Skip to content
OpenAdvisories

Archive

March 2005

Vulnerabilities first published in this month (UTC), newest first.

498 results · Feed

  • Unscored —

    JFS (JFS3.1 and OnlineJFS) in HP-UX 10.20, 11.00, and 11.04 does not properly implement the sticky bit functionality, w…

  • Unscored —

    Buffer overflow in mailcv in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.

  • Unscored —

    Buffer overflow in ps in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.

  • Unscored —

    Unknown vulnerability in ping in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to cause a denial of …

  • Unscored —

    Buffer overflow in ypmatch in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary cod…

  • Unscored —

    Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to execute arbitrary code …

  • Unscored —

    Buffer overflow in quot in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.

  • Unscored —
    CVE-2002-1602 Public exploit

    Buffer overflow in the Braille module for GNU screen 3.9.11, when HAVE_BRAILLE is defined, allows local users to execut…

  • Unscored —
    CVE-2002-1616 Public exploit

    Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges vi…

  • Unscored —

    Buffer overflow in traceroute in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary …

  • Unscored —
    CVE-2002-1614 Public exploit

    Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at.

  • Unscored —

    Buffer overflow in binmail in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.

  • Unscored —
    CVE-2002-1605 Public exploit EPSS 13%

    Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long …

  • Unscored —
    CVE-2002-1603 Public exploit EPSS 14%

    GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminate…

  • Unscored —

    Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code via (1) a long -contextDir a…

  • Unscored —

    Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privileges via (1)…

  • Unscored —
    CVE-2002-1604 EPSS 15%

    Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a lo…

  • Unscored —

    Cayman 3220-H DSL Router 1.0 ship without a password set, which allows remote attackers to gain unauthorized access.

  • Unscored —

    Directory traversal vulnerability in Cherokee Web Server allows remote attackers to read arbitrary files via a .. (dot …

  • Unscored —

    The (1) FTP and (2) Telnet services in Beck GmbH IPC@Chip are shipped with a default password, which allows remote atta…

  • Unscored —

    Cherokee web server before 0.2.7 does not properly drop root privileges after binding to port 80, which could allow rem…

  • Unscored —

    Buffer overflow in mcedit in Midnight Commander 4.5.1 allows local users to cause a denial of service (segmentation fau…

  • Unscored —

    Nokia Firewall Appliances running IPSO 3.3 and VPN-1/FireWall-1 4.1 Service Pack 3, IPSO 3.4 and VPN-1/FireWall-1 4.1 S…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the email auto-reply message in SurgeMail 2.2g3 allow remote att…

  • Unscored —
    CVE-2005-0859 Public exploit EPSS 11%

    PHP remote file inclusion vulnerability in CzarNews 1.13b allows remote attackers to execute arbitrary PHP code via the…

  • Unscored —
    CVE-2005-0841 Public exploit

    SQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5) census.php, (6) passt…

  • Unscored —
    CVE-2005-0851 Scanner template

    FileZilla FTP server before 0.9.6, when using MODE Z (zlib compression), allows remote attackers to cause a denial of s…

  • Unscored —
    CVE-2005-0399 EPSS 15%

    Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, …

  • Unscored —
    CVE-2005-0847 Public exploit

    Code Ocean FTP server 1.0 allows remote attackers to cause a denial of service via a large number of connections.

  • Unscored —
    CVE-2005-0842 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.3 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2005-0863 Public exploit

    Cross-site scripting (XSS) vulnerability in PHPOpenChat v3.x allows remote attackers to inject arbitrary web script or …

  • Unscored —

    Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06, on Mac OS X, allows untrusted applica…

  • Unscored —
    CVE-2005-0854 Public exploit

    betaparticle blog (bp blog), posisbly before version 4, allows remote attackers to bypass authentication and (1) upload…

  • Unscored —

    Firefox before 1.0.2 allows remote attackers to execute arbitrary code by tricking a user into saving a page as a Firef…

  • Unscored —

    CoolForum 0.8.1 beta and earlier allows remote attackers to manipulate SQL commands via certain requests to (1) alert.p…

  • Unscored —

    Multiple buffer overflows in DeleGate before 8.11.1 may allow attackers to cause a denial of service or execute arbitra…

  • Unscored —

    Multiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt…

  • Unscored —

    FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hija…

  • Unscored —
    CVE-2005-0850 Scanner template

    FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename con…

  • Unscored —
    CVE-2005-0852 Public exploit

    Microsoft Windows XP SP1 allows local users to cause a denial of service (system crash) via an empty datagram to a raw …