CVE-2005-0352

Servers Alive 4.1 and 5.0 contain a local privilege-escalation when run as a service: loading the Local manual under help does not drop SYSTEM privileges, allowing a local user to obtain SYSTEM context and fully compromise the host. The vulnerability arises from the service context interacting wi...

CVE-2005-0787

Wine 20050211 and earlier creates temporary registry dump files in /tmp with world-readable permissions and predictable names, enabling local users to read sensitive data (e.g., passwords). The issue is documented across multiple feeds (NVD, OSV, UBUNTU/CVE pages, OpenVAS listings) with consisten...

CVE-2005-0819

The CVE-2005-0819 entry concerns the xvesa code in Novell NetWare 6.5 SP2 and SP3. The flaw allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start. No explicit exploit details, affected versions, or remediation are provided beyond the descr...

CVE-2005-0781

CVE-2005-0781 affects paFileDB 3.1 and earlier, with SQL injection in viewall.php and category.php via the start parameter to pafiledb.php, enabling remote execution of arbitrary SQL commands. The vulnerability is documented in NVD as a SQLi in paFileDB 3.1 and earlier; exploitation details are n...

CVE-2005-0779

CVE-2005-0779 affects PlatinumFTP 1.0.18 and possibly earlier versions. A remote attacker can cause a denial of service (server crash) by initiating multiple connections with a backslash in the username. The connected sources confirm the same description, but there are no details in the provided ...

CVE-2005-0799

CVE-2005-0799 affects MySQL 4.1.9 and earlier. A remote attacker with certain privileges can cause a denial of service (application crash) by issuing a DoS payload: a SQL command starting with a use statement followed by an MS-DOS device name (e.g., LPT1 or PRN). The issue is demonstrated by the ...

CVE-2005-0811

CVE-2005-0811 concerns the NotifyLink 3.0 web interface, where authenticated users can bypass GUI-enabled access restrictions by issuing direct requests to restricted URLs. The underlying issue is ineffective server-side access control for features that are disabled in the user interface, enablin...

CVE-2005-0789

Summary: CVE-2005-0789 is a directory traversal vulnerability in LimeWire 3.9.6–4.6.0 that lets remote attackers read arbitrary files via a .. in a magnet request. The affected component is LimeWire’s handling of magnet/Gnutella requests; the underlying issue is directory traversal in user-contro...

CVE-2005-0806

CVE-2005-0806 affects Evolution (notably 2.0.3) and enables a remote attacker to cause a denial of service (application crash or hang) by sending crafted messages, with possible involvement of charset handling in attachment filenames. The issue is corroborated by multiple advisories: RHSA-2005:39...

CVE-2005-0774

CVE-2005-0774 affects PhotoPost PHP 5.0 RC3. The SQL injection occurs in member.php (and possibly other scripts) via the uid parameter, enabling remote attackers to execute arbitrary SQL commands. This is reported as a high-severity issue (CVSS vector: AV:N/AC:L/Au:N/C:P/I:P/A:P). Connected docum...

CVE-2005-0785

CVE-2005-0785 describes a cross-site scripting (XSS) vulnerability in YaBB 2.0 rc1, specifically in the YaBB.pl usersrecentposts action. The issue arises from unsafely handling the username parameter, allowing an attacker to inject arbitrary web script or HTML that could run in a victim’s browser...

Important: Red Hat Security Advisory: sylpheed security update

An updated sylpheed package that fixes a buffer overflow issue is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Sylpheed is a GTK+ based fast email client. A buffer overflow bug has been found in the way Sylpheed handles...

Moderate: Red Hat Security Advisory: ethereal security update

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...

CVE-2005-0210

Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service memory consumption via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice...

CVE-2005-0766

CVE-2005-0766 describes an unknown vulnerability in the Ethereal sFlow dissector that affects versions 0.9.14 through 0.10.9 and can be exploited remotely to cause a denial of service (application crash). Multiple connected sources confirm the issue is tied to the sFlow dissector in Ethereal, wit...

CVE-2005-0384

CVE-2005-0384 : Unknown vulnerability in the Linux kernel 2.6.8.1 PPP driver that allows a remote attacker using a pppd client to cause a kernel crash (denial of service). Public references include Red Hat advisories and Debian/Ubuntu advisories; no specific fix version is provided in the supplie...

CVE-2005-0515

CVE-2005-0515 affects Smc.exe in My Firewall Plus 5.0 build 1117 (and possibly other versions). The issue is that it does not drop privileges before launching the Log Viewer export functionality, allowing local users to corrupt arbitrary files by saving log files. Exploitation details are not pro...

CVE-2005-0396

CVE-2005-0396 affects the DCOP daemon (dcopserver) in KDE prior to 3.4. A local attacker can stall the DCOP authentication process, causing a denial of service (dcopserver consumption) for nearby desktop users. Public sources in the connected documents describe this as a local DoS vulnerability t...

CVE-2005-0768

CVE-2005-0768 concerns a buffer overflow in the administration web server of GoodTech Telnet Server (versions 4.0 and 5.0, possibly all versions before 5.0.7) that can be triggered by sending a long string to port 2380. The vulnerability is described as allowing remote code execution. Public refe...

CVE-2005-0770

CVE-2005-0770 affects DataRescue IDA Pro 4.7.0.830. The vulnerability is a format string flaw in the DLL name, enabling a remote attacker or local user to trigger denial of service (CPU consumption or app crash) and possibly execute arbitrary code. Impact includes DoS and potential code execution...