CVE-2005-3974

Drupal 4.5.0–4.5.5 and 4.6.0–4.6.3 on PHP5 do not correctly enforce user privileges, allowing remote attackers to bypass the access user profiles permission (CVE-2005-3974). The advisories note a fix in 4.6.3 (and related Debian updates in DSA-958-1), with older fixed versions for sid/stable tree...

CVE-2005-1640: Undefined Security Weakness

modchannel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not properly verify whether a host has the owner privileges required to delete IRC channel access entries, which allows remote attackers to bypass intended restrictions...