Skip to content
OpenAdvisories
Unscored DSA-877-1 3 CVEs

gnump3d - cross-site-scripting, directory traversal

Published Oct 28, 2005 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 gnump3d 2.9.3-1sarge2

Vulnerabilities 3

  • Unscored —
    CVE-2005-3123

    Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted s…

  • Unscored —
    CVE-2005-3424

    Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.5 allows remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2005-3425

    Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.6 allows remote attackers to inject arbitrary web script…