10578 matches found
CVE-2005-0370
Armagetron 0.2.6.0 and earlier, and Armagetron Advanced 0.2.7.0 and earlier, are affected by a DoS vulnerability where remote attackers can trigger a network disconnection by sending an empty UDP packet. The packet is not properly distinguished from the socket’s “no new packets” state, enabling t...
CVE-2005-0371
Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 and earlier allow remote attackers to cause a denial of service freeze via a large number of player connections that do not send any data...
CVE-2005-0369
CVE-2005-0369 affects Armagetron 0.2.6.0 and earlier, and Armagetron Advanced 0.2.7.0 and earlier. The vulnerability allows remote attackers to cause a denial of service (application crash) by sending a packet with a large descriptor_id or claim_id that exceeds array boundaries. The technical det...
CVE-2005-0367
This entry documents directory-traversal flaws in ArGoSoft Mail Server (notably versions around 1.8.7.3/1.8.7.6) that allow remote authenticated users to read, delete, or upload arbitrary files. The root cause is traversal via .. in multiple vectors: the filename of an email attachment, the _msga...
CVE-2005-0364
CVE-2005-0364 pertains to an unknown vulnerability in HP-UX BIND 9.2.0 running on HP-UX releases B.11.00, B.11.11, and B.11.23 that could be exploited remotely to cause a denial of service. The connected documents indicate this is addressed by the HP-UX update HPSBUX01117 (SSRT4861 rev.2) for BIN...
CVE-2005-0371
CVE-2005-0371 affects Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 and earlier. The vulnerability allows remote attackers to cause a denial of service (freeze) by establishing a large number of connections that send no data. The connected sources confirm the DoS outcome but do n...
CVE-2005-0369
Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 earlier allows remote attackers to cause a denial of service application crash via a packet with a large 1 descriptor ID or 2 claimid, which exceeds the boundaries of an array...
CVE-2005-0370
Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 and earlier allow remote attackers to cause a denial of service network disconnection via an empty UDP packet, which is not properly distinguished from the "no new packets" state of the associated socket...
CVE-2005-0365
The CVE-2005-0365 issue affects KDE’s dcopidlng component in KDE 3.2.x and 3.3.x, where temporary files are created with predictable filenames, enabling local users to overwrite arbitrary files via a symlink attack. Connected documents confirm insecure temporary-file usage in dcopidlng and refere...
CVE-2005-0349
The CVE-2005-0349 entry covers BrightStor ARCserve Backup 11.1 UniversalAgent for UNIX, where the production release contains hard-coded credentials that enable remote access to the file system and may allow execution of arbitrary commands. Connected details specify a default/admin-like account w...
CVE-2005-0366
The integrity check feature in OpenPGP, when handling a message that was encrypted using cipher feedback CFB mode, allows remote attackers to recover part of the plaintext via a chosen-ciphertext attack when the first 2 bytes of a message block are known, and an oracle or other mechanism is...
CVE-2005-0280
Format string vulnerability in Soldner Secret Wars 30830 and earlier allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in a message...
CVE-2005-0294
minis.php in Minis 0.2.1 allows remote attackers to cause a denial of service infinite loop via an HTTP request for a file that the web server does not have permission to read, as demonstrated using the month parameter...
CVE-2005-0278
The FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to gain sensitive information via a cd command that contains an MS-DOS device name, which reveals the installation path in an error message...
CVE-2005-0297
SQL injection vulnerability in Oracle Database 9i and 10g allows remote attackers to execute arbitrary SQL commands and gain privileges...
CVE-2005-0325
Xpand Rally 1.0.0.0 allows remote attackers or remote malicious game servers to cause a denial of service application crash via a packet with large values that are not properly handled in certain malloc or memcpy operations...
CVE-2005-0346
The CVE-2005-0346 entry concerns SafeNet SoftRemote VPN Client, where the VPN pre-shared key/password is stored in cleartext in memory within the IreIKE.exe process. This creates a local-access data exposure: any user with access to the IreIKE.exe process can read the password. The vulnerability ...
CVE-2005-0347
RealArcade software (versions up to 1.2.0.994) is affected by an integer overflow in handling an RGS file with an invalid size string for the GUID and game name, which leads to a buffer overflow and potential remote code execution. The provided documentation does not specify exact vulnerable comp...
CVE-2005-0327
The CVE-2005-0327 entry concerns paFileDB 3.1, where pafiledb.php may allow remote code execution. The vulnerability arises from a modified action parameter used in an include statement for login.php, enabling an attacker to have PHP code executed on the remote server. The provided documents desc...