10535 matches found
CVE-2005-2851
CVE-2005-2851 affects smb4k and related versions prior to 0.6.3, enabling local users to read sensitive files via a symlink attack on temporary files (smb4k.tmp, or sudoers/super.tab). The underlying issue is that Smb4K writes contents to a target file pointed to by an insecure pre-existing symli...
CVE-2005-2855
CVE-2005-2855 affects Unclassified NewsBoard 1.5.3 with a cross-site scripting (XSS) vulnerability in the description field. The issue allows remote attackers to inject arbitrary web script or HTML by supplying crafted content to that field, enabling client-side code execution in the context of t...
CVE-2005-2868
ZipTorrent 1.3.7.3 is affected by CVE-2005-2868 because it stores sensitive data in plaintext in the pref.txt file. This plaintext storage can allow local users to obtain information such as proxy server details and passwords. Impact is limited to local access scenarios with partial confidentiali...
CVE-2005-2856
CVE-2005-2856 describes a stack-based buffer overflow in the WinACE UNACEV2.DLL used by many products (e.g., ALZip, Total Commander, IZArc, BitZipper, UltimateZip, etc.). The flaw occurs when extracting an ACE archive with an overly long filename, allowing user-assisted attackers to execute arbit...
CVE-2005-2861
CVE-2005-2861 affects N-Stealth Commercial Edition before 5.8.0.38 and Free Edition before 5.8.1.03. It is a cross-site scripting (XSS) vulnerability where the Server header in an HTTP response is directly injected into an HTML report, enabling remote attackers to inject arbitrary script/HTML. Th...
CVE-2005-2865
CVE-2005-2865 affects AMember Pro 2.3.4. The vulnerability is multiple PHP remote file inclusion via the config[root_dir] parameter in 19 include scripts, enabling execution of arbitrary PHP code. The available documents do not provide remediation steps or patch versions. Exploit details are not ...
CVE-2005-2864
CVE-2005-2864 describes a local vulnerability in URBAN 1.5.3_1 where local users can overwrite arbitrary files through a symlink attack targeting the (1) high score or (2) save game files. The core root cause is a symlink-related file overwrite path that an unprivileged user can exploit, with a r...
CVE-2005-2847
img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter...
CVE-2005-2856
Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including 1 ALZip 5.51 through 6.11, 2 Servant Salamander 2.0 and 2.5 Beta 1, 3 WinHKI 1.66 and 1.67, 4 ExtractNow 3.x, 5 Total Commander 6.53, 6 Anti-Trojan 5.5.421,...
CVE-2005-2849
CVE-2005-2849 affects Barracuda Spam Firewall firmware 3.1.16 and 3.1.17. The vulnerability is an argument injection in CGI scripts that grant attackers the following capabilities: read portions of source code via the -f option to Dig (dig_device.cgi); determine file existence via the -r option t...
CVE-2005-2859
Savant Web Server stores user credentials in plaintext in the Savant\Users registry key, enabling local privilege escalation. Affected component: Savant Web Server; root cause: plaintext credential storage leading to unauthorized access. CVSS2 shows LOCAL attack with low complexity; base impact i...
CVE-2005-2844
The CVE-2005-2844 issue affects Indiatimes Messenger 6.0: a buffer overflow in MMClient.exe’s RenameGroup function via a long group name argument of the MMClient.MunduMessenger.1 ActiveX object can cause denial of service and may allow arbitrary code execution. Documents confirm the vulnerable co...
CVE-2005-2848
CVE-2005-2848: Directory traversal vulnerability in img.pl on Barracuda Spam Firewall firmware 3.1.16/3.1.17 allows remote attackers to read arbitrary files via a .. in the f parameter. The vulnerability impacts confidentiality (partial) with no integrity/availability impact stated. No remediatio...
CVE-2005-2857
CVE-2005-2857 affects Free SMTP Server 2.2 and allows remote attackers to use the server as an open mail relay (spam proxy). The vulnerability is a remote access issue enabling unauthorized relaying, leading to abuse for sending spam. The provided documents identify the affected software/version ...
CVE-2005-2843
CVE-2005-2843 affects the Helpdesk software Hesk 0.92 . The issue is an authentication bypass where remote attackers can bypass login by sending a direct request to admin_main.php . The vulnerability enables partial confidentiality, integrity, and availability impact as per the CVSS data (network...
KLA10083 ACE vulnerability in AutoMate
A buffer overflow vulnerability was found in AutoMate. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely with user assistance via a specially designed ACE archive. Original advisories - Related products AutoMate CVE list...
KLA10311 ACE vulnerability in multiple software
A buffer overflow was found in the WinACE compression utility, which is used in multiple products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ACE filename. Original advisories - Related product...
CVE-2005-2837
Multiple eval injection vulnerabilities in PlainBlack Software WebGUI before 6.7.3 allow remote attackers to execute arbitrary Perl code via 1 Help.pm, 2 International.pm, or 3 WebGUI.pm...
CVE-2005-2820
Cross-site scripting XSS vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via an e-mail message containing Internet Explorer "Conditional Comments" such as "if" and "endif"...