CVE-2005-1205

The CVE-2005-1205 issue is a documented information-disclosure vulnerability in the Microsoft Telnet client across Windows XP, Windows Server 2003, and Windows Services for UNIX. Exploitation arises from handling the Telnet NEW-ENVIRON command (SEND ENV_USERVAR), allowing a remote attacker to rea...

CVE-2005-1943

CVE-2005-1943 : The Loki download manager 2.0 contains multiple SQL injection vulnerabilities that could allow remote attackers to execute arbitrary SQL commands via (1) the password field to default.asp or (2) the cat parameter to catinfo.asp. The connected documents confirm the affected product...

CVE-2005-1942

Cisco switches that support 802.1x security are affected by CVE-2005-1942, where remote attackers can bypass port security and access the VLAN by spoofing Cisco Discovery Protocol (CDP) messages. The vulnerability arises from CDP message spoofing enabling bypass of port security, enabling partial...

CVE-2005-1950

The CVE-2005-1950 entry concerns WebHints 1.03, where the hints.pl script allows remote command execution by passing shell metacharacters in the argument. OpenVAS entries corroborate a remote command execution flaw in the remote WebHints scripts, describing an exploitable condition that enables a...

CVE-2005-1945

Cross-site scripting XSS vulnerability in the converthighlitewords function in Invision Blog before 1.1.2 Final allows remote attackers to inject arbitrary web script or HTML via double hex encoded highlight data...

CVE-2005-0563

Microsoft Outlook Web Access (OWA) for Exchange Server 5.5 contains a cross-site scripting (XSS) vulnerability in the HTML encoding used in Compose New Message, allowing an attacker to cause script execution in the user’s context via a specially crafted email (encoded javascript: URL in an IMG ta...

CVE-2005-1954

CVE-2005-1954 affects the Singapore 0.9.11 application. Affected component appears to be PHP-based templates/files: admin.class.php and any .tpl.php under templates/admin_default/ or templates/default/. An error message reveals the filesystem path, enabling an attacker to obtain sensitive informa...

CVE-2005-1945

CVE-2005-1945 affects Invision Blog prior to 1.1.2 Final. The vulnerability resides in the convert_highlite_words function, allowing remote attackers to inject arbitrary web script or HTML via double hex encoded highlight data (XSS). Impact is cross-site scripting with partial integrity impact as...

CVE-2005-1947

The vulnerability CVE-2005-1947 affects Invision Gallery versions prior to 1.3.1. A Cross-site request forgery (CSRF) allows remote attackers to delete albums and images as another user via links or IMG tags targeting the (1) albums or (2) delimg actions. Root cause is CSRF in the affected action...

CVE-2005-1723

CVE-2005-1723 affects Apple Mac OS X 10.4.x up to 10.4.1, specifically the LaunchServices component. The flaw is that file extensions and MIME types are not marked as unsafe when an Apple Uniform Type Identifier (UTI) is not created for a type added to the unsafe types database, which could allow...

CVE-2005-1728

MCX Client for Apple Mac OS X 10.4.x up to 10.4.1 insecurely logs Portable Home Directory credentials, allowing local users to obtain credentials. Affected component: MCX Client; impact: credential disclosure to local users; root cause: insecure logging. No remediation details provided in the sup...

CVE-2005-1973

CVE-2005-1973 affects Java Web Start in J2SE 5.0 and 5.0 Update 1, where applications can assign permissions to themselves and gain privileges. The connected documents corroborate this vulnerability and its privilege-escalation risk, but do not provide a patch version or explicit remediation steps.

CVE-2005-1967

Affected: ProductCart Ecommerce before 2.7. Vulnerable inputs: idcategory (viewPrd.asp), lid (editCategories.asp), icd (modCustomCardPaymentOpt.asp), idccr (OptionFieldsEdit.asp). Root cause: unsanitized user input enabling SQL injection. Impact: remote attacker could execute arbitrary SQL, with ...

CVE-2005-1949

The CVE-2005-1949 entry refers to the ePing plugin for the e107 portal, where the eping_validaddr function in functions.php allows remote attackers to execute arbitrary commands via shell metacharacters after a valid eping_host argument. Exploitation details are described in the PT-2005-2900 and ...

CVE-2005-0488

Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENVUSERVAR command...

CVE-2005-1215

Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers...

CVE-2005-1215

CVE-2005-1215 relates to ISA Server 2000's handling of HTTP requests with multiple Content-Length headers, enabling remote attackers to poison the cache or bypass content restrictions. The vulnerability arises from malformed HTTP content-length processing, potentially causing cached or redirected...

CVE-2005-1963

CVE-2005-1963 affects Cerberus Helpdesk 0.97.3. It enables remote attackers to obtain sensitive information by crafting requests to reports.php, knowledgebase.php, or configuration.php, with the leakage exposed in a PHP error message. The available sources confirm an information disclosure vulner...

CVE-2005-1724

Summary: CVE-2005-1724 affects Apple Mac OS X 10.4.x (up to 10.4.1) NFS exporting due to improper handling of -network or -mask flags. This deficiency exports the filesystem to everyone, enabling remote attackers to bypass intended access restrictions. Affected component: NFS export handling in M...

CVE-2005-1941

SilverCity on Gentoo prior to version 0.9.5-r1 installs three executables (cgi-styler-form.py, cgi-styler.py, source2html.py) with insecure read/write world permissions, enabling a local attacker to modify these files and execute arbitrary code. The vulnerability is caused by these insecure permi...