CVE-2005-0869

phpSysInfo 2.3 allows remote attackers to obtain sensitive information via a direct request to 1 class.OpenBSD.inc.php, 2 class.NetBSD.inc.php, 3 class.FreeBSD.inc.php, 4 class.Darwin.inc.php, 5 XPath.class.php, 6 systemheader.php, or 7 systemfooter.php, which reveal the path in a PHP error messa...

CVE-2005-0953

Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete...

CVE-2005-1345

Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the httpaccess configuration, which could lead to less restrictive ACLs than intended by the administrator...

DEBIAN-CVE-2005-0018

The f2 shell script in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files...

CVE-2005-0077

The DBI library libdbi-perl for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file...

CVE-2005-1377

CVE-2005-1377 documents multiple PHP Remote File Include vulnerabilities in Claroline 1.5.3–1.6 Release Candidate 1 (and possibly Dokeos), enabling remote attackers to execute arbitrary PHP code via unknown vectors. Affected software is Claroline (and possibly Dokeos) with RFI issues; exploitatio...

CVE-2005-1390

...

CVE-2005-1373

Dream4 Koobi CMS 4.2.3 contains SQL injection flaws in index.php exploitable via the q and p parameters, allowing remote arbitrary SQL execution. Root cause: input validation flaw leading to SQL injection; no remediation details provided in the connected documents.

CVE-2005-1382

CVE-2005-1382 affects Oracle WebCache 9i: the webcacheadmin dump file handling allows an administrator to place cache_dump_file contents at arbitrary locations due to insufficient restrictions on the destination path. The CPAI advisory explains that this enables data/caching file contents to be w...

Immunity Canvas: BRIGHTSTOR_DISCOVERY

Name| brightstordiscovery ---|--- CVE| CVE-2005-0260 Exploit Pack| CANVAS Description| CA BrightStor ARCserve Backup Discovery Service Overflow Notes| CVE Name: CVE-2005-0260 VENDOR: Computer Associates VersionsAffected: Repeatability: References:...

CVE-2005-1385

CVE-2005-1385 affects Safari 1.3. A remote attacker can trigger a denial of service (application crash) by supplying a long https URL that causes a NULL pointer dereference. The available records confirm the crash as the impact, with no additional exploit details or affected versions beyond the c...

CVE-2005-0940

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0490. Reason: This candidate was inadvertently referenced in a vendor advisory due to a typo. Notes: All CVE users should reference CVE-2005-0490 instead of this candidate. All references and descriptions in this candidate ha...

CVE-2005-1390

CVE-2005-1390 is rejected/not used per the description; reference CVE-2005-0174 instead.

CVE-2005-1371

Summary: CVE-2005-1371 affects BulletProof FTP Server (BPFTPServer) 2.4.0.31, where the BPFTPServer service does not properly drop privileges before opening files via the Help menu, enabling local users to gain privileges. Affected software/component: BulletProof FTP Server, BPFTPServer service, ...

CVE-2005-1379

CVE-2005-1379 affects the LAM runtime environment package lam-runtime-7.0.6-2mdk on Mandrake Linux, which installs the mpi user without a password, enabling local users to gain privileges. The connected documents provide a local privilege escalation path via an unprotected mpi account, but contai...

CVE-2005-1386

CVE-2005-1386 affects PHP-Nuke 7.6 and earlier. A remote attacker could obtain sensitive information via direct requests to specific PHP scripts (ipban.php, db.php, lang-norwegian.php, lang-indonesian.php, lang-greek.php, lang-portuguese.php, and related language/module pages) which disclose the ...

CVE-2005-1383

The CVE-2005-1383 issue affects Oracle Application Server’s Oracle HTTP Server (OHS) when UseWebCacheIP is disabled. An attacker can bypass mod_access restrictions by sending a request to the webcache TCP port 7778, leading to unauthorized access to protected resources. Connected advisories confi...

CVE-2005-1369

CVE-2005-1369 affects the it87 and via686a I2C drivers; prior to fixes in 2.6.11.8 and 2.6.12-rc2, these drivers created a writable sysfs file alarms, enabling a local attacker to cause CPU DoS by writing to it. Connected advisories indicate the issue is resolved by upgrading the kernel to a vers...

CVE-2005-1044

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0941. Reason: This candidate is a duplicate of CVE-2005-0941. Notes: All CVE users should reference CVE-2005-0941 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-1394

CVE-2005-1394 describes a format-string vulnerability in ESRI ArcInfo Workstation 9.0 where local users can escalate privileges via format string specifiers in the ARCHOME environment variable, affecting components such as wservice and lockmgr . The connected PT-2005-2391 entry confirms product/v...