CVE-2005-1180

Technical details about CVE-2005-1180 are not publicly provided in the supplied connected documents. The records here restate the vulnerability description without additional specifics on affected versions, fixes, or exploit information. Monitor for updates.

CVE-2005-1176

CVE-2005-1176 concerns a race condition in JFS2 on IBM AIX 5.2 and 5.3. The issue arises when deleting a file while I/O is still occurring for that file, potentially causing data to be written to a different file and thus leak sensitive information. The available documents identify the affected c...

CVE-2005-1177

CVE-2005-1177 affects Webmin and Usermin prior to 1.200, where an unauthorized access issue may allow modification of configuration file permissions/ownership. The connected Nessus plugin reinforces the exposure as “Webmin

CVE-2005-1181

Ariadne CMS 2.4 is cited as affected by a PHP remote code injection in loader.php via the ariadne parameter referencing a remote URL. The vendor disputes the issue, arguing loader.php must include ariadne.inc (defining $ariadne) and cannot be modified by an attacker; CVE personnel have partially ...

CVE-2005-1183

CVE-2005-1183 affects mvnForum 1.0 RC4 and is a cross-site scripting (XSS) vulnerability due to failure to sanitize user-supplied input in the Search field. The issue enables remote injection of arbitrary script/HTML via the search parameter, as described by multiple sources (OpenVAS NASL notes i...

CVE-2005-1186

The CVE-2005-1186 entry affects Musicmatch Jukebox 10.00.2047 and earlier. The root cause is that the software adds the musicmatch.com domain to the Internet Explorer Trusted Sites zone, which can enable unauthorized activities within a domain and is demonstrated via cross-site scripting (XSS) at...

CVE-2005-1187

WinHex 12.05 SR-14 (and possibly related versions) is affected by a heap-based buffer overflow in the command line handling when a long file name argument is supplied. The underlying issue is a heap-based overflow that may allow an attacker to execute arbitrary code. The vulnerability is describe...

CVE-2005-1189

CVE-2005-1189 affects WebcamXP PRO (version 2.16.468 and earlier). The vulnerability is a cross-site scripting (XSS) flaw in the chat feature that allows remote attackers to inject arbitrary HTML/script via the chat name, demonstrated by using an IFRAME to redirect users to other sites. The NVD r...

CVE-2005-1184

The CVE-2005-1184 entry describes a DoS in the TCP/IP stack across multiple operating systems: a remote attacker sends a TCP packet with the correct sequence number but an incorrect Acknowledgement number, triggering a flood of keep-alive packets and CPU consumption. The impact is listed as Parti...

CVE-2005-1188

CVE-2005-1188 involves a cross-site scripting (XSS) vulnerability in Comersus Cart, specifically in the comersus_searchItem.asp script. Affected versions range from 3.90 to 4.51. The underlying issue is insufficient sanitization of the curPage parameter, enabling remote attackers to inject arbitr...

[Full-disclosure] iDEFENSE Security Advisory 04.18.05: McAfee Internet Security Suite 2005 Insecure File Permission Vulnerability

McAfee Internet Security Suite 2005 Insecure File Permission Vulnerability iDEFENSE Security Advisory 04.18.05 http://www.idefense.com/application/poi/display?type=vulnerabilities April 18, 2005 I. BACKGROUND McAfee Internet Security Suite 2005 is a product used to protect a personal computer fro...

MS Exchange Server Remote Code Execution Exploit (MS05-021)

漏洞描述：Microsoft Exchange是一款由微软开发的邮件服务程序。Microsoft Exchange Server中存在缓冲区溢出漏洞，攻击者可能利用此漏洞在主机上执行任意指令。 起因是Exchange SMTP Server在处理特殊的扩展SMTP verb时存在缓冲区溢出。漏洞可能允许攻击者连接到Exchange服务器的SMTP端口并发送精心构造的恶意命令，这些命令可能导致拒绝服务或以SMTP服务进程的权限运行攻击者所选择的代码。漏洞影响：受影响的软件： •Microsoft Exchange Server 2000 Service Pack 3 •Microsoft...

RHEL 4 : kernel (RHSA-2005:366)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:366 advisory. The Linux kernel handles the basic functions of the operating system. A flaw in the fibseqstart function was discovered. A local user could u...

RHEL 4 : xloadimage (RHSA-2005:332)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:332 advisory. The xloadimage utility displays images in an X Window System window, loads images into the root window, or writes images into a file. Xloadimage...

RHEL 2.1 : logwatch (RHSA-2005:364)

An updated logwatch package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. LogWatch is a customizable log analysis system. LogWatch parses through your system's logs for a given period of...

CVE-2005-0093

This CVE entry is rejected/not used; the candidate was withdrawn and not a security issue.

CVE-2005-0752

The CVE-2005-0752 entry describes a remote code execution via the Plugin Finder Service (PFS) in Firefox, affected when a javascript: URL is used in the PLUGINSPAGE attribute of an EMBED tag. The vulnerability is tied to Firefox versions before 1.0.3, with an exploit occurring through a crafted E...

CVE-2005-1156

CVE-2005-1156 affects Firefox <= 1.0.2 before 1.0.3, Mozilla Suite

CVE-2005-1160

CVE-2005-1160 affects Firefox before 1.0.3 and Mozilla Suite before 1.7.7. The vulnerability arises in the privileged chrome UI where an attacker could override certain properties or methods of DOM nodes, enabling privilege escalation. Attacks demonstrated via the eval function or the Script obje...

CVE-2005-1163

CVE-2005-1163 describes multiple buffer overflows in Yager 5.24 and earlier that allow remote attackers to execute arbitrary code via (1) a crafted nickname or (2) a packet with a large amount of data. The NVD entries indicate a network-exposed vulnerability with low attack complexity and no auth...