CVE-2005-0942

Affected software: Sybase Adaptive Server Enterprise (ASE) XP Server 12.x. Vulnerable component: XP Server process (xp_server). Root cause: Denial of service caused by processing malformed data sent to the XP Server TCP port, leading to a process crash. Impact: Availability loss for the XP Server...

CVE-2005-0951

...

CVE-2005-0961

Horde 3.0.4 is vulnerable to an XSS in the page title due to insufficient sanitization of the parent frame title, affecting versions before 3.0.4-RC2. The vulnerability allows remote attackers to inject arbitrary script/HTML. Remediation: upgrade to Horde 3.0.4-RC2 or later.

CVE-2005-0959

CVE-2005-0959 describes a buffer overflow in Yep Yep mtftpd 0.0.3 within the mt_do_dir function. An attacker could trigger arbitrary code execution by supplying a long path, with the NVD entry classifying the impact as Partial confidentiality, integrity, and availability compromise and a basescor...

CVE-2005-0950

CVE-2005-0950 is a directory traversal vulnerability in FastStone 4in1 Browser 1.2. It allows remote attackers to read arbitrary files via a URL containing a triple-dot sequence (…)

CVE-2005-0958

The CVE-2005-0958 entry relates to a format-string vulnerability in the log_do function (log.c) of mtftpd 0.0.3 when the statistics option is enabled. This condition can allow remote attackers to achieve arbitrary code execution via the CWD command. Affected component: mtftpd 0.0.3; vulnerable co...

CVE-2005-0946

CVE-2005-0946 affects phpCOIN 1.2.1b and earlier, with SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. Affected input surfaces include the term/keywords field on search, username or e-mail on forgot password, and domain name on the new package ordering...

CVE-2005-0951

CVE-2005-0951 is rejected/not used per initial description.

CVE-2005-0942

The XP Server process xpserver in Sybase Adaptive Server Enterprise ASE XP Server 12.x before 12.5.3 ESD1 allows attackers to cause a denial of service process crash via malformed data sent to the XP Server TCP port...

CVE-2005-0949

CVE-2005-0949 describes multiple cross-site scripting (XSS) vulnerabilities in the PortalApp’s content.asp. The flaws allow remote attackers to inject arbitrary web script or HTML via the parameters contenttype or keywords . The NVD entry provides a base score of 4.3 (Medium) with network attack ...

CVE-2005-0947

Vulnerability summary (CVE-2005-0947) : The phpCOIN product (versions 1.2.1b and earlier) contains a directory traversal flaw in the auxiliary script auxpage.php. An attacker can supply a path in the page parameter that includes “..” to read or potentially execute arbitrary files on the server. T...

CVE-2005-0943

CVE-2005-0943 affects Cisco VPN 3000 Series Concentrator running firmware 4.1.7.A and earlier. The vulnerability allows remote attackers to cause a denial of service (device reload or user connection drop) by sending a crafted HTTPS packet. Attack vector is network, with low complexity and no aut...

CVE-2005-0953

CVE-2005-0953 (bzip2) : A race condition in bzip2 (versions 1.0.2 and earlier) lets a local user modify the permissions of an arbitrary file during decompression via a hard-link attack on a file while it is being decompressed. This can affect files in a directory where the attacker has write acce...

CVE-2005-0750

CVE-2005-0750 affects the Bluetooth driver in the Linux kernel (2.4.6–2.4.30-rc1 and 2.6–2.6.11.5). The bluez_sock_create function fails to validate a negative protocol value, allowing a local user to gain privileges via a crafted socket or socketpair call. Public details appear in multiple advis...

CVE-2005-0952

CVE-2005-0952 describes a cross-site scripting vulnerability in the PaFileDB 3.1 web application, specifically in pafiledb.php where the attacker can inject arbitrary script via the id parameter. The vulnerability is documented across multiple sources (NVD/Nessus/NVD CVE record). Exploitation cou...

CVE-2005-0954

CVE-2005-0954 affects Windows 2000 SP1, specifically Windows Explorer and Internet Explorer, where a malformed Windows Metafile (WMF) can be used by a remote attacker to consume CPU and cause a denial of service. The vulnerability is described as enabling a remote DoS via WMF parsing, with the NV...

CVE-2005-0960

CVE-2005-0960 affects OpenBSD 3.5 and 3.6, targeting the SACK implementation in tcp_input.c and tcp_usrreq.c. The vulnerability allows remote attackers to cause a denial of service via memory exhaustion or system crash. No remediation details are provided in the available documents; exploitation ...

CVE-2005-0750

The bluezsockcreate function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via 1 socket or 2 socketpair call with a negative protocol value...

CVE-2005-0962

CVE-2005-0962 documents a SQL injection in index.php for SquirrelCart (SquirrelCart/Lighthouse Squirrelcart). The flaw is exploited via the (1) crn parameter in a show action or (2) rn parameter in a show_detail action, allowing remote SQL commands. Affected: SquirrelCart 1.5.5 and prior versions...

CVE-2005-0955

InterAKT MX Shop 1.1.1 is affected by a SQL injection vulnerability via the id_ctg parameter, allowing remote attackers to execute arbitrary SQL commands. CVSSv2 base score 7.5 (NETWORK/LOW ATTACK COMPLEXITY, NO AUTHENTICATION). No remediation details are provided in the supplied documents; explo...