CVE-2005-0581

Multiple buffer overflows in Computer Associates CA License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code via 1 certain long fields in the Checksum item in a GCR request, 2 a long IP address, hostname, or netmask values in a GCR request, 3 a long last parameter in a...

CVE-2005-0621

Scrapland 1.0 and earlier allows remote attackers to cause a denial of service server termination by triggering an error, which is treated as a fatal error by the server, as demonstrated using 1 signed integers for size values, 2 an invalid model, 3 a "newpos" value that is less than or equal to ...

CVE-2005-0612

CVE-2005-0612 affects Cisco IP/VC Videoconferencing System models 3510, 3520, 3525 and 3530. The issue is hard-coded default SNMP community strings, enabling remote attackers to gain access and potentially cause a denial of service and modify configuration. Base metrics indicate network-based, lo...

CVE-2005-0611

RealNetworks RealPlayer/RealOne Player WAV parsing (LIST chunk) suffers a heap-based buffer overflow that can allow remote code execution via crafted WAV files. Affected: RealPlayer 10.5 (6.0.12.1056 and earlier), RealPlayer 10, 8, RealOne Player V2/V1. Some connected advisories note exploitation...

CVE-2005-0582

CVE-2005-0582 describes a buffer overflow in Computer Associates License Client 0.1.0.15 (License Client/Server) that can be triggered by a long filename in a PUTOLF request, allowing remote code execution with SYSTEM/root privileges on affected platforms. Connected advisories confirm a CA Licens...

CVE-2005-0622

RaidenHTTPD 1.1.32 (and possibly earlier than 1.1.34) is affected by CVE-2005-0622. The issue allows remote attackers to view the PHP source code by issuing an HTTP GET for a filename that ends with a trailing dot or a trailing space. The vulnerability impacts confidentiality (partial) and is exp...

CVE-2005-0581

Summary of vulnerability facts (CVE-2005-0581) : The CA License Client/Server/GCR components used in CA BrightStor ARCserve Backup 11.0 (and related CA License Server/Client software) are affected by a stack/buffer overflow when processing certain malformed or overly long GCR messages and GETCONF...

CVE-2005-0618

The issue is a load-balancing defect in SMTP binding on several Symantec/Nexland devices that can cause outbound SMTP traffic intended for a trusted network to be sent over an untrusted path when two WANs are used. Affected products and firmware: Symantec Firewall/VPN Appliance 200/200R (before 1...

CVE-2005-0582

Buffer overflow in Computer Associates CA License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in a PUTOLF request...

CVE-2005-0618

The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460/460R firmware before vuild 858, and Nexland Pro800turbo, when configured for load balancing between two WANs, might send SMTP traffic to a trusted network...

CVE-2005-0625

reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd...

CVE-2005-0455

Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 6.0.12.1056 and earlier, 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value...

CVE-2005-0638

xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command...

CVE-2005-0625

CVE-2005-0625 affects reportbug 3.2, where settings from .reportbugrc are included in bug reports, exposing sensitive data such as smtpuser and smtppasswd. The underlying issue is the unintended leakage of stored mail credentials via bug reports. The impact is credential exposure; the available s...

CVE-2005-0624

CVE-2005-0624 affects reportbug before 2.62; .reportbugrc is created with world‑readable permissions, allowing local users to obtain email smarthost passwords. Impact: partial confidentiality; exploit requires local access. NVD metrics show LOW severity (AV:L, AC:L, AU:N). The provided documents ...

CVE-2005-0638

xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command...

CVE-2005-0605

scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmapunit value that leads to a buffer overflow...

CVE-2005-0617

CVE-2005-0617 describes an SQL injection vulnerability in PostNuke versions 0.750 and 0.760-RC2 that allows remote attackers to execute arbitrary SQL commands via the show parameter in dl-search.php. The issue is confirmed by the NVD entry and related OpenVAS/Nessus advisories referencing PostNuk...

CVE-2005-0455

CVE-2005-0455 is a stack-based buffer overflow in RealPlayer/RealOne SMIL parsing (CSmil1Parser::testAttributeFailed in smlparse.cpp) triggered by crafted SMIL files with large system-screen-size values. Affects RealPlayer 10.5 (6.0.12.1056 and earlier), RealPlayer 10/8, and RealOne Player V1/V2....

CVE-2005-0620

The CVE-2005-0620 entry concerns Einstein 1.0, where credit card information is stored in plaintext within the world-readable wallets.dat. This plaintext storage enables local users to access sensitive data. The description confirms the affected component (wallets.dat containing credentials) and ...