CVE-2005-0601

CVE-2005-0601 affects Cisco’s Application and Content Networking System (ACNS) 4.x, 5.0, 5.1, and 5.2. The issue arises when the setup dialog has not been run, leaving a default password that could allow remote attackers to gain access. The connected documents do not provide specific technical de...

CVE-2005-0595

CVE-2005-0595 is a public buffer-overflow vulnerability in BadBlue 2.55/2.5 where ext.dll overflows via a long mfcisapicommand parameter, enabling remote code execution. Public disclosures include SPL/Metasploit-era exploits (BadBlue 2.5 EXT.dll Buffer Overflow) and OSVDB/BID/CVE references; CIRC...

CVE-2005-0630

sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the orig parameter...

CVE-2005-0599

CVE-2005-0599 affects Cisco Application and Content Networking System (ACNS) 4.x, 5.0, and 5.1 prior to 5.1.11.6. Exploitation by remote attackers via malformed IP packets can cause CPU exhaustion, leading to a denial of service on affected devices. A reboot is required to recover. Remediation: u...

CVE-2005-0597

CVE-2005-0597 affects Cisco ACNS (Application and Content Networking System) versions 5.0 prior to 5.0.17.6 and 5.1 prior to 5.1.11.6. The vulnerability allows remote attackers to cause a denial of service (process restart) by sending a crafted TCP connection. No exploit details are provided in t...

CVE-2005-0602

CVE-2005-0602 affects unzip 5.51 and earlier, where extracting setuid/setgid files may not warn the user, enabling local privilege escalation. Multiple connected docs corroborate: Ubuntu USN-159-1 describes unzip vulnerability and remediation guidance; Mandrake MDKSA-2005:197 notes the issue and ...

CVE-2005-0608

Heap-based buffer overflow in server.cpp for WebMod 0.47 allows remote attackers to cause a denial of service crash and execute arbitrary code via a POST request with a Content-Length that is less than the amount of data that is actually sent...

CVE-2005-0600

Cisco devices running Application and Content Networking System ACNS 5.0, 5.1 before 5.1.13.7, or 5.2 before 5.2.3.9 allow remote attackers to cause a denial of service bandwidth consumption via "crafted IP packets" that are continuously forwarded...

CVE-2005-0604

CVE-2005-0604 affects lnss.exe in GFI Languard Network Security Scanner 5.0 . The vulnerability is that the program stores the username and password in memory in plaintext, which could allow local administrators to obtain domain administrator credentials. This is the stated impact in the records,...

SUSE-SA:2005:012: imap

The remote host is missing the patch for the advisory SUSE-SA:2005:012 imap. The University of Washington imap daemon can be used to access mails remotely using the IMAP protocol. This update fixes a logical error in the challenge response authentication mechanism CRAM-MD5 used by UW IMAP. Due to...

glFTPd Multiple Script ZIP File Handling Arbitrary File / Directory Access

The remote glFTPD server fails to properly sanitize user-supplied input to the 'sitenfo.sh', 'sitezpichk.sh', and 'siteziplist.sh'. An attacker could exploit this flaw to disclose arbitrary files by sending a spcially crafted request to the remote host. C Tenable Network Security, Inc...

CVE-2005-0589

CVE-2005-0589 affects Firefox before 1.0.1. The Form Fill feature can allow remote attackers to steal potentially sensitive information by monitoring values generated by the autocomplete capability. This is described in the NVD entry and echoed by multiple advisories (e.g., RHSA-2005:176, GLSA-20...

CVE-2005-0591

CVE-2005-0591 affects Firefox prior to 1.0.1, allowing remote spoofing of the security and download modal dialogs (Firespoofing). Red Hat advisory RHSA-2005:176 and CentOS notes indicate that Firefox was updated and recommend upgrading to Mozilla 1.7.7 to remediate the issue.

CVE-2005-0586

Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the extensions of files to download via the Content-Disposition header, which could be used to trick users into downloading dangerous content...

CVE-2005-0586

CVE-2005-0586 affects Firefox < 1.0.1 and Mozilla

CVE-2005-0585

CVE-2005-0585 affects Firefox <1.0.1 and Mozilla

CVE-2005-0208

The vulnerability CVE-2005-0208 affects the Gaim client HTML parser prior to version 1.1.4, where malformed HTML can trigger an invalid memory access and cause an application crash (DoS). This is the primary issue described (distinct from CVE-2005-0473). Remediation is upgrading Gaim to 1.1.4 or ...

CVE-2005-0592

CVE-2005-0592 describes a heap-based buffer overflow in the UTF8ToNewUnicode function affecting Firefox before 1.0.1 and Mozilla before 1.7.6. The flaw can be triggered by invalid UTF-8 sequences that yield a zero length value, potentially allowing a remote attacker to crash the browser or execut...

CVE-2005-0591

Firefox before 1.0.1 allows remote attackers to spoof the 1 security and 2 download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka "Firespoofing."...

CVE-2005-0590

The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long "user:pass" sequence in the URL, which appears before the real...