CVE-2005-0465

CVE-2005-0465 concerns SGI IRIX gr_osview, a setuid-root utility. Local attackers can exploit a privilege-inheritance flaw by using gr_osview -s to open files without dropping privileges, potentially overwriting arbitrary files (e.g., /etc/shadow) when an attacker has a local account and an open ...

CVE-2005-1009

Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow 1 remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or 2 local users to execute arbitrary code via a long Name entry in the configure.cfg file...

CVE-2005-1014

MailEnable’s IMAP service is affected on Enterprise 1.04 and earlier and Professional 1.54 by a buffer overflow triggered by a long AUTHENTICATE command. This allows remote arbitrary code execution (no authentication required per CVSS vector). Impact is described as partial confidentiality, integ...

CVE-2005-1015

MailEnable Imapd (MEIMAP.exe) is affected by a buffer overflow vulnerability triggered by a long LOGIN command. The issue allows remote code execution and is tracked as CVE-2005-1015. Public sources (including Red Hat and NVD entries) describe the flaw as arising from a buffer overflow in the IMA...

CVE-2005-1017

CVE-2005-1017 affects MaxWebPortal versions up to 1.33, where the Update_Events function in events_functions.asp is vulnerable to SQL injection via the EVENT_ID parameter (as demonstrated using events.asp). This can allow remote attackers to execute arbitrary SQL commands. The connected sources c...

CVE-2005-1017

SQL injection vulnerability in the UpdateEvents function in eventsfunctions.asp in MaxWebPortal 1.33 and earlier allows remote attackers to execute arbitrary SQL commands via the EVENTID parameter, as demonstrated using events.asp...

CVE-2005-1016

CVE-2005-1016 affects MaxWebPortal

CVE-2005-1011

CVE-2005-1011 affects SiteEnable’s content.asp script where the sortby parameter is not properly sanitized, enabling remote attackers to inject arbitrary SQL commands. The vulnerability is documented in multiple sources (NVD entry with CVSSv2 base score 7.5 HIGH, remote network access, no authent...

Mandrake Linux Security Advisory : gdk-pixbuf (MDKSA-2005:069)

A bug was discovered in the way that gdk-pixbuf processes BMP images which could allow for a specially crafted BMP to cause a Denial of Service attack on applications linked against gdk-pixbuf. The updated packages have been patched to correct these issues. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2005-1002

The CVE-2005-1002 entry concerns logwebftbs2000.exe in Logics Software File Transfer (LOG-FT). The vulnerable component is the file-transfer web client/server, where an attacker can read arbitrary files by supplying modified parameters VAR_FT_LANG and VAR_FT_TMPL. The cited reports describe remot...

CVE-2005-1003

CVE-2005-1003 affects ProfitCode PayProCart 3.0: a directory traversal in index.php via the modID parameter allows remote inclusion of arbitrary PHP files. The root cause is improper validation of .. (dot dot) sequences leading to file inclusion. Impact is remote code execution potential, as desc...

CVE-2005-1006

SonicWALL SOHO Web Interface (SOHO 5.1.7.0) is affected by multiple XSS vulnerabilities where an attacker can inject arbitrary script/HTML via the request URL or the login name, which is not filtered when an administrator views the log file. The CVE-2005-1006 entry is corroborated by multiple sou...

CVE-2005-0996

CVE-2005-0996 involves multiple SQL injection vulnerabilities in the Downloads module of PHP-Nuke 7.6. The issue allows remote attackers to inject arbitrary web script or HTML via: (1) email or url parameters in Add, (2) min parameter in viewsdownload, and (3) min parameter in search. Affected pr...

CVE-2005-0996

Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via 1 the email or url parameters in the Add function, 2 the min parameter in the viewsdownload function, or 3 the min parameter in the search function...

CVE-2005-0998

The CVE-2005-0998 entry concerns the Web_Links module of PHP-Nuke 7.6. Reported vulnerability: an invalid show parameter triggers a division-by-zero PHP error, causing leakage of the server’s full pathname. Affected component: Web_Links module (PHP-Nuke 7.6). Impact: remote attackers could obtain...

CVE-2005-1001

PHP-Nuke 7.6 is affected by CVE-2005-1001, where remote attackers can obtain sensitive information. The vulnerability arises from direct requests to the Surveys module (file parameter set to comments) or to 3D-Fantasy/theme.php, which causes a PHP error message that leaks the full server pathname...

CVE-2005-1004

The CVE-2005-1004 issue affects ProfitCode PayProCart 3.0, where an XSS flaw exists in usrdetails.php exploitable via the sgnuptype parameter. The vulnerability is reflected XSS with no authentication, allowing an attacker to inject script/html in the context of the victim’s browser (I:P, C:N). I...

CVE-2005-1007

CVE-2005-1007 is a vulnerability in the LISTS module of CommuniGate Pro prior to version 4.3c3, where remote attackers can cause a denial of service (server crash) by sending malformed multipart messages. The issue is tied to the LISTS functionality and enables a network-based DoS condition as de...

CVE-2005-0992

Cross-site scripting XSS vulnerability in index.php in phpMyAdmin before 2.6.2-rc1 allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter...

CVE-2005-0995

CVE-2005-0995 indicates multiple cross-site scripting (XSS) vulnerabilities in ProductCart 2.7. Attackers can inject arbitrary script or HTML via four parameters: (1) keyword to advSearch_h.asp, (2) redirectUrl to NewCust.asp, (3) country to storelocator_submit.asp, and (4) error to techErr.asp. ...