CVE-2005-2458

CVE-2005-2458 affects the Linux kernel where inflate.c in the zlib routines used by the kernel before 2.6.12.5 can be exploited by remote attackers to crash the kernel via a crafted compressed file (improper tables). The connected advisories confirm this vulnerability across multiple distribution...

CVE-2005-2098

The CVE-2005-2098 issue affects the Linux 2.6 kernel up to but before 2.6.12.5, where the KEYCTL_JOIN_SESSION_KEYRING error path fails to release the session management semaphore. This can allow local users or remote attackers to cause a denial of service (semaphore hang) by creating a new sessio...

CVE-2005-2099

CVE-2005-2099 affects the Linux kernel (pre-2.6.12.5) where a keyring that is not instantiated properly is not destroyed, allowing local users or remote attackers to trigger a kernel oops via a payload in the keyring, leading to a denial of service. The affected code path is in the keyring destru...

CVE-2005-2459

CVE-2005-2459 affects the Linux kernel prior to 2.6.12.5, where the huft_build function in inflate.c of the zlib routines returns the wrong value. This bug allows remote attackers to crash the kernel via a specially crafted compressed file, causing a null pointer dereference (a denial of service)...

CVE-2005-2491

Integer overflow in pcrecompile.c in Perl Compatible Regular Expressions PCRE before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow...

CVE-2005-2499

CVE-2005-2499 affects the slocate package (before version 2.7). A bug in how slocate scans the local filesystem could cause updatedb to fail silently with a crafted directory structure, yielding an incomplete slocate database and enabling a denial of service. The issue was addressed by Red Hat/Ce...

CVE-2005-2650

The CVE-2005-2650 entry describes a cross-site scripting (XSS) vulnerability in Emefa Guestbook 1.2, specifically in sign.asp. The issue allows remote attackers to inject arbitrary script or HTML via the name, location, or email parameters, indicating insufficient input sanitization in the sign.a...

CVE-2005-2645

The CVE-2005-2645 entry concerns Xerox Document Centre MicroServer Web Server in specific Document Centre models (220–265, 332/340, 420–490, 535–555). The connected sources specify an authentication bypass vulnerability affecting the embedded web server, enabling remote attackers to bypass authen...

CVE-2005-2649

CVE-2005-2649 describes a cross-site scripting (XSS) vulnerability in ATutor 1.5.1 that allows remote attackers to inject arbitrary script or HTML via the parameters course in login.php or words in search.php. The CVE is cited with a base score of 4.3 (Medium) on the NVD entry, and multiple conne...

CVE-2005-2647

CVE-2005-2647 describes a cross-site scripting (XSS) flaw in the Xerox MicroServer Web Server used by Document Centre devices. The vulnerability affects Document Centre 220–265, 332, 340, 420–490, and 535–555, allowing remote attackers to inject arbitrary web script or HTML and modify web pages v...

CVE-2005-2653

BBCaffe 2.0 contains a Cross‑Site Scripting (XSS) flaw that allows remote attackers to inject arbitrary script or HTML through e-mail data in a message. The available sources affirm the vulnerability type and impact as indefinable beyond the XSS vector; no specific exploitation details, versions,...

CVE-2005-2642

CVE-2005-2642 affects Mutt 1.5.10, where a buffer overflow in the mutt_decode_xbit function of Handler.c could allow remote code execution, possibly via interactions with libiconv or gettext. The CVE is documented across multiple feeds (NVD, Red Hat, Debian, Ubuntu, etc.). Exploitation details ar...

CVE-2005-2646

CVE-2005-2646 refers to an unknown vulnerability in Xerox MicroServer Web Server within Xerox Document Centre models 220–265, 332, 340, 420–490, and 535–555. The issue reportedly allows remote attackers to cause a denial of service or to read files via crafted HTTP requests; the exact vectors, af...

CVE-2005-2644

The CVE-2005-2644 issue concerns JaguarControl, specifically the JaguarEditControl.dll component, used in Isemarket JaguarControl. A buffer overflow in JaguarEditControl.dll can be triggered by a long Jtext field, enabling remote attackers to cause a denial of service and potentially execute arbi...

CVE-2005-2652

CVE-2005-2652 affects Zorum 3.5. The vulnerability permits remote attackers to obtain the full installation path by directly requesting any of these pages: gorum/notification.php, user.php, attach.php, blacklist.php, zorum/forum.php, globalstat.php, gorum/trace.php, gorum/badwords.php, or gorum/f...

CVE-2005-2641

The connected materials corroborate CVE-2005-2641 as a pam_ldap authentication bypass vulnerability: pam_ldap before version 1.8.0 does not properly handle a new password policy control, enabling an attacker to gain privileges by redirecting authentication to another server with different TLS req...

CVE-2005-2648

W-Agora is affected by CVE-2005-2648: a directory traversal in index.php via the site parameter allows remote reading of arbitrary files on affected versions (W-Agora 4.2.0 and earlier). OpenVAS/Nessus entries corroborate this vulnerability and indicate remediation by upgrading to a fixed release...

CVE-2005-2651

CVE-2005-2651 affects Zorum 3.5: gorum/prod.php allows remote code execution via shell metacharacters in argv. Attacker-controlled input enables arbitrary commands; impact on confidentiality, integrity, and availability is noted as PARTIAL. The connected sources provide exploit-style details (e.g...

CVE-2005-2649

Cross-site scripting XSS vulnerability in ATutor 1.5.1 allows remote attackers to inject arbitrary web script or HTML via 1 course parameter in login.php or 2 words parameter in search.php...

CVE-2005-2643

CVE-2005-2643 affects Tor client versions up to 0.1.0.13 (and some 0.1.1.4-alpha builds) and describes a weakness in the ephemeral DH handshake that fails to reject certain weak keys. The consequence is that a malicious first-hop Tor server could learn the keys used for the rest of the circuit, e...