Archive
January 2005
Vulnerabilities first published in this month (UTC), newest first.
174 results · Feed
-
Unscored —CVE-2005-0095 EPSS 69%
The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (cr…
-
Unscored —
Apache mod_auth_radius 1.5.4 and libpam-radius-auth allow remote malicious RADIUS servers to cause a denial of service …
-
Unscored —
poppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password cor…
-
Unscored —
AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharact…
-
Unscored —CVE-2005-0068 EPSS 54%
The original design of ICMP does not require authentication for host-generated ICMP error messages, which makes it easi…
-
Unscored —
Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2)…
-
Unscored —CVE-2005-0067 EPSS 13%
The original design of TCP does not require that port numbers be assigned randomly (aka "Port randomization"), which ma…
-
Unscored —CVE-2005-0066 EPSS 11%
The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an …
-
Unscored —
Stack-based buffer overflow in the websql CGI program in MySQL MaxDB 7.5.00 allows remote attackers to execute arbitrar…
-
Unscored —
The 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error message depending on …
-
Unscored —
Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers t…
-
Unscored —
Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers…
-
Unscored —
helvis 1.8h2_1 and earlier allows local users to recover and read the files of other users via the elvrec setuid progra…
-
Unscored —
inpview in SGI IRIX allows local users to execute arbitrary commands via the SUN_TTSESSION_CMD environment variable, wh…
-
Unscored —
The original design of TCP does not check that the TCP sequence number in an ICMP error message is within the range of …
-
Unscored —
Format string vulnerability in the a_Interface_msg function in Dillo before 0.8.3-r4 allows remote attackers to execute…
-
Unscored —
Race condition in the page fault handler (fault.c) for Linux kernel 2.2.x to 2.2.7, 2.4 to 2.4.29, and 2.6 to 2.6.10, w…
-
Unscored —
Memory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denia…
-
Unscored —
Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote…
-
Unscored —
helvis 1.8h2_1 and earlier allows local users to delete arbitrary files via the elvprsv setuid program.
-
Unscored —
helvis 1.8h2_1 and earlier stores recovery files in world readable directories with world readable permissions, which a…
-
Unscored —
Buffer overflow in XShisen before 1.36 allows local users to execute arbitrary code via a long GECOS field.
-
Unscored —
Internet Explorer 6 on Windows XP SP2 allows remote attackers to bypass the file download warning dialog and possibly t…
-
Unscored —
Multiple buffer overflows in golddig 2.0 and earlier allow local users to execute arbitrary code via (1) a long map nam…
-
Unscored —
gsinterf.c in bmv 1.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary fil…
-
Unscored —CVE-2003-1054 Public exploit
mod_access_referer 1.0.2 allows remote attackers to cause a denial of service (crash) via a malformed Referer header th…
-
Unscored —
Multiple buffer overflows in XShisen allow attackers to execute arbitrary code via a long (1) -KCONV command line optio…
-
Unscored —
A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote…
-
Unscored —
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file do…
-
Unscored —
The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged acti…
-
Unscored —CVE-2004-1319 EPSS 27%
The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setti…
-
Unscored —
The configuration backup in Asante FM2008 running firmware 1.06 stores the username and password in cleartext, which co…
-
Unscored —CVE-2004-1330 Public exploit
Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username.
-
Unscored —
Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords,…
-
Unscored —CVE-2004-1326 Public exploit
Buffer overflow in dxterm in Ultrix 4.5 allows local users to execute arbitrary code via a long -setup parameter.
-
Unscored —
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windo…
-
Unscored —
SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Orac…
-
Unscored —
The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a pro…
-
Unscored —CVE-2004-1335 Public exploit
Memory leak in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of se…
-
Unscored —
Asante FM2008 running firmware 1.06 is shipped with a default username and password, which could allow remote attackers…