CVE-2005-0558

CVE-2005-0558 corresponds to a buffer overflow in Microsoft Word 2000, Word 2002, and Word 2003 that could allow remote code execution via a crafted document. The issue is documented in Microsoft Security Bulletin MS05-023 and is associated with the CAN-2004-0963 CAN entry; Word 2002/2003 updates...

CVE-2005-0610

CVE-2005-0610 affects FreeBSD portupgrade prior to 20041226_2. It describes three symlink-related issues: (1) allowing local attackers to overwrite files and potentially replace packages to execute arbitrary code via pkg_fetch, (2) overwriting files through temporary files during port/package upg...

CVE-2005-1089

DC++ before 0.674 is affected by a vulnerability that allows a remote attacker to append data to arbitrary files. The issue is described across CVE-2005-1089 sources as a file/content manipulation flaw in the DC++ client (pre-0.674). Affected component: DC++ core/application logic handling downlo...

CVE-2005-1093

CVE-2005-1093 affects the Miranda IM environment via the PopUp Plus 2.0.3.8 plugin when the Use SmileyAdd Setting is enabled. The vulnerability is described as a buffer overflow that allows remote attackers to execute arbitrary code. The available connected documents reiterate this condition but ...

CVE-2005-1094

CVE-2005-1094 affects FTP Now 2.6.14, where usernames and passwords are stored in plaintext in sites.xml and are world-readable. This constitutes a local privilege escalation risk for any local user able to read that file. The description does not provide exploit details, affected versions beyond...

CVE-2005-0059

The CVE-2005-0059 issue is a buffer overflow in the Microsoft Message Queuing (MSMQ) service’s processing of messages. The vulnerability affects MSMQ on Windows 2000 and Windows XP SP1 (per the CVE/NVD entries) and is exploitable via the MSMQ RPC/queue handling interface, enabling remote code exe...

CVE-2005-0551

CVE-2005-0551 corresponds to a local privilege-elevation vulnerability in CSRSS (Client Server Runtime Subsystem) via WINSRV.DLL handling a console window FaceName string. A stack-based buffer overflow in CONSOLE_STATE_INFO (FaceName[32]) can be triggered by a crafted console window, enabling a l...

CVE-2005-0560

CVE-2005-0560 describes a heap-based buffer overflow in the SvrAppendReceivedChunk function of xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003. The overflow is triggered by a crafted X-LINK2STATE extended verb, potentially allowing remote code execution with the server’s privile...

CVE-2005-1091

Maxthon 1.2.0 and 1.2.1 expose a vulnerability where remote attackers can bypass a security ID and call restricted plugin API functions by crafting a page that includes max.src. The NVD entry CVE-2005-1091 documents this as a cross-page script inclusion issue allowing limited privileges to be use...

CVE-2005-1100

CVE-2005-1100 affects Greylisting daemon (GLD) 1.3 and 1.4. The vulnerability is a format-string bug in the ErrorLog function (cnf.c) that allows remote code execution via data passed to syslog. Linked advisories (GLSA 200504-10) describe remote arbitrary-code execution due to format-string issue...

Debian DSA-706-1 : axel - buffer overflow

Ulf Harnhammar from the Debian Security Audit Project discovered a buffer overflow in axel, a light download accelerator. When reading remote input the program did not check if a part of the input can overflow a buffer and maybe trigger the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenab...

Microsoft Windows Kernel Vulnerability

Overview A privilege elevation vulnerability exists in the way that the Windows' kernel processes certain access requests. This vulnerability could allow a logged on user to take complete control of the system. Description A locally authenticated user could potentially exploit a vulnerability in...

Moderate: Red Hat Security Advisory: dhcp security update

An updated dhcp package that fixes a string format issue is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcp package provides the ISC Dynamic Host Configuration Protocol DHCP server and...

CVE-2005-1044

...

CVE-2005-1083

CVE-2005-1083 concerns index.php in aeDating 3.2, where an attacker can remotely include arbitrary files via the skin parameter. This is a plain file inclusion vulnerability and results in arbitrary file inclusion. Context from multiple sources (NVD/Red Hat/CVE records) confirms the affected prod...

CVE-2005-1130

Cross-site scripting XSS vulnerability in index.php in Pinnacle Cart allows remote attackers to inject arbitrary web script or HTML via the pg parameter...

CVE-2005-1050

The modload op in the Reviews module for PostNuke 0.760-RC3 allows remote attackers to obtain sensitive information via an invalid id parameter, which reveals the path in a PHP error message...

CVE-2005-1085

CVE-2005-1085 : The vulnerability is a cross-site scripting (XSS) issue in the aeDating 3.2 control panel that allows remote attackers to inject arbitrary web script or HTML. Connected sources (NVD, Red Hat, CVE listings) reiterate the same description without providing technical details such as ...

CVE-2005-1051

CVE-2005-1051 affects PunBB 1.2.4: a SQL injection in profile.php via the id parameter in the change_email action. The vulnerability requires an authenticated remote user and allows arbitrary SQL execution, with reported potential for modification of database queries and administrative access. Do...

CVE-2005-1048

CVE-2005-1048 relates to a SQL injection in PostNuke 0.760 RC3, where the sid parameter in modules.php can be exploited remotely to run arbitrary SQL statements. The affected software is PostNuke (version 0.760 RC3 as cited; vendor reportedly could not reproduce issues for 0.760 RC3 or 0.750). Th...