CVE-2005-3194

CVE-2005-3194 affects ALZip 6.12 (Korean), 6.1 (International), and 5.52 (English). The vulnerability is described as multiple buffer overflows that allow remote attackers to execute arbitrary code via a long filename inside compressed archives (ALZ, ARJ, ZIP, UUE, XXE). Connected sources reitera...

CVE-2005-3228

This CVE concerns multiple interpretation errors in unspecified versions of Ikarus AntiVirus . The vulnerability enables remote attackers to bypass virus detection by supplying a malicious executable inside a specially crafted RAR file with malformed central and local headers. The crafted archive...

CVE-2005-3213

CVE-2005-3213 concerns multiple interpretation errors in unspecified versions of F-Prot Antivirus that allow remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers. The crafted archive can be opened by tools l...

CVE-2005-3195

...

CVE-2005-3219

Multiple interpretation error in unspecified versions of Avira Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...

CVE-2005-3210

CVE-2005-3210 involves a vulnerability in unspecified versions of Kaspersky Antivirus where remote attackers can bypass virus detection by delivering a malicious executable packed in a specially crafted RAR file with malformed central and local headers. The issue allows the payload to be opened b...

CVE-2005-2933

Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...

CVE-2005-3185

Stack-based buffer overflow in the ntlmoutput function in http-ntlm.c for 1 wget 1.10, 2 curl 7.13.2, and 3 libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username...

CVE-2005-2933

Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...

CVE-2005-3185

Stack-based buffer overflow in the ntlmoutput function in http-ntlm.c for 1 wget 1.10, 2 curl 7.13.2, and 3 libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username...

CVE-2005-2992

arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different type of vulnerability than CVE-2005-2945...

CVE-2005-2963

The modauthshadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for all locations that use the require group directive, even when other authentication mechanisms are specified, which might allow remote authenticated users to bypass security...

Immunity Canvas: MS05_046

Name| ms05046 ---|--- CVE| CVE-2005-1985 Exploit Pack| CANVAS Description| Microsoft Netware Service RPC Overflow Notes| References: http://www.microsoft.com/technet/security/Bulletin/MS05-046.mspx CVE Name: CVE-2005-1985 VENDOR: Microsoft MSADV: MS05-046 Repeatability: One shot Note: Date public...

CVE-2005-2963

The modauthshadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for all locations that use the require group directive, even when other authentication mechanisms are specified, which might allow remote authenticated users to bypass security...

CVE-2005-2943

CVE-2005-2943 describes a stack-based buffer overflow in xmail’s sendmail component prior to version 1.22, which could allow an attacker to execute arbitrary code via the -t option. Public advisories (Debian DSA-902-1, Gentoo GLSA 200512-05, SUSE SUSECVE) note a fix in xmail 1.21/1.22 series and ...

CVE-2005-2933

CVE-2005-2933 describes a buffer overflow in UW-IMAP (mail_valid_net_parse_work in mail.c) where a mailbox name containing a single quote (") without a closing quote can cause unchecked data to be copied, enabling remote code execution on servers using UW-IMAP and the c-client library. Public rep...

CVE-2005-2992

CVE-2005-2992 affects arc up to version 5.21j; vulnerability arises from a symlink attack on temporary files, allowing local users to overwrite arbitrary files. This is a local privilege issue with world-readable temporary files (per the SUSE advisory). Connected documents provide the affected co...

CVE-2005-3190

CA iGateway has a buffer overflow in debug mode that can be triggered by HTTP GET requests, affecting CA iGateway 3.0 and 4.0 prior to version 4.0.050623. The vulnerability allows remote code execution or denial of service. Explanations of impacted versions are confirmed in multiple sources (CA a...

CVE-2005-2120

CVE-2005-2120 is a stack-based buffer overflow in the Windows Plug and Play (PnP) service (UMPNPMGR.DLL) on Windows 2000 SP4 and Windows XP SP1/SP2. The overflow occurs when processing a registry key name containing a large number of backslashes, triggered in wsprintfW, allowing remote or local a...

CVE-2005-2963

The CVE-2005-2963 issue affects the mod_auth_shadow Apache module (versions 1.0–1.5 and 2.0) when AuthShadow is enabled. The vulnerability causes shadow authentication to apply to all locations using the require group directive, potentially bypassing other access controls if credentials match /et...