CVE-2005-0204

CVE-2005-0204 affects the Linux kernel prior to 2.6.9 on AMD64/EM64T, where local users could exploit the OUTS instruction to write to privileged IO ports. The issue is documented in multiple advisories (RHSA-2005:293, SUSE CVE-2005-0204) and CentOS/CentOS-announce and is addressed by kernel secu...

CVE-2005-0090

A regression error in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch omits an "access check," which allows local users to cause a denial of service crash...

CVE-2005-0500

Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to spoof the domain name of a URL in a titlebar for a script-initiated popup window, which could facilitate phishing attacks...

CVE-2005-0495

Zeroboard/ZeroBoard web BBS contains a cross-site scripting (XSS) vulnerability (CVE-2005-0495). The issue arises from insufficient sanitization in multiple PHP entry points, allowing remote attackers to inject script via parameters to zboard.php (sn1, year, page) or view_image.php (filename). Op...

CVE-2005-0092

The CVE-2005-0092 entry concerns the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch on x86 with the hugemem kernel. A local unprivileged user could trigger a denial of service (crash) due to a flaw in the hugemem patch handling certain memory operations. The issue is listed among multiple ...

CVE-2005-0091

CVE-2005-0091 is described across connected records as a vulnerability in the Red Hat Enterprise Linux 4 kernel with the hugemem patch. The issue allows a local attacker to read and write arbitrary kernel memory and gain privileges via certain syscalls on systems using the hugemem configuration (...

CVE-2005-0497

The CVE-2005-0497 issue affects ADP Elite System Max 9000. It lets remote authenticated users gain privileges by uploading a .profile that sets the ADPROOT environment variable to the root directory, indicating a local-privilege-escalation flaw due to improper handling of user-supplied profiles. ...

CVE-2005-0494

The CVE-2005-0494 entry concerns Thomson TCW690 cable modem firmware 2.1 and software ST42.03.0a. The RgSecurity form in the HTTP server fails to properly validate the password before making changes, enabling remote attackers on the LAN to gain access through a direct POST request. The vulnerabil...

CVE-2005-0491

CVE-2005-0491 corresponds to an unchecked stack-buffer overflow in Arkeia Network Backup’s Type 77 request handler (arkeiad listener on port 617), allowing remote arbitrary code execution. The vulnerability affects Arkeia Backup Client/server components and has been demonstrated for Windows and M...

CVE-2005-0537

Multiple SQL injection vulnerabilities in page.php for iGeneric iG Shop 1.2 may allow remote attackers to execute arbitrary SQL statements via the 1 cats, 2 lprice, or 3 uprice parameters...

CVE-2005-0467

Multiple integer overflows in the 1 sftppktgetstring and 2 fxpreaddirrecv functions in the PSFTP and PSCP clients for PuTTY 0.56, and possibly earlier versions, allow remote malicious web sites to execute arbitrary code via SFTP responses that corrupt the heap after insufficient memory has been...

CVE-2005-0503

uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges...

CVE-2005-0503

uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges...

CVE-2005-0494

The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a does not properly validate the password before performing changes, which allows remote attackers on the LAN to gain access via a direct POST request...

CVE-2005-0493

CRLF injection vulnerability in bizmail.cgi in Biz Mail Form before 2.2 allows remote attackers to bypass the email check and send spam e-mail via CRLF sequences and forged mail headers in the email parameter...

CVE-2005-0492

Adobe Acrobat Reader 6.0.3 and 7.0.0 are affected by CVE-2005-0492. A malformed PDF with a negative Count value in the root page node can cause an application crash (DoS). The issue is described in the NVD entry and supported by OpenVAS references; no patch/versioned remediation detail is provide...

CVE-2005-0502

CVE-2005-0502 describes a directory traversal vulnerability in Xinkaa 1.0.3 and earlier. The issue allows remote attackers to read arbitrary files by manipulating path components (such as ../ and ..) in HTTP requests. The affected software is Xinkaa up to version 1.0.3; the exact root cause is in...

CVE-2005-0490

Multiple stack-based buffer overflows in libcURL and curl 7.12.1, enabling remote code execution via base64 replies, are described in the CVE-2005-0490 entry and linked F5 BIG-IP advisory SOL4447. The issue stems from improper handling in NTLM authentication (Curl_input_ntlm in http_ntlm.c) and K...

CVE-2005-0499

The CVE-2005-0499 entry describes a vulnerability in the Gigafast router (also known as the CompUSA router) where the DNS proxy option, when enabled, allows remote attackers to cause a denial of service through malformed DNS queries. The available data does not specify affected firmware versions ...

CVE-2005-0512

PHP remote file inclusion vulnerability in Tar.php in Mambo 4.5.2 allows remote attackers to execute arbitrary PHP code by modifying the mosConfigabsolutepath parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2004-1693...