10533 matches found
CVE-2005-3012
The CVE-2005-3012 issue affects SimpleCDR-X 1.3.3 via MasterDataCD::createImage, where the .temp directory is created with insecure permissions, enabling local users to read sensitive ISO images. No exploit details or explicit mitigation are provided in the connected documents. Summary of impact ...
CVE-2005-3007
Opera before 8.50 is affected by a vulnerability where appending a trailing dot to a filename spoofed the content type, potentially tricking users into processing dangerous content. The issue concerns the browser’s handling of file-type presentation rather to content-type verification, enabling m...
CVE-2005-0138
CVE-2005-0138 affects SGI IRIX 6.5.25–6.5.27 where rpc.mountd does not correctly handle anonymous clients from hosts with undetermined hostnames. The public records describe this as a security-mechanism issue and note there is no clear attacker role, with the CVE possibly not meeting the vulnerab...
CVE-2005-3030
Directory traversal vulnerability in the archive decompression library in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBlock 2005 build 6.0.0.383, and V3Net for Windows Server 6.0 build 6.0.0.383 allows remote attackers to write arbitrary files via a .. dot dot in the filename in a compressed archi...
CVE-2005-3011
The sortoffline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2005-3030
CVE-2005-3030 is a directory traversal vulnerability in the archive decompression library used by AhnLab V3Pro 2004 (build 6.0.0.383), V3 VirusBlock 2005 (build 6.0.0.383), and V3Net for Windows Server 6.0 (build 6.0.0.383). The issue allows remote attackers to write arbitrary files by supplying ...
CVE-2005-3021
CVE-2005-3021 affects vBulletin
CVE-2005-2663
CVE-2005-2663 affects masqmail: opening the log file allows a local attacker to overwrite arbitrary files via a symlink attack, due to masqmail not relinquishing privileges. Affected versions are pre-0.2.18. Debian/DSA references indicate fixes in masqmail 0.2.20-1sarge1 and related updates for w...
CVE-2005-3013
CVE-2005-3013 describes a buffer overflow in the liby2util component of YaST on SUSE Linux 9.3. The overflow is triggered by a long Loc entry and allows local users to execute arbitrary code. The vulnerability is local with low attack complexity and no authentication required, resulting in partia...
CVE-2005-3020
CVE-2005-3020 : Concrete XSS vulnerabilities in vBulletin prior to 3.0.9. The vulnerability arises from insufficient input sanitization, allowing remote attackers to inject arbitrary script/HTML via multiple parameters across several scripts: (1) group in css.php, (2) redirect in index.php, (3) e...
CVE-2005-3027
Sybari Antigen 8.0 SR2 is affected by a vulnerability in SMTP message filtering where the product does not properly filter messages, allowing remote attackers to bypass custom filter rules and send file attachments of arbitrary types via a message with the subject “Antigen forwarded attachment.” ...
CVE-2005-3024
CVE-2005-3024 affects vBulletin 3.0.7 and older with multiple SQL injection vulnerabilities in various scripts. Remote attackers can inject via numerous parameters (e.g., announcement.php, thread.php, user.php, admincalendar.php, language.php, template.php, etc.), potentially compromising data in...
CVE-2005-2662
Removed by vendor...
CVE-2005-3004
CVE-2005-3004 describes a SQL injection in Interakt MX Shop 3.2.0. The vulnerability is in the pages module of index.php, exploitable via the parameters (1) idp, (2) id_ctg, or (3) id_prd. The affected product is Interakt MX Shop 3.2.0. The documented impact is the ability to execute arbitrary SQ...
CVE-2005-3005
The CVE-2005-3005 issue affects Helpdesk Software Hesk: an authentication bypass via manipulation of the PHPSESSID value (session ID) in admin.php and admin_main.php. Attackers can bypass login remotely by altering the session ID cookie/parameter to gain access without valid credentials; affected...
CVE-2005-2764
CVE-2005-2764 concerns OpenTTD before 0.4.0.1, where multiple buffer overflows could allow a remote attacker to crash the server or client (DoS) and possibly execute arbitrary code via unspecified vectors. The NVD entry summarizes the impact as denial of service with potential code execution, ori...
CVE-2005-3011
CVE-2005-3011 and related texinfo issues affect the GNU texinfo package up to version 4.8 and earlier, specifically in the texindex utility. The root cause is insecure handling of temporary files, allowing a local attacker to overwrite files writable by the victim via a symlink/temporary-file rac...
CVE-2005-2919
libclamav/fsg.c in Clam AntiVirus ClamAV before 0.87 allows remote attackers to cause a denial of service infinite loop via a crafted FSG packed executable...
DEBIAN-CVE-2005-2995
bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on 1 the temporary file used by autoconf/randpass when openssl is not available, or 2 the mtx.PID temporary file in mtx-changer.in...
