Archive
6 February 2005
Vulnerabilities first published on this day (UTC), newest first.
65 results · Feed
-
Unscored —
The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one pro…
-
Unscored —CVE-2004-1385 Public exploit
phpGroupWare 0.9.16.003 and earlier allows remote attackers to gain sensitive information via (1) unexpected characters…
-
Unscored —
TikiWiki before 1.8.4.1 does not properly verify uploaded images, which could allow remote attackers to upload and exec…
-
Unscored —
The glibcbug script in glibc 2.3.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on …
-
Unscored —CVE-2004-1383 Public exploit
Multiple SQL injection vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to execute arbitra…
-
Unscored —
The check_forensic script in apache-utils package 1.3.31 allows local users to overwrite or create arbitrary files via …
-
Unscored —CVE-2004-1389 Public exploit
Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.…
-
Unscored —
Untrusted execution path vulnerability in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allows local users to execute arbitr…
-
Unscored —CVE-2004-1384 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to in…
-
Unscored —
Multiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allow remote attackers to execute arbitrary code …
-
Unscored —
PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a f…
-
Unscored —
Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7…
-
Unscored —
Directory traversal vulnerability in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to delete arbitr…
-
Unscored —
Stack-based buffer overflow in the SetSkin function in AtHoc toolbar allows remote attackers to execute arbitrary code …
-
Unscored —
Directory traversal vulnerability in the parsing of Skin file names in RealPlayer 10.5 (6.0.12.1040) and earlier allows…
-
Unscored —CVE-2005-0185 Public exploit
Stack-based buffer overflow in NodeManager Professional 2.00 allows remote attackers to execute arbitrary commands via …
-
Unscored —
The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use t…
-
Unscored —
Off-by-one buffer overflow in the processing of tags in Real Metadata Package (RMP) files in RealPlayer 10.5 (6.0.12.10…
-
Unscored —
Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a…
-
Unscored —
Directory traversal vulnerability in Simple PHP Blog (SPHPBlog) 0.3.7c allows remote attackers to read or create arbitr…
-
Unscored —CVE-2005-0175 EPSS 41%
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.
-
Unscored —
Directory traversal vulnerability in WinHKI 1.4d allows remote attackers to overwrite arbitrary files via a .. (dot dot…
-
Unscored —
ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to execute arbitrary commands via s…
-
Unscored —
The f2c translator in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary …
-
Unscored —CVE-2005-0193 Public exploit
Buffer overflow in the (1) -v and (2) -a switches in mRouter in iSync 1.5 in Mac OS X 10.3.7 and earlier allows local u…
-
Unscored —
Format string vulnerability in the SetBaseURL function in AtHoc toolbar allows remote attackers to execute arbitrary co…
-
Unscored —
Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service (ITS), CallManager Express (CME)…
-
Unscored —
firehol.sh in FireHOL before 1.224 creates temporary files with predictable file names, which could allow local users t…
-
Unscored —
PHP remote file inclusion vulnerability in Squirrelmail 1.2.6 allows remote attackers to execute arbitrary code via "UR…
-
Unscored —
The Amp II engine as used by Gore: Ultimate Soldier 1.50 and earlier allows remote attackers to cause a denial of servi…
-
Unscored —
ClamAV 0.80 and earlier allows remote attackers to cause a denial of service (clamd daemon crash) via a ZIP file with m…
-
Unscored —
Squid 2.5, when processing the configuration file, parses empty Access Control Lists (ACLs), including proxy_auth ACLs …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Gallery 1.3.4-pl1 allow remote attackers to inject arbitrary web…
-
Unscored —
Cross-site scripting vulnerability in login.php in Gallery 1.4.4-pl2 allows remote attackers to inject arbitrary web sc…
-
Unscored —
ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: (RFC 239…
-
Unscored —
PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows local users to load arbitrary shared libraries and execute c…
-
Unscored —
Cisco IOS 12.1T, 12.2, 12.2T, 12.3 and 12.3T, with Multi Protocol Label Switching (MPLS) installed but disabled, allows…
-
Unscored —
PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to execute …
-
Unscored —CVE-2005-0226 Public exploit
Format string vulnerability in the Log_Resolver function in log.c for ngIRCd 0.8.2 and earlier, when compiled with IDEN…
-
Unscored —
The Software Development Kit (SDK) and Run Time Environment (RTE) 1.4.1 and 1.4.2 for Tru64 UNIX allows remote attacker…