CVE-2005-0740

The CVE-2005-0740 issue affects OpenBSD releases 3.5 and 3.6, where the TCP stack (tcp_input.c) is vulnerable to crafted values in the TCP timestamp option. This can cause the system to panic (denial of service) by resulting in invalid arguments during retransmit timeout calculation. The availabl...

CVE-2005-0748

Technical details about CVE-2005-0748 are not publicly available in the provided documents. Monitor for updates.

CVE-2005-0733

The CVE-2005-0733 entry concerns PY Software Active Webcam WebServer (webcam.exe) 5.5. It enables remote attackers to determine whether a full path exists by issuing HTTP requests, with differing responses based on file existence, resulting in information disclosure. Affected component: Active We...

CVE-2005-0734

CVE-2005-0734 affects PY Software’s Active WebCam WebServer (webcam.exe) version 5.5. The available documents state that remote attackers can cause a denial of service through a flood of HTTP requests, leading to memory exhaustion and a process crash. The root cause is not explicitly detailed in ...

CVE-2005-0738

CVE-2005-0738 affects Microsoft Exchange Server 2003 SP1. The vulnerability is a stack consumption issue in the Information Store (Store.exe) caused by processing folders with deeply nested subfolders, leading to a denial-of-service (hang) due to a large number of recursive calls. This is the exp...

CVE-2005-0732

The CVE-2005-0732 entry concerns PY Software Active Webcam WebServer (webcam.exe) v5.5. Public sources (NVD) state that remote attackers can cause the server to disclose the full installation path by requesting a non-existent filename, leaking the path in an error message. This is classified with...

CVE-2005-0744

The CVE-2005-0744 issue affects the web GUI of Novell iChain versions 2.2 and 2.3 SP2/SP3. The underlying risk is session hijacking leading to administrator privileges via two methods: (1) sniffing the connection on TCP port 51100 and replaying authentication data, and (2) obtaining and replaying...

CVE-2005-0739

CVE-2005-0739 affects Ethereal (IAPP dissector, packet-iapp.c) from versions 0.9.1 through 0.10.9. The root cause is improper handling of string formatting in assessors for dissect_pdus and pduval_to_str, which could lead to buffer overflows. The documented impact includes potential compromise of...

CVE-2005-0735

The CVE refers to NewsScript’s newsscript.pl CGI, where an attacker can escalate privileges remotely by sending mode=admin. Affected product: NewsScript (NewsScript.co.uk). Root cause: incomplete access validation in the CGI parameters allowing admin rights to be set via the mode parameter. Impac...

CVE-2005-0731

CVE-2005-0731 affects PY Software Active Webcam WebServer (webcam.exe) 5.5. A remote attacker can trigger a denial of service by requesting Filelist.html, leading to increased CPU usage and service impact. The NVD lists a base score of 5.0 (MEDIUM) with network attack vector and partial availabil...

CVE-2005-0718

Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service segmentation fault by aborting the connection during a 1 PUT or 2 POST request, which causes Squid to access previously freed memory...

CVE-2005-0780

paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 auth.php, 2 login.php, 3 category.php, 4 file.php, 5 team.php, 6 license.php, 7 custom.php, 8 admins.php, or 9 backupdb.php, which reveal the path in a PHP error message...

CVE-2005-0721

CVE-2005-0721 affects eXPerience2: remote PHP file inclusion via modules.php by modifying the file parameter to reference a remote URL containing code. This allows an attacker to execute arbitrary PHP code on the target server. The description from multiple sources confirms the vulnerability clas...

CVE-2005-0726

The CVE-2005-0726 entry concerns UBB.threads 6.0, where the editpost.php script is vulnerable to SQL injection via the Number parameter. The root cause is insufficient sanitization in editpost.php, allowing a remote attacker to execute arbitrary SQL commands. Impact includes potential data exposu...

CVE-2005-0725

CVE-2005-0725 describes an SQL injection in the WF-Sections (wfsections) 1.07 module. The vulnerability exists in the getAllbyArticle function of wfsfiles.php and allows remote attackers to inject arbitrary SQL through the articleid parameter to article.php. Multiple connected records corroborate...

CVE-2005-0727

CVE-2005-0727 is a duplicate of CVE-2005-0735. Connected sources detail a remote privilege-escalation in NewsScript (NewsScript.co.uk) via the CGI parameter mode; setting mode=admin bypasses authentication and allows the attacker to add, delete, or modify news content. This vulnerability affects ...

CVE-2005-0719

The CVE-2005-0719 entry concerns an unknown vulnerability in the systems message queue of HP Tru64 Unix, affecting versions 4.0F PK8 through 5.1B-2/PK4. The issue enables local users to trigger a denial of service by crashing processes (e.g., nfsstat, pfstat, arp, ogated, rarpd, route, sendmail, ...

CVE-2005-0723

CVE-2005-0723 concerns paFileDB

CVE-2005-0448

Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452...

CVE-2005-0448

Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452...