CVE-2005-0895

The CVE-2005-0895 entry describes the Netcomm 1300NB DSL Modem as vulnerable to a denial of service (device hang) caused by receiving a large number of ping packets. The connected documents provide this same description and do not include additional technical details, affected firmware versions, ...

CVE-2005-0898

CVE-2005-0898 describes a cross-site scripting (XSS) vulnerability in the PHP file downloadform.php of the E-Store Kit-2 PayPal Edition. The flaw allows remote attackers to inject arbitrary web script or HTML by supplying a crafted txn_id parameter, potentially impacting users who view the affect...

CVE-2005-0915

Webmasters-Debutants WD Guestbook 2.8 is affected by an authentication bypass vulnerability. A remote attacker can bypass authentication and perform administrator actions via a direct HTTP POST to (1) ajout_admin2.php or (2) suppr.php. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH) with ne...

CVE-2005-0901

CVE-2005-0901 affects NukeBookmarks 0.6 for PHP-Nuke with multiple XSS vulnerabilities that allow remote attackers to inject arbitrary scripts via the catname, markname, comment, or category parameters. The NVD entry records a CVSS v2 base score of 4.3 (Medium) with network attack vector, no auth...

CVE-2005-0925

CVE-2005-0925 affects Ublog Reload 1.0–1.0.4. Affected component: login.asp, vulnerable parameter: msg, enabling Cross‑site Scripting (XSS) by remote attackers to inject arbitrary script/HTML. Impact aligns with partial integrity concerns and no confidentiality/availability loss per CVSS—base 4.3...

CVE-2005-0933

CVE-2005-0933 describes a directory traversal vulnerability in the PHPCOIN application (auxpage.php) affecting phpCOIN versions ≤ 1.2.1b. Remote attackers can read arbitrary files by manipulating the page parameter. This is validated across sources: the NVD entry notes a directory traversal issue...

CVE-2005-0904

Remote Desktop in Windows XP SP1 does not verify the "Force shutdown from a remote system" setting, which allows remote attackers to shut down the system by executing TSShutdn.exe...

CVE-2005-0922

CVE-2005-0922 affects Symantec Norton AntiVirus 2004/2005 (also used in Internet Security 2004/2005 and System Works 2004/2005). The Auto-Protect real-time scanning module can be triggered by certain file types to cause a denial of service, potentially hanging or crashing the system. The vulnerab...

CVE-2005-0923

Symantec Norton AntiVirus 2004/2005 (including Internet Security 2004/2005 and System Works 2004/2005) contains a DoS vulnerability in the Auto-Protect module’s SmartScan feature. Renaming a file on a network share can trigger excessive CPU usage, leading to a system hang or crash. The issue affe...

CVE-2005-0927

Technical details about CVE-2005-0927 are not publicly available in the provided documents. Monitor for updates; no confirmed affected versions, root cause, or remediation are stated here.

RHEL 4 : telnet (RHSA-2005:327)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:327 advisory. The telnet package provides a command line telnet client. The telnet-server package includes a telnet daemon, telnetd, that supports remote...

RHEL 4 : mysql (RHSA-2005:334)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:334 advisory. MySQL is a multi-user, multi-threaded SQL database server. This update fixes several security risks in the MySQL server. Stefano Di Paola...

Debian DSA-697-1 : netkit-telnet - buffer overflow

Gael Delalleau discovered a buffer overflow in the handling of the LINEMODE suboptions in telnet clients. This can lead to the execution of arbitrary code when connected to a malicious server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

RHEL 2.1 : grip (RHSA-2005:304)

A new grip package is available that fixes a remote buffer overflow. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Grip is a GTK+ based front-end for CD rippers such as cdparanoia and cdda2wav and Ogg Vorbis encoders. Dean Brettle discovered ...

CVE-2005-0469

CVE-2005-0469 is a buffer overflow in the LINEMODE handling path (slc_add_reply) in BSD-based Telnet clients. The connected Mariner entry notes CVE-2005-0469 affecting telnet 0.17-81 with no patch available yet. The root cause is a buffer overflow triggered by replies containing a large number of...

CVE-2005-0468

CVE-2005-0468 is a heap-based buffer overflow in the env_opt_add function of telnet clients (telnet.c) for BSD-based implementations. An attacker can trigger it by sending responses with many characters requiring escaping, causing the client to overflow memory and potentially execute arbitrary co...

local root security bug in linux >= 2.4.6 <= 2.4.30-rc1 and 2.6.x.y <= 2.6.11.5

Suresec security advisory 1 Release date: 27th March 2005 CVE ID: CAN-2005-0750 Linux kernel local root vulnerability About the linux kernel: The linux kernel is a widely used kernel which is unix based. Vulnerability summary: The linux kernel has support for bluetooth. A local root security...

CVE-2005-0874

The CVE-2005-0874 entry covers multiple buffer overflows in Trillian 2.0 plug-ins (AIM, MSN, RSS, and others). The root cause is deficient handling of long strings in an HTTP/1.1 response header, enabling a remote attacker to trigger a denial of service (application crash). Exploitation details a...

CVE-2005-0877

Dnsmasq before 2.21 is vulnerable to DNS cache poisoning: remote attackers can inject answers to queries not issued by dnsmasq, potentially compromising DNS integrity. Affected component is the dnsmasq binary; root cause is handling of unsolicited responses that enables cache poisoning. Impact is...

CVE-2005-0869

phpSysInfo 2.3 is affected by CVE-2005-0869. The issue enables remote attackers to obtain sensitive information by requesting specific PHP files (class.OpenBSD.inc.php, class.NetBSD.inc.php, class.FreeBSD.inc.php, class.Darwin.inc.php, XPath.class.php, system_header.php, system_footer.php), which...