CVE-2005-1763

CVE-2005-1763 describes a buffer overflow in the ptrace system call for 64-bit Linux kernels, enabling local users to write into kernel memory. The issue affects 64-bit architectures and is reported in multiple advisories. Public details confirm a local-exploit scenario with kernel memory impact ...

CVE-2005-1955

Cross-site scripting XSS vulnerability in index.php in singapore 0.9.11 allows remote attackers to inject arbitrary web script or HTML via the gallery parameter...

CVE-2005-1952

CVE-2005-1952 affects Pico Server (pServ) 3.3. A directory traversal flaw allows remote attackers to read arbitrary files and, via a crafted URL containing /./ before each .. sequence, potentially execute arbitrary commands due to an incorrect directory depth count. Exploitation details are not p...

CVE-2005-1951

osCommerce 2.2 Milestone 2 and earlier are affected by CVE-2005-1951 due to HTTP Response Splitting in multiple parameters (products_id, pid in index.php and goto in banner.php). The vulnerability arises from hex-encoded CRLF sequences, enabling remote attackers to spoof content and potentially p...

CVE-2005-1725

CVE-2005-1725 affects Apple Mac OS X systems running launchd 106 prior to 10.4.2 (reported for 10.4.x up to 10.4.1). The issue is a local, symlink-based attack on the socket file in an insecure temporary directory that allows a local user to overwrite arbitrary files. The vulnerability stems from...

CVE-2005-1962

The CVE-2005-1962 issue affects Cerberus Helpdesk 0.97.3, describing a Cross-site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the (1) errorcode parameter to index.php or (2) certain fields to clients.php. The provided documents identify th...

CVE-2005-1944

This CVE affects xmysqladmin 1.0 and earlier. The vulnerability arises from a symlink attack on a database backup file located in /tmp, enabling local users to delete arbitrary files. The available sources confirm the component (xmysqladmin) and the underlying cause (symlink in /tmp backup file) ...

CVE-2005-1213

Microsoft Outlook Express NNTP LIST buffer overflow (CVE-2005-1213) affects MSOE.DLL in Outlook Express 5.5 SP2, 6 and 6 SP1. A crafted LIST response with a long second field allows a remote attacker to execute arbitrary code via the NNTP channel. The vulnerability arises from a stack-based buffe...

CVE-2005-1269

CVE-2005-1269 affects Gaim prior to 1.3.1. A remote attacker can cause an application crash by sending a Yahoo! message with a non-ASCII filename, resulting in a denial of service. The issue is confirmed in multiple advisories referencing Gaim in affected packages; remediation is to upgrade to ve...

CVE-2005-1213

Stack-based buffer overflow in the news reader for Microsoft Outlook Express MSOE.DLL 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to execute arbitrary code via a LIST response with a long second field...

CVE-2005-0488

Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENVUSERVAR command...

CVE-2005-1966

The CVE-2005-1966 issue affects the e107 content portal via the eTrace plugin: the eTrace_validaddr function allows remote attackers to run arbitrary commands by injecting shell metacharacters after a valid etrace_host argument. The NASL plug-in also describes a DOTRACE path where etrace_cmd/etra...

CVE-2005-1946

CVE-2005-1946 affects Invision Blog (Invision Community Blog). The issue is multiple SQL injection vulnerabilities in the application’s input handling, allowing remote attackers to inject arbitrary SQL via the parameters (in editentry, replyentry, or editcomment actions) or (in the aboutme acti...

CVE-2005-1956

This CVE (CVE-2005-1956) involves a file upload vulnerability where remote attackers can upload arbitrary files by setting a test variable to '~~~~~~' (six tildes), bypassing file-extension checks. The underlying issue is bypassing input/validation logic to allow non-conforming file types. Outcom...

CVE-2005-1722

CVE-2005-1722 : Unknown vulnerability in the CoreGraphics Window Server for Mac OS X 10.4.x up to 10.4.1 allows local users to inject arbitrary commands into root sessions. Documented impact is local privilege escalation to root; root cause and exact exploit details are not provided in the suppli...

CVE-2005-1958

...

CVE-2005-1973

Java Web Start in Java 2 Platform Standard Edition J2SE 5.0 and 5.0 Update 1 allows applications to assign permissions to themselves and gain privileges...

CVE-2005-1975

The CVE-2005-1975 entry concerns multiple cross-site scripting (XSS) vulnerabilities in Annuaire 1Two 1.1 and earlier. The affected components are the index.php script (id parameter) and commentaires.php (site_id, nom, email, commentaire parameters). Exploitation would allow remote attackers to i...

CVE-2005-1955

CVE-2005-1955 describes an XSS in index.php of singapore 0.9.11, exploitable via the gallery parameter. Root cause is insufficient sanitization of the gallery parameter, allowing remote attackers to inject arbitrary script/HTML. Impact is client-side script execution; session data exposure is pos...

CVE-2005-1971

The CVE-2005-1971 issue concerns InteractivePHP FusionBB 0.11 Beta and earlier, where a directory traversal flaw in the language parameter allows remote attackers to include arbitrary local files by supplying ".." sequences. The underlying cause is improper validation of file paths, enabling pote...