CVE-2005-0736

CVE-2005-0736 entry is rejected/not used and does not represent an active vulnerability.

CVE-2005-0737

CVE-2005-0737 describes a buffer overflow in Yahoo! Messenger that allows remote attackers to execute arbitrary code via the offline mode. The vulnerability is associated with Yahoo! Messenger; the underlying cause is a buffer overflow condition, enabling potential arbitrary code execution and im...

CVE-2005-0746

CVE-2005-0746 affects the Mini FTP server component of Novell iChain 2.2 and 2.3 SP2 and earlier, where remote unauthenticated attackers can obtain the full server path by issuing the PWD command. The available connected documents confirm the vulnerability description and affected versions, but d...

CVE-2005-0745

The CVE-2005-0745 entry concerns UTStarcom iAN-02EX VoIP ATA. A local attacker can bypass ATA access restrictions by dialing *#26845#, which triggers a device reset. This is a local-attack scenario with partial confidentiality/integrity/availability impact per CVSSv2 (AV:L, AC:L, I:P, A:P). No ex...

CVE-2005-0733

The CVE-2005-0733 entry concerns PY Software Active Webcam WebServer (webcam.exe) 5.5. It enables remote attackers to determine whether a full path exists by issuing HTTP requests, with differing responses based on file existence, resulting in information disclosure. Affected component: Active We...

CVE-2005-0732

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to obtain the full path of the web server via a request for a non-existent filename, which leaks the full path in an error message...

CVE-2005-0731

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to cause a denial of service CPU consumption via a direct request to Filelist.html...

CVE-2005-0748

Technical details about CVE-2005-0748 are not publicly available in the provided documents. Monitor for updates.

CVE-2005-0740

The CVE-2005-0740 issue affects OpenBSD releases 3.5 and 3.6, where the TCP stack (tcp_input.c) is vulnerable to crafted values in the TCP timestamp option. This can cause the system to panic (denial of service) by resulting in invalid arguments during retransmit timeout calculation. The availabl...

CVE-2005-0731

CVE-2005-0731 affects PY Software Active Webcam WebServer (webcam.exe) 5.5. A remote attacker can trigger a denial of service by requesting Filelist.html, leading to increased CPU usage and service impact. The NVD lists a base score of 5.0 (MEDIUM) with network attack vector and partial availabil...

CVE-2005-0732

The CVE-2005-0732 entry concerns PY Software Active Webcam WebServer (webcam.exe) v5.5. Public sources (NVD) state that remote attackers can cause the server to disclose the full installation path by requesting a non-existent filename, leaking the path in an error message. This is classified with...

CVE-2005-0734

CVE-2005-0734 affects PY Software’s Active WebCam WebServer (webcam.exe) version 5.5. The available documents state that remote attackers can cause a denial of service through a flood of HTTP requests, leading to memory exhaustion and a process crash. The root cause is not explicitly detailed in ...

CVE-2005-0744

The CVE-2005-0744 issue affects the web GUI of Novell iChain versions 2.2 and 2.3 SP2/SP3. The underlying risk is session hijacking leading to administrator privileges via two methods: (1) sniffing the connection on TCP port 51100 and replaying authentication data, and (2) obtaining and replaying...

CVE-2005-0738

CVE-2005-0738 affects Microsoft Exchange Server 2003 SP1. The vulnerability is a stack consumption issue in the Information Store (Store.exe) caused by processing folders with deeply nested subfolders, leading to a denial-of-service (hang) due to a large number of recursive calls. This is the exp...

CVE-2005-0739

CVE-2005-0739 affects Ethereal (IAPP dissector, packet-iapp.c) from versions 0.9.1 through 0.10.9. The root cause is improper handling of string formatting in assessors for dissect_pdus and pduval_to_str, which could lead to buffer overflows. The documented impact includes potential compromise of...

CVE-2005-0735

The CVE refers to NewsScript’s newsscript.pl CGI, where an attacker can escalate privileges remotely by sending mode=admin. Affected product: NewsScript (NewsScript.co.uk). Root cause: incomplete access validation in the CGI parameters allowing admin rights to be set via the mode parameter. Impac...

CVE-2005-0721

CVE-2005-0721 affects eXPerience2: remote PHP file inclusion via modules.php by modifying the file parameter to reference a remote URL containing code. This allows an attacker to execute arbitrary PHP code on the target server. The description from multiple sources confirms the vulnerability clas...

CVE-2005-0727

CVE-2005-0727 is a duplicate of CVE-2005-0735. Connected sources detail a remote privilege-escalation in NewsScript (NewsScript.co.uk) via the CGI parameter mode; setting mode=admin bypasses authentication and allows the attacker to add, delete, or modify news content. This vulnerability affects ...

CVE-2005-0718

Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service segmentation fault by aborting the connection during a 1 PUT or 2 POST request, which causes Squid to access previously freed memory...

CVE-2005-0726

The CVE-2005-0726 entry concerns UBB.threads 6.0, where the editpost.php script is vulnerable to SQL injection via the Number parameter. The root cause is insufficient sanitization in editpost.php, allowing a remote attacker to execute arbitrary SQL commands. Impact includes potential data exposu...