CVE-2005-2537

Concrete details found: FlatNuke (PHP CMS using flat files) 2.5.5 and earlier is affected by CVE-2005-2537, where a direct request to structure.php can cause sensitive information disclosure. Related connected data also notes multiple remote vulnerabilities in FlatNuke

CVE-2005-2538

CVE-2005-2538 affects FlatNuke 2.5.5 and potentially earlier versions. The vulnerability allows remote attackers to obtain sensitive information via the mod parameter when it contains either a null byte or an MS-DOS device name (AUX, CON, PRN, COM1, LPT1). This is an information disclosure issue ...

CVE-2005-2535

Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260...

CVE-2005-2536

pstotext before 1.8g does not properly use the "-dSAFER" option when calling Ghostscript to extract plain text from PostScript and PDF files, which allows remote attackers to execute arbitrary commands via a malicious PostScript file...

CVE-2005-2364

CVE-2005-2364 affects Ethereal (1) GIOP dissector, (2) WBXML, (3) CAMEL dissector. The connected docs confirm a null pointer dereference in the WBXML and GIOP dissectors causing denial of service when processing crafted packets. Affected versions are Ethereal 0.8.20 through 0.10.11. Remediation i...

CVE-2005-2542

Technical details about CVE-2005-2542 are not publicly available in the provided connected documents. Monitor for updates; sources do not specify affected versions, impact, vectors, or remediation beyond the IPB 1.0.3 issue.

Immunity Canvas: MS05_043

Name| ms05043 ---|--- CVE| CVE-2005-1984 Exploit Pack| CANVAS Description| Windows Print Spooler Overflow Notes| References: http://www.microsoft.com/technet/security/Bulletin/MS05-043.mspx CVE Name: CVE-2005-1984 VENDOR: Microsoft MSADV: MS05-043 Repeatability: One shot Note: Run setthreadtoken0...

CVE-2005-2544

The CVE-2005-2544 entry concerns Comdev eCommerce 3.0, where a PHP remote file inclusion flaw in config.php allows an attacker to execute arbitrary PHP code via path[docroot]. This is evidenced by multiple sources (NVD/CVE records and a Nessus plugin) describing remote code execution possibilitie...

CVE-2005-2363

CVE-2005-2363 is reported for Ethereal (Wireshark) versions 0.8.15–0.10.11, where multiple dissectors (SMPP, 802.3, DHCP, MEGACO, H1) may cause a remote denial of service via an unknown attack vector, potentially via an infinite loop. The vulnerability is categorized with a CVSS v2 base score of ...

CVE-2005-2366

CVE-2005-2366 affects Ethereal (Ber dissector) where a wrong address calculation in the BER dissector can trigger an abort or infinite loop via crafted network traffic. Public advisories reference Ethereal versions around 0.10.11; remediation involves upgrading to a non-vulnerable release (e.g., ...

CVE-2005-2362

CVE-2005-2362 affects Ethereal 0.9.0–0.10.11 and is described as a denial-of-service in which reassembling certain packets can crash the application. Connected sources corroborate multiple vendor advisories (Red Hat/CentOS/Gentoo/Mandriva/Mandrake GLSA) noting the suite-wide family of Ethereal is...

CVE-2005-2361

CVE-2005-2361 affects Ethereal 0.8.19–0.10.11 and involves multiple dissectors (AgentX, PER, DOCSIS, SCTP graphs, HTTP, DCERPC, DHCP, RADIUS, Telnet, IS-IS LSP, NCP) where memory corruption/logic errors can lead to a denial of service (application crash or abort). The underlying issue is reported...

CVE-2005-0058

CVE-2005-0058 describes a buffer overflow in the Windows Telephony API (TAPI) that can allow either remote code execution or local privilege elevation, depending on OS/version and configuration. Affected platforms include Windows 98/98 SE/ME, Windows 2000, Windows XP, and Windows Server 2003. The...

CVE-2005-2367

Format string vulnerability in the protoitemsettext function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet...

CVE-2005-2546

Arab Portal 2.0 is affected by a remote information-disclosure vulnerability in which an error message produced by an undefined errmsg function reveals the lengthening username or password, exposing the file path. The issue is triggered during error handling and can disclose sensitive path inform...

Immunity Canvas: MS05_039

Name| ms05039 ---|--- CVE| CVE-2005-1983 Exploit Pack| CANVAS Description| Microsoft Windows PnP RPC Overflow Notes| CVE Name: CVE-2005-1983 VENDOR: Microsoft MSADV: MS05-039 Repeatability: One shot Note: Windows XP needs a valid username and password References:...

CVE-2005-2541

Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges...

CVE-2005-2536

CVE-2005-2536 affects pstotext prior to fixes described in Debian DSA-792-1 and GLSA 200507-29. The vulnerability arises because pstotext did not pass Ghostscript the -dSAFER option when extracting text from PostScript/PDF files, enabling a remote attacker to execute arbitrary commands via a mali...

CVE-2005-2365

CVE-2005-2365 describes a vulnerability in Ethereal’s SMB dissector where a buffer overflow and null pointer dereferences can lead to denial of service. Affected are Ethereal releases from 0.9.0 through 0.10.11; exploitation could cause memory exhaustion or crash via unknown attack vectors. Remed...

CVE-2005-2541

CVE-2005-2541 concerns Tar 1.15.1, which does not properly warn when extracting files with setuid or setgid permissions. The bulletin states this may let local users or remote attackers gain privileges. The issue is described with the affected component and the impact (privilege escalation), but ...