CVE-2005-0359

CVE-2005-0359 is documented in the connected Nessus plugins as affecting EMC Legato NetWorker and related Sun StorEdge/Sun Solstice/Informix Storage Manager products. The entries describe multiple vulnerabilities that can lead to denial of service, unauthorized access and remote command execution...

CVE-2005-2632

SQL injection vulnerability in loginadminmediabox404.php in mediabox404 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the User field...

CVE-2005-2634

CVE-2005-2634 affects WinFtp Server 1.6.8; the vulnerability is a buffer overflow in the Log-SCR function of the "Log to Screen" feature. An attacker can trigger a long request to cause a remote denial of service (application crash) and potentially execute arbitrary code. The connected documents ...

CVE-2005-2636

The CVE-2005-2636 issue affects phpAdsNew/phpPgAds prior to version 2.0.6, where the libraries/lib-view-direct.inc.php clientid parameter enables SQL injection. This allows remote attackers to execute arbitrary SQL commands against the backend. The only concrete detail available is that the vulne...

CVE-2005-2640

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but...

CVE-2005-0357

The CVE applies to EMC Legato NetWorker, Sun Solstice Backup 6.0–6.1, and StorEdge Enterprise Backup 7.0–7.2, which rely on AUTH_UNIX authentication based on user IDs. The underlying issue allows remote attackers to bypass authentication by spoofing a username or UID, enabling privilege escalatio...

CVE-2005-2639

CVE-2005-2639 describes a buffer overflow in Chris Moneymaker's World Poker Championship 1.0 that can be triggered by a long nickname, enabling remote attackers to cause a denial of service and potentially execute arbitrary code. The CVSS v2 base score is 7.5 (HIGH) with network access, low attac...

CVE-2005-2637

PHPFreeNews 1.40 and earlier contains multiple SQL injection vulnerabilities. Remote attackers can manipulate SQL via (1) Match or (2) CatID parameters to SearchResults.php, or (3) the password to AccessControl.php. Affected product/version: PHPFreeNews 1.40 and earlier. Root cause: unsafely hand...

CVE-2005-2640

The CVE describes a behavioral discrepancy information leak in Juniper Netscreen VPNs running ScreenOS 5.2.0 and earlier. When using IKE with pre-shared key authentication, remote attackers can enumerate valid usernames by sending an IKE Aggressive Mode packet: a response is generated for valid u...

CVE-2005-0358

The provided documents confirm concrete details for CVE-2005-0358. Affected software includes EMC Legato Networker, Sun StorEdge Enterprise Backup, and related Solstice Backup line, with the root cause described as improper verification of authentication tokens that can allow remote privilege mod...

CVE-2005-0357

EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTHUNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID...

CVE-2005-2638

CVE-2005-2638 concerns multiple cross-site scripting (XSS) vulnerabilities in PHPFreeNews 1.40 and earlier. The issues allow remote attackers to inject arbitrary web script or HTML via (1) the NewsMode parameter to NewsCategoryForm.php, or (2) the Match or (3) NewsMode parameter to SearchResults....

CVE-2005-0359

The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmapset and pmapunset commands, which allows remote attackers to 1 cause a denial of service by using pmapunset to un-register a NetWorker...

CVE-2005-2632

CVE-2005-2632 affects mediabox404 versions 1.2 and earlier. The issue is a SQL injection in login_admin_mediabox404.php triggered via the User field, enabling remote execution of arbitrary SQL commands. The connected documents provide the vulnerability description and CVE metadata but do not incl...

Important: Red Hat Security Advisory: php security update

Updated PHP packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was discovered in the PEAR XML-RP...

CVE-2005-2519

CVE-2005-2519 affects Mac OS X 10.3.9’s Directory Services component (slpd). The vulnerability arises from insecure temporary files created with root privileges, enabling local privilege escalation. The available connected documents confirm the affected product and root cause but do not provide e...

CVE-2005-2624

CVE-2005-2624 affects CPAINT 1.3-SP. The vulnerability occurs when user-supplied cpaint_argument[] is fed directly into an eval statement in calculator.asp and cpaintfile.asp, allowing remote attackers to execute arbitrary ASP code. The root cause is eval-injection via unsanitized input. The publ...

CVE-2005-2623

ECW-Shop 6.0.2 is affected. A remote attacker can specify a negative quantity for an item, causing the item price to be subtracted from the cart total, which impacts cart integrity. The NVD entry notes a base score of 5.0 (Medium) with the impact on integrity as PARTIAL and no confidentiality or ...

CVE-2005-2517

Technical details about CVE-2005-2517 are not publicly available in the provided connected documents. Monitor for updates from vendor advisories; no additional affected products, impact, or fixes are disclosed here.

CVE-2005-2506

CVE-2005-2506 describes an algorithmic complexity vulnerability in CoreFoundation on Mac OS X 10.3.9 and 10.4.2. The issue arises in the handling of crafted Gregorian dates, allowing an attacker to trigger excessive CPU usage and cause a denial of service. The affected component is CoreFoundation...