CVE-2005-2072

CVE-2005-2072 affects the runtime linker (ld.so) in Solaris 8, 9, and 10, where LD_AUDIT in setuid/setgid contexts can be abused to gain privileges (including by using a long LD_AUDIT value). Connected advisories list vendor patches addressing this: Solaris 8/9/10 patches 109147-44, 109148-42, 11...

CVE-2005-2078

CVE-2005-2078 affects the BisonFTP Server V4R1 . Remote authenticated users can cause a denial of service by sending an invalid command with a long argument. The NVD entry lists the impact as partial availability with no confidentiality/integrity impact and no user interaction required, while att...

CVE-2005-2079

CVE-2005-2079 describes a heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0–10.0 on Windows Servers. The flaw is capable of enabling remote attackers to execute arbitrary code. The root cause is a heap-based overflow in the Admin Plus Pack Option, leading to pot...

CVE-2005-0201

D-BUS dbus before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket...

CVE-2005-2071

traceroute in Sun Solaris 10 on x86 systems allows local users to execute arbitrary code with PRIVNETRAWACCESS privileges via 1 a large number of -g arguments or 2 a malformed -s argument with a trailing . dot...

CVE-2005-1690

CVE-2005-1690 is a duplicate of CVE-2005-1250. The connected docs describe a SQL injection vulnerability in Ipswitch WhatsUp Professional 2005 SP1, affecting the web front-end Login.asp (NmConsole/Login.asp) via parameters sUserName and sPassword, enabling arbitrary SQL execution and potential ad...

CVE-2005-2073

CVE-2005-2073 affects IBM DB2 versions 8.1.4–8.1.9 and 8.2.0–8.2.2. The description states an unknown vulnerability that allows local users with SELECT privileges to perform unauthorized activities and to insert, update, or delete table contents. The currently provided connected documents do not ...

CVE-2005-2080

CVE-2005-2080 affects VERITAS Backup Exec RAWS: vulnerable versions include Backup Exec 9.0–10.0 for Windows and 9.0.4019–9.1.307 for NetWare. The root cause is that remote attackers can gain privileges by copying the server handle. Impact and remediation details are limited to the cited records;...

CVE-2005-2069

The CVE concerns pam_ldap/nss_ldap used with OpenLDAP when the client is referred from a TLS-secured slave to a master; the following connection may not use TLS, allowing passwords to be sniffed. Connected advisories (e.g., Debian DSA-785-1) reference CVE-2005-2069 (and related CVEs) and note upd...

CVE-2005-0773

The CVE-2005-0773 issue is a stack-based buffer overflow in VERITAS Backup Exec Remote Agent (Windows/NetWare) triggered by a CONNECT_CLIENT_AUTH request with Windows credentials and an excessively long password. Affects Backup Exec 9.x/10.x on Windows (and 9.0.4019–9.1.307 for NetWare). Exploita...

CVE-2005-1938

CVE-2005-1938 is a duplicate of CVE-2005-1250; this entry has been superseded. The connected advisory data describe a SQL injection in Ipswitch WhatsUp Professional 2005 SP1/Web login (NmConsole/Login.asp) that allows remote execution of arbitrary SQL via the sUserName or sPassword fields. The co...

DEBIAN-CVE-2005-0201

D-BUS dbus before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket...

CVE-2005-1690

...

CVE-2005-2075

PHP-Fusion 5.0 and 6.0 stores the database file with a predictable filename under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the filename in the administration/dbbackups directory in PHP-Fusion 6.0 ...

CVE-2005-2077

CVE-2005-2077 corresponds to a cross-site scripting (XSS) vulnerability in Hosting Controller’s error.asp, exploitable via the error parameter. The associated connected data confirms the affected product is Hosting Controller, with error.asp being the vulnerable component and the root cause being...

CVE-2005-2075

PHP-Fusion versions 5.0–6.0 store database backups in predictable paths under the web root (administration/db_backups in 6.0 or fusion_admin/db_backups in 5.0), enabling remote attackers to disclose sensitive information via direct requests. The vulnerability is categorized as an information disc...

CVE-2005-2074

CVE-2005-2074 affects PHP-Fusion 6.0.105: a cross-site scripting (XSS) vulnerability in submit.php that can inject arbitrary HTML/Script via the news_body, article_description, or article_body parameters. Exploitation details are documented in connected sources; there is no explicit patched versi...

CVE-2005-2070

CVE-2005-2070 affects the ClamAV Mail fILTER (clamav-milter) when used with Sendmail and long timeouts. Affected versions: 0.84–0.85d; vulnerability allows remote attackers to cause a denial of service by keeping an open connection, preventing ClamAV from reloading. Debian/DSA-737-1 recommendatio...

CVE-2005-1938

...

CVE-2005-0771

CVE-2005-0771 affects VERITAS Backup Exec Server (beserver.exe) on Windows versions 9.0–10.0. It permits unauthenticated remote RPC access on TCP port 6106 that can modify the Windows registry, enabling an attacker to gain full registry control and potentially compromise the host. The vulnerabili...