CVE-2005-1829: Undefined Security Weakness

Microsoft Internet Explorer 6 SP2 allows remote attackers to cause a denial of service infinite loop and application crash via two embedded files that call each other...

CVE-2005-1791: Undefined Security Weakness

Microsoft Internet Explorer 6 SP2 6.0.2900.2180 crashes when the user attempts to add a URI to the restricted zone, in which the full domain name of the URI begins with numeric sequences similar to an IP address. NOTE: if there is not an exploit scenario in which an attacker can trigger this...

CVE-2005-1742

CVE-2005-1742 affects BEA WebLogic Server and WebLogic Express 8.1 SP2/SP3. The vulnerability allows users with the Monitor security role to shrink or reset JDBC connection pools, indicating an authorization/privilege misuse issue affecting pool configuration. The provided documents confirm the a...

CVE-2005-1656

Mercur Messaging 2005 SP2 is affected by CVE-2005-1656. An attacker can read the source code of .ctml files by issuing a URL containing a trailing hex-encoded space ("%20"). Affected product: Mercur Messaging 2005 SP2. Underlying issue: the vulnerability allows partial disclosure of data via craf...

CVE-2005-1657

Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote attackers to perform unauthorized file operations via the Folder.Id parameter to 1 deletefolder.ctml, 2 deletemessage.ctml, 3 origmessage.ctml, or 4 readmessage.ctml, the Message.Id parameter to editmessage.ctm...

CVE-2005-1657

Mercur Messaging 2005 SP2 is affected by multiple directory traversal vulnerabilities. An attacker can remotely perform unauthorized file operations via Folder.Id parameters to deletefolder.ctml, deletemessage.ctml, origmessage.ctml, readmessage.ctml; the Message.Id parameter to editmessage.ctml;...

CVE-2005-1656

Mercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files via a URL with a trailing hex-encoded space "%20"...

CVE-2005-1656: Undefined Security Weakness

Mercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files via a URL with a trailing hex-encoded space "%20"...

CVE-2005-1649: Undefined Security Weakness

The IPv6 support in Windows XP SP2, 2003 Server SP1, and Longhorn, with Windows Firewall turned off, allows remote attackers to cause a denial of service CPU consumption via a TCP packet with the SYN flag set and the same destination and source address and port, a variant of CVE-2005-0688 and a...

CVE-2005-1657: Undefined Security Weakness

Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote attackers to perform unauthorized file operations via the Folder.Id parameter to 1 deletefolder.ctml, 2 deletemessage.ctml, 3 origmessage.ctml, or 4 readmessage.ctml, the Message.Id parameter to editmessage.ctm...

CVE-2003-1150: Undefined Security Weakness

Buffer overflow in the portmapper service PMAP.NLM in Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown attack vectors...

CVE-2000-1217

Microsoft Windows 2000 before SP2, in a non-Windows 2000 domain using NTLM and with cached credentials, is vulnerable to Domain Account Lockout: local users can bypass lockout and make unlimited login attempts. Affected component is the account lockout mechanism; root cause relates to how local c...

ERNW Security Advisory 01/2005

ERNW Security Advisory 01-2005 Buffer Overflow in PMSoftware's Simple Web Server Author: Michael Thumann mthumannaternw.de 1. Summary: Simple Web Server doesn't do proper bounds checking handling normal GET requests. Sending an overlong page or script name, it causes an buffer overflow and an...

CVE-2005-0061: Undefined Security Weakness

The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via certain access requests...

CVE-2005-0550: Undefined Security Weakness

Buffer overflow in Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to cause a denial of service i.e., system crash via a malformed request, aka "Object Management Vulnerability"...

CVE-2005-0819: Undefined Security Weakness

The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start...

CVE-2005-0688

CVE-2005-0688 is described as a Land-like DoS affecting Windows XP SP2, Windows Server 2003 SP1, and Longhorn when the Windows Firewall is off. The vulnerability arises from processing of a TCP packet with the SYN flag set where the source and destination IP and port are identical, causing CPU co...

CVE-2005-0688

Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service CPU consumption via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability CVE-1999-0016...

CVE-2005-0688: Undefined Security Weakness

Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service CPU consumption via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability CVE-1999-0016...

CVE-2005-0688

Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service CPU consumption via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability CVE-1999-0016...