CVE-2005-0469

CVE-2005-0469 is a buffer overflow in the LINEMODE handling path (slc_add_reply) in BSD-based Telnet clients. The connected Mariner entry notes CVE-2005-0469 affecting telnet 0.17-81 with no patch available yet. The root cause is a buffer overflow triggered by replies containing a large number of...

CVE-2005-0468

CVE-2005-0468 is a heap-based buffer overflow in the env_opt_add function of telnet clients (telnet.c) for BSD-based implementations. An attacker can trigger it by sending responses with many characters requiring escaping, causing the client to overflow memory and potentially execute arbitrary co...

local root security bug in linux >= 2.4.6 <= 2.4.30-rc1 and 2.6.x.y <= 2.6.11.5

Suresec security advisory 1 Release date: 27th March 2005 CVE ID: CAN-2005-0750 Linux kernel local root vulnerability About the linux kernel: The linux kernel is a widely used kernel which is unix based. Vulnerability summary: The linux kernel has support for bluetooth. A local root security...

CVE-2005-0876

The CVE-2005-0876 issue: in dnsmasq prior to 2.21, an off-by-one buffer overflow in the DHCP lease file may allow an attacker to execute arbitrary code. Affected product: dnsmasq (pre-2.21). The Slackware security advisory notes upgrading to dnsmasq-2.22 to fix the vulnerability and mentions CAN/...

CVE-2005-0869

phpSysInfo 2.3 is affected by CVE-2005-0869. The issue enables remote attackers to obtain sensitive information by requesting specific PHP files (class.OpenBSD.inc.php, class.NetBSD.inc.php, class.FreeBSD.inc.php, class.Darwin.inc.php, XPath.class.php, system_header.php, system_footer.php), which...

CVE-2005-0884

CVE-2005-0884 (DigitalHive 2.0) is described across NVD and CVE records as a remote-access issue where an attacker can re-install the product by directly accessing the install script. The connected documents confirm the affected product (DigitalHive 2.0) and the described attack vector, but do no...

CVE-2005-0877

Dnsmasq before 2.21 is vulnerable to DNS cache poisoning: remote attackers can inject answers to queries not issued by dnsmasq, potentially compromising DNS integrity. Affected component is the dnsmasq binary; root cause is handling of unsolicited responses that enables cache poisoning. Impact is...

CVE-2005-0873

CVE-2005-0873 covers multiple XSS vulnerabilities in Oracle Reports Server 10g (9.0.4.3.3), specifically in test.jsp via the desname and repprod parameters. The NVD entry confirms remote, non-authenticated XSS with arbitrary script/HTML injection. Nessus plugin notes a remediation: disable access...

CVE-2005-0867

CVE-2005-0867 involves an integer overflow in the Linux kernel 2.6 sysfs_write_file() function. The Ubuntu USN-110-1 and Red Hat RHSA-2005:366 describe a local user could exploit this to crash the kernel or possibly execute code with root privileges by writing to a user-writable sysfs file under ...

CVE-2005-0874

The CVE-2005-0874 entry covers multiple buffer overflows in Trillian 2.0 plug-ins (AIM, MSN, RSS, and others). The root cause is deficient handling of long strings in an HTTP/1.1 response header, enabling a remote attacker to trigger a denial of service (application crash). Exploitation details a...

CVE-2005-0871

The CVE-2005-0871 entry describes a vulnerability in the Topic Calendar 1.0.1 module for phpBB. When run on Microsoft IIS, remote attackers can obtain sensitive information by supplying invalid parameters, which cause error messages to reveal the server path. The affected component is calendar_sc...

CVE-2005-0880

CVE-2005-0880 affects the Vortex Portal’s content.php. An invalid act parameter allows remote attackers to obtain sensitive information by causing a PHP error message that leaks the full pathname. The CVSS data indicates attack vector: network; authentication: none; access: partial confidentialit...

CVE-2005-0872

Topic Calendar 1.0.1 for phpBB is affected. The vulnerability is a cross-site scripting (XSS) flaw in calendar_scheduler.php that allows remote attackers to inject arbitrary web script or HTML through the start parameter. This is documented in multiple sources (OpenVAS entry “Topic Calendar XSS” ...

CVE-2005-0879

CVE-2005-0879 affects Vortex Portal Content Management System. It is a PHP remote file inclusion flaw in content.php and index.php that lets an attacker execute arbitrary PHP code by passing a URL in the act parameter. Documented impact per NVD: partial confidentiality, integrity, and availabilit...

CVE-2005-0398

CVE-2005-0398 affects the racoon daemon in ipsec-tools prior to 0.5. A remote attacker can send malformed ISAKMP packets that trigger a crash, causing a denial of service. The issue is documented in multiple advisories (e.g., Fedora, Ubuntu USN-107-1, Gentoo GLSA) and Red Hat/FreeBSD/OpenVAS entr...

CVE-2005-0881

Cross-site scripting XSS vulnerability in articles.newcomment for Interspire ArticleLive 2005 allows remote attackers to inject arbitrary web script or HTML via the Articleld parameter...

CVE-2005-0881

Interspire ArticleLive 2005 (PHP) contains a cross-site scripting (XSS) vulnerability in the articles.newcomment function, exploitable via the Articleld parameter to inject arbitrary script/HTML. The CVE-2005-0881 entry corresponds to this issue. Public details describe the vulnerability but do n...

CVE-2005-0759

CVE-2005-0759 affects ImageMagick prior to version 6.0, where processing a TIFF image with an invalid tag can cause an application crash (denial of service). The connected advisories confirm this TIFF-tag bug as part of multiple ImageMagick issues disclosed in 2005 and outline that fixed packages...

CVE-2005-0886

CVE-2005-0886 concerns Envision Power Board versions 2.0.2 and earlier, where a cross-site scripting (XSS) vulnerability exists in HTTP POST handling. The description from multiple sources (NVD, Red Hat, CVE registry, and Nessus plugin) states that remote attackers can inject arbitrary web script...

CVE-2005-0889

CVE-2005-0889 describes a cross-site scripting (XSS) vulnerability in Dream4 Koobi CMS 4.2.3, specifically in index.php where the area parameter can be abused to inject arbitrary script/HTML. The vulnerability is documented with a CVSS v2 base score of 4.3 (Medium) and indicates that the attack v...