CVE-2005-0549

Cross-site scripting XSS vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the "View Log Files" function...

CVE-2005-0698

PHP remote file inclusion vulnerability in PHPWebLog 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the 1 GPATH parameter to init.inc.php or the 2 PATH parameter to index.php to reference a URL on a remote web server that contains the code...

CVE-2005-0207

Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via ODIRECT...

CVE-2005-0549

CVE-2005-0549 is a cross-site scripting (XSS) vulnerability in Sun/ Solaris AnswerBook2 Documentation 1.4.4 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the View Log Files function. Affected software is explicitly Sun AnswerBook2 documentation prior to...

CVE-2005-0706

CVE-2005-0706 describes a buffer overflow in the GNOME VFS code path (gnome-vfs/gnome-vfs2) when handling data from CDDB servers. The flaw could allow a remote attacker to cause a crash (DoS) and, in some cases, execute arbitrary code by returning an excessive number of CDDB matches. Public advis...

CVE-2005-0736

Integer overflow in sysepollwait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events...

BELL-CVE-2005-0736 CVE-2005-0736 does not affect BellSoft software

Bulletin has no description...

CVE-2005-0699

The CVE-2005-0699 issue affects Ethereal (Wireshark) up to version 0.10.9 and earlier. It arises from multiple buffer overflows in the dissect_a11_radius function of the CDMA A11 dissector (packet-3g-a11.c). This flaw can allow remote attackers to execute arbitrary code by sending crafted RADIUS ...

CVE-2005-0698

PHPWebLog

Debian DSA-692-1 : kdenetwork - design flaw

The KDE team fixed a bug in kppp in 2002 which was now discovered to be exploitable by iDEFENSE. By opening a sufficiently large number of file descriptors before executing kppp which is installed setuid root a local attacker is able to take over privileged file descriptors. %NASLMINLEVEL 70300 C...

CVE-2005-0626

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies...

CVE-2005-0693

JoWood Chaser 1.50 and earlier is affected by a buffer overflow in the nickname handling, allowing remote attackers to cause a client or server crash and to execute arbitrary code. The vulnerability is triggered by sending a long nickname, leading to memory corruption. Public references list advi...

CVE-2005-0693

Buffer overflow in JoWood Chaser 1.50 and earlier allows remote attackers to cause a denial of service client or server crash and execute arbitrary code via a long nickname...

CVE-2005-0686

Integer overflow in mlterm 2.5.0 through 2.9.1, with gdk-pixbuf support enabled, allows remote attackers to execute arbitrary code via a large image file that is used as a background...

CVE-2005-0685

Multiple access validation errors in OutStart Participate Enterprise PE allow remote attackers to 1 browse arbitrary directory trees by modifying the rootFolder parameter to displaynavigator.jsp, 2 rename arbitrary directory objects by modifying the selectedObject parameter to renamepopup.jsp, 3...

CVE-2005-0689

The Includer project (The Includer, includer.cgi) contains a remote command execution vulnerability (CVE-2005-0689). The flaw allows an attacker to execute arbitrary shell commands by injecting shell metacharacters in the URL or in the template parameter, enabling a remote attacker to run command...

CVE-2005-0696

CVE-2005-0696 refers to a heap-based buffer overflow in ArGoSoft FTP Server triggered by a DELE command with a very long argument (reported on versions including 1.4.2.8 and later 1.4.3.5). The vulnerability allows a remote authenticated user to potentially execute arbitrary code. The issue is de...

CVE-2005-0098

The CVE-2005-0098 entry concerns abuse, the SDL port of the Abuse game. Official advisories (CAN-2005-0098 and CAN-2005-0099) describe local, pre-2.00 buffer overflows in command-line handling that could let an attacker gain arbitrary code execution with elevated privileges, and file-creation fla...

CVE-2005-0353

CVE-2005-0353 affects SafeNet Sentinel License Manager (Sentinel LM) with the lservnt service (7.2.0.2). A remote attacker can overflow a buffer by sending large data to UDP port 5093, potentially executing arbitrary code. Public references show a Metasploit module (SentinelLM UDP Buffer Overflow...

CVE-2005-0687

Format string vulnerability in Hashcash 1.16 allows remote attackers to cause a denial of service memory consumption and possibly execute arbitrary code via format string specifiers in a reply address, which is not properly handled when printing the header...