CVE-2005-0570

PunBB 1.2.1 contains a vulnerability in profile.php that allows remote attackers to cause a denial of service (account lockout) by setting a user’s password to NULL. This is the concrete vulnerability described in CVE-2005-0570 across sources (NVD/NIST and CVE list). The connected documents also ...

CVE-2005-0574

CVE-2005-0574 describes a directory traversal vulnerability in CIS WebServer 3.5.13 that allows remote attackers to read arbitrary files through URL paths containing dot-dot (..) sequences. The vulnerability is documented in multiple sources (NVD, Red Hat, CVE List) with the same description. The...

CVE-2005-0571

PunBB 1.2.1 contains an information-disclosure flaw in admin_loader.php: the plugin parameter allows remote attackers to read arbitrary files. This is a file-read vulnerability (no user authentication required) with a CVSS base score of 5.0 (medium) per NVD, indicating network-remote access and l...

CVE-2005-0567

CVE-2005-0567 affects phpMyAdmin 2.6.1 with multiple remote file inclusion vulnerabilities. An attacker can modify the theme parameter to phpmyadmin.css.php or the cfg[Server][extension] parameter to database_interface.lib.php to reference a URL on a remote server, enabling execution of arbitrary...

CVE-2005-0572

Summary (CVE-2005-0572) : Affects phpWebSite 0.10.0 and earlier. The vulnerability stems from an invalid SEA_search_module parameter in index.php, which causes a PHP error message that reveals the script path, enabling a remote attacker to disclose sensitive information. The issue is associated w...

CVE-2005-0565

The vulnerability CVE-2005-0565 affects phpWebSite 0.10.0 and earlier, where the Announce module lets a remote attacker cause arbitrary PHP execution by setting the Image field to reference a PHP file whose name contains a .gif.php extension. OpenVAS/Nessus/Gentoo GLSA entries corroborate remote ...

CVE-2005-0575

CVE-2005-0575 affects Stormy Studios Knet server (versions 1.04c and earlier). A buffer overflow allows remote attackers to cause a denial of service and potentially execute arbitrary code via a long HTTP GET request. Exploitation details are not provided in the included documents; no patch or re...

CVE-2005-0569

PunBB 1.2.1 is affected by multiple SQL injection vulnerabilities (CVE-2005-0569) allowing remote attackers to execute arbitrary SQL commands via the language parameter in register.php, the change email feature in profile.php, or the posts/topics parameters in moderate.php. This aligns with the N...

CVE-2005-0578

Firefox before 1.0.1 and Mozilla Suite before 1.7.6 use a predictable filename for the plugin temporary directory, which allows local users to delete arbitrary files of other users via a symlink attack on the plugtmp directory...

CVE-2005-0571

adminloader.php in PunBB 1.2.1 allows remote attackers to read arbitrary files via the plugin parameter...

CVE-2005-0568

Soldier of Fortune II 1.03 gold allows remote attackers to cause a denial of service application crash via a large clguid value, which results in an invalid pointer dereference...

CVE-2005-0566

Summary: Golden FTP Server Pro (goldenftpd) 2.x contains a buffer overflow vulnerability exploitable via a long RNTO command, enabling remote arbitrary code execution. Affected software: Golden FTP Server Pro, goldenftpd, version 2.x. Vulnerability details: Root cause described as a buffer overfl...

CVE-2005-0576

CVE-2005-0576 concerns Solaris 9, specifically the Standard Type Services Framework (STSF) Font Server Daemon (stfontserverd). The vulnerability is described as unknown but allows local users to modify or delete arbitrary files. The available references indicate advisories and vendor notes, but n...

CVE-2005-0579

Affected software: nxagent in FreeNX before 0.2.8. Issue: missing handling of an unset XAUTHORITY environment variable. Impact: local users can access the X server without X authentication. Notes: the records do not specify a patch version or remediation steps. If true fixes or mitigations exist,...

CVE-2005-0578

CVE-2005-0578 affects Firefox up to 1.0.0 and Mozilla Suite up to 1.7.5, where a predictable plugin temporary directory filename enables local users to delete arbitrary files via a symlink attack on plugtmp. Root cause: insecure naming of the plugtmp directory. Impact: local privilege/unauthorize...

CVE-2005-0577

CVE-2005-0577 affects DNA MKBold-MKItalic up to version 0.06_1. The vulnerability is a format string flaw in the BDF font processing that could allow remote code execution. The OpenVAS and NVD records corroborate the issue; they reference the FreeBSD ports mkbold-mkitalic package as affected. The...

CVE-2005-0107

CVE-2005-0107 affects bsmtpd (versions 2.3 and earlier). The vulnerability arises from insufficient sanitization of e-mail addresses, enabling remote attackers to execute arbitrary commands during mail delivery. Debian and Red Hat advisories document remote, input‑sanitising failures with confirm...

CVE-2005-0579

nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allows local users to access the X server without X authentication...

CVE-2005-0547

Unknown vulnerability in ftpd on HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23 allows remote authenticated users to gain "unauthorized access to files."...

CVE-2005-0527

Firefox 1.0 allows remote attackers to execute arbitrary code via plugins that load "privileged content" into frames, as demonstrated using certain XUL events when a user drags a scrollbar two times, aka "Firescrolling."...