Archive
February 2005
Vulnerabilities first published in this month (UTC), newest first.
821 results · Feed
-
Unscored —
Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary …
-
Unscored —
index.php in MercuryBoard 1.0.x and 1.1.x allows remote attackers to obtain sensitive information by setting the debug …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attacke…
-
Unscored —
A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, whic…
-
Unscored —
Sami HTTP Server 1.0.5 allows remote attackers to cause a denial of service via an HTTP request containing two CRLF seq…
-
Unscored —CVE-2005-0105 Public exploit
Unknown vulnerability in typespeed 0.4.1 and earlier allows local users to gain privileges.
-
Unscored —
Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL …
-
Unscored —
Directory traversal vulnerability in Sami HTTP Server 1.0.5 allows remote attackers to read arbitrary files via an HTTP…
-
Unscored —
nls_ascii.c in Linux before 2.6.8.1 uses an incorrect table size, which allows attackers to cause a denial of service (…
-
Unscored —CVE-2005-0408 Public exploit
CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the id_hash cookie, which allow…
-
Unscored —
Race condition in the setsid function in Linux before 2.6.8.1 allows local users to cause a denial of service (crash) a…
-
Unscored —
awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the…
-
Unscored —CVE-2005-0409 Public exploit
CitrusDB 0.3.6 and earlier does not verify authorization for the (1) importcc.php and (2) uploadcc.php, which allows re…
-
Unscored —
The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Openconf 1.04, and possibly other versions before 1.10, allows remote attac…
-
Unscored —
awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) "pl…
-
Unscored —CVE-2005-0430 Public exploit
The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service (shutdown g…
-
Unscored —CVE-2005-0410 Public exploit
SQL injection vulnerability in importcc.php for CitrusDB 0.3.6 and earlier allows remote attackers to inject data via t…
-
Unscored —
Synaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not drop privileges before …
-
Unscored —
Multiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars support for Instrument Neut…
-
Unscored —CVE-2005-0411 Public exploit
Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote attackers and local users t…
-
Unscored —
The buffer_urldecode function in Lighttpd 1.3.7 and earlier does not properly handle control characters, which allows r…
-
Unscored —
The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service (kernel cras…
-
Unscored —
wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which …
-
Unscored —
wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a…
-
Unscored —
Buffer overflow in the decode_post function in ELOG before 2.5.7 allows remote attackers to execute arbitrary code via …
-
Unscored —CVE-2005-0436 Public exploit
Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of…
-
Unscored —
Unknown vulnerability in hztty 2.0 and earlier allows local users to execute arbitrary commands.
-
Unscored —CVE-2005-0421 Public exploit
DelphiTurk FTP 1.0 stores usernames and passwords in the profile.dat file, which allows local users to gain privileges.
-
Unscored —
Unknown vulnerability in Solaris 8 and 9 allows remote attackers to cause a denial of service (panic) via "Heavy UDP Us…
-
Unscored —
Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote …
-
Unscored —
Php-Nuke 7.5 allows remote attackers to determine the full path of the web server via invalid or missing arguments to (…
-
Unscored —CVE-2005-0435 Public exploit
awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginm…
-
Unscored —CVE-2005-0438 Public exploit
awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to obtain sensitive information by setting the debug paramete…
-
Unscored —
Barracuda Spam Firewall 3.1.10 and earlier does not restrict the domains that white-listed domains can send mail to, wh…
-
Unscored —
The tpkg-* scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local users to overwrite arbitra…
-
Unscored —CVE-2005-0442 Public exploit
Directory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote attackers to read arbitrary files via t…
-
Unscored —
VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries using a path that includes the rrdharan world-writ…
-
Unscored —
The ebuild of Webmin before 1.170-r3 on Gentoo Linux includes the encrypted root password in the miniserv.users file wh…
-
Unscored —
Unknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on Windows, allows remote atta…