10536 matches found
CVE-2005-0624
CVE-2005-0624 affects reportbug before 2.62; .reportbugrc is created with world‑readable permissions, allowing local users to obtain email smarthost passwords. Impact: partial confidentiality; exploit requires local access. NVD metrics show LOW severity (AV:L, AC:L, AU:N). The provided documents ...
CVE-2005-0625
CVE-2005-0625 affects reportbug 3.2, where settings from .reportbugrc are included in bug reports, exposing sensitive data such as smtpuser and smtppasswd. The underlying issue is the unintended leakage of stored mail credentials via bug reports. The impact is credential exposure; the available s...
CVE-2005-0605
scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmapunit value that leads to a buffer overflow...
CVE-2005-0622
RaidenHTTPD 1.1.32 (and possibly earlier than 1.1.34) is affected by CVE-2005-0622. The issue allows remote attackers to view the PHP source code by issuing an HTTP GET for a filename that ends with a trailing dot or a trailing space. The vulnerability impacts confidentiality (partial) and is exp...
CVE-2005-0581
Summary of vulnerability facts (CVE-2005-0581) : The CA License Client/Server/GCR components used in CA BrightStor ARCserve Backup 11.0 (and related CA License Server/Client software) are affected by a stack/buffer overflow when processing certain malformed or overly long GCR messages and GETCONF...
CVE-2005-0582
Buffer overflow in Computer Associates CA License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in a PUTOLF request...
CVE-2005-0638
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command...
CVE-2005-0638
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command...
CVE-2005-0582
CVE-2005-0582 describes a buffer overflow in Computer Associates License Client 0.1.0.15 (License Client/Server) that can be triggered by a long filename in a PUTOLF request, allowing remote code execution with SYSTEM/root privileges on affected platforms. Connected advisories confirm a CA Licens...
CVE-2005-0618
The issue is a load-balancing defect in SMTP binding on several Symantec/Nexland devices that can cause outbound SMTP traffic intended for a trusted network to be sent over an untrusted path when two WANs are used. Affected products and firmware: Symantec Firewall/VPN Appliance 200/200R (before 1...
CVE-2005-0625
reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd...
CVE-2005-0639
Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via "buffer management errors" from certain image properties, some of which may be related to integer overflows in PPM files...
CVE-2005-0622
RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to view the PHP source code via an HTTP GET request for a filename with a trailing 1 . dot or 2 space...
CVE-2005-0455
CVE-2005-0455 is a stack-based buffer overflow in RealPlayer/RealOne SMIL parsing (CSmil1Parser::testAttributeFailed in smlparse.cpp) triggered by crafted SMIL files with large system-screen-size values. Affects RealPlayer 10.5 (6.0.12.1056 and earlier), RealPlayer 10/8, and RealOne Player V1/V2....
CVE-2005-0623
CVE-2005-0623 affects RaidenHTTPD 1.1.32 and possibly earlier versions before 1.1.34. The vulnerability is a buffer overflow in URL handling that enables remote attackers to execute arbitrary code. The connected documents confirm the affected software and impact; exploitation details are not prov...
CVE-2005-0620
The CVE-2005-0620 entry concerns Einstein 1.0, where credit card information is stored in plaintext within the world-readable wallets.dat. This plaintext storage enables local users to access sensitive data. The description confirms the affected component (wallets.dat containing credentials) and ...
CVE-2005-0619
The CVE-2005-0619 entry describes Einstein 1.0.1 storing usernames and passwords in plaintext in the Windows registry, enabling local privilege escalation. Affected component: registry-stored credentials within Einstein 1.0.1. Root cause: insecure plaintext storage of sensitive data in the regist...
CVE-2005-0617
CVE-2005-0617 describes an SQL injection vulnerability in PostNuke versions 0.750 and 0.760-RC2 that allows remote attackers to execute arbitrary SQL commands via the show parameter in dl-search.php. The issue is confirmed by the NVD entry and related OpenVAS/Nessus advisories referencing PostNuk...