CVE-2005-0550

CVE-2005-0550 describes a buffer overflow in Microsoft Windows Object Management handling that could be exploited locally to cause a denial of service (system crash). Affected products include Windows 2000, Windows XP (SP1 and SP2), and Windows Server 2003. The underlying issue is an unchecked bu...

CVE-2005-1088

The CVE-2005-1088 issue affects DameWare NT Utilities (v4.8 and earlier) and DameWare Mini Remote Control (v4.8 and earlier), describing a local privilege escalation. Multiple sources indicate an unspecified or local privilege-escalation vulnerability that allows an authenticated, non-administrat...

CVE-2005-1092

Lightspeed DeluxeFTP 6.01 stores usernames and passwords in plaintext in sites.xml, which is world-readable. This allows local users to access credentials and potentially gain privileges. No explicit exploit details or fixed version are provided in the connected documents; remediation is not spec...

CVE-2005-1105

The CVE-2005-1105 entry concerns JavaMail 1.3.2, where a directory-traversal flaw in MimeBodyPart.getFileName allows remote attackers to write arbitrary files by supplying a .. (dot dot) sequence in the Content-Disposition header. This identifies a vulnerability in the file-name handling path, en...

CVE-2005-1099

Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon GLD 1.3 and 1.4, when GLD is listening on a network interface, allow remote attackers to execute arbitrary code...

CVE-2005-0048

CVE-2005-0048 is a Windows IP stack vulnerability (IP Validation Vulnerability) that allows remote code execution or denial of service via crafted IP packets with malformed options. Affected products include Windows XP SP2 and earlier, Windows 2000 SP3/SP4, and Windows Server 2003. The root cause...

CVE-2005-0060

CVE-2005-0060 is a local privilege-elevation vulnerability in the Windows font-processing subsystem caused by an unchecked buffer when handling certain fonts. A logged-on user could gain full control of an affected system by running a specially crafted application. Affected platforms include Wind...

CVE-2005-1098

GetDataBack for NTFS 2.31 stores the username and license key in plaintext in the License registry key Name value, enabling local users to obtain sensitive information. The root cause is insecure storage of credentials in the registry, leading to potential information disclosure with Local access...

CVE-2005-1099

CVE-2005-1099 affects the Greylisting Daemon (GLD) up to version 1.4. The vulnerability is described as multiple buffer overflows in the HandleChild function inside server.c when GLD is listening on a network interface, enabling remote arbitrary code execution. Public references document exploit ...

CVE-2005-1086

The CVE-2005-1086 entry concerns AN HTTPD Server 1.42n, specifically the cmdIS.DLL plugin. The issue is a buffer overflow in the plugin when processing an HTTP request with a long User-Agent header, enabling remote code execution. The available documents identify the vulnerable component and caus...

CVE-2005-1104

CVE-2005-1104 describes multiple cross-site scripting (XSS) vulnerabilities in Centra 7. The affected functionality is the user data fields: username, first name, and last name, which can be injected with arbitrary web script or HTML. The provided documents do not specify the exact product versio...

CVE-2005-0554

CVE-2005-0554 describes a buffer overflow in Internet Explorer’s URL processing logic when handling long hostnames, affecting IE 5.01, 5.5, and 6.0. Public sources (NVD/NIST, CVE listings, and security advisories) identify this as a URL Parsing Memory Corruption Vulnerability that could allow rem...

CVE-2005-0562

The CVE-2005-0562 issue affects MSN Messenger 6.2 and involves a GIF processing buffer overflow. A malformed GIF with improper height/width could allow a remote attacker in a victim’s contact list to execute arbitrary code with the user’s privileges. Microsoft’s MS05-022/MS05-009 postings documen...

CVE-2005-1101

CVE-2005-1101 concerns Lotus Domino Server versions 6.0.5 and 6.5.4 with a buffer overflow in certain time/date fields exposed via remote input. The Nessus plugin describes a remote overflow triggered by large data in POST-like requests, potentially crashing the web server and possibly allowing a...

CVE-2005-1100

Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon GLD 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is passed directly to syslog...

CVE-2005-0063

The CVE-2005-0063 issue stems from Windows Shell/MSHTA handling of file associations. A remote code execution vulnerability exists when a user opens a specially crafted OLE2 document (e.g., Word) whose CLSID is manipulated to invoke HTML Application Host (MSHTA) to process the file. Exploitation ...

CVE-2005-1102

CVE-2005-1102 describes multiple XSS vulnerabilities in WordPress before version 1.5 that affect the file template-functions-post.php. The flaws allow remote attackers to exploit the (1) content or (2) title of a post to execute arbitrary commands, as reported for WordPress 1.5 and earlier. The d...

CVE-2005-1106

The CVE-2005-1106 issue affects Apple QuickTime PictureViewer on Windows (6.5.2). A GIF image with the maximum depth start value can cause the application to crash, due to an integer overflow in GIF processing. This yields a denial of service; no explicit remediation is provided in the supplied d...

CVE-2005-0553

The CVE-2005-0553 issue is a race condition in the DHTML object processor of Internet Explorer (IE) versions 5.01, 5.5, and 6 that can enable remote code execution when a user visits a crafted web page or HTML email. The root cause involves race conditions in processing of DHTML objects (e.g., Co...

CVE-2005-0555

CVE-2005-0555 describes a memory corruption vulnerability in Internet Explorer’s Content Advisor feature. The issue affects IE 5.01, 5.5, and 6 and is triggered by processing crafted Content Advisor files, potentially allowing remote code execution on affected systems. Connected advisories and th...