CVE-2005-1666

Multiple buffer overflow vulnerabilities in Orenosv HTTP/FTP Server 0.8.1 allow remote authenticated users to crash the server and possibly execute arbitrary code by sending long arguments to FTP commands (MKD, RMD, DELE) or a long SSI command; triggers occur in ftp_xlate_path, ftp_is_canonical, ...

CVE-2005-1654

CVE-2005-1654 affects Hosting Controller 6.1 Hotfix 1.9 and earlier. The vulnerability allows remote attackers to register arbitrary users by issuing a direct request to addsubsite.asp with the loginname and password parameters set, enabling unauthorized account creation. Related documentation ci...

CVE-2005-0757

CVE-2005-0757 affects the Linux kernel xattr file system code for ext3 on 64-bit systems, enabling local users with ext3 xattrs to crash the kernel. The connected advisories (RHSA-2005:294, Debian DSA-922-1, OpenVAS/DSA entries) confirm this in Red Hat/CentOS and Debian kernels. Affected context:...

CVE-2005-1650

The web mail service in Woppoware PostMaster 4.2.2 build 3.2.5 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames...

CVE-2005-0134

Technical details about CVE-2005-0134 are not publicly available in the provided connected documents. No affected versions, root cause, impact, or mitigations are disclosed here. Monitor for updates.

CVE-2005-1650

The CVE-2005-1650 entry applies to Woppoware PostMaster 4.2.2, where the web mail service returns different error messages based on whether a user exists. This behavior allows remote attackers to enumerate valid usernames, constituting an information disclosure issue. The Red Hat and CVE records ...

CVE-2005-1661

Affected software: Jeuce Personal Webserver 2.13. Vulnerability: remote attackers can cause a denial-of-service (server crash) via a long GET request, possibly triggering a buffer overflow. This is the root cause described across connected documents. Impact: DoS with server instability; no detail...

CVE-2005-1648

CVE-2005-1648 affects Gurgens (GASoft) Ultimate Forum 1.0. The vulnerability arises because the db/Genid.dat database file is stored under the web document root with insufficient access control, enabling remote attackers to obtain and decrypt usernames and passwords. The provided sources describe...

CVE-2005-1660

Affected product/entity: HTMLJunction EZGuestbook. Vulnerability: the guestbook.mdb file is stored under the web document root with insufficient access control. Impact as stated: remote attackers may obtain sensitive information, including the administrative password. Root cause: Access control w...

CVE-2005-1657

Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote attackers to perform unauthorized file operations via the Folder.Id parameter to 1 deletefolder.ctml, 2 deletemessage.ctml, 3 origmessage.ctml, or 4 readmessage.ctml, the Message.Id parameter to editmessage.ctm...

CVE-2005-0757

The xattr file system code, as backported in Red Hat Enterprise Linux 3 on 64-bit systems, does not properly handle certain offsets, which allows local users to cause a denial of service system crash via certain actions on an ext3 file system with extended attributes enabled...

CVE-2005-1662

CVE-2005-1662 is a directory traversal vulnerability in Jeuce Personal Web Server 2.13 that allows remote attackers to read arbitrary files via a .. in the URL. The connected documents confirm the affected product/version and the traversal vector; no exploitation specifics or remediation steps ar...

CVE-2005-1654

Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request to addsubsite.asp with the loginname and password parameters set...

CVE-2005-1652

CVE-2005-1652 affects Woppoware PostMaster 4.2.2 (build 3.2.5). Affected component: message.htm. Root cause: remote authentication bypass via modification of the email parameter, enabling attackers to bypass login and act as the targeted user (e.g., read messages, compose messages). Public refere...

CVE-2005-1659

CVE-2005-1659 : MyServer 0.8 is vulnerable to cross-site scripting via filemanager.cpp. An attacker can craft a URL containing a triple dot ("...") followed by an onmouseover event to inject arbitrary Javascript. Public sources (NVD/Red Hat/OpenVAS) consistently describe XSS affecting MyServer 0....

CVE-2005-1665

CVE-2005-1665 affects Microsoft ASP.NET 1.x ViewState when not cryptographically signed; parsing crafted web session state information can lead to high CPU usage and a Denial of Service. The CPAI advisory describes it as an input sanitization/resource consumption vulnerability in ASP.NET on IIS, ...

CVE-2005-1655

AOL Instant Messenger (AIM) 5.5.x and earlier is affected. The vulnerability arises when the client handles a font tag with an invalid smiley icon location in the sml parameter, allowing a remote attacker to cause a denial of service (client crash). The affected component is the AIM client’s pars...

CVE-2005-1644

The CVE-2005-1644 entry documents a cross-site scripting (XSS) vulnerability in 1Two Livre d’Or 1.0’s guestbook.php. The vulnerability arises from unsanitized input through the parameters livreornom, livreoremail, and livreormessage, which allows remote attackers to inject arbitrary web script or...

CVE-2005-1645

The CVE describes a vulnerability in Keyvan1 ImageGallery where the image.mdb database is stored under the web document root with insufficient access control, allowing remote attackers to read sensitive information. Impact: partial confidentiality loss. The connected documents do not provide expl...

CVE-2005-1658

CVE-2005-1658 affects MyServer 0.8. A directory traversal flaw in filemanager.cpp allows remote attackers to list the parent directory of the web root by using a URL containing a triple dot ("..."). The NVD/CVE entries document this vulnerability with a CVSSv2 base score of 5.0 (AV:N/AC:L/Au:N/C:...