CVE-2005-2556

core/databaseapi.php in Mantis 0.19.0a1 through 1.0.0a3, with registerglobals enabled, allows remote attackers to connect to internal databases by modifying the gdbtype variable and monitoring the speed of responses, as identified by bug0005956...

CVE-2005-2686

CVE-2005-2686 describes a directory traversal vulnerability in SaveWebPortal 3.4. Remote attackers can cause arbitrary file inclusion and execute local PHP programs by supplying ".." sequences in the SITE_Path parameter to menu_dx.php or the CONTENTS_Dir parameter to menu_sx.php. Affected softwar...

CVE-2005-1842

VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, creates temporary log files with predictable names, which allows local users to modify arbitrary files via a symlink attack...

CVE-2005-1843

Adobe Version Cue VCNative in Version Cue 1.0/1.0.1 on macOS contains a design error in the -lib option that allows loading arbitrary libraries, leading to arbitrary code execution with root privileges. VCNative is a setuid root component; exploitation is local and requires loading a malicious li...

Ultimate PHP Board users.dat Multiple Vulnerabilities

The remote host is running Ultimate PHP Board UPB. The remote version of this software is prone to a weak password encryption vulnerability and may store the users.dat file under the web document root with insufficient access control. %NASLMINLEVEL 70300 This script was written by Josh...

Critical: Red Hat Security Advisory: elm security update

An updated elm package is now available that fixes a buffer overflow issue for Red Hat Enterprise Linux 2.1 AS and AW. This update has been rated as having critical security impact by the Red Hat Security Response Team. Elm is a terminal mode email client. A buffer overflow flaw in Elm was...

[SECURITY] [DSA 782-1] New bluez-utils packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 782-1 [email protected] http://www.debian.org/security/ Martin Schulze August 23rd, 2005 http://www.debian.org/security/faq -...

CVE-2005-2672

The CVE-2005-2672 issue affects lm_sensors’ pwmconfig, which creates temporary files with predictable names and can be exploited via a symlink attack to overwrite arbitrary files. Multiple advisories document the vulnerability in lm_sensors across major distros (e.g., Debian lm-sensors DSA-814-1,...

CVE-2005-2680

The CVE-2005-2680 entry concerns BEA WebLogic Portal 8.1 through SP4. The vulnerability occurs when using entitlements and allows remote attackers to bypass access restrictions for pages of a Book via crafted URLs. This is described as an unspecified vulnerability with impact limited to bypassing...

CVE-2005-2674

Note: the vendor has disputed this issue. Multiple cross-site scripting XSS vulnerabilities in Land Down Under LDU 800 allow remote attackers to inject arbitrary web script or HTML via the 1 c or 2 m parameters to index.php or 3 w parameter to journal.php. NOTE: this issue has been disputed by th...

CVE-2005-2676

Cross-site scripting XSS vulnerability in displayimage.php in Coppermine Photo Gallery before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via EXIF data...

CVE-2005-2491

Integer overflow in pcrecompile.c in Perl Compatible Regular Expressions PCRE before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow...

CVE-2005-2679

CVE-2005-2679 describes a local buffer overflow in Sysinternals Process Explorer 9.23 and earlier than 9.25. The vulnerability arises from a long CompanyName field in the VersionInfo of a running process, allowing local users to execute arbitrary code. Affected product: Sysinternals Process Explo...

CVE-2005-2666

Technical details for CVE-2005-2666 are not provided in the connected documents. The supplied sources reference OpenSSH issues unrelated to this CVE. Monitor for future disclosures to confirm affected versions and fixes.

CVE-2005-2636

SQL injection vulnerability in lib-view-direct.inc.php in phpAdsNew and phpPgAds before 2.0.6 allows remote attackers to execute arbitrary SQL commands via the clientid parameter...

CVE-2005-2676

Cross-site scripting XSS vulnerability in displayimage.php in Coppermine Photo Gallery before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via EXIF data...

CVE-2005-2674

Note: the vendor has disputed this issue. Multiple cross-site scripting XSS vulnerabilities in Land Down Under LDU 800 allow remote attackers to inject arbitrary web script or HTML via the 1 c or 2 m parameters to index.php or 3 w parameter to journal.php. NOTE: this issue has been disputed by th...

CVE-2005-2684

The CVE-2005-2684 issue affects Netquery (Virtual Edge Netquery) version 3.11, where nquser.php processes the host parameter in a dig query. The underlying flaw allows remote attackers to inject shell metacharacters and execute arbitrary commands on the web server with the web application's user ...

CVE-2005-2671

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2041. Reason: This candidate is a duplicate of CVE-2005-2041. Notes: All CVE users should reference CVE-2005-2041 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-2098

The KEYCTLJOINSESSIONKEYRING operation in the Linux kernel before 2.6.12.5 contains an error path that does not properly release the session management semaphore, which allows local users or remote attackers to cause a denial of service semaphore hang via a new session keyring 1 with an empty nam...