted or replaced, after which chkstat updates permi...

CVE-2005-2973

CVE-2005-2973 : Linux kernel vn UDPv6 port handling flaw in udp_v6_get_port (in Linux 2.6 before 2.6.14-rc5) allows a local user, when IPv6 is enabled, to trigger an infinite loop and kernel crash (local DoS). Ubuntu advisory USN-219-1 references this CVE and notes kernel updates as remediation. ...

CVE-2005-3323

docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in RestructuredText functionality...

CVE-2005-3245

CVE-2005-3245 affects Ethereal (0.10.3–0.10.12) with the ONC RPC dissector. When the option “Dissect unknown RPC program numbers” is enabled, a remote attacker could cause memory exhaustion leading to a denial of service. Advisories and records indicate upgrading to Ethereal 0.10.13 fixes the iss...

CVE-2005-3318

CVE-2005-3318 is a buffer overflow in CHMLIB’s _chm_decompress_block() used by chmlib (e.g., in KchmViewer). The vulnerability allows an attacker to execute arbitrary code by processing specially crafted CHM ITSS/CHM content. The issue is associated with CHMLIB versions before 0.37, and multiple ...

CVE-2005-3330

The httpsrequest function in Snoopy 1.2, as used in products such as 1 MagpieRSS, 2 WordPress, 3 Ampache, and 4 Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function...

CVE-2005-3337

CVE-2005-3337 affects MantisBT (Mantis) prior to version 0.19.3. The connected sources confirm multiple vulnerabilities, notably cross‑site scripting (XSS) flaws exploitable to inject script/HTML via unknown vectors and specifically through mantis/view_all_set.php. The OpenVAS/Nessus entries grou...

CVE-2005-3246

CVE-2005-3246 affects Ethereal (Wireshark) dissectors, specifically the NCP and RTnet modules, causing a denial of service via a null pointer dereference. The connected OpenVAS/Debian entries corroborate remote exploitation with memory issues in multiple Ethereal dissectors and list CVE-2005-3246...

CVE-2005-3322

CVE-2005-3322 affects Squid running on SUSE Linux 9.0. The issue is described as an unspecified vulnerability that allows remote attackers to cause a denial of service (crash) via HTTPS (SSL). The public sources do not provide a concrete root cause, exploit details, or explicit remediation steps ...

CVE-2005-3244

CVE-2005-3244 affects Ethereal (the network analyzer; precursor to Wireshark). The BER dissector in Ethereal versions 0.10.3 through 0.10.12 can be abused to trigger a denial of service via an infinite loop. Connected advisories (e.g., Debian DSA-1171, OpenVAS entries) corroborate that this was a...

CVE-2005-3242

CVE-2005-3242 affects Ethereal 0.10.12 and earlier; remote attackers can cause a denial of service via memory corruption in the IrDA and SMB dissectors when SMB payload reassembly is enabled. Publicly provided documents confirm the vulnerability in Ethereal and describe the affected dissectors an...