Archive
October 2005
Vulnerabilities first published in this month (UTC), newest first.
342 results · Feed
-
Unscored —
The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) alloc…
-
Unscored —
Linux 2.6.11 on 64-bit x86 (x86_64) platforms does not use a guard page for the 47-bit address page to protect against …
-
Unscored —
Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code v…
-
Unscored —
Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows attackers to bypass safe level…
-
Unscored —
sysreport before 1.3.7 allows local users to obtain sensitive information via a symlink attack on a temporary directory.
-
Unscored —
Microsoft Windows 2000 before Update Rollup 1 for SP4 allows a local administrator to unlock a computer even if it has …
-
Unscored —
Microsoft Windows 2000 before Update Rollup 1 for SP4 does not apply group policies if the user logs on using UPN crede…
-
Unscored —
Mason before 1.0.0 does not install the init script after the user uses Mason to configure a firewall, which causes the…
-
Medium 5.0
The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets…
-
Low —
Apache Tomcat AJP Connector Information Leak
The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4.1.0 through 4.1.36, as used in Hitachi Cosminexus Application Server and standalone, does not properly handle when a connection is broken before request body data is sent in a POST request, which ca…
-
Unscored —
Incomplete blacklist vulnerability in MediaWiki before 1.4.11 does not properly remove certain CSS inputs (HTML inline …
-
Unscored —
SQL injection vulnerability in messages.php in PHP-Fusion 6.00.106 and 6.00.107 allows remote attackers to execute arbi…
-
Unscored —
Multiple SQL injection vulnerabilities in photogallery.php in PHP-Fusion allow remote attackers to execute arbitrary SQ…
-
Unscored —
Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services cli…
-
Unscored —
Microsoft Windows 2000 before Update Rollup 1 for SP4 records Event ID 1704 to indicate that Group Policy security sett…
-
Unscored —
Multiple SQL injection vulnerabilities in PHP-Fusion before 6.00.110 allow remote attackers to execute arbitrary SQL co…
-
Unscored —
The WideCharToMultiByte function in Microsoft Windows 2000 before Update Rollup 1 for SP4 does not properly convert str…
-
Unscored —
Unspecified vulnerability in Polipo 0.9.8 and earlier allows attackers to read files outside of the web root.
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrar…
-
Unscored —CVE-2005-3157 Public exploit
SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to execute arbitrary SQL com…
-
Unscored —
Microsoft Windows 2000 before Update Rollup 1 for SP4 allows users to log on to the domain, even when their password ha…
-
Unscored —
Microsoft Windows 2000 before Update Rollup 1 for SP4, when the "audit directory service access" policy is enabled, doe…
-
Unscored —
CHKDSK in Microsoft Windows 2000 before Update Rollup 1 for SP4, Windows XP, and Windows Server 2003, when running in f…
-
Unscored —CVE-2005-3159 Public exploit
SQL injection vulnerability in messages.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —
The SECEDIT command on Microsoft Windows 2000 before Update Rollup 1 for SP4, when using a security template to set Acc…
-
Unscored —
Unspecified vulnerability in "edit submission handling" for MediaWiki 1.4.x before 1.4.10 and 1.3.x before 1.3.16 allow…
-
Unscored —CVE-2005-0023 Public exploit
gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY env…
-
Unscored —
Directory traversal vulnerability in printfaq.php in EasyGuppy (Guppy for Windows) 4.5.4 and 4.5.5 allows remote attack…
-
Unscored —
Format string vulnerability in the Log_Flush function in Weex 2.6.1.5, 2.6.1, and possibly other versions allows remote…
-
Unscored —
StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup…
-
Unscored —
StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sen…
-
Unscored —
Procom NetFORCE 800 4.02 M10 Build 20 and possibly other versions sends the NIS password map (passwd.nis) as a file att…
-
Unscored —
Bugzilla 2.18rc1 through 2.18.3, 2.19 through 2.20rc2, and 2.21 allows remote attackers to obtain sensitive information…
-
Unscored —
httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service (resource consumption) by…
-
Unscored —
Cerulean Studios Trillian 3.0 allows remote attackers to cause a denial of service (crash) via a reverse direct connect…
-
Unscored —CVE-2005-3142 EPSS 42%
Heap-based buffer overflow in Kaspersky Antivirus (KAV) 5.0 and Kaspersky Personal Security Suite 1.1 allows remote att…
-
Unscored —
Unspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to cause a denial of servi…
-
Unscored —
Bugzilla 2.19.1 through 2.20rc2 and 2.21, with user matching turned on in substring mode, allows attackers to list all …
-
Unscored —
StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack o…
-
Unscored —
Format string vulnerability in the logging functionality in BitDefender AntiVirus 7.2 through 9 allows remote attackers…