CVE-2005-1688

Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in 1 wp-content/themes/, 2 wp-includes/, or 3 wp-admin/, which reveal the path in an error message...

CVE-2005-1249

The IMAP daemon (IMAPD32.EXE) in Ipswitch IPS/ICS resolves a DoS by parsing a malformed LSUB command consisting of a long string of NULL characters, causing an infinite loop and high CPU usage. Affected: Ipswitch IMail/Collaboration Suite (ICS); observed in IMAPD32.EXE (vulnerable ranges not full...

CVE-2005-1678

CVE-2005-1678 affects Groove Virtual Office prior to 3.1 build 2338, prior to 3.1a build 2364, and Groove Workspace prior to 2.5n build 1871. The vulnerability arises from improper display of file extensions on attached or embedded files in a compound document, which may allow remote attackers to...

CVE-2005-1685

Episodex Guestbook is affected by an authentication bypass and unauthorized editing via admin.asp. Multiple sources (NVD/NVD-derived, OpenVAS NASL, Nessus plugin) describe an input-validation flaw in default.asp that enables remote, unauthenticated attackers to access admin functions and inject H...

CVE-2005-1681

PHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the includelocation parameter to index.php...

CVE-2005-1688

CVE-2006-0986 affects WordPress 2.0.1 and earlier. The vulnerability allows remote attackers to obtain sensitive information by requesting specific files in wp-includes/ and wp-admin/ (e.g., default-filters.php, template-loader.php, rss-functions.php, locale.php, wp-db.php, kses.php; edit-form-ad...

CVE-2005-1750

The CVE-2005-1750 issue affects ezdwc NewsletterEz 3.0 and is a SQL injection in login.asp via the password parameter. The root cause is improper handling of the password input in login.asp, enabling arbitrary SQL execution. Practical impact is remote arbitrary SQL execution against the applicati...

Immunity Canvas: IPSWITCH_CAL

Name| ipswitchcal ---|--- CVE| CVE-2005-1252 Exploit Pack| CANVAS Description| Ipswitch Calendar Directory Traversal Notes| CVE Name: CVE-2005-1252 VENDOR: IPSwitch Reference: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=242 VersionsAffected: IMail 8.13 up to 8.2p1...

CVE-2005-1679

CVE-2005-1679: Stack-based buffer overflow in the error directive of picasm 1.12b and earlier allows arbitrary code execution via a long error message. Connected sources confirm the vulnerability in picasm, with the overflow occurring when error/warning messages are generated and strings are copi...

CVE-2005-1681

CVE-2005-1681 affects phpATM 1.21 (and possibly earlier) where a PHP remote file inclusion flaw in common.php allows an attacker to execute arbitrary PHP code via a URL in the include_location parameter to index.php. The vulnerability (root cause: include_location-driven RFI in index.php) enables...

CVE-2005-1676

CVE-2005-1676 covers multiple XSS vulnerabilities in Groove Virtual Office/Workspace. Affected are Groove Virtual Office versions older than 3.1 build 2338 and older than 3.1a build 2364, and Groove Workspace older than 2.5n build 1871. root cause: improper filtering of SharePoint list elements, ...

Immunity Canvas: ZEN

Name| zen ---|--- CVE| CVE-2005-1255 Exploit Pack| CANVAS Description| imailimap Notes| CVE Name: CVE-2005-1255 VENDOR: IPSwitch VersionsAffected: IMail 8.13 Repeatability: This is a one shot exploit. CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1255 CVSS: 10.0...

CVE-2005-1255

CVE-2005-1255 refers to multiple stack-based buffer overflows in the IMail IMAP server (Ipswitch Collaboration Suite and related IMail Server versions). The vulnerability allows a remote attacker to cause arbitrary code execution by sending a crafted LOGIN command with an overly long username arg...

CVE-2005-1686

CVE-2005-1686 affects gedit/gedit-based GNOME environments. The vulnerability is a format string flaw in the handling of filenames (format specifiers in filenames) that could lead to a crash and, per multiple advisories, may allow arbitrary code execution. Public discussions in various advisories...

CVE-2005-1252

CVE-2005-1252 affects Ipswitch IMail Web Calendaring server. A directory traversal flaw in handling requests for nonexistent .jsp resources lets an unauthenticated remote attacker read arbitrary files via crafted GET requests (e.g., ..\ sequences). Affects IMail 8.13 and earlier versions up to IM...

CVE-2005-1543

Novell ZENworks Remote Management in affected versions (ZENworks Desktop/Server Management; ZENworks for Desktops/Servers; Remote Management agent) suffers from buffer overflow when processing authentication data, enabling remote code execution via crafted authentication requests. Root cause: ina...

CVE-2005-1152

CVE-2005-1152 affects qpopper 4.0.5 and earlier. The root cause is popauth.c not setting the umask, which may cause files to be created with group- or world-writable permissions. The provided references align with a low-severity issue (CVSS v2 base score 2.1). No patched version or remediation de...

CVE-2005-1675

Groove Virtual Office and Groove Workspace suffer from insecure installation-directory permissions (EVERYBODY) that allow local users to access sensitive information. Affected products include Groove Virtual Office < 3.1 build 2338, Groove Virtual Office < 3.1a build 2364, and Groove Worksp...

CVE-2005-1682

The CVE describes a vulnerability in JavaMail API used by Solstice Internet Mail Server POP3 2.0, where the MimeMessage constructor in javax.mail.internet.InternetHeaders does not properly validate the message number, enabling remote authenticated users to read other users’ e‑mail by altering the...

CVE-2005-1683

CVE-2005-1683 describes a buffer overflow in Microsoft Word components: winword.exe on Windows (versions up to 10.2627.6714 and earlier) and Word for Macintosh prior to SP3 for Word 2002, exploitable via a crafted .mcw file. This leads to remote denial of service and, possibly, arbitrary code exe...