CVE-2005-2991

CVE-2005-2991 describes a local-file overwrite issue in ncompress 4.2.4 and earlier. The vulnerability arises from a symlink attack on temporary files used by (1) zdiff and (2) zcmp, allowing a local user to overwrite arbitrary files. It is noted as a different vulnerability from CVE-2004-0970. T...

CVE-2005-2997

CVE-2005-2997 affects PHP Advanced Transfer Manager 1.30. The vulnerability is a directory traversal flaw allowing remote attackers to read arbitrary files via .. sequences in the following parameters: currentdir to txt.php, current_dir to htm.php, or current_dir to html.php. This results in pote...

CVE-2005-2999

Technical details about CVE-2005-2999 are not publicly provided in the supplied documents. Monitor for updates from official advisories for affected products, impact, and remediation.

CVE-2005-2919

libclamav/fsg.c in Clam AntiVirus ClamAV before 0.87 allows remote attackers to cause a denial of service infinite loop via a crafted FSG packed executable...

CVE-2005-3000

CVE-2005-3000 affects PHP Advanced Transfer Manager 1.30, with XSS vulnerabilities in viewers/txt.php. The vulnerability allows remote attackers to inject arbitrary script/HTML via the font, normalfontcolor, or mess[31] parameters, potentially affecting users who load the affected page. Root caus...

CVE-2005-2968

The CVE-2005-2968 issue affects Firefox 1.0.6 / Mozilla 1.7.10, where a URL provided to the browser on the command line can contain shell metacharacters and be sent unfiltered to bash, allowing arbitrary command execution. Several connected advisories corroborate the vulnerability as a command-in...

CVE-2005-2996

The connected advisory CPAI-2005-297 describes a buffer overflow in Veritas Storage Exec and StorageCentral DCOM Server components. The flaw is caused by insufficient validation of user-supplied data, allowing remote code execution in the security context of the logged-on user when a target user ...

CVE-2005-2993

CVE-2005-2993 affects HP-UX ftpd and related FTP Daemon implementations, with reported remote DoS (hang) condition. The NVD entry lists an unspecified vulnerability in ftpd for HP Tru64 UNIX 4.0F PK8 and later, plus HP-UX B.11.00, B.11.04, B.11.11, and B.11.23, exploitable by remote authenticated...

CVE-2005-2995

CVE-2005-2995 affects Bacula (e.g., bacula-common/bacula 1.36.3 and earlier). The issue allows local users to read/modify sensitive files via symlink attacks on temporary files: (1) the autoconf/randpass temp file used when openssl is unavailable, and (2) the mtx.[PID] temporary file in mtx-chang...

CVE-2005-3002

The CVE-2005-3002 issue affects Multi-Computer Control System (MCCS) 1.0. A remote attacker can cause a denial of service by sending a malformed UDP packet. The connected sources corroborate the DoS impact and the vulnerable component/file (MCCS 1.0), but no vendor-specific version details, patch...

CVE-2005-2998

CVE-2005-2998 affects PHP Advanced Transfer Manager 1.30. The vulnerability involves a default administrator password that allows remote attackers to upload and execute arbitrary PHP files. Impact is described overall as partial confidentiality, integrity, and availability. No explicit remediatio...

CVE-2005-2919

ClamAV (libclamav) before 0.87 is affected by two issues: a potential infinite loop in processing FSG-packed executables (FSG.c) that can cause denial of service, and a buffer overflow in UPX-packed processing (upx.c) that could allow remote code execution. Exploitation involves sending specially...

CVE-2005-2994

The CVE-2005-2994 entry concerns the IBM Rational ClearQuest web client (versions 2002.05.00/2002.05.20 and 2003.06.00–2003.06.15 before SR5). The vulnerability is described as an unspecified issue that allows remote attackers to execute XML Stylesheets (XSS) via the web client. The connected doc...

CVE-2005-2995

bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on 1 the temporary file used by autoconf/randpass when openssl is not available, or 2 the mtx.PID temporary file in mtx-changer.in...

CVE-2005-3001

The CVE-2005-3001 vulnerability affects Solaris 10’s tl driver (SunOS 5.10) and can trigger a local denial-of-service (panic) via unknown vectors. Public documentation in vendor/IDS feeds confirms affected platforms are Solaris 10 on SPARC and x86, with patch-based mitigations issued as SunOS sun...

CVE-2005-2920

CVE-2005-2920 : ClamAV is affected by a buffer overflow in libclamav/upx.c when processing UPX-packed executables. The issue allows a remote attacker to potentially execute arbitrary code by sending a crafted UPX-packed file. Public entries and advisories confirm this in ClamAV versions prior to ...

CVE-2005-2986

The v3flt2k.sys driver in AhnLab V3Pro 2004 Build 6.0.0.383, V3 VirusBlock 2005 Build 6.0.0.383, V3Net for Windows Server 6.0 Build 6.0.0.383 does not properly validate the source of the DeviceIoControl commands, which allows remote attackers to gain privileges...

CVE-2005-2983

SQL injection vulnerability in Oracle Reports that use Lexical References allows remote attackers to execute arbitrary SQL commands via the values in the parameter form that appears when the paramform parameter is set to yes...

CVE-2005-2983

CVE-2005-2983 describes an SQL injection vulnerability in Oracle Reports that use Lexical References. The vulnerability arises when the paramform parameter is set to yes, allowing remote attackers to manipulate values in the parameter form and execute arbitrary SQL commands. The issue is document...

CVE-2005-2981

CVE-2005-2981 describes a cross-site scripting (XSS) vulnerability in Orion versions 1.3.8 and 1.4.5 . The issue arises from user-supplied input in the URL not being properly quoted in the resulting 404 error page, enabling an attacker to inject arbitrary script/HTML. The core vulnerability is th...