10535 matches found
CVE-2005-0701
Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\.\.." modified dot dot backslash sequences to UTLFILE functions such as 1 UTLFILE.FOPEN or 2 UTLFILE.frename...
CVE-2005-0736
Integer overflow in sysepollwait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events...
CVE-2005-0703
The CVE-2005-0703 entry concerns Xerox MicroServer Web Server used by WorkCentre models (e.g., M35/M45/M55, Pro series, and others). The vulnerability arises from an unauthenticated account on the embedded web server that allows a remote attacker to modify device configuration, effectively bypass...
CVE-2005-0548
Sun AnswerBook2 (Solaris)
CVE-2005-0207
CVE-2005-0207 corresponds to an unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x where NFS clients can trigger a denial of service via NFS client O_DIRECT error handling. The issue is documented in multiple advisories (RHSA-2005:366 / CESA-2005:366) and CentOS/Ubuntu/NVD entries. Aff...
CVE-2005-0548
Cross-site scripting XSS vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search function...
CVE-2005-0698
PHPWebLog
CVE-2005-0699
The CVE-2005-0699 issue affects Ethereal (Wireshark) up to version 0.10.9 and earlier. It arises from multiple buffer overflows in the dissect_a11_radius function of the CDMA A11 dissector (packet-3g-a11.c). This flaw can allow remote attackers to execute arbitrary code by sending crafted RADIUS ...
CVE-2005-0706
CVE-2005-0706 describes a buffer overflow in the GNOME VFS code path (gnome-vfs/gnome-vfs2) when handling data from CDDB servers. The flaw could allow a remote attacker to cause a crash (DoS) and, in some cases, execute arbitrary code by returning an excessive number of CDDB matches. Public advis...
CVE-2005-0698
PHP remote file inclusion vulnerability in PHPWebLog 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the 1 GPATH parameter to init.inc.php or the 2 PATH parameter to index.php to reference a URL on a remote web server that contains the code...
CVE-2005-0549
CVE-2005-0549 is a cross-site scripting (XSS) vulnerability in Sun/ Solaris AnswerBook2 Documentation 1.4.4 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the View Log Files function. Affected software is explicitly Sun AnswerBook2 documentation prior to...
CVE-2005-0207
Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via ODIRECT...
CVE-2005-0549
Cross-site scripting XSS vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the "View Log Files" function...
CVE-2005-0736
Integer overflow in sysepollwait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events...
BELL-CVE-2005-0736 CVE-2005-0736 does not affect BellSoft software
Bulletin has no description...
Debian DSA-692-1 : kdenetwork - design flaw
The KDE team fixed a bug in kppp in 2002 which was now discovered to be exploitable by iDEFENSE. By opening a sufficiently large number of file descriptors before executing kppp which is installed setuid root a local attacker is able to take over privileged file descriptors. %NASLMINLEVEL 70300 C...
CVE-2005-0099
The CVE relates to the SDL port of abuse (abuse-SDL) prior to version 2.00, where privileges were not dropped before creating certain files. This allows local users to create or overwrite arbitrary files. Debian and SUSE advisories confirm the issue as CAN-2005-0099 with a local-priority impact; ...
CVE-2005-0098
The CVE-2005-0098 entry concerns abuse, the SDL port of the Abuse game. Official advisories (CAN-2005-0098 and CAN-2005-0099) describe local, pre-2.00 buffer overflows in command-line handling that could let an attacker gain arbitrary code execution with elevated privileges, and file-creation fla...
CVE-2005-0693
JoWood Chaser 1.50 and earlier is affected by a buffer overflow in the nickname handling, allowing remote attackers to cause a client or server crash and to execute arbitrary code. The vulnerability is triggered by sending a long nickname, leading to memory corruption. Public references list advi...