CVE-2005-2218

The CVE describes a DevFS (FreeBSD 5.x) flaw where insufficient parameter checking for the node type during device creation allows a user inside a jail to expose hidden device nodes. This can let jailed processes access restricted host devices, potentially leading to information leakage and privi...

CVE-2005-2370

Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service bus error on certain architectures such as SPARC via an incoming message...

CVE-2005-2374

Belkin 54g wireless routers are affected: the administrative password is not properly set, allowing remote attackers to gain access via Telnet or the web administration interface. Root cause appears to be missing/incorrect password configuration. Impact is unauthorized admin access with potential...

CVE-2005-2368

CVE-2005-2368 affects Vim (pre-6.3.082) where, with modelines enabled, a crafted modeline could cause execution of arbitrary commands via shell metacharacters in fold-related expressions. The security issue has been addressed in multiple advisories (RHSA-2005:745, CentOS/CESA-2005:745-01, MDKSA-2...

CVE-2005-2381

CVE-2005-2381 affects PHP Surveyor 0.98. The vulnerability arises from direct requests to several root-level PHP scripts (question.php, survey.php, group.php, database.php, sessioncontrol.php, html.php, and dumplabel.php, among others) or invalid parameters (qid, lid) that cause error messages to...

CVE-2005-2371

Directory traversal vulnerability in Oracle Reports Services (Oracle Application Server) allows remote attackers to overwrite arbitrary files via the desname parameter (e.g., using .., Windows drive letters, or absolute paths). Affected: Oracle Reports 6.0, 6i, 9i, 10g. Root cause: insufficient v...

CVE-2005-2375

CVE-2005-2375 affects Race Driver (1.20 and earlier). The vulnerability is a format string issue in the nickname or chat input that can be exploited remotely to cause an application crash (DoS). The connected sources collectively confirm the affected software, the vulnerable components (format st...

CVE-2005-1920

The 1 Kate and 2 Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and possibly remote attackers to obtain sensitive information...

CVE-2005-2368

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the 1 glob or 2 expand commands of a foldexpr expression for calculating fold levels...

CVE-2005-2369

CVE-2005-2369 is a libgadu issue (used by ekg and centericq) with multiple integer signedness errors that can lead to remote denial of service or arbitrary code execution. Connected advisories (Debian DSA-813-1; Ubuntu USN-162-1; CentOS/Nessus entries) confirm the vulnerability and reference libg...

CVE-2005-2376

The CVE concerns Race Driver (version 1.20 and earlier). A buffer overflow in handling long inputs for nickname or chat message can allow remote attackers to trigger a denial of service (application crash). The NVD entry lists impact as a partial loss of availability with network attack vector an...

CVE-2005-2368

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the 1 glob or 2 expand commands of a foldexpr expression for calculating fold levels...

CVE-2005-2382

The CVE-2005-2382 entry concerns Oray PeanutHull (3.0.1.0 and earlier) where the process launched from the system tray fails to drop SYSTEM privileges, enabling local users to escalate privileges by interacting with the Help functionality. Documents consistently state the affected product and the...

CVE-2005-1852

CVE-2005-1852 describes multiple integer overflows in libgadu used by Kopete (KDE 3.2.3–3.4.1), ekg, GNU Gadu, CenterICQ, Kadu and other packages. These flaws allow a remote attacker to crash the affected application and potentially execute arbitrary code by sending a crafted Gadu-Gadu message. P...

CVE-2005-2380

PHP Surveyor 0.98 is affected by multiple cross-site scripting vulnerabilities. The issue allows remote attackers to inject arbitrary script/HTML via parameters to browse.php (sid, start, id) or to dataentry.php/export.php (sid). OpenVAS notes additional vulnerabilities (SQL injection and path di...

CVE-2005-2372

CVE-2005-2372 affects Oracle Forms 4.5–10g, where Form executables (.FMX) can be loaded from arbitrary directories and executed with the privileges of the Oracle/System user. An attacker can upload a malicious FMX and reference it via an absolute path in either the (1) form or (2) module paramete...

CVE-2005-1691

SAP Internet Graphics Server (IGS) in SAP, prior to version 6.40 Patch 11, is affected by a directory traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via .. sequences in an HTTP GET request. Root cause: improper validation of the request path leading t...

CVE-2005-2383

SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the user parameter in an HTTP POST request...

CVE-2005-2377

CVE-2005-2377 concerns nss_ldap, where versions 181 through 212 (before 213) used in Mandrake Corporate Server, Mandrake 10.0, and other OSes fail to handle a SIGPIPE when issuing an LDAP search. This can allow a remote attacker to cause a denial of service by making the LDAP server unavailable, ...

CVE-2005-2370

CVE-2005-2370 refers to memory alignment errors in libgadu, exploited by processing an incoming message to trigger a denial of service on architectures such as SPARC. The vulnerability affects the libgadu-based components used by programs like ekg (before 1.6rc2) and Gaim (before 1.5.0), among ot...