CVE-2005-0893

CVE-2005-0893 affects Smail, specifically version 3.2.0.120, where modes.c implements signal handlers using certain unsafe library calls. The root cause described is that these unsafe calls in signal handlers can allow an attacker to execute arbitrary code via race conditions in the signal handli...

CVE-2005-0895

The CVE-2005-0895 entry describes the Netcomm 1300NB DSL Modem as vulnerable to a denial of service (device hang) caused by receiving a large number of ping packets. The connected documents provide this same description and do not include additional technical details, affected firmware versions, ...

CVE-2005-0925

CVE-2005-0925 affects Ublog Reload 1.0–1.0.4. Affected component: login.asp, vulnerable parameter: msg, enabling Cross‑site Scripting (XSS) by remote attackers to inject arbitrary script/HTML. Impact aligns with partial integrity concerns and no confidentiality/availability loss per CVSS—base 4.3...

CVE-2005-0915

Webmasters-Debutants WD Guestbook 2.8 is affected by an authentication bypass vulnerability. A remote attacker can bypass authentication and perform administrator actions via a direct HTTP POST to (1) ajout_admin2.php or (2) suppr.php. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH) with ne...

CVE-2005-0922

CVE-2005-0922 affects Symantec Norton AntiVirus 2004/2005 (also used in Internet Security 2004/2005 and System Works 2004/2005). The Auto-Protect real-time scanning module can be triggered by certain file types to cause a denial of service, potentially hanging or crashing the system. The vulnerab...

CVE-2005-0931

The CVE-2005-0931 entry describes a PHP remote file inclusion vulnerability in The Includer versions 1.0 and 1.1, allowing remote attackers to execute arbitrary PHP code. The vulnerability is tied to PHP remote file inclusion, with potential impact on confidentiality, integrity, and availability ...

CVE-2005-0898

CVE-2005-0898 describes a cross-site scripting (XSS) vulnerability in the PHP file downloadform.php of the E-Store Kit-2 PayPal Edition. The flaw allows remote attackers to inject arbitrary web script or HTML by supplying a crafted txn_id parameter, potentially impacting users who view the affect...

CVE-2005-0933

CVE-2005-0933 describes a directory traversal vulnerability in the PHPCOIN application (auxpage.php) affecting phpCOIN versions ≤ 1.2.1b. Remote attackers can read arbitrary files by manipulating the page parameter. This is validated across sources: the NVD entry notes a directory traversal issue...

CVE-2005-0904

Remote Desktop in Windows XP SP1 does not verify the "Force shutdown from a remote system" setting, which allows remote attackers to shut down the system by executing TSShutdn.exe...

CVE-2005-0901

CVE-2005-0901 affects NukeBookmarks 0.6 for PHP-Nuke with multiple XSS vulnerabilities that allow remote attackers to inject arbitrary scripts via the catname, markname, comment, or category parameters. The NVD entry records a CVSS v2 base score of 4.3 (Medium) with network attack vector, no auth...

CVE-2005-0936

CVE-2005-0936 describes a cross-site scripting vulnerability in the PayPal Storefront component, specifically in the file products1h.php, where the id parameter can be abused to inject arbitrary web script or HTML. Affected software is indicated as ESMI PayPal Storefront; the vulnerability is cat...

CVE-2005-0923

Symantec Norton AntiVirus 2004/2005 (including Internet Security 2004/2005 and System Works 2004/2005) contains a DoS vulnerability in the Auto-Protect module’s SmartScan feature. Renaming a file on a network share can trigger excessive CPU usage, leading to a system hang or crash. The issue affe...

CVE-2005-0908

CVE-2005-0908 : Affected product is Valdersoft Shopping Cart 3.0. The description documents multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via two parameters: (1) lang in index.php and (2) searchTopCategoryID in search_result...

CVE-2005-0892

CVE-2005-0892 describes a buffer overflow in Smail 3.2.0.120 that enables remote attackers or local users to execute arbitrary code via a long string in MAIL FROM (and possibly other SMTP commands). Public records show Debian advisories fixing this flaw: 3.2.0.114-4woody1 (stable) and 3.2.0.115-7...

CVE-2005-0927

Technical details about CVE-2005-0927 are not publicly available in the provided documents. Monitor for updates; no confirmed affected versions, root cause, or remediation are stated here.

CVE-2005-0935

CVE-2005-0935 affects the ESMI PayPal Storefront. The provided documents describe multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands through two parameters: idpages in pages.php and id2 in products1.php. The affected software is the PayPal Storefr...

RHEL 4 : telnet (RHSA-2005:327)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:327 advisory. The telnet package provides a command line telnet client. The telnet-server package includes a telnet daemon, telnetd, that supports remote...

Debian DSA-697-1 : netkit-telnet - buffer overflow

Gael Delalleau discovered a buffer overflow in the handling of the LINEMODE suboptions in telnet clients. This can lead to the execution of arbitrary code when connected to a malicious server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

RHEL 2.1 : grip (RHSA-2005:304)

A new grip package is available that fixes a remote buffer overflow. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Grip is a GTK+ based front-end for CD rippers such as cdparanoia and cdda2wav and Ogg Vorbis encoders. Dean Brettle discovered ...

RHEL 4 : mysql (RHSA-2005:334)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:334 advisory. MySQL is a multi-user, multi-threaded SQL database server. This update fixes several security risks in the MySQL server. Stefano Di Paola...