CVE-2005-3287

CVE-2005-3287 concerns an incomplete blacklist vulnerability in Mailsite Express that allows remote upload of files via attachments with executable extensions (e.g., ASPX) which are not converted to .TXT and can be directly requested from the cache directory. The sources indicate the issue but do...

CVE-2005-3298

CVE-2005-3298 affects OpenWBEM running on SuSE Linux 9. The issue is described as multiple buffer overflows that enable remote attackers to execute arbitrary code via unknown vectors. Evidence from SUSE and NVD entries confirms OpenWBEM on SuSE Linux 9 as the affected component and the potential ...

CVE-2005-3285

CVE-2005-3285 describes a Cross-site scripting (XSS) vulnerability in Comersus BackOffice Plus, specifically in comersus_backoffice_searchItemForm.asp. The issue allows remote attackers to inject arbitrary web script or HTML via the parameters forwardTo1, forwardTo2, nameFT1, or nameFT2. The vuln...

CVE-2005-3294

CVE-2005-3294 affects TYPSoft FTP Server 1.11 (and 1.10) with Sub Directory Include enabled, enabling remote DoS by sending multiple RETR commands that crash the server. Descriptions across CVE/NVD and multiple advisories/exploits confirm RETR-based denial of service; no remediation/patch details...

CVE-2005-3295

CVE-2005-3295 affects HP-UX B.11.23 on Itanium platforms. The vulnerability is a local denial of service caused by an issue related to the handling of a specific stack size in HP-UX. Exploitation details are not provided in the documents; no active exploit information is stated. Remediation in th...

CVE-2005-3282

CVE-2005-3282 affects Splatt Forum 3.0 to 3.2. The vulnerability allows remote attackers to bypass authentication via unknown vectors, with a CVSS v2 base score of 7.5 (HIGH) and network access/low complexity in the provided data. Affected component is the Splatt Forum authentication mechanism; r...

CVE-2005-3266

...

CVE-2005-3293

CVE-2005-3293 affects Xerver before v4.20. Two information-disclosure vectors are described: (1) appending a trailing dot to a script URL to obtain its source code, and (2) sending a request with a trailing null character (%00) to list directory contents. Evidence from NVD/CVE records confirms vu...

CVE-2005-3289

CVE-2005-3289 affects IBM AIX 5.2 and 5.3 where LSCFG fails to securely create temporary files, enabling local users to corrupt /etc/passwd and possibly other system files via the trace file. Connected sources corroborate the binary-level description but do not provide explicit patch/version reme...

CVE-2005-3266

CVE-2005-3266 is rejected and not used; reference CVE-2005-3265 instead.

CVE-2005-3282

Splatt Forum 3.0 to 3.2 allows remote attackers to bypass authentication via unknown vectors...

CVE-2005-3284

CVE-2005-3284 affects AhnLab V3 AntiVirus V3Pro 2004 before 6.0.0.488, V3Net for Windows Server 6.0 before 6.0.0.488, and MyV3. The issue arises from multiple buffer overflows when compressed file scanning is enabled, allowing remote attackers to execute arbitrary code via crafted archives (ALZ, ...

CVE-2005-3283

The CVE-2005-3283 issue affects TikiWiki prior to version 1.9.1.1, where an XSS vulnerability exists due to improper input validation. The vulnerability could allow a remote attacker to inject arbitrary script/HTML via unknown vectors, potentially impacting a user’s browser and session data (e.g....

CVE-2005-3300

CVE-2005-3300 affects phpMyAdmin prior to 2.6.4-pl3. The issue is in the register_globals emulation layer (grab_globals.php): it does not perform safety checks on values in the _FILES array for uploaded files, which could allow a remote attacker to induce phpMyAdmin to include an arbitrary local ...

CVE-2005-3291

SPE 0.7.5 on Gentoo is affected by world-writable file permissions, allowing a local user to modify executables and potentially execute arbitrary code with the user’s privileges. The Gentoo GLSA 200510-13 and Gentoo advisory GLSA describe the issue and recommend upgrading SPE to the latest versio...

CVE-2005-3288

Mailsite Express is affected by CVE-2005-3288. Remote attackers can upload and execute files with executable extensions (e.g., ASP) by attaching the file via the compose page and then accessing it from the cache directory before saving or sending the message. The vulnerability is documented acros...

CVE-2005-3286

The CVE-2005-3286 entry affects Kerio Personal Firewall 4.2 and Kerio Server Firewall 1.1.1, where the FWDRV driver allows local attackers to trigger a denial of service (crash) by manipulating the Page Environment Block (PEB) protection to PAGE_NOACCESS or PAGE_GUARD, causing an exception (the s...

CVE-2005-3299

The CVE-2005-3299 entry describes a PHP file inclusion (local inclusion) vulnerability in phpMyAdmin 2.6.4 and 2.6.4-pl1, caused by improper validation of the $__redirect parameter in libraries/grab_globals.lib.php, potentially involving the subform array. This allows remote attackers to include ...

CVE-2005-2972

CVE-2005-2972 concerns AbiWord’s RTF import in versions prior to 2.2.11, where multiple stack-based buffer overflows can be triggered by a crafted RTF file. The flaws are located in the RTF parser code paths (ParseLevelText, getCharsInsideBrace, HandleLists, HandleAbiLists) in ie_imp_RTF.cpp, and...

CVE-2005-3296

The CVE-2005-3296 issue affects HP-UX FTP/ftpd on HP‑UX 10.20, B.11.00, and B.11.11. The vulnerability allows remote attackers to list arbitrary directories with root privileges by issuing LIST before authentication. OpenVAS/Nessus entries confirm HP-UX patches for ftpd/ftp (HP patch PHNE_23949 a...