CVE-2005-2675

CVE-2005-2675 corresponds to multiple SQL injection vulnerabilities in Land Down Under (LDU) 800/800-series in which remote attackers could manipulate SQL queries via various PHP script parameters (forums.php, list.php, journal.php, forums.php, links.php). OpenVAS/Nessus entries corroborate SQLi ...

CVE-2005-0359

The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmapset and pmapunset commands, which allows remote attackers to 1 cause a denial of service by using pmapunset to un-register a NetWorker...

CVE-2005-2632

SQL injection vulnerability in loginadminmediabox404.php in mediabox404 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the User field...

CVE-2005-0358

EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by modifying an authentication token...

CVE-2005-2653

Cross-site scripting XSS vulnerability in BBCaffe 2.0 allows remote attackers to inject arbitrary web script or HTML via e-mail data in a message...

CVE-2005-2671

...

CVE-2005-2682

CVE-2005-2682 affects the DTLink AreaEdit SpellChecker plugin before version 0.4.3. The vulnerability arises in aspell_setup.php where remote attackers can execute arbitrary commands by supplying shell metacharacters in the dictionary parameter (aka the lang variable). This constitutes remote cod...

CVE-2005-2678

Microsoft IIS 5.1 and 6 allows remote attackers to spoof the SERVERNAME variable to bypass security checks and conduct various attacks via a GET request with an http://localhost URI, which makes it appear as if the request is coming from localhost...

CVE-2005-2668

The CVE-2005-2668 entry concerns the Computer Associates Message Queuing (CAM) service within CA Unicenter. Public references describe multiple buffer-overflow flaws in CAM’s MQ component that can be triggered remotely to execute arbitrary code on Windows hosts. Documented vulnerable targets incl...

CVE-2005-2458

inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 allows remote attackers to cause a denial of service kernel crash via a compressed file with "improper tables"...

CVE-2005-2098

The KEYCTLJOINSESSIONKEYRING operation in the Linux kernel before 2.6.12.5 contains an error path that does not properly release the session management semaphore, which allows local users or remote attackers to cause a denial of service semaphore hang via a new session keyring 1 with an empty nam...

CVE-2005-2671

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2041. Reason: This candidate is a duplicate of CVE-2005-2041. Notes: All CVE users should reference CVE-2005-2041 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-2667

CA Message Queuing Service (CAM/CAFT) remote vulnerability affects versions 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13. Astack overflow in the log_security function may allow remote arbitrary code execution, with additional denial-of-service impact on TCP port 4105. Some sources ...

CVE-2005-2681

Cisco Intrusion Prevention System (IPS) 5.0(1) and 5.0(2) contains an unspecified vulnerability in its command line processing (CLI) logic that could allow local users with OPERATOR or VIEWER privileges to gain additional privileges via unknown vectors. The exact root cause is not publicly detail...

CVE-2005-2674

Affected product: Land Down Under (LDU) 800 series (

CVE-2005-2666

SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the knownhosts file, which makes it easier for an attacker that has compromised an SSH user's account to generate a list of additional targets that are more likel...

CVE-2005-2672

pwmconfig in LMsensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file...

CVE-2005-2678

CVE-2005-2678 affects Microsoft IIS 5.1 and IIS 6. The issue allows remote attackers to spoof the SERVER_NAME variable by issuing a GET request containing an http://localhost URI, bypassing security checks and enabling various attacks. Some connected sources also describe an ASP source code discl...

CVE-2005-2679

Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process...

CVE-2005-2665

Elm contains a stack-based buffer overflow in expires.c that affects Elm 2.5 PL5–PL7 (and possibly other versions). A crafted email with a long Expires header can allow a remote attacker to execute arbitrary code with the user’s privileges. Public advisories (RHSA-2005:755, CESA-2005:755) note a ...