Skip to content
OpenAdvisories

Archive

5 August 2005

Vulnerabilities first published on this day (UTC), newest first.

65 results · Feed

  • Unscored —
    CVE-2004-2299 Public exploit EPSS 10%

    Buffer overflow in Omnicron OmniHTTPd 3.0a and earlier allows remote attackers to execute arbitrary code via an HTTP GE…

  • Unscored —

    Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbit…

  • Unscored —

    Novell Internet Messaging System (NIMS) 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authenti…

  • Unscored —

    Eudora before 6.1.1 allows remote attackers to cause a denial of service (crash) via an e-mail with a long "To:" field,…

  • Unscored —

    Buffer overflow in (1) HttpSaveCVP.dll and (2) HttpSaveCSP.dll in Trend Micro InterScan VirusWall 3.5.1 allows remote a…

  • Unscored —

    Buffer overflow in cron in Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument.

  • Unscored —

    The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null, …

  • Unscored —

    Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical information such as cer…

  • Unscored —

    Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to …

  • Unscored —

    Buffer overflow in smtpscan.dll for Trend Micro InterScan VirusWall 3.51 for Windows NT has allows remote attackers to …

  • Unscored —

    Apple Personal Web Sharing (PWS) 1.1, 1.5, and 1.5.5, when Web Sharing authentication is enabled, allows remote attacke…

  • Unscored —

    Unknown vulnerability in CDE in Caldera OpenUnix 7.1.0, 7.1.1, and 8.0 allows an xterm session to gain privileges when …

  • Unscored —

    Joe Testa hellbent 01 webserver allows attackers to read files that are specified in the hellbent.prefs file by creatin…

  • Unscored —
    CVE-2002-2117 EPSS 12%

    Microsoft Windows XP allows remote attackers to cause a denial of service (CPU consumption) by flooding UDP port 500 (I…

  • Unscored —

    Multiple buffer overflows in QNX RTOS 4.25 may allow attackers to execute arbitrary code via long filename arguments to…

  • Unscored —

    Artekopia Netjuke before 1.0 b7 allows remote attackers to execute arbitrary code on the web server, possibly via the s…

  • Unscored —

    Buffer overflow in axspawn.c in Axspawn-pam before 0.2.1a allows remote attackers to execute arbitrary code via large p…

  • Unscored —
    CVE-2002-2105 Public exploit

    Microsoft Windows XP allows local users to prevent the system from booting via a corrupt explorer.exe.manifest file.

  • Unscored —

    Unknown vulnerability in the "VAIO Manual" software in certain Sony VAIO personal computers sold from November 2001 to …

  • Unscored —
    CVE-2002-2106 Public exploit

    PHP remote file inclusion vulnerability in WikkiTikkiTavi before 0.21 allows remote attackers to execute arbitrary PHP …

  • Unscored —

    The Video Control Panel on SGI O2/IRIX 6.5, when the Default Input is set to "Output Video", allows attackers to access…

  • Unscored —

    Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address…

  • Unscored —
    CVE-2002-2100 EPSS 11%

    Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HT…

  • Unscored —

    Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized …

  • Unscored —

    Joe Testa hellbent 01 allows remote attackers to determine the full path of the web root directory via a GET request wi…

  • Unscored —

    Buffer overflow in rcp in Solaris 9.0 allows local users to execute arbitrary code via a long command line argument.

  • Unscored —

    Caucho Technology Resin server 2.1.1 to 2.1.2 allows remote attackers to obtain server's root path via requests for MS-…

  • Unscored —

    InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service (NullPointerException) …

  • Unscored —

    The compression code in MaraDNS before 0.9.01 allows remote attackers to cause a denial of service via crafted DNS pack…

  • Unscored —

    The MOSIX Project clump/os 5.4 creates a default VNC account without a password, which allows remote attackers to gain …

  • Unscored —

    Netgear RM-356 and RT-338 series SOHO routers allow remote attackers to cause a denial of service (crash) via a UDP por…

  • Unscored —

    Novell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote attackers to conduct b…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the lookup script in Veridis OpenKeyServer (OKS) 1.2 allows remote attacker…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Hyper NIKKI System (HNS) Lite before 0.9 and HNS before 2.10-pl2 allows rem…

  • Unscored —

    Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local u…

  • Unscored —

    Pointsec before 1.2 for PalmOS stores a user's PIN number in memory in plaintext, which allows a local attacker who ste…

  • Unscored —
    CVE-2002-2101 EPSS 11%

    Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, v…

  • Unscored —

    Format string vulnerability in Deception Finger Daemon, decfingerd, 0.7 may allow remote attackers to execute arbitrary…

  • Unscored —

    RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface…

  • Unscored —

    Buffer overflow in Blue World Lasso Web Data Engine 3.6.5 allows remote attackers to cause a denial of service via a lo…