CVE-2005-2335

Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses. NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct...

CVE-2005-2387

Affected product: GoodTech SMTP Server 5.16; vulnerability in RCPT TO command processing causes multiple stack-based buffer overflows, enabling remote arbitrary code execution (often as SYSTEM). Remediation: upgrade to 5.17 or later.

CVE-2005-2402

The CVE-2005-2402 entry describes a Cross-site scripting (XSS) vulnerability in PHPSiteSearch 1.7.7d, specifically in search.php, where an attacker can inject arbitrary web script or HTML through the query parameter. The underlying issue is unescaped input in the search parameter that is echoed b...

CVE-2005-2404

Sendcard 3.2.3 is affected: sendcard.php?id is vulnerable to SQL injection due to insufficient input sanitization. Remote attackers could execute arbitrary SQL commands, with CVSS base impact of Partial confidentiality, integrity, and availability (AV:N/AC:L/Au:N/C:P/I:P/A:P). This result is supp...

CVE-2005-2400

The CVE-2005-2400 entry concerns PHPFinance 0.3, where the inc.login.php script permits remote attackers to bypass authentication and gain privileges. The core issue is an authentication bypass in the login handling, leading to potential privilege escalation. Public references and metrics indicat...

CVE-2005-2384

CVE-2005-2384 describes a directory traversal in a third‑party compression library (UNACEV2.DLL) used by Avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460. The vulnerability allows a remote attacker to write arbitrary files by supplying an ACE archive with filenames co...

CVE-2005-2386

CVE-2005-2386: XSS in CartWIZ 1.20 viewCart.asp via the message parameter. An attacker can inject arbitrary script/HTML that executes in the victim’s browser. No patch/mitigation details are provided in the connected documents; exploitation status is not specified.

CVE-2005-2397

CVE-2005-2397 is an XSS vulnerability in phpBook 1.46 affecting the guestbook.php module, exploitable via the admin parameter to inject arbitrary web script or HTML. The provided documents confirm the affected product/version and the input vector, but do not include exploit specifics, impact metr...

CVE-2005-2398

CVE-2005-2398 : The provided documents describe multiple SQL injection vulnerabilities in PHP Surveyor 0.98 that allow remote attackers to execute arbitrary SQL commands via numerous parameters across browse.php, dataentry.php, export.php, admin.php, conditions.php, spss.php, deletesurvey.php, du...

CVE-2005-2395

Mozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the strongest authentication scheme available as required by RFC2617, which might cause credentials to be sent in plaintext even if an encrypted channel is available...

CVE-2005-2389

The CVE-2005-2389 entry concerns the NDMP server in Veritas NetBackup 5.1. Affected component: NetBackup NDMP server. Vulnerable condition: processing a CONFIG message with an out-of-range timestamp leads to a null dereference, causing denial of service (availability impact). No exploitation deta...

CVE-2005-2388

CVE-2005-2388 describes a buffer overflow in a USB driver used on Microsoft Windows that could allow an attacker to execute arbitrary code. The provided documents do not specify the affected product name, exact driver version, or root cause details beyond the general buffer overflow. Exploit info...

CVE-2005-2399

PHP Surveyor 0.98 is affected by multiple vulnerabilities exposing SQL errors (remote) via missing parameters to browse.php, export.php, conditions.php, and spss.php. Connected sources also indicate possible SQL injection, path disclosure, and XSS in the PHP Surveyor suite, with exploitation deta...

CVE-2005-2394

The CVE-2005-2394 entry concerns CuteNews 1.3.6: the show_news.php script can disclose the server’s full path through an invalid archive parameter. This is a path disclosure vulnerability (network access, low complexity) with partial confidentiality impact and no integrity or availability impact ...

[NILESA-20050701] UnixWare 7.x RPC portmapper Dos Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ================================================================================ NileSOFT Security Advisory - -------------------------------------------------------------------------------- ID : NILESA-20050701 Title : rpcbind Invalid portmap Request...

Community Link Pro login.cgi file Parameter Arbitrary Command Execution

The remote host is running Community Link Pro, a web-based application written in Perl. The remote version of this software fails to sanitize user input to the 'file' parameter of the 'login.cgi' script of shell metacharacters before using it to run a command. An unauthenticated attacker can...

ProFTPD < 1.3.0rc2 Multiple Remote Format Strings

The remote host is using ProFTPD, a free FTP server for Unix and Linux. According to its banner, the version of ProFTPD installed on the remote host suffers from multiple format string vulnerabilities, one involving the 'ftpshut' utility and the other in modsql's 'SQLShowInfo' directive...

Microsoft Windows SMB Packet Buffer Overflow (MS05-027; CAN-2005-1206)

...

CVE-2005-2375

CVE-2005-2375 affects Race Driver (1.20 and earlier). The vulnerability is a format string issue in the nickname or chat input that can be exploited remotely to cause an application crash (DoS). The connected sources collectively confirm the affected software, the vulnerable components (format st...

CVE-2005-2368

CVE-2005-2368 affects Vim (pre-6.3.082) where, with modelines enabled, a crafted modeline could cause execution of arbitrary commands via shell metacharacters in fold-related expressions. The security issue has been addressed in multiple advisories (RHSA-2005:745, CentOS/CESA-2005:745-01, MDKSA-2...