CVE-2005-2374

Belkin 54g wireless routers are affected: the administrative password is not properly set, allowing remote attackers to gain access via Telnet or the web administration interface. Root cause appears to be missing/incorrect password configuration. Impact is unauthorized admin access with potential...

CVE-2005-2368

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the 1 glob or 2 expand commands of a foldexpr expression for calculating fold levels...

CVE-2005-2368

CVE-2005-2368 affects Vim (pre-6.3.082) where, with modelines enabled, a crafted modeline could cause execution of arbitrary commands via shell metacharacters in fold-related expressions. The security issue has been addressed in multiple advisories (RHSA-2005:745, CentOS/CESA-2005:745-01, MDKSA-2...

CVE-2005-2218

The CVE describes a DevFS (FreeBSD 5.x) flaw where insufficient parameter checking for the node type during device creation allows a user inside a jail to expose hidden device nodes. This can let jailed processes access restricted host devices, potentially leading to information leakage and privi...

CVE-2005-2371

Directory traversal vulnerability in Oracle Reports Services (Oracle Application Server) allows remote attackers to overwrite arbitrary files via the desname parameter (e.g., using .., Windows drive letters, or absolute paths). Affected: Oracle Reports 6.0, 6i, 9i, 10g. Root cause: insufficient v...

CVE-2005-1920

The 1 Kate and 2 Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and possibly remote attackers to obtain sensitive information...

CVE-2005-2381

CVE-2005-2381 affects PHP Surveyor 0.98. The vulnerability arises from direct requests to several root-level PHP scripts (question.php, survey.php, group.php, database.php, sessioncontrol.php, html.php, and dumplabel.php, among others) or invalid parameters (qid, lid) that cause error messages to...

CVE-2005-2368

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the 1 glob or 2 expand commands of a foldexpr expression for calculating fold levels...

CVE-2005-2382

The CVE-2005-2382 entry concerns Oray PeanutHull (3.0.1.0 and earlier) where the process launched from the system tray fails to drop SYSTEM privileges, enabling local users to escalate privileges by interacting with the Help functionality. Documents consistently state the affected product and the...

CVE-2005-2369

CVE-2005-2369 is a libgadu issue (used by ekg and centericq) with multiple integer signedness errors that can lead to remote denial of service or arbitrary code execution. Connected advisories (Debian DSA-813-1; Ubuntu USN-162-1; CentOS/Nessus entries) confirm the vulnerability and reference libg...

CVE-2005-2372

CVE-2005-2372 affects Oracle Forms 4.5–10g, where Form executables (.FMX) can be loaded from arbitrary directories and executed with the privileges of the Oracle/System user. An attacker can upload a malicious FMX and reference it via an absolute path in either the (1) form or (2) module paramete...

CVE-2005-2376

The CVE concerns Race Driver (version 1.20 and earlier). A buffer overflow in handling long inputs for nickname or chat message can allow remote attackers to trigger a denial of service (application crash). The NVD entry lists impact as a partial loss of availability with network attack vector an...

CVE-2005-1852

CVE-2005-1852 describes multiple integer overflows in libgadu used by Kopete (KDE 3.2.3–3.4.1), ekg, GNU Gadu, CenterICQ, Kadu and other packages. These flaws allow a remote attacker to crash the affected application and potentially execute arbitrary code by sending a crafted Gadu-Gadu message. P...

CVE-2005-2380

PHP Surveyor 0.98 is affected by multiple cross-site scripting vulnerabilities. The issue allows remote attackers to inject arbitrary script/HTML via parameters to browse.php (sid, start, id) or to dataentry.php/export.php (sid). OpenVAS notes additional vulnerabilities (SQL injection and path di...

CVE-2005-2383

SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the user parameter in an HTTP POST request...

CVE-2005-1849

CVE-2005-1849 affects zlib 1.2.2, where inftrees.h can be exploited by a malicious file to cause a denial of service (application crash) via a large dynamic tree. The vulnerability is exploitable remotely and does not require authentication. The initial description confirms the crash is caused by...

CVE-2005-2373

Summary: CVE-2005-2373 affects SlimFTPd, with a buffer overflow in 3.15 and 3.16 triggered by long directory names in certain FTP commands (LIST, and commonly cited DELE/RNFR). The flaw allows remote code execution and requires authenticated access. Root cause: insufficient bounds checking on com...

CVE-2005-1920

The CVE-2005-1920 issue affects KDE 3.2.x–3.4.0 (kdelibs3/kdebase); backup files could have improper permissions, allowing local users to access sensitive data. Connected advisories (e.g., Debian DSA-804-2, Red Hat RHSA-2005:612, Ubuntu USN-150-1, Gentoo GLSA 200611-21) document security updates ...

CVE-2005-2377

CVE-2005-2377 concerns nss_ldap, where versions 181 through 212 (before 213) used in Mandrake Corporate Server, Mandrake 10.0, and other OSes fail to handle a SIGPIPE when issuing an LDAP search. This can allow a remote attacker to cause a denial of service by making the LDAP server unavailable, ...

CVE-2005-2378

Oracle Reports (a component of Oracle Application Server) is affected by CVE-2005-2378 through a directory traversal in the rwservlet when the desformat parameter (or related URI parameters) is crafted with absolute/relative file paths. This allows reading arbitrary files on the Reports Server. T...