CVE-2005-1661

Affected software: Jeuce Personal Webserver 2.13. Vulnerability: remote attackers can cause a denial-of-service (server crash) via a long GET request, possibly triggering a buffer overflow. This is the root cause described across connected documents. Impact: DoS with server instability; no detail...

CVE-2005-1667

DataTrac Activity Console 1.1 is affected by CVE-2005-1667, where a remote attacker can cause a denial of service by sending a long HTTP GET request. The connected documents confirm the affected product/version and the impact (DoS), but do not provide any remediation details or exploitation speci...

CVE-2005-1650

The CVE-2005-1650 entry applies to Woppoware PostMaster 4.2.2, where the web mail service returns different error messages based on whether a user exists. This behavior allows remote attackers to enumerate valid usernames, constituting an information disclosure issue. The Red Hat and CVE records ...

CVE-2005-1648

CVE-2005-1648 affects Gurgens (GASoft) Ultimate Forum 1.0. The vulnerability arises because the db/Genid.dat database file is stored under the web document root with insufficient access control, enabling remote attackers to obtain and decrypt usernames and passwords. The provided sources describe...

CVE-2005-1657

Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote attackers to perform unauthorized file operations via the Folder.Id parameter to 1 deletefolder.ctml, 2 deletemessage.ctml, 3 origmessage.ctml, or 4 readmessage.ctml, the Message.Id parameter to editmessage.ctm...

CVE-2005-1656

Mercur Messaging 2005 SP2 is affected by CVE-2005-1656. An attacker can read the source code of .ctml files by issuing a URL containing a trailing hex-encoded space ("%20"). Affected product: Mercur Messaging 2005 SP2. Underlying issue: the vulnerability allows partial disclosure of data via craf...

CVE-2005-1653

Woppoware PostMaster 4.2.2 (build 3.2.5) is affected by a Cross-site Scripting (XSS) vulnerability in the message.htm page due to unsanitized input in the email parameter. This allows remote attackers to inject arbitrary web script or HTML. Root cause: improper input sanitization in the email par...

CVE-2005-0757

CVE-2005-0757 affects the Linux kernel xattr file system code for ext3 on 64-bit systems, enabling local users with ext3 xattrs to crash the kernel. The connected advisories (RHSA-2005:294, Debian DSA-922-1, OpenVAS/DSA entries) confirm this in Red Hat/CentOS and Debian kernels. Affected context:...

CVE-2005-0134

Technical details about CVE-2005-0134 are not publicly available in the provided connected documents. No affected versions, root cause, impact, or mitigations are disclosed here. Monitor for updates.

CVE-2005-1650

The web mail service in Woppoware PostMaster 4.2.2 build 3.2.5 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames...

CVE-2005-1665

CVE-2005-1665 affects Microsoft ASP.NET 1.x ViewState when not cryptographically signed; parsing crafted web session state information can lead to high CPU usage and a Denial of Service. The CPAI advisory describes it as an input sanitization/resource consumption vulnerability in ASP.NET on IIS, ...

CVE-2005-1654

Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request to addsubsite.asp with the loginname and password parameters set...

CVE-2005-1662

CVE-2005-1662 is a directory traversal vulnerability in Jeuce Personal Web Server 2.13 that allows remote attackers to read arbitrary files via a .. in the URL. The connected documents confirm the affected product/version and the traversal vector; no exploitation specifics or remediation steps ar...

CVE-2005-1652

CVE-2005-1652 affects Woppoware PostMaster 4.2.2 (build 3.2.5). Affected component: message.htm. Root cause: remote authentication bypass via modification of the email parameter, enabling attackers to bypass login and act as the targeted user (e.g., read messages, compose messages). Public refere...

CVE-2005-1659

CVE-2005-1659 : MyServer 0.8 is vulnerable to cross-site scripting via filemanager.cpp. An attacker can craft a URL containing a triple dot ("...") followed by an onmouseover event to inject arbitrary Javascript. Public sources (NVD/Red Hat/OpenVAS) consistently describe XSS affecting MyServer 0....

CVE-2005-0757

The xattr file system code, as backported in Red Hat Enterprise Linux 3 on 64-bit systems, does not properly handle certain offsets, which allows local users to cause a denial of service system crash via certain actions on an ext3 file system with extended attributes enabled...

CVE-2005-1665

The VIEWSTATE functionality in Microsoft ASP.NET 1.x, when not cryptographically signed, allows remote attackers to cause a denial of service CPU consumption via deeply nested markup...

CVE-2005-1644

The CVE-2005-1644 entry documents a cross-site scripting (XSS) vulnerability in 1Two Livre d’Or 1.0’s guestbook.php. The vulnerability arises from unsanitized input through the parameters livreornom, livreoremail, and livreormessage, which allows remote attackers to inject arbitrary web script or...

CVE-2005-1658

CVE-2005-1658 affects MyServer 0.8. A directory traversal flaw in filemanager.cpp allows remote attackers to list the parent directory of the web root by using a URL containing a triple dot ("..."). The NVD/CVE entries document this vulnerability with a CVSSv2 base score of 5.0 (AV:N/AC:L/Au:N/C:...

CVE-2005-1657

Mercur Messaging 2005 SP2 is affected by multiple directory traversal vulnerabilities. An attacker can remotely perform unauthorized file operations via Folder.Id parameters to deletefolder.ctml, deletemessage.ctml, origmessage.ctml, readmessage.ctml; the Message.Id parameter to editmessage.ctml;...