CVE-2005-2239

CVE-2005-2239 affects oftpd 0.3.7. The vulnerability allows remote attackers to cause a denial of service by sending a USER command containing a large sequence of null (\0) characters. This is documented across multiple sources (NVD, Red Hat, Ubuntu, CVE List). The available entries do not provid...

CVE-2005-2226

CVE-2005-2226 affects Microsoft Outlook Express 6.0. The issue leaks the default news server account when a user responds to a “watched” conversation thread, potentially allowing remote attackers to obtain sensitive information. The Red Hat and CVE listings reiterate the same description. No expl...

CVE-2005-2222

Technical details about CVE-2005-2222 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories before drawing conclusions on impact or remediation.

CVE-2005-2242

Cisco CallManager (CCM) versions affected: 3.2 and earlier; 3.3 before 3.3(5); 4.0 before 4.0(2a)SR2b; and 4.1 before 4.1(3)SR1. The issue allows remote attackers to cause a denial of service (memory consumption and restart) by sending crafted packets to CTI Manager (ctimgr.exe) or CallManager (c...

CVE-2005-2230

Electronic Mail Operator elmo 1.3.2-r1 and earlier creates the elmostats temporary file insecurely, which allows local users to overwrite arbitrary files...

CVE-2005-2219

CVE-2005-2219 affects Hosting Controller 6.1 Hotfix 2.1. Remote authenticated users can perform unauthorized actions by sending a direct request to AccountActions.asp and modifying the CreditLimit parameter in the UpdateCreditLimit action, enabling changes to user credit limits. The linked Red Ha...

CVE-2005-2221

Dragonfly Commerce (Dragonfly) is associated with multiple SQL injection vulnerabilities in its web interface. According to the CVE records, remote attackers may modify SQL statements and possibly execute arbitrary SQL commands via user-controlled parameters: (1) key in dc_Categoriesview.asp, (2)...

CVE-2005-2227

Softiacom wMailserver 1.0 is affected by a vulnerability where passwords are stored in plaintext in the Darsite\MAILSRV\Admin registry key, enabling local users to gain administrator privileges. The issue is a local privilege escalation due to insecure credential storage. According to the provide...

CVE-2005-2215

MediaWiki is affected by a Cross-site scripting (XSS) vulnerability in versions before 1.4.6 (1.4.x) and before 1.5beta3 (1.5.x) due to unsanitized input in the page move template parameter. The issue allows remote attackers to inject arbitrary web script or HTML into pages. The description does ...

CVE-2005-2234

Buffer overflow in the getlvname command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long command line arguments...

CVE-2005-2238

ftpd in IBM AIX 5.1, 5.2 and 5.3 allows remote authenticated users to cause a denial of service port exhaustion and memory consumption by using all ephemeral ports...

CVE-2005-2231

High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-2243

Cisco CallManager (CCM) memory leak: inetinfo.exe vulnerability affects CCM v3.2 and earlier, v3.3 before 3.3(5), v4.0 before 4.0(2a)SR2b, and v4.1 before 4.1(3)SR1, with MLA enabled. Remote attackers can cause memory exhaustion/DoS by triggering a large number of failing Admin Service Tool (AST)...

CVE-2005-2229

Blog Torrent 0.92 and earlier stores sensitive files under the web document root (in the data or torrents directories) with insufficient access control, enabling remote bidders to obtain sensitive information such as account names and password hashes (e.g., via data/newusers). Affected software: ...

CVE-2005-2246

CVE-2005-2246 (iPhotoAlbum 1.1) is affected by multiple PHP remote file inclusion vulnerabilities. The issues enable remote attackers to execute arbitrary code by supplying crafted input to (1) doc_path in getpage.php or (2) set_menu in lib/static/header.php. Root cause: insecure handling of user...

CVE-2005-2245

The provided connected documents confirm a vulnerability in F5 BIG-IP versions 9.0.2 through 9.1 that allows attackers to subvert the authentication of SSL transactions. The root cause and attack vectors are described as unknown, with possible involvement of NATIVE ciphers, but no concrete exploi...

CVE-2005-1859

Unknown vulnerability in arshell (Array Service, arrayd) affecting SGI ProPack 3 (SP 5/6) and SGI ProPack 4. Local users could execute arbitrary shells as root on other hosts in the cluster/array. Root cause and specific exploit details are not provided in the connected documents; remediation det...

CVE-2005-2223

Unknown vulnerability in the SMTP service in MailEnable Standard before 1.9 and Professional before 1.6 allows remote attackers to cause a denial of service crash during authentication...

CVE-2005-2238

The CVE-2005-2238 entry describes a denial-of-service in IBM AIX ftpd (versions 5.1–5.3) where remote authenticated users can exhaust ephemeral ports, leading to memory/resource consumption. The root cause is using all ephemeral ports; no explicit exploit details or patched versions are provided ...

CVE-2005-2223

CVE-2005-2223 affects the MailEnable SMTP service. Public docs indicate an unknown vulnerability in MailEnable Standard before 1.9 and Professional before 1.6 that allows remote attackers to cause a denial of service (crash) during authentication. Red Hat records echo the unknown vulnerability, a...