CVE-2005-3205

CVE-2005-3205 : XSS in Oracle9i iSQLPlus (iSQLPlus) for Oracle9i Database Server Release 2 (9.0.2.4). The vulnerability arises in the iSQL Plus interface when using the command set markup HTML TABLE, allowing remote attackers to inject arbitrary script/HTML that executes when a user selects a tab...

CVE-2005-3223

The CVE refers to a vulnerability in Rising Antivirus (unspecified versions) where a malware-laden executable in a specially crafted RAR file with malformed central and local headers can bypass virus detection. The issue arises during archive parsing, allowing the file to be opened by some tools ...

CVE-2005-3197

The CVE-2005-3197 entry describes a stack-based buffer overflow in PWIWrapper.dll used by Webroot Desktop Firewall prior to 1.3.0build52. The vulnerability allows a local user to execute arbitrary code with SYSTEM privileges by sending a crafted DeviceIoControl command and then removing an allowe...

CVE-2005-3201

CVE-2005-3201 concerns Utopia News Pro (UNP) 1.1.3. The vulnerability is an SQL injection in news.php when magic_quotes_gpc is disabled and register_globals is enabled, allowing remote attackers to modify/obtain data via the newsid parameter. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH)...

CVE-2005-3231

CAT Quick Heal is affected by a vulnerability described as a multiple interpretation error in unspecified versions, allowing remote attackers to bypass virus detection. The attack involves a malicious executable contained in a specially crafted RAR file with malformed central and local headers, w...

CVE-2005-3218

The CVE affects Dr.Web Antivirus (unspecified versions) where a parsing interpretation error in RAR archives with malformed central/local headers can allow a remote attacker to bypass virus detection by delivering a malicious executable. The issue arises even though some archivers (e.g., Winrar, ...

CVE-2005-3202

CVE-2005-3202 affects Oracle HTML DB (HTMLDB) versions 1.3 through 1.3.6. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML and, via the affected parameters, potentially execute SQL statements. The exploitation targets the (...

CVE-2005-2661

The CVE-2005-2661 issue affects up-imapproxy (IMAP Proxy) versions 1.2.3 and 1.2.4. It is a format string vulnerability in the ParseBannerAndCapability function in main.c, allowing a remote IMAP server to execute arbitrary code via format specifiers in a banner or capability line. Public sources ...

CVE-2005-3201

SQL injection vulnerability in news.php for Utopia News Pro UNP 1.1.3, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to execute arbitrary SQL via the newsid parameter...

CVE-2005-3204

CVE-2005-3204 is a Cross-site Scripting (XSS) vulnerability affecting Oracle XML DB 9iR2. According to the connected Nessus/NVD records, remote attackers could inject arbitrary web script or HTML via the query string in an HTTP request. The available documents do not specify the affected product ...

CVE-2005-3200

Utopia News Pro (UNP) versions 1.1.3 and 1.1.4 are affected by multiple XSS vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via: (1) sitetitle parameter in header.php and (2) version and (3) query_count parameters in footer.php. The documents do not speci...

CVE-2005-3203

The manual installation of Oracle HTML DB HTMLDB 1.3 through 1.3.6 stores the SYS password in install.lst in plaintext, which allows local users to gain privileges...

CVE-2005-3206

CVE-2005-3206 affects iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 (9.0.2.4). The issue enables remote attackers to cause a denial of service by sending an HTTP request with an sid parameter containing a STOP command, which can stop the TNS listener. The available connected documen...

CVE-2005-3211

CVE-2005-3211 affects BitDefender Antivirus and involves a multiple interpretation error in unspecified versions. A remote attacker can bypass virus detection by delivering a malicious executable in a specially crafted RAR file with malformed central and local headers. The crafted archive can be ...

CVE-2005-3224

The CVE-2005-3224 entry concerns AntiVir Antivirus (unspecified versions) and a multiple interpretation error in its handling of RAR archives. The underlying issue allows remote attackers to bypass virus detection by supplying a malicious executable inside a specially crafted RAR file with malfor...

CVE-2005-3218

Multiple interpretation error in unspecified versions of Dr.Web Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...

CVE-2005-3198

CVE-2005-3198 concerns Webroot Desktop Firewall prior to 1.3.0build52. The issue allows local users to disable the firewall, even when password protection is enabled, via certain DeviceIoControl commands. The CVSS vector indicates local access, low attack complexity, no authentication, with parti...

CVE-2005-3238

Affected software: Solaris 10. The CVE-2005-3238 entry describes multiple unspecified vulnerabilities in SCTP Socket Option Processing that can be exploited locally to cause a denial of service (panic). The available sources indicate local-access impact with no details on the exact root cause, vu...

CVE-2005-3196

CVE-2005-3196 concerns the Planet Technology Corp FGSW2402RS switch running firmware 1.2, where a default password allows attackers with physical access to the device’s serial port to gain privileges. The affected component is the switch’s firmware authentication mechanism; the root cause is a de...

CVE-2005-3213

Multiple interpretation error in unspecified versions of F-Prot Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...