CVE-2005-2220

Dragonfly Commerce (Dragonfly) is affected by a vulnerability where remote attackers can modify the hidden field x_DragonflyCartProductPrice to alter product prices via several endpoints (dc_Categorieslist.asp, dc_Categoriesview.asp, dc_productslist.asp, dc_productslist_Clearance.asp). The vendor...

CVE-2005-0564

The CVE-2005-0564 entry corresponds to a remote code execution vulnerability in Word 2000, Word 2002, and Microsoft Works Suite 2000–2004 caused by a font parsing buffer overflow. A specially crafted Word document containing long font information can trigger an unchecked boundary condition in the...

CVE-2005-2229

Blog Torrent 0.92 and earlier stores sensitive files under the web document root (in the data or torrents directories) with insufficient access control, enabling remote bidders to obtain sensitive information such as account names and password hashes (e.g., via data/newusers). Affected software: ...

CVE-2005-1859

Unknown vulnerability in arshell (Array Service, arrayd) affecting SGI ProPack 3 (SP 5/6) and SGI ProPack 4. Local users could execute arbitrary shells as root on other hosts in the cluster/array. Root cause and specific exploit details are not provided in the connected documents; remediation det...

CVE-2005-2217

Dansie Shopping Cart stores the vars.dat file under the web root with insufficient access control, allowing remote attackers to obtain sensitive information such as program variables. The issue is classified with a CVSS v2 base score of 5.0 (Network attack vector, Low attack complexity, Confident...

CVE-2005-2232

The CVE-2005-2232 entry describes a buffer overflow in invscout on IBM AIX 5.1.0 through 5.3.0 that could let local users execute arbitrary code via a long command line argument. This is supported by multiple connected records (Red Hat and NVD references) confirming the same affected product and ...

CVE-2005-2223

CVE-2005-2223 affects the MailEnable SMTP service. Public docs indicate an unknown vulnerability in MailEnable Standard before 1.9 and Professional before 1.6 that allows remote attackers to cause a denial of service (crash) during authentication. Red Hat records echo the unknown vulnerability, a...

CVE-2005-2238

The CVE-2005-2238 entry describes a denial-of-service in IBM AIX ftpd (versions 5.1–5.3) where remote authenticated users can exhaust ephemeral ports, leading to memory/resource consumption. The root cause is using all ephemeral ports; no explicit exploit details or patched versions are provided ...

CVE-2005-2231

High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-2230

Electronic Mail Operator elmo 1.3.2-r1 and earlier creates the elmostats temporary file insecurely, which allows local users to overwrite arbitrary files...

CVE-2005-1219

Summary: CVE-2005-1219 is a buffer overflow in the Microsoft Color Management Module in Windows, triggered by processing images with crafted ICC profile tags. Affected component: Windows Color Management Module (ICC profile handling). Impact: remote code execution or, in some cases, denial of ser...

CVE-2005-2220

Dragonfly Commerce allows remote attackers to change a product price by modifying the xDragonflyCartProductPrice hidden field to 1 dcCategorieslist.asp, 2 dcCategoriesview.asp, 3 dcproductslist.asp, and 4 dcproductslistClearance.asp. NOTE: the vendor has disputed this issue, saying that "Dragonfl...

CVE-2005-2241

Cisco CVE-2005-2241 affects Cisco CallManager (CCM) versions 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 before 4.1(3)SR1. The issue arises from RISDC sockets not timing out promptly, causing a resource leak that can allow remote attackers to exhaust memory and connections...

CVE-2005-2225

The CVE-2005-2225 entries describe a DoS condition in Microsoft MSN Messenger where remote attackers can cause users to be kicked from group conversations by sending a plaintext message containing the string ".pif". Gaim is also reported affected, suggesting the issue could be in the protocol or ...

CVE-2005-2230

CVE-2005-2230 affects Electronic Mail Operator (elmo) 1.3.2-r1 and earlier. The vulnerability arises from insecure creation of the elmostats temporary file, enabling a local attacker to overwrite arbitrary files. Public details in the connected documents confirm the affected component and the loc...

CVE-2005-2233

CVE-2005-2233 describes a buffer overflow in multiple “p” commands on IBM AIX 5.1, 5.2 and 5.3. The vulnerability arises from long command line arguments to tools such as penable (and other hard-linked files including pdisable, pstart, phold, pdelay, pshare), potentially allowing local users to e...

CVE-2005-2228

Web Wiz Forums 7.9 and 8.0 are affected by a vulnerability that allows remote attackers to view message titles of a hidden forum. The referenced CVE-2005-2228 entry notes network-based access with low attack complexity and no authentication, yielding partial confidentiality impact. No explicit ex...

CVE-2005-2234

CVE-2005-2234 describes a buffer overflow in the IBM AIX getlvname command (AIX 5.1, 5.2, 5.3) that could allow local users to execute arbitrary code via long command line arguments. This vulnerability is corroborated by multiple connected records (e.g., Red Hat advisory) and the core impact is r...

CVE-2005-2224

The CVE-2005-2224 entry concerns Microsoft ASP.NET web services, where aspnet_wp.exe is affected by processing crafted SOAP messages sent to an RPC/Encoded method, leading to denial of service via CPU consumption from an infinite loop. The available connected documents confirm the affected compon...

CVE-2005-2247

The CVE-2005-2247 entry concerns Moodle prior to 1.5.1, described as containing multiple unknown vulnerabilities with unknown impact and attack vectors. The connected Nessus plugin explicitly lists Moodle