CVE-2005-3123

CVE-2005-3123 affects GNUMP3d (before 2.9.6). Multiple connected advisories describe a directory traversal flaw where crafted URLs allow reading arbitrary files the server’s user can access, due to incomplete path sanitization. Debian/DSA-877-1 and Gentoo GLSA-200511-05 cite remote exploitation; ...

CVE-2007-6130

The CVE-2007-6130 issue affects gnump3d 2.9final, where password protection is not applied to plugins, potentially allowing remote attackers to bypass intended access restrictions. The vulnerability concerns plugin-level access controls rather than core authentication, with the NVD and SUSE entri...