CVE-2005-2238

The CVE-2005-2238 entry describes a denial-of-service in IBM AIX ftpd (versions 5.1–5.3) where remote authenticated users can exhaust ephemeral ports, leading to memory/resource consumption. The root cause is using all ephemeral ports; no explicit exploit details or patched versions are provided ...

CVE-2005-2223

CVE-2005-2223 affects the MailEnable SMTP service. Public docs indicate an unknown vulnerability in MailEnable Standard before 1.9 and Professional before 1.6 that allows remote attackers to cause a denial of service (crash) during authentication. Red Hat records echo the unknown vulnerability, a...

CVE-2005-2232

The CVE-2005-2232 entry describes a buffer overflow in invscout on IBM AIX 5.1.0 through 5.3.0 that could let local users execute arbitrary code via a long command line argument. This is supported by multiple connected records (Red Hat and NVD references) confirming the same affected product and ...

CVE-2005-2244

The CVE-2005-2244 entry concerns Cisco CallManager (CCM) prior to certain 3.x/4.x releases, where the aupair.exe service is vulnerable. A crafted packet can trigger a memory allocation failure, leading to a buffer overflow and allowing remote code execution or memory corruption. Affected products...

CVE-2005-0564

The CVE-2005-0564 entry corresponds to a remote code execution vulnerability in Word 2000, Word 2002, and Microsoft Works Suite 2000–2004 caused by a font parsing buffer overflow. A specially crafted Word document containing long font information can trigger an unchecked boundary condition in the...

CVE-2005-1219

Summary: CVE-2005-1219 is a buffer overflow in the Microsoft Color Management Module in Windows, triggered by processing images with crafted ICC profile tags. Affected component: Windows Color Management Module (ICC profile handling). Impact: remote code execution or, in some cases, denial of ser...

CVE-2005-2243

Memory leak in inetinfo.exe in Cisco CallManager CCM 3.2 and earlier, 3.3 before 3.35, 4.0 before 4.02aSR2b, and 4.1 4.1 before 4.13SR1, when Multi Level Admin MLA is enabled, allows remote attackers to cause a denial of service memory consumption via a large number of Admin Service Tool AST logi...

CVE-2005-2220

Dragonfly Commerce (Dragonfly) is affected by a vulnerability where remote attackers can modify the hidden field x_DragonflyCartProductPrice to alter product prices via several endpoints (dc_Categorieslist.asp, dc_Categoriesview.asp, dc_productslist.asp, dc_productslist_Clearance.asp). The vendor...

CVE-2005-2217

Dansie Shopping Cart stores the vars.dat file under the web root with insufficient access control, allowing remote attackers to obtain sensitive information such as program variables. The issue is classified with a CVSS v2 base score of 5.0 (Network attack vector, Low attack complexity, Confident...

CVE-2005-2228

Web Wiz Forums 7.9 and 8.0 are affected by a vulnerability that allows remote attackers to view message titles of a hidden forum. The referenced CVE-2005-2228 entry notes network-based access with low attack complexity and no authentication, yielding partial confidentiality impact. No explicit ex...

CVE-2005-2225

The CVE-2005-2225 entries describe a DoS condition in Microsoft MSN Messenger where remote attackers can cause users to be kicked from group conversations by sending a plaintext message containing the string ".pif". Gaim is also reported affected, suggesting the issue could be in the protocol or ...

CVE-2005-2230

CVE-2005-2230 affects Electronic Mail Operator (elmo) 1.3.2-r1 and earlier. The vulnerability arises from insecure creation of the elmostats temporary file, enabling a local attacker to overwrite arbitrary files. Public details in the connected documents confirm the affected component and the loc...

CVE-2005-2233

CVE-2005-2233 describes a buffer overflow in multiple “p” commands on IBM AIX 5.1, 5.2 and 5.3. The vulnerability arises from long command line arguments to tools such as penable (and other hard-linked files including pdisable, pstart, phold, pdelay, pshare), potentially allowing local users to e...

CVE-2005-2247

The CVE-2005-2247 entry concerns Moodle prior to 1.5.1, described as containing multiple unknown vulnerabilities with unknown impact and attack vectors. The connected Nessus plugin explicitly lists Moodle

Immunity Canvas: MAILENABLE

Name| mailenable ---|--- CVE| CVE-2005-2223 Exploit Pack| CANVAS Description| MailEnable SMTP Stack Overflow Notes| CVE Name: CVE-2005-2223 VENDOR: MailEnable Post-exploitaion: Platforms Tested: Windows 2003 Standard edition base & up2date MailEnable 1.72 Windows 2003 Standard edition up2date...

CVE-2005-2231

The CVE-2005-2231 issue affects Heartbeat (High Availability Linux) 1.2.3, where a symlink attack on temporary files allows local users to overwrite arbitrary files. This is a local-privilege concern with incomplete impact (I:P; C:N; A:N) as documented. Debian advisories note the fix to version 1...

CVE-2005-2224

The CVE-2005-2224 entry concerns Microsoft ASP.NET web services, where aspnet_wp.exe is affected by processing crafted SOAP messages sent to an RPC/Encoded method, leading to denial of service via CPU consumption from an infinite loop. The available connected documents confirm the affected compon...

CVE-2005-2234

CVE-2005-2234 describes a buffer overflow in the IBM AIX getlvname command (AIX 5.1, 5.2, 5.3) that could allow local users to execute arbitrary code via long command line arguments. This vulnerability is corroborated by multiple connected records (e.g., Red Hat advisory) and the core impact is r...

CVE-2005-2241

Cisco CVE-2005-2241 affects Cisco CallManager (CCM) versions 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 before 4.1(3)SR1. The issue arises from RISDC sockets not timing out promptly, causing a resource leak that can allow remote attackers to exhaust memory and connections...

CVE-2005-2220

Dragonfly Commerce allows remote attackers to change a product price by modifying the xDragonflyCartProductPrice hidden field to 1 dcCategorieslist.asp, 2 dcCategoriesview.asp, 3 dcproductslist.asp, and 4 dcproductslistClearance.asp. NOTE: the vendor has disputed this issue, saying that "Dragonfl...