CVE-2005-0106

SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGDPATH variable, which allows local users to reduce the cryptographic strength of certain operations by modifying the file...

DEBIAN-CVE-2005-0106

SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGDPATH variable, which allows local users to reduce the cryptographic strength of certain operations by modifying the file...

CVE-2005-1412

CVE-2005-1412 affects Ecomm Professional Guestbook 3.x. The vulnerability is a SQL injection in verify.asp that allows remote attackers to execute arbitrary SQL commands via the AdminPWD parameter. The Red Hat/ vendor CVE references corroborate the description. The documents do not provide explic...

CVE-2005-1424

StumbleInside GoText 1.01 stores sensitive username, mail address, and phone number information in plaintext in the GoText.bin file, which allows local users to obtain that information. The CVE description identifies local access and partial confidentiality impact (CONFIDENTIALITY=PARTIAL) with a...

CVE-2005-1390

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0174. Reason: This candidate is a duplicate of CVE-2005-0174. Notes: All CVE users should reference CVE-2005-0174 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-1435

Open WebMail (OWM) before version 2.51 (20050430) is vulnerable to remote command execution when an authenticated user supplies a filename containing shell metacharacters. The root cause is failure to properly remove shell escapes from filenames before processing them, enabling arbitrary command ...

CVE-2005-1392

The SQL install script in phpMyAdmin 2.6.2 is created with world-readable permissions, which allows local users to obtain the initial database password by reading the script...

CVE-2005-1409

PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability."...

CVE-2005-1409

The CVE-2005-1409 issue concerns PostgreSQL 7.3.x–8.0.x where public EXECUTE access was granted to specific character conversion functions, allowing unprivileged users to invoke those functions with crafted values. The initial description notes the impact as unknown. Connected advisories (RHSA-20...

CVE-2005-1433

HP OpenView Event Correlation Services (OV ECS) 3.32 and 3.33 are listed in CVE-2005-1433 with multiple unknown vulnerabilities that could lead to denial of service or arbitrary code execution. The provided connected documents confirm affected product/version details and impact but do not specify...

CVE-2005-1401

The CVE-2005-1401 entry describes a format-string vulnerability in the Mtp-Target client (versions 1.2.2 and earlier). The underlying issue is a format string flaw that can allow remote attackers to execute arbitrary code via game messages or other text sent to the client. Documented impact is re...

CVE-2005-0106

CVE-2005-0106 affects the perl module libnet-ssleay-perl (SSLeay.pm) before 1.25. When no entropy source is set in EGD_PATH, it falls back to the file /tmp/entropy, which an attacker with write access to that file could modify to weaken cryptographic operations. Consequence: potential partial imp...

CVE-2005-1442

Buffer overflow in the Lotus Notes client for Domino 6.5 (before 6.5.4) and 6.0 (before 6.0.5) allows local users to crash the client and potentially execute arbitrary code via the NOTES.INI file. Affected component: NOTES.INI handling in Lotus Notes client. Impact: local denial of service, with ...

CVE-2005-1427

Affected component: Uapplication Uphotogallery. Vulnerability: storing the database under the web document root allows remote attackers to access sensitive data via a direct request to uphotogallery.mdb. Impact: exposure of information (confidentiality impact Partial; per CVSS). Notes: the provid...

CVE-2005-1423

CVE-2005-1423 affects Software602 602LAN SUITE; the mail component is vulnerable to directory traversal via .. sequences in the A parameter, enabling remote denial of service and potential file presence enumeration. Vulnerable in 2004.0.05.0413; fixed in 2004.0.05.0509 (or later). Upgrade to 2004...

DEBIAN-CVE-2005-1391

Buffer overflow in the addport function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long Host HTTP header...

CVE-2005-1426

Affected software: Ublog Reload (Uapplication Ublog Reload). Vulnerable component: mdb-database/blog.mdb (aka blog.msb) exposed under the web root. Root cause: insufficient access control in the web root enables direct HTTP retrieval of the database by remote attackers. Impact: potential unauthor...

CVE-2005-0106

SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGDPATH variable, which allows local users to reduce the cryptographic strength of certain operations by modifying the file...

CVE-2005-1422

CVE-2005-1422 affects Raysoft/Raybase Video Cam Server 1.0.0 beta. The vulnerability allows remote attackers to perform administrator operations and trigger a denial of service by sending a direct request to admin.html . The connected documents confirm the affected product and impact but do not p...

CVE-2005-1419

CVE-2005-1419 affects Ocean12 Mailing List Manager 1.06, where the admin login panel is vulnerable to SQL injection via the Admin_id parameter. The available connected documents confirm the root cause as an SQL injection flaw in the admin authentication path, enabling remote attackers to execute ...