CVE-2005-1101

CVE-2005-1101 concerns Lotus Domino Server versions 6.0.5 and 6.5.4 with a buffer overflow in certain time/date fields exposed via remote input. The Nessus plugin describes a remote overflow triggered by large data in POST-like requests, potentially crashing the web server and possibly allowing a...

CVE-2005-0562

The CVE-2005-0562 issue affects MSN Messenger 6.2 and involves a GIF processing buffer overflow. A malformed GIF with improper height/width could allow a remote attacker in a victim’s contact list to execute arbitrary code with the user’s privileges. Microsoft’s MS05-022/MS05-009 postings documen...

CVE-2005-1099

CVE-2005-1099 affects the Greylisting Daemon (GLD) up to version 1.4. The vulnerability is described as multiple buffer overflows in the HandleChild function inside server.c when GLD is listening on a network interface, enabling remote arbitrary code execution. Public references document exploit ...

CVE-2005-1100

Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon GLD 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is passed directly to syslog...

CVE-2005-0610

CVE-2005-0610 affects FreeBSD portupgrade prior to 20041226_2. It describes three symlink-related issues: (1) allowing local attackers to overwrite files and potentially replace packages to execute arbitrary code via pkg_fetch, (2) overwriting files through temporary files during port/package upg...

CVE-2005-1100

CVE-2005-1100 affects Greylisting daemon (GLD) 1.3 and 1.4. The vulnerability is a format-string bug in the ErrorLog function (cnf.c) that allows remote code execution via data passed to syslog. Linked advisories (GLSA 200504-10) describe remote arbitrary-code execution due to format-string issue...

CVE-2005-0560

CVE-2005-0560 describes a heap-based buffer overflow in the SvrAppendReceivedChunk function of xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003. The overflow is triggered by a crafted X-LINK2STATE extended verb, potentially allowing remote code execution with the server’s privile...

CVE-2005-1091

Maxthon 1.2.0 and 1.2.1 expose a vulnerability where remote attackers can bypass a security ID and call restricted plugin API functions by crafting a page that includes max.src. The NVD entry CVE-2005-1091 documents this as a cross-page script inclusion issue allowing limited privileges to be use...

CVE-2005-0558

CVE-2005-0558 corresponds to a buffer overflow in Microsoft Word 2000, Word 2002, and Word 2003 that could allow remote code execution via a crafted document. The issue is documented in Microsoft Security Bulletin MS05-023 and is associated with the CAN-2004-0963 CAN entry; Word 2002/2003 updates...

CVE-2005-0063

The CVE-2005-0063 issue stems from Windows Shell/MSHTA handling of file associations. A remote code execution vulnerability exists when a user opens a specially crafted OLE2 document (e.g., Word) whose CLSID is manipulated to invoke HTML Application Host (MSHTA) to process the file. Exploitation ...

CVE-2005-0555

CVE-2005-0555 describes a memory corruption vulnerability in Internet Explorer’s Content Advisor feature. The issue affects IE 5.01, 5.5, and 6 and is triggered by processing crafted Content Advisor files, potentially allowing remote code execution on affected systems. Connected advisories and th...

CVE-2005-1094

CVE-2005-1094 affects FTP Now 2.6.14, where usernames and passwords are stored in plaintext in sites.xml and are world-readable. This constitutes a local privilege escalation risk for any local user able to read that file. The description does not provide exploit details, affected versions beyond...

CVE-2005-1102

CVE-2005-1102 describes multiple XSS vulnerabilities in WordPress before version 1.5 that affect the file template-functions-post.php. The flaws allow remote attackers to exploit the (1) content or (2) title of a post to execute arbitrary commands, as reported for WordPress 1.5 and earlier. The d...

CVE-2005-0553

The CVE-2005-0553 issue is a race condition in the DHTML object processor of Internet Explorer (IE) versions 5.01, 5.5, and 6 that can enable remote code execution when a user visits a crafted web page or HTML email. The root cause involves race conditions in processing of DHTML objects (e.g., Co...

CVE-2005-0551

CVE-2005-0551 corresponds to a local privilege-elevation vulnerability in CSRSS (Client Server Runtime Subsystem) via WINSRV.DLL handling a console window FaceName string. A stack-based buffer overflow in CONSOLE_STATE_INFO (FaceName[32]) can be triggered by a crafted console window, enabling a l...

CVE-2005-1093

CVE-2005-1093 affects the Miranda IM environment via the PopUp Plus 2.0.3.8 plugin when the Use SmileyAdd Setting is enabled. The vulnerability is described as a buffer overflow that allows remote attackers to execute arbitrary code. The available connected documents reiterate this condition but ...

CVE-2005-1089

DC++ before 0.674 is affected by a vulnerability that allows a remote attacker to append data to arbitrary files. The issue is described across CVE-2005-1089 sources as a file/content manipulation flaw in the DC++ client (pre-0.674). Affected component: DC++ core/application logic handling downlo...

CVE-2005-0059

The CVE-2005-0059 issue is a buffer overflow in the Microsoft Message Queuing (MSMQ) service’s processing of messages. The vulnerability affects MSMQ on Windows 2000 and Windows XP SP1 (per the CVE/NVD entries) and is exploitable via the MSMQ RPC/queue handling interface, enabling remote code exe...

CVE-2005-1106

The CVE-2005-1106 issue affects Apple QuickTime PictureViewer on Windows (6.5.2). A GIF image with the maximum depth start value can cause the application to crash, due to an integer overflow in GIF processing. This yields a denial of service; no explicit remediation is provided in the supplied d...

Debian DSA-706-1 : axel - buffer overflow

Ulf Harnhammar from the Debian Security Audit Project discovered a buffer overflow in axel, a light download accelerator. When reading remote input the program did not check if a part of the input can overflow a buffer and maybe trigger the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenab...