CVE-2005-0370

Armagetron 0.2.6.0 and earlier, and Armagetron Advanced 0.2.7.0 and earlier, are affected by a DoS vulnerability where remote attackers can trigger a network disconnection by sending an empty UDP packet. The packet is not properly distinguished from the socket’s “no new packets” state, enabling t...

CVE-2005-0369

Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 earlier allows remote attackers to cause a denial of service application crash via a packet with a large 1 descriptor ID or 2 claimid, which exceeds the boundaries of an array...

CVE-2005-0371

Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 and earlier allow remote attackers to cause a denial of service freeze via a large number of player connections that do not send any data...

CVE-2005-0371

CVE-2005-0371 affects Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 and earlier. The vulnerability allows remote attackers to cause a denial of service (freeze) by establishing a large number of connections that send no data. The connected sources confirm the DoS outcome but do n...

CVE-2005-0369

CVE-2005-0369 affects Armagetron 0.2.6.0 and earlier, and Armagetron Advanced 0.2.7.0 and earlier. The vulnerability allows remote attackers to cause a denial of service (application crash) by sending a packet with a large descriptor_id or claim_id that exceeds array boundaries. The technical det...

CVE-2005-0365

The CVE-2005-0365 issue affects KDE’s dcopidlng component in KDE 3.2.x and 3.3.x, where temporary files are created with predictable filenames, enabling local users to overwrite arbitrary files via a symlink attack. Connected documents confirm insecure temporary-file usage in dcopidlng and refere...

CVE-2005-0349

The CVE-2005-0349 entry covers BrightStor ARCserve Backup 11.1 UniversalAgent for UNIX, where the production release contains hard-coded credentials that enable remote access to the file system and may allow execution of arbitrary commands. Connected details specify a default/admin-like account w...

CVE-2005-0369

Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 earlier allows remote attackers to cause a denial of service application crash via a packet with a large 1 descriptor ID or 2 claimid, which exceeds the boundaries of an array...

CVE-2005-0370

Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 and earlier allow remote attackers to cause a denial of service network disconnection via an empty UDP packet, which is not properly distinguished from the "no new packets" state of the associated socket...

CVE-2005-0366

The integrity check feature in OpenPGP, when handling a message that was encrypted using cipher feedback CFB mode, allows remote attackers to recover part of the plaintext via a chosen-ciphertext attack when the first 2 bytes of a message block are known, and an oracle or other mechanism is...

CVE-2005-0367

This entry documents directory-traversal flaws in ArGoSoft Mail Server (notably versions around 1.8.7.3/1.8.7.6) that allow remote authenticated users to read, delete, or upload arbitrary files. The root cause is traversal via .. in multiple vectors: the filename of an email attachment, the _msga...

CVE-2005-0364

CVE-2005-0364 pertains to an unknown vulnerability in HP-UX BIND 9.2.0 running on HP-UX releases B.11.00, B.11.11, and B.11.23 that could be exploited remotely to cause a denial of service. The connected documents indicate this is addressed by the HP-UX update HPSBUX01117 (SSRT4861 rev.2) for BIN...

CVE-2005-0271

CVE-2005-0271 concerns ReviewPost (PHP Pro)

CVE-2005-0286

The CVE-2005-0286 issue affects eMotion MediaPartner Web Server 5.0 and 5.1. A remote attacker can request a .bhtml file ending with a dot (.) or a plus sign (+) to retrieve the file’s source code. The vulnerability description specifies this behavior but does not provide root-cause details, affe...

CVE-2005-0277

The CVE-2005-0277 entry describes a buffer overflow in the 3Com 3CDaemon 2.0 FTP server (revision 10) that allows remote denial of service and arbitrary code execution via (1) a long USER username or (2) an FTP command with a long argument (e.g., cd, send, ls). Connected documents confirm concret...

CVE-2005-0261

lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which allows local users to read one line of arbitrary files...

CVE-2005-0288

The change password functionality in Bottomline Webseries Payment Application does not require the old password when users enter a new password, which could allow remote authenticated users to change other users' passwords...

CVE-2005-0347

RealArcade software (versions up to 1.2.0.994) is affected by an integer overflow in handling an RGS file with an invalid size string for the GUID and game name, which leads to a buffer overflow and potential remote code execution. The provided documentation does not specify exact vulnerable comp...

CVE-2005-0288

CVE-2005-0288 concerns the Bottomline Webseries Payment Application. The change-password function does not require the old password when setting a new one, which could allow an authenticated user to change other users’ passwords. The description provided does not specify affected versions/builds ...

CVE-2005-0325

Xpand Rally 1.0.0.0 allows remote attackers or remote malicious game servers to cause a denial of service application crash via a packet with large values that are not properly handled in certain malloc or memcpy operations...