CVE-2005-0428

CVE-2005-0428 : PowerDNS prior to 2.9.17 contains a DoS vulnerability in DNSPacket::expand (dnspacket.cc). A remote attacker can cause a denial of service by sending a random stream of bytes. Affected product/version: PowerDNS before 2.9.17. Root cause: flaw in DNSPacket::expand leading to DoS. I...

CVE-2005-0019

CVE-2005-0019 describes a local privilege-escalation vulnerability in hztty (hztty 2.0 and earlier) where an attacker can trigger arbitrary commands with utmp group privileges. Debian advisory DSA-675-1 (and related Debian security notes) states this was fixed in hztty 2.0-5.2woody2 for the stabl...

CVE-2005-0446

CVE-2005-0446 affects Squid 2.5.STABLE8 and earlier. The issue is in DNS response handling (fqdncache.c and ipcache.c) that can trigger an assertion failure, leading to a remote denial of service (crash). Public write-ups and advisories (Fedora/RHEL/Ubuntu/other vendors) state that updated Squid ...

CVE-2005-0447

CVE-2005-0447 affects Solaris 7, 8, and 9. A remote attacker can cause a denial-of-service (hang) by sending a flood of certain ARP packets. The available sources describe the impact but do not provide patch versions or remediation steps within the provided documents. Connected documents do not a...

CVE-2005-0149

Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages...

CVE-2005-0438

CVE-2005-0438 affects AWStats awstats.pl (versions 6.3 and 6.4); improper handling of the debug parameter allows remote disclosure of sensitive information. Connected sources (NVD, Debian/OpenVAS/Nessus advisories) confirm a vulnerability with updates/missing input sanitization themes, but explic...

CVE-2005-0159

CVE-2005-0159 concerns insecure temporary file handling in the Debian-specific tpkg-* scripts within toolchain-source (version 3.0.4 in Woody; later fixes in 3.4-5 for sid). A local attacker could exploit symlink tricks to overwrite arbitrary files via insecure temporary files, enabling local pri...

CVE-2005-0176

The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released...

CVE-2005-0422

CVE-2005-0422 affects DelphiTurk CodeBank (KodBank) 3.1 and earlier. The root cause is that usernames and passwords are stored in the Codebank registry key, which allows local users to gain privileges. The connected documents confirm the affected software and the credential storage mechanism but ...

CVE-2005-0439

ELOG Web Logbook (

CVE-2005-0434

Affected product: Php-Nuke 7.5. The CVE describes multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary HTML or web script via parameters (1) newdownloadshowdays in a NewDownloads operation or (2) newlinkshowdays in a NewLinks operation. Root cause is...

CVE-2005-0443

CubeCart 2.0.4 is affected by a remote XSS and path disclosure vulnerability in index.php triggered by an invalid language parameter that is echoed in a PHP error message. The OpenVAS entry and NVD/CVE records corroborate a language-based XSS/vector that can reveal the install path; CVSS v2 base ...

CVE-2005-0441

Sybase ASE 12.x before 12.5.3 ESD#1 contains multiple stack-based buffer overflows that allow remote authenticated users to execute arbitrary code via (1) attrib_valid, (2) covert, (3) declare, (4) crafted query plan, or (5) crafted install java statement. Affected versions also include ASE

CVE-2005-0442

CVE-2005-0442 maps to a directory traversal in CubeCart 2.0.4’s index.php via the language parameter. OpenVAS/Nessus entries corroborate broader CubeCart

CVE-2005-0206

Technical details about CVE-2005-0206 are not provided in the connected documents. Available sources reference related issues (CVE-2004-0888) and patch notes without explicit impact, affected products, or fixes for this CVE.

CVE-2005-0149

Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages...

CVE-2005-0419

Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via long FTP commands, as demonstrated using the STAT command...

Mandrake Linux Security Advisory : mailman (MDKSA-2005:037)

A vulnerability was discovered in Mailman, which allows a remote directory traversal exploit using URLs of the form '.../....///' to access private Mailman configuration data. The vulnerability lies in the Mailman/Cgi/private.py file. Updated packages correct this issue. %NASLMINLEVEL 70300 C...

[Full-Disclosure] Advisory: Authentication bypass in CitrusDB

Advisory: Authentication bypass in CitrusDB A group of Students in our lab called RedTeam found an authentication bypass vulnerability in CitrusDB which can result in complete corruption of the installed CitrusDB application. Details ======= Product: CitrusDB Affected Version: 0.3.6 verified,...

CVE-2005-0416

The Windows Animated Cursor ANI capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow...