CVE-2005-3329

CVE-2005-3329 is an XSS vulnerability in RSA Authentication Agent for Web 5.3 and earlier that allows injection of script or HTML via the image parameter in a GetPic operation. Exploitation details in the sources show an advisory and PoC context around XSS in RSA’s web login flow; vendor fix is R...

CVE-2005-3327

CVE-2005-3327 affects Network Appliance Data ONTAP 7.0 and earlier. A modified iSCSI client can bypass authentication by skipping the Security (Start) mode required by the Login Negotiation protocol and operating in Operational mode without proving identity, exposing partial confidentiality, inte...

CVE-2005-3241

Summary: CVE-2005-3241 affects Ethereal 0.10.12 and earlier. The vulnerability involves memory-exhaustion denial of service in the FC-FCS, RSVP, and ISIS-LSP dissectors (and related disclosures across other dissectors). The Debian, Gentoo, OpenVAS, Red Hat, and SLES advisories in the connected do...

CVE-2005-3243

Ethereal (Wireshark predecessor)

CVE-2005-3325

CVE-2005-3325 concerns SQL injection in ACID/BASE consoles (acidlab/acidbase) due to missing input sanitising and improper parameter validation. Debian and related advisories (DSA-893-1) confirm remote exploitation via base_qry_main.php/acid_qry_main.php and related console components, with fixed...

CVE-2005-3249

CVE-2005-3249 affects Ethereal up to version 0.10.12 (vulnerability in the WSP dissector). The root cause described in connected MDKSA-2005:193-2 is that the WSP dissector could free an invalid pointer, enabling a remote attacker to cause a denial of service or memory corruption. A patched versio...

CVE-2005-3323

CVE-2005-3323 affects docutils in Zope: Zope 2.6, Zope 2.7 before 2.7.8, and Zope 2.8 before 2.8.2 are vulnerable. The flaw allows remote attackers to include arbitrary files via include directives in RestructuredText functionality. Root cause: insecure handling of include directives in docutils ...

CVE-2005-3267

CVE-2005-3267 affects Skype clients on Windows (pre-1.4.x.84), macOS (pre-1.3.x.17), Linux (pre-1.2.x.18), and older 1.1.x.6 and earlier. An integer overflow in handling crafted network data (large Object Counter) triggers a heap-based buffer overflow, leading to remote denial of service (crash);...

CVE-2005-3319

The CVE-2005-3319 description applies to PHP 5.x before 5.1.0 final and PHP 4.4 before 4.4.1 final, specifically via the apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php). It allows a denial of service (segmentation fault) by manipulating the session.save_path option in a .htacc...

CVE-2005-3330

The httpsrequest function in Snoopy 1.2, as used in products such as 1 MagpieRSS, 2 WordPress, 3 Ampache, and 4 Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function...

CVE-2005-3337

CVE-2005-3337 affects MantisBT (Mantis) prior to version 0.19.3. The connected sources confirm multiple vulnerabilities, notably cross‑site scripting (XSS) flaws exploitable to inject script/HTML via unknown vectors and specifically through mantis/view_all_set.php. The OpenVAS/Nessus entries grou...

CVE-2005-3246

CVE-2005-3246 affects Ethereal (Wireshark) dissectors, specifically the NCP and RTnet modules, causing a denial of service via a null pointer dereference. The connected OpenVAS/Debian entries corroborate remote exploitation with memory issues in multiple Ethereal dissectors and list CVE-2005-3246...

CVE-2005-3321

Affected software: SuSE Linux 9.0–10.0. Vulnerable component: chkstat. Local users can cause weaker file permissions by creating a hardlink to a file from a world-writable directory, which reduces the link count to 1 when the original file is deleted or replaced, after which chkstat updates permi...

CVE-2005-3330

The httpsrequest function in Snoopy 1.2, as used in products such as 1 MagpieRSS, 2 WordPress, 3 Ampache, and 4 Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function...

CVE-2005-2973

CVE-2005-2973 : Linux kernel vn UDPv6 port handling flaw in udp_v6_get_port (in Linux 2.6 before 2.6.14-rc5) allows a local user, when IPv6 is enabled, to trigger an infinite loop and kernel crash (local DoS). Ubuntu advisory USN-219-1 references this CVE and notes kernel updates as remediation. ...

CVE-2005-3323

docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in RestructuredText functionality...

CVE-2005-3318

CVE-2005-3318 is a buffer overflow in CHMLIB’s _chm_decompress_block() used by chmlib (e.g., in KchmViewer). The vulnerability allows an attacker to execute arbitrary code by processing specially crafted CHM ITSS/CHM content. The issue is associated with CHMLIB versions before 0.37, and multiple ...

CVE-2005-3245

CVE-2005-3245 affects Ethereal (0.10.3–0.10.12) with the ONC RPC dissector. When the option “Dissect unknown RPC program numbers” is enabled, a remote attacker could cause memory exhaustion leading to a denial of service. Advisories and records indicate upgrading to Ethereal 0.10.13 fixes the iss...

CVE-2005-3322

CVE-2005-3322 affects Squid running on SUSE Linux 9.0. The issue is described as an unspecified vulnerability that allows remote attackers to cause a denial of service (crash) via HTTPS (SSL). The public sources do not provide a concrete root cause, exploit details, or explicit remediation steps ...

CVE-2005-3336

CVE-2005-3336 is an SQL injection vulnerability in MantisBT (Mant is bug-tracking software), affecting 1.0.0RC2 and 0.19.2. Public advisories (Debian DSA-905-1, GLSA 200510-24, OpenVAS entries) describe remote execution of arbitrary SQL commands due to injection vectors in MantisBT core. Debian/G...