2005

Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows remo

Directory traversal vulnerability in apexec.pl for Anaconda Foundation Directory allows remote attackers to read arbitra

Desktop Rover 3.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application cras

Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrary

Directory traversal vulnerability in Yawcam 0.2.5 allows remote attackers to read arbitrary files via "..\" (dot dot bac

Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via the

auction_my_auctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain sensitive information via an

Directory traversal vulnerability in the third party tool from Raz-Lee, as used to secure the iSeries AS/400 FTP server,

Directory traversal vulnerability in the third party tool from Bsafe, as used to secure the iSeries AS/400 FTP server, a

Directory traversal vulnerability in the third party tool from SafeStone, as used to secure the iSeries AS/400 FTP serve

The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a den

tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP pac

The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop

The hyper.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

set_lang.php in phpMyVisites 1.3 allows remote attackers to read and include arbitrary files via the mylang parameter.

Buffer overflow in VooDoo cIRCle BOTNET before 1.0.33 allows remote authenticated attackers to cause a denial of service

OneWorldStore allows remote attackers to cause a denial of service (application crash) via a direct request to owConnect

owOfflineCC.asp in OneWorldStore allows remote attackers to obtain sensitive information by modifying the idOrder parame

The ad.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument.

includer.cgi in The Includer allows remote attackers to read arbitrary files via a full pathname in the argument, a simi

text.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service (memory consumption) via certain p

Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attac

Buffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained from Samba code, and as c

Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local users to execute arbit

The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which al

Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service (application crash) and hijack the deskto

Multiple buffer overflows in golddig 2.0 and earlier allow local users to execute arbitrary code via (1) a long map name

The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to create arbitr

KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged fil

Webseries Payment Application does not properly restrict privileged operations, which allows remote authenticated users

Ingate Firewall 4.1.3 and earlier does not terminate the PPTP session for an active user when the administrator disables

Chat Anywhere 2.72a stores sensitive information such as passwords in plaintext in the .INI file for a chatroom, which a

Unknown vulnerability in IBM Hardware Management Console (HMC) before 4.4 for POWER5 servers allows local users to gain

saveUser.do in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows local users to gain privileges by setting th

Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execu

lnss.exe in GFI Languard Network Security Scanner 5.0 stores the username and password in memory in plaintext, which cou

Qt before 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to load shared libraries regardless

phpMyAdmin 2.6.1 does not properly grant permissions on tables with an underscore in the name, which grants remote authe

Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC a

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to

Mac OS X before 10.3.8 users world-writable permissions for certain directories, which may allow local users to gain pri

Buffer overflow in Midnight Commander (mc) 4.5.55 and earlier may allow attackers to execute arbitrary code.

The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, w

ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.t

Nortel VPN client 5.01 stores the cleartext password in the memory of the Extranet.exe process, which could allow local

Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials loc

Unknown vulnerability in Kerio Personal Firewall 4.1.2 and earlier allows local users to bypass firewall rules via a mal