CVE-2005-0776

CVE-2005-0776 affects PhotoPost PHP 5.0 RC3, where adm-photo.php does not properly verify administrative privileges before manipulating photos. This could allow remote attackers to modify other users’ photos. The vulnerability details are described in multiple sources (e.g., NVD entry), but the p...

CVE-2005-0787

Wine 20050211 and earlier creates temporary registry dump files in /tmp with world-readable permissions and predictable names, enabling local users to read sensitive data (e.g., passwords). The issue is documented across multiple feeds (NVD, OSV, UBUNTU/CVE pages, OpenVAS listings) with consisten...

CVE-2005-0352

Servers Alive 4.1 and 5.0 contain a local privilege-escalation when run as a service: loading the Local manual under help does not drop SYSTEM privileges, allowing a local user to obtain SYSTEM context and fully compromise the host. The vulnerability arises from the service context interacting wi...

CVE-2005-0781

CVE-2005-0781 affects paFileDB 3.1 and earlier, with SQL injection in viewall.php and category.php via the start parameter to pafiledb.php, enabling remote execution of arbitrary SQL commands. The vulnerability is documented in NVD as a SQLi in paFileDB 3.1 and earlier; exploitation details are n...

CVE-2005-0803

CVE-2005-0803 is an EMF/WMF rendering vulnerability in Windows. The Enhanced Metafile rendering API in GDI32.DLL can crash or be exploited remotely when a specially crafted EMF/WMF file is processed, due to an unchecked buffer/invalid offsets (end, emreof, palent). Affects Windows 2000, Windows X...

CVE-2005-0799

CVE-2005-0799 affects MySQL 4.1.9 and earlier. A remote attacker with certain privileges can cause a denial of service (application crash) by issuing a DoS payload: a SQL command starting with a use statement followed by an MS-DOS device name (e.g., LPT1 or PRN). The issue is demonstrated by the ...

CVE-2005-0817

CVE-2005-0817 affects Symantec Gateway products by a DNS proxy service (DNSD.exe) that caches DNS responses without proper verification, enabling DNS cache poisoning and potential site spoofing/Man-in-the-Middle. Affected products include DNS proxy/cache in Symantec Gateway Security 5400/5300, En...

CVE-2005-0811

CVE-2005-0811 concerns the NotifyLink 3.0 web interface, where authenticated users can bypass GUI-enabled access restrictions by issuing direct requests to restricted URLs. The underlying issue is ineffective server-side access control for features that are disabled in the user interface, enablin...

CVE-2005-0789

Summary: CVE-2005-0789 is a directory traversal vulnerability in LimeWire 3.9.6–4.6.0 that lets remote attackers read arbitrary files via a .. in a magnet request. The affected component is LimeWire’s handling of magnet/Gnutella requests; the underlying issue is directory traversal in user-contro...

CVE-2005-0780

CVE-2005-0780 affects paFileDB 3.1 and earlier, where remote attackers can trigger PHP errors via direct requests to auth.php, login.php, category.php, file.php, team.php, license.php, custom.php, admins.php, or backupdb.php, revealing the server path and potentially sensitive information. The pu...

CVE-2005-0806

CVE-2005-0806 affects Evolution (notably 2.0.3) and enables a remote attacker to cause a denial of service (application crash or hang) by sending crafted messages, with possible involvement of charset handling in attachment filenames. The issue is corroborated by multiple advisories: RHSA-2005:39...

CVE-2005-0785

CVE-2005-0785 describes a cross-site scripting (XSS) vulnerability in YaBB 2.0 rc1, specifically in the YaBB.pl usersrecentposts action. The issue arises from unsafely handling the username parameter, allowing an attacker to inject arbitrary web script or HTML that could run in a victim’s browser...

CVE-2005-0779

CVE-2005-0779 affects PlatinumFTP 1.0.18 and possibly earlier versions. A remote attacker can cause a denial of service (server crash) by initiating multiple connections with a backslash in the username. The connected sources confirm the same description, but there are no details in the provided ...

CVE-2005-0774

CVE-2005-0774 affects PhotoPost PHP 5.0 RC3. The SQL injection occurs in member.php (and possibly other scripts) via the uid parameter, enabling remote attackers to execute arbitrary SQL commands. This is reported as a high-severity issue (CVSS vector: AV:N/AC:L/Au:N/C:P/I:P/A:P). Connected docum...

CVE-2005-0819

The CVE-2005-0819 entry concerns the xvesa code in Novell NetWare 6.5 SP2 and SP3. The flaw allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start. No explicit exploit details, affected versions, or remediation are provided beyond the descr...

CVE-2005-0813

The CVE-2005-0813 entry describes a buffer overflow in the Initial Redirect (ir) Squid Proxy Plug-In versions 0.1 and 0.2. The underlying flaw is a buffer overflow in the plug-in, with potential impacts including denial of service and arbitrary code execution. The description notes that exploitat...

CVE-2005-0821

Unknown vulnerability in Citrix MetaFrame Conferencing Manager 3.0 allows conference members to bypass organizer restrictions to control the keyboard and mouse...

Important: Red Hat Security Advisory: sylpheed security update

An updated sylpheed package that fixes a buffer overflow issue is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Sylpheed is a GTK+ based fast email client. A buffer overflow bug has been found in the way Sylpheed handles...

Moderate: Red Hat Security Advisory: ethereal security update

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...

CVE-2005-0515

CVE-2005-0515 affects Smc.exe in My Firewall Plus 5.0 build 1117 (and possibly other versions). The issue is that it does not drop privileges before launching the Log Viewer export functionality, allowing local users to corrupt arbitrary files by saving log files. Exploitation details are not pro...