CVE-2005-0623

CVE-2005-0623 affects RaidenHTTPD 1.1.32 and possibly earlier versions before 1.1.34. The vulnerability is a buffer overflow in URL handling that enables remote attackers to execute arbitrary code. The connected documents confirm the affected software and impact; exploitation details are not prov...

CVE-2005-0619

The CVE-2005-0619 entry describes Einstein 1.0.1 storing usernames and passwords in plaintext in the Windows registry, enabling local privilege escalation. Affected component: registry-stored credentials within Einstein 1.0.1. Root cause: insecure plaintext storage of sensitive data in the regist...

CVE-2005-0622

RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to view the PHP source code via an HTTP GET request for a filename with a trailing 1 . dot or 2 space...

CVE-2005-0633

Buffer overflow in Trillian 3.0 and Pro 3.0 allows remote attackers to execute arbitrary code via a crafted PNG image file...

CVE-2005-0639

Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via "buffer management errors" from certain image properties, some of which may be related to integer overflows in PPM files...

CVE-2005-0624

reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords...

RHEL 4 : firefox (RHSA-2005:176)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:176 advisory. Mozilla Firefox is an open source Web browser. A bug was found in the Firefox string handling functions. If a malicious website is able to...

CVE-2005-0602

Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges...

CVE-2005-0607

CubeCart 2.0.0–2.0.5 allows remote attackers to determine the server’s full path by calling certain PHP files without parameters (information.php, language.php, list_docs.php, popular_prod.php, sale.php, subfooter.inc.php, subheader.inc.php, cat_navi.php, check_sum.php). The flaw exposes the serv...

CVE-2005-0599

Cisco devices running Application and Content Networking System ACNS 4.x, 5.0, or 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service CPU consumption via malformed IP packets...

CVE-2005-0608

CVE-2005-0608: A heap-based buffer overflow in WebMod’s server.cpp affects WebMod 0.47 (and older than 0.48). The vulnerability allows a remote attacker to crash the service and potentially execute arbitrary code via a POST request whose Content-Length underestimates the actual data sent. Impact ...

CVE-2005-0598

Cisco ACNS RealServer RealSubscriber (ACNS 5.1) can be remotely DoS’d via malformed IP packets, causing the device to exhaust CPU (often 100%) and require a reboot to recover. Remediation per the CERT/ Cisco advisory: apply a patch or upgrade, or disable RealSubscriber and/or restrict access with...

CVE-2005-0600

Technical details about CVE-2005-0600 are not publicly provided in the supplied documents. Monitor for updates from authoritative sources.

CVE-2005-0606

CubeCart 2.0.0–2.0.5 contains a Cross‑Site Scripting (XSS) vulnerability in settings.inc.php. The issue allows remote attackers to inject arbitrary HTML/web script via any of the following parameters used across multiple PHP files: cat_id, PHPSESSID, view_doc, product, session, catname, search, o...

CVE-2005-0603

The CVE-2005-0603 entry concerns phpBB up to version 2.0.12 where the viewtopic.php endpoint mishandles the highlight parameter containing invalid regular expression syntax. This causes a PHP error message that reveals the installation path, constituting a path disclosure vulnerability. Affected ...

CVE-2005-0596

Consolidated details from connected sources confirm CVE-2005-0596 affects PHP 4’s readfile() function. The underlying issue is that reading a file whose size is a multiple of the system page size can crash the httpd/daemon, yielding a denial-of-service condition. The vulnerability is described as...

CVE-2005-0606

Cross-site scripting XSS vulnerability in settings.inc.php for CubeCart 2.0.0 through 2.0.5, as used in multiple PHP files, allows remote attackers to inject arbitrary HTML or web script via the 1 catid, 2 PHPSESSID, 3 viewdoc, 4 product, 5 session, 6 catname, 7 search, or 8 page parameters...

CVE-2005-0595

Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand parameter...

CVE-2005-0598

The RealServer RealSubscriber on Cisco devices running Application and Content Networking System ACNS 5.1 allow remote attackers to cause a denial of service CPU consumption via malformed packets...

CVE-2005-0597

Cisco devices running Application and Content Networking System ACNS 5.0 before 5.0.17.6 and 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service process restart via a "crafted TCP connection."...