10536 matches found
CVE-2005-0460
CVE-2005-0460 affects MercuryBoard (Web PHP bulletin board) versions 1.0.x and 1.1.x. The issue arises in index.php via the debug parameter, allowing remote attackers to obtain sensitive information. Public references indicate multiple feeds about MercuryBoard vulnerabilities, but the provided do...
CVE-2005-0372
Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. dot dot sequences in filenames returned from a LIST command...
CVE-2005-0253
CVE-2005-0253 affects BibORB, specifically 1.3.2 and earlier. A directory traversal flaw in index.php (database_name parameter) allows remote attackers with Delete action rights to delete arbitrary files on the host where BibORB runs. Related disclosures (Full-Disclosure advisory, PacketStorm not...
CVE-2005-0176
The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released...
CVE-2005-0411
CVE-2005-0411 affects CitrusDB up to version 0.3.6 (and earlier). The vulnerability is a directory-traversal in index.php where the GET parameter load can include arbitrary local PHP files via .. sequences, enabling remote attackers and local users to include PHP files. The issue is documented wi...
CVE-2005-0410
CVE-2005-0410 affects CitrusDB up to version 0.3.6, where importcc.php is vulnerable to SQL injection via fields in uploaded CSV data. This allows remote attackers to inject data into the database through crafted CSV files. Evidence from multiple sources confirms the vulnerability exists in Citru...
CVE-2005-0454
Vulnerability summary (CVE-2005-0454) : DCP-Port al 6.1.1 and earlier contain multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands. The issues are triggered via (1) index.php parameters lcat, doc, or uid, and (2) forums.php parameters mid or bid. The connecte...
CVE-2005-0450
CVE-2005-0450 : The vulnerability affects Sami HTTP Server 1.0.5. A directory traversal flaw lets remote attackers read arbitrary files by crafting HTTP requests containing ".." sequences or their URL-encoded form "%2e%2e". The incident is documented with a NVD CVSS v2.0 base score of 5.0 (Medium...
CVE-2005-0105
CVE-2005-0105 affects the typespeed package (0.4.1 and earlier). Debian’s DSA-684-1 notes a local format-string vulnerability that could allow a local attacker to execute arbitrary code as the games group; a fix is provided in 0.4.1-2.3 for woody, with updates planned for sid. OpenVAS/NVD referen...
CVE-2005-0362
awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 "pluginmode", 2 "loadplugin", or 3 "noloadplugin" parameters...
CVE-2005-0411
Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote attackers and local users to include arbitrary PHP files via .. dot dot sequences in the load parameter...
CVE-2005-0449
The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service kernel crash or bypass firewall rules via crafted packets, which are not properly handled by the skbchecksumhelp function...
CVE-2005-0450
Directory traversal vulnerability in Sami HTTP Server 1.0.5 allows remote attackers to read arbitrary files via an HTTP request containing 1 .. dot dot or 2 "%2e%2e" encoded dot dot sequences...
CVE-2005-0177
nlsascii.c in Linux before 2.6.8.1 uses an incorrect table size, which allows attackers to cause a denial of service kernel crash via a buffer overflow...
CVE-2005-0070
CVE-2005-0070 affects synaesthesia up to version 2.1 where the binary is installed setuid root and does not drop privileges while reading user configuration/mixer files, allowing local users to read arbitrary files. Public sources detail a privilege-escalation issue with synaesthesia and Debian’s...
CVE-2005-0176
The CVE-2005-0176 issue affects the Linux kernel (2.6.9 and earlier) where shmctl-based locking of System V shared memory could be misused by local unprivileged users to unlock memory from other processes. This could cause sensitive memory contents to be swapped to disk and read by others after r...
CVE-2005-0011
CVE-2005-0011 affects the KDE Education KDEedu KStars integration’s fliccd, where fliccd is installed as setuid root. The vulnerability stems from stack-based buffer overflows in fliccd, enabling root code execution via that binary when running with elevated privileges. Documents consistently des...
CVE-2005-0105
Unknown vulnerability in typespeed 0.4.1 and earlier allows local users to gain privileges...
CVE-2005-0430
The CVE-2005-0430 entry covers the Quake 3 engine (as used in multiple game packages). The issue arises from processing a long infostring, which can allow remote attackers to cause a denial of service (shutdown/crash of the game server) potentially via a buffer overflow. The description specifies...