CVE-2005-0727

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0735. Reason: This candidate is a duplicate of CVE-2005-0735. Notes: All CVE users should reference CVE-2005-0727 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-1386

PHP-Nuke 7.6 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 ipban.php, 2 db.php, 3 lang-norwegian.php, 4 lang-indonesian.php, 5 lang-greek.php, 6 a request to WebLinks with the portuguese language lang-portuguese.php, 7 a request to WebLinks with the...

CVE-2005-1376

CVE-2005-1376 concerns Claroline versions 1.5.3 through 1.6 RC1 (and potentially Dokeos) with multiple directory traversal vulnerabilities that allow remote project administrators to upload arbitrary files via (1) document.php and (2) insertMyDoc.php. Connected sources corroborate traversal in cl...

CVE-2005-0012

Format string vulnerability in the aInterfacemsg function in Dillo before 0.8.3-r4 allows remote attackers to execute arbitrary code via format string specifiers in a web page...

CVE-2005-0389

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0814. Reason: This candidate is a duplicate of CVE-2005-0814. Notes: All CVE users should reference CVE-2005-0814 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-1389

CVE-2005-1389 is rejected; refer to CVE-2005-0175 instead.

CVE-2005-1396

The CVE-2005-1396 entry describes a race condition in Ce/Ceterm (aka ARPUS/Ce) versions 2.5.4 and earlier. The underlying issue allows local users to write to arbitrary files via a symlink attack on the ce_edit_log temporary file. Affected component: Ce/Ceterm, vulnerable file handling during log...

CVE-2005-1397

PHP-Calendar is affected by a SQL injection in includes/search.php prior to version 0.10.3. The vulnerability allows remote attackers to manipulate SQL queries via unsanitized input in search-related parameters (vectors not explicitly disclosed). Impact per sources: potential exposure of data and...

CVE-2005-1080

Directory traversal vulnerability in the Java Archive Tool Jar utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. dot dot in filenames in a .jar file...

CVE-2005-1387

CVE-2005-1387 affects Cocktail 3.5.4 and possibly earlier on Mac OS X. The root cause is that the administrative password is passed on the command line to sudo in cleartext, allowing local users to reveal the password by inspecting running processes. This can lead to sensitive information exposur...

CVE-2005-1377

CVE-2005-1377 documents multiple PHP Remote File Include vulnerabilities in Claroline 1.5.3–1.6 Release Candidate 1 (and possibly Dokeos), enabling remote attackers to execute arbitrary PHP code via unknown vectors. Affected software is Claroline (and possibly Dokeos) with RFI issues; exploitatio...

CVE-2005-1372

BakBone NetVault 7.1 is affected by CVE-2005-1372 due to nvstatsmngr.exe not properly dropping privileges before opening files. This local privilege escalation could allow a local user to gain elevated privileges via the Help menu. The available documentation confirms the vulnerable component and...

CVE-2005-1378

The CVE-2005-1378 issue is a SQL injection in phpBB’s notes module (posting_notes.php) where the p parameter sets the $post_id, enabling remote execution of arbitrary SQL. Affected component: phpBB notes module; vulnerability caused by unsafely using user-supplied input in SQL queries. NVD lists ...

CVE-2005-1374

CVE-2005-1374 : Multiple cross-site scripting (XSS) vulnerabilities affect Claroline versions 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos. The flaws allow remote attackers to inject arbitrary script/HTML via various parameters across multiple scripts (e.g., exercise_result.php, lea...

CVE-2005-1391

Pound (a reverse proxy/load balancer) is affected by CVE-2005-1391 due to an overly long HTTP Host header that can trigger a buffer overflow in add_port(), potentially allowing arbitrary code execution. Debian and Gentoo advisories also reference CVE-2005-3751 (HTTP Request Smuggling) as a separa...

DEBIAN-CVE-2005-0241

The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote attackers to poison the cache or bypass access controls based on header size...

CVE-2005-0077

The DBI library libdbi-perl for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file...

CVE-2005-0891

Double free vulnerability in gtk 2 gtk2 before 2.2.4 allows remote attackers to cause a denial of service crash via a crafted BMP image...

CVE-2005-0247

Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via 1 a large number of variables in a SQL statement being handled by the readsqlconstruct function, 2 a large number of INTO variables in a SELECT statement being handled by the...

CVE-2005-0237

The International Domain Name IDN support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing...