CVE-2005-1431

The CVE-2005-1431 issue affects GnuTLS: record packet parsing bug in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 can allow a remote attacker to cause a denial-of-service via crafted TLS handshakes (padding bytes in gnutils_cipher.c). The vulnerability is rated CVSS v2 base 5.0 (Network attack, ...

CVE-2005-1430

The CVE-2005-1430 issue affects Mac OS X 10.3.x and earlier. The vulnerability arises from insecure permissions on a pseudo terminal (pty) that is managed by a non-setuid program, allowing local users to read or modify other users’ sessions. Public documents do not specify affected versions beyon...

CVE-2005-1449

CVE-2005-1449 refers to an unknown vulnerability in serendipity_config_local.inc.php affecting Serendipity prior to 0.8. The connected documents consistently state the impact is unknown and do not provide concrete technical details, affected versions beyond “before 0.8,” or remediation steps. No ...

CVE-2005-0157

CVE-2005-0157 affects SmartList’s confirm add-on (3.15 and earlier). The issue allows an attacker to subscribe arbitrary e-mail addresses by exploiting a valid cookie that encodes a different address than the one tied to the cookie. Public advisories (Debian DSA-720-1) note this as a remote input...

CVE-2005-1421

CVE-2005-1421 describes a directory traversal vulnerability in Raysoft/Raybase Video Cam Server 1.0.0 beta. The flaw allows remote attackers to read arbitrary files via ".." sequences in an HTTP request. Affected software/version: Raysoft/Raybase Video Cam Server 1.0.0 beta. Root cause: insuffici...

CVE-2005-1441

The vulnerability is a format string issue in Lotus Domino Server NRPC (Notes protocol) that allows remote denial of service. Affected products: Lotus Domino 6.0.x before 6.0.5 and 6.5.x before 6.5.4. Root cause: incorrect handling of format strings in NRPC processing. Impact: remote DoS as descr...

CVE-2005-1402

CVE-2005-1402 affects older versions of the NeL library (as used in Mtp-Target 1.2.2 and earlier). The flaw is an integer signedness error in a STLport call, not caught by a signed comparison, allowing remote attackers to cause a denial of service via memory consumption or a server crash. The pro...

CVE-2005-1405

CVE-2005-1405 affects Lotus Domino 6.5.x (before 6.5.4) and 6.0.x (before 6.0.5). The vulnerability is an HTTP response splitting flaw in the @SetHTTPHeader function, enabling attackers to poison the web cache through malicious applications. The provided sources describe the issue and affected ve...

CVE-2005-1411

CVE-2005-1411 affects Cybration ICUII 7.0, where passwords are stored in plaintext in the world-readable icuii.ini file. This local-privilege scenario arises from the insecure storage, enabling local users to gain privileges by reading the file. The available sources describe the vulnerability an...

CVE-2005-1404

MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the 1 nbuser parameter to post.php or 2 sender parameter to privmsg.php...

CVE-2005-1414

ExoticSoft FilePocket 1.2 stores sensitive proxy information, including proxy passwords, in plaintext in the Windows registry, enabling local privilege escalation for a logged-in attacker. The vulnerability stems from insecure storage of credentials in registry keys, with impact described as part...

CVE-2005-1434

OpenView Network Node Manager (OV NNM) versions 6.2, 6.4, 7.01, and 7.50 are associated with CVE-2005-1434. The available descriptions indicate multiple unknown vulnerabilities that can cause denial of service or allow arbitrary code execution. The connected documents do not provide concrete tech...

CVE-2005-1449

Unknown vulnerability in serendipityconfiglocal.inc.php for Serendipity before 0.8 has unknown impact...

CVE-2005-1439

CVE-2005-1439 : In osTicket, a directory traversal vulnerability exists in attachments.php that allows remote attackers to read arbitrary files via .. sequences in the file parameter. Evidence from multiple sources confirms a network-wide, unauthenticated remote attack vector with a base CVSS v2 ...

CVE-2005-1415

GlobalSCAPE Secure FTP Server (3.0.2 and earlier) is affected by a buffer overflow caused by mishandling user-supplied input, allowing remote code execution after sending a long FTP command. Some sources note that all versions prior to 3.0.3 are vulnerable; exploitation requires a valid user acco...

CVE-2005-1446

SitePanel 2.6.1 and earlier (SitePanel2) are vulnerable to remote file upload: an attacker can attach a file to a trouble ticket and have it executed (e.g., PHP scripts). The entry does not provide specific affected versions beyond 2.6.1 and earlier, nor details on exact vulnerable components, ro...

CVE-2005-1379

The LAM runtime environment package lam-runtime-7.0.6-2mdk on Mandrake Linux installs the mpi user without a password, which allows local users to gain privileges...

CVE-2005-0106

SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGDPATH variable, which allows local users to reduce the cryptographic strength of certain operations by modifying the file...

CVE-2005-1445

CVE-2005-1445 affects SitePanel 2.6.1 and earlier (SitePanel2). The issue is multiple directory traversal vulnerabilities allowing remote attackers to (1) delete arbitrary files via the id parameter in a rmattach action to 5.php, and (2) read arbitrary files via the lang parameter to index.php. R...

DEBIAN-CVE-2005-0106

SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGDPATH variable, which allows local users to reduce the cryptographic strength of certain operations by modifying the file...