CVE-2005-2535

Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260...

CVE-2005-2536

pstotext before 1.8g does not properly use the "-dSAFER" option when calling Ghostscript to extract plain text from PostScript and PDF files, which allows remote attackers to execute arbitrary commands via a malicious PostScript file...

CVE-2005-2367

Format string vulnerability in the protoitemsettext function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet...

CVE-2005-2537

Concrete details found: FlatNuke (PHP CMS using flat files) 2.5.5 and earlier is affected by CVE-2005-2537, where a direct request to structure.php can cause sensitive information disclosure. Related connected data also notes multiple remote vulnerabilities in FlatNuke

CVE-2005-2538

CVE-2005-2538 affects FlatNuke 2.5.5 and potentially earlier versions. The vulnerability allows remote attackers to obtain sensitive information via the mod parameter when it contains either a null byte or an MS-DOS device name (AUX, CON, PRN, COM1, LPT1). This is an information disclosure issue ...

CVE-2005-2360

CVE-2005-2360 is a memory allocation error in Ethereal’s LDAP dissector (versions 0.8.5–0.10.11) that can cause denial of service. Multiple connected advisories confirm a fix in version 0.10.12 or equivalent updates (e.g., RHSA/CESA advisories) to mitigate the vulnerability.

CVE-2005-1988

The CVE-2005-1988 entry describes a remote code execution vulnerability in Microsoft Internet Explorer (versions 5.0, 5.5, and 6.0) caused by memory corruption in the JPEG image rendering component. A crafted JPEG image (delivered via a malicious webpage or HTML email) could trigger a buffer over...

CVE-2005-1983

CVE-2005-1983 involves a stack-based buffer overflow in the Windows Plug and Play (PnP) service. Public details in connected sources describe a remote-code-execution vulnerability that can be triggered by a crafted PnP RPC packet, affecting Windows 2000 and Windows XP with SP1, and was notably ex...

CVE-2005-0058

CVE-2005-0058 describes a buffer overflow in the Windows Telephony API (TAPI) that can allow either remote code execution or local privilege elevation, depending on OS/version and configuration. Affected platforms include Windows 98/98 SE/ME, Windows 2000, Windows XP, and Windows Server 2003. The...

CVE-2005-2546

Arab Portal 2.0 is affected by a remote information-disclosure vulnerability in which an error message produced by an undefined errmsg function reveals the lengthening username or password, exposing the file path. The issue is triggered during error handling and can disclose sensitive path inform...

Immunity Canvas: MS05_040

Name| ms05040 ---|--- CVE| CVE-2005-0058 Exploit Pack| CANVAS Description| Windows Telephony Service Overflow Notes| CVE Name: CVE-2005-0058 VENDOR: Microsoft MSADV: MS05-040 MSRC: http://www.microsoft.com/technet/security/Bulletin/MS05-040.mspx Platforms Tested: Windows XP Home/Pro SP1a up2date,...

CVE-2005-2365

CVE-2005-2365 describes a vulnerability in Ethereal’s SMB dissector where a buffer overflow and null pointer dereferences can lead to denial of service. Affected are Ethereal releases from 0.9.0 through 0.10.11; exploitation could cause memory exhaustion or crash via unknown attack vectors. Remed...

CVE-2005-2362

CVE-2005-2362 affects Ethereal 0.9.0–0.10.11 and is described as a denial-of-service in which reassembling certain packets can crash the application. Connected sources corroborate multiple vendor advisories (Red Hat/CentOS/Gentoo/Mandriva/Mandrake GLSA) noting the suite-wide family of Ethereal is...

CVE-2005-1990

CVE-2005-1990 affects Internet Explorer 5.0, 5.5, and 6.0. The vulnerability arises from improper instantiation of certain COM objects as ActiveX controls, causing a buffer/memory corruption in the host process and potentially enabling command execution or a crash. Affected components include a s...

CVE-2005-2367

CVE-2005-2367 describes a format-string vulnerability in Ethereal (Wireshark) affecting 0.9.4–0.10.11 across multiple AFP-related dissectors. The underlying issue allows remote attackers to write to arbitrary memory and potentially gain privileges by sending crafted AFP packets. Public references...

Immunity Canvas: MS05_039

Name| ms05039 ---|--- CVE| CVE-2005-1983 Exploit Pack| CANVAS Description| Microsoft Windows PnP RPC Overflow Notes| CVE Name: CVE-2005-1983 VENDOR: Microsoft MSADV: MS05-039 Repeatability: One shot Note: Windows XP needs a valid username and password References:...

CVE-2005-2363

CVE-2005-2363 is reported for Ethereal (Wireshark) versions 0.8.15–0.10.11, where multiple dissectors (SMPP, 802.3, DHCP, MEGACO, H1) may cause a remote denial of service via an unknown attack vector, potentially via an infinite loop. The vulnerability is categorized with a CVSS v2 base score of ...

CVE-2005-2367

Format string vulnerability in the protoitemsettext function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet...

Immunity Canvas: MS05_043

Name| ms05043 ---|--- CVE| CVE-2005-1984 Exploit Pack| CANVAS Description| Windows Print Spooler Overflow Notes| References: http://www.microsoft.com/technet/security/Bulletin/MS05-043.mspx CVE Name: CVE-2005-1984 VENDOR: Microsoft MSADV: MS05-043 Repeatability: One shot Note: Run setthreadtoken0...

CVE-2005-2536

CVE-2005-2536 affects pstotext prior to fixes described in Debian DSA-792-1 and GLSA 200507-29. The vulnerability arises because pstotext did not pass Ghostscript the -dSAFER option when extracting text from PostScript/PDF files, enabling a remote attacker to execute arbitrary commands via a mali...