CVE-2005-2072

CVE-2005-2072 affects the runtime linker (ld.so) in Solaris 8, 9, and 10, where LD_AUDIT in setuid/setgid contexts can be abused to gain privileges (including by using a long LD_AUDIT value). Connected advisories list vendor patches addressing this: Solaris 8/9/10 patches 109147-44, 109148-42, 11...

CVE-2005-2078

CVE-2005-2078 affects the BisonFTP Server V4R1 . Remote authenticated users can cause a denial of service by sending an invalid command with a long argument. The NVD entry lists the impact as partial availability with no confidentiality/integrity impact and no user interaction required, while att...

CVE-2005-2071

traceroute in Sun Solaris 10 on x86 systems allows local users to execute arbitrary code with PRIVNETRAWACCESS privileges via 1 a large number of -g arguments or 2 a malformed -s argument with a trailing . dot...

CVE-2005-2079

CVE-2005-2079 describes a heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0–10.0 on Windows Servers. The flaw is capable of enabling remote attackers to execute arbitrary code. The root cause is a heap-based overflow in the Admin Plus Pack Option, leading to pot...

CVE-2005-0201

D-BUS dbus before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket...

CVE-2005-2080

CVE-2005-2080 affects VERITAS Backup Exec RAWS: vulnerable versions include Backup Exec 9.0–10.0 for Windows and 9.0.4019–9.1.307 for NetWare. The root cause is that remote attackers can gain privileges by copying the server handle. Impact and remediation details are limited to the cited records;...

CVE-2005-1938

CVE-2005-1938 is a duplicate of CVE-2005-1250; this entry has been superseded. The connected advisory data describe a SQL injection in Ipswitch WhatsUp Professional 2005 SP1/Web login (NmConsole/Login.asp) that allows remote execution of arbitrary SQL via the sUserName or sPassword fields. The co...

CVE-2005-2069

The CVE concerns pam_ldap/nss_ldap used with OpenLDAP when the client is referred from a TLS-secured slave to a master; the following connection may not use TLS, allowing passwords to be sniffed. Connected advisories (e.g., Debian DSA-785-1) reference CVE-2005-2069 (and related CVEs) and note upd...

CVE-2005-0773

The CVE-2005-0773 issue is a stack-based buffer overflow in VERITAS Backup Exec Remote Agent (Windows/NetWare) triggered by a CONNECT_CLIENT_AUTH request with Windows credentials and an excessively long password. Affects Backup Exec 9.x/10.x on Windows (and 9.0.4019–9.1.307 for NetWare). Exploita...

CVE-2005-2073

CVE-2005-2073 affects IBM DB2 versions 8.1.4–8.1.9 and 8.2.0–8.2.2. The description states an unknown vulnerability that allows local users with SELECT privileges to perform unauthorized activities and to insert, update, or delete table contents. The currently provided connected documents do not ...

CVE-2005-1690

CVE-2005-1690 is a duplicate of CVE-2005-1250. The connected docs describe a SQL injection vulnerability in Ipswitch WhatsUp Professional 2005 SP1, affecting the web front-end Login.asp (NmConsole/Login.asp) via parameters sUserName and sPassword, enabling arbitrary SQL execution and potential ad...

DEBIAN-CVE-2005-0201

D-BUS dbus before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket...

CVE-2005-2055

RealPlayer 8, 10, 10.5 6.0.12.1040-1069, and Enterprise and RealOne Player v1 and v2 allows remote malicious web server to create an arbitrary HTML file that executes an RM file via "default settings of earlier Internet Explorer browsers"...

CVE-2005-1938

...

CVE-2005-2075

PHP-Fusion versions 5.0–6.0 store database backups in predictable paths under the web root (administration/db_backups in 6.0 or fusion_admin/db_backups in 5.0), enabling remote attackers to disclose sensitive information via direct requests. The vulnerability is categorized as an information disc...

CVE-2005-1690

...

CVE-2005-2071

CVE-2005-2071 affects Sun Solaris 10 on x86 where traceroute can allow a local user to run arbitrary code with PRIV_NET_RAWACCESS by supplying a large number of -g arguments or a malformed -s argument with a trailing dot. Connected advisories document patches: Solaris 10 (x86) 121013-03 and Solar...

CVE-2005-2076

CVE-2005-2076 affects HP Version Control Repository Manager (VCRM) prior to 2.1.1.730. The root cause is improper handling of the '@' character in a proxy password, which could allow attackers with physical access to see portions of the password when it is displayed on screen. Multiple connected ...

CVE-2005-0771

CVE-2005-0771 affects VERITAS Backup Exec Server (beserver.exe) on Windows versions 9.0–10.0. It permits unauthenticated remote RPC access on TCP port 6106 that can modify the Windows registry, enabling an attacker to gain full registry control and potentially compromise the host. The vulnerabili...

CVE-2005-2077

CVE-2005-2077 corresponds to a cross-site scripting (XSS) vulnerability in Hosting Controller’s error.asp, exploitable via the error parameter. The associated connected data confirms the affected product is Hosting Controller, with error.asp being the vulnerable component and the root cause being...