CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In September 2005

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2005-3115 2005-09-30 2008-09-05
2.1
 None Local Low Not required None Partial None
mpeg-tools before 1.5b-r2 creates multiple temporary files insecurely, which allows local users to overwrite arbitrary files via (1) ts.stat, (2) ts.mpg, (3) foobar, (4) blockbar, or (5) foobar[NNN].
2 CVE-2005-3114 DoS Exec Code Overflow 2005-09-30 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in the ActiveX control for NateOn Messenger (NateonDownloadManager.ocx) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long third argument to the GotNate.Excute method.
3 CVE-2005-3113 2005-09-30 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
The ActiveX control for NateOn Messenger (NateonDownloadManager.ocx) allows remote attackers to download and execute arbitrary programs by setting the arguments to the GotNate.Excute method.
4 CVE-2005-3112 2005-09-30 2008-09-05
2.1
 None Local Low Not required Partial None None
The "reset password" feature in Macromedia Breeze 5.0 stores passwords in plaintext in the database instead of the hash, which allows attackers with access to the database to obtain the passwords.
5 CVE-2005-3111 2005-09-30 2017-07-11
2.1
 None Local Low Not required None Partial None
The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local users to modify arbitrary files via a symlink attack.
6 CVE-2005-3110 DoS 2005-09-30 2018-10-19
2.6
 None Remote High Not required None None Partial
Race condition in ebtables netfilter module (ebtables.c) in Linux 2.6, when running on an SMP system that is operating under a heavy load, might allow remote attackers to cause a denial of service (crash) via a series of packets that cause a value to be modified after it has been read but before it has been locked.
7 CVE-2005-3109 399 DoS 2005-09-30 2018-10-19
2.1
 None Local Low Not required None None Partial
The HFS and HFS+ (hfsplus) modules in Linux 2.6 allow attackers to cause a denial of service (oops) by using hfsplus to mount a filesystem that is not hfsplus.
8 CVE-2005-3108 DoS +Info 2005-09-30 2017-10-11
2.1
 None Local Low Not required None None Partial
mm/ioremap.c in Linux 2.6 on 64-bit x86 systems allows local users to cause a denial of service or an information leak via an ioremap on a certain memory map that causes the iounmap to perform a lookup of a page that does not exist.
9 CVE-2005-3107 DoS 2005-09-30 2018-08-13
2.1
 None Local Low Not required None None Partial
fs/exec.c in Linux 2.6, when one thread is tracing another thread that shares the same memory map, might allow local users to cause a denial of service (deadlock) by forcing a core dump when the traced thread is in the TASK_TRACED state.
10 CVE-2005-3106 DoS 2005-09-30 2018-10-19
1.2
 None Local High Not required None None Partial
Race condition in Linux 2.6, when threads are sharing memory mapping via CLONE_VM (such as linuxthreads and vfork), might allow local users to cause a denial of service (deadlock) by triggering a core dump while waiting for a thread that has just performed an exec.
11 CVE-2005-3105 DoS 2005-09-30 2018-08-13
2.1
 None Local Low Not required None None Partial
The mprotect code (mprotect.c) in Linux 2.6 on Itanium IA64 Montecito processors does not properly maintain cache coherency as required by the architecture, which allows local users to cause a denial of service and possibly corrupt data by modifying PTE protections.
12 CVE-2005-3104 2005-09-28 2008-09-05
2.6
 None Remote High Not required None Partial None
mt-comments.cgi in Movable Type before 3.2 allows attackers to redirect users to other web sites via URLs in comments.
13 CVE-2005-3103 XSS 2005-09-28 2008-09-05
4.3
 None Remote Medium Not required None Partial None
Cross-site scripting (XSS) vulnerability in Movable Type before 3.2 allows remote attackers to inject arbitrary web script or HTML via the (1) title, (2) category, (3) body, (4) extended body, and (5) excerpt form fields in new blog entries.
14 CVE-2005-3102 2005-09-28 2008-09-05
5.0
 None Remote Low Not required None Partial None
The administrative interface in Movable Type allows attackers to upload files with arbitrary extensions under the web root.
15 CVE-2005-3101 2005-09-28 2008-09-05
5.0
 None Remote Low Not required Partial None None
The password reset feature in Movable Type before 3.2 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.
16 CVE-2005-3100 DoS 2005-09-28 2008-09-05
5.0
 None Remote Low Not required None None Partial
Unspecified "PPTP Remote DoS Vulnerability" in Astaro Security Linux 4.027 allows attackers to cause a denial of service.
17 CVE-2005-3099 Exec Code 2005-09-28 2018-10-30
4.6
 None Local Low Not required Partial Partial Partial
Unspecified vulnerability in the (1) Xsun and (2) Xprt commands in Solaris 7, 8, 9, and 10 allows local users to execute arbitrary code.
18 CVE-2005-3098 +Priv 2005-09-28 2011-03-08
4.6
 None Local Low Not required Partial Partial Partial
poppassd in Qualcomm qpopper 4.0.8 allows local users to modify arbitrary files and gain privileges via the -t (trace file) command line argument.
19 CVE-2005-3097 Dir. Trav. 2005-09-28 2008-09-05
5.0
 None Remote Low Not required None Partial None
Directory traversal vulnerability in Avi Alkalay contribute.cgi (aka contribute.pl), dated 16 Jun 2002, allows remote attackers to overwrite arbitrary files via ".." sequences in the contribdir variable.
20 CVE-2005-3096 Exec Code 2005-09-28 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Avi Alkalay nslookup.cgi program, dated 16 June 2002, allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter.
21 CVE-2005-3095 Exec Code 2005-09-28 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Avi Alkalay notify program, dated 19 Aug 2001, allows remote attackers to execute arbitrary commands via shell metacharacters in the from parameter.
22 CVE-2005-3094 Exec Code 2005-09-28 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Avi Alkalay man-cgi script allows remote attackers to execute arbitrary code via shell metacharacters in the topic parameter.
23 CVE-2005-3093 DoS 2005-09-28 2008-09-05
5.0
 None Remote Low Not required None None Partial
Nokia 7610 and 3210 phones allows attackers to cause a denial of service via certain characters in the filename of a Bluetooth OBEX transfer.
24 CVE-2005-3092 Exec Code Overflow 2005-09-28 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Heap-based buffer overflow in Image-Line Software FL Studio 5.0.1 allows remote attackers to execute arbitrary code via a .flp file that contains a long path to a (1) .mid or (2) .wav file.
25 CVE-2005-3091 XSS 2005-09-28 2008-09-05
4.3
 None Remote Medium Not required None Partial None
Cross-site scripting (XSS) vulnerability in Mantis before 1.0.0rc1 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, as identified by bug#0005751 "thraxisp".
26 CVE-2005-3090 XSS 2005-09-28 2016-10-18
4.3
 None Remote Medium Not required None Partial None
Cross-site scripting (XSS) vulnerability in bug_actiongroup_page.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the summary of the bug, which is not quoted when view_all_bug_page.php is used to delete the bug, as identified by bug#0006002, a different vulnerability than CVE-2005-2557.
27 CVE-2005-3089 DoS 2005-09-28 2017-10-11
2.6
 None Remote High Not required None None Partial
Firefox 1.0.6 allows attackers to cause a denial of service (crash) via a Proxy Auto-Config (PAC) script that uses an eval statement. NOTE: it is not clear whether an untrusted party has any role in triggering this issue, so it might not be a vulnerability.
28 CVE-2005-3087 2005-09-27 2008-09-05
5.0
 None Remote Low Not required Partial None None
The SecureW2 3.0 TLS implementation uses weak random number generators (rand and srand from system time) during generation of the pre-master secret (PMS), which makes it easier for attackers to guess the secret and decrypt sensitive data.
29 CVE-2005-3086 Dir. Trav. 2005-09-27 2008-09-05
6.4
 None Remote Low Not required Partial Partial None
Directory traversal vulnerability in admin/about.php in contentServ 3.1 allows remote attackers to read or include arbitrary files via ".." sequences in the ctsWebsite parameter.
30 CVE-2005-3085 XSS 2005-09-27 2008-09-05
4.3
 None Remote Medium Not required None Partial None
Multiple cross-site scripting (XSS) vulnerabilities in rss.php in Riverdark Studios RSS Syndicator module 2.1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) forum or (2) topic parameters.
31 CVE-2005-3084 DoS Overflow 2005-09-27 2008-09-05
5.0
 None Remote Low Not required None None Partial
Buffer overflow in the TIFF library in the Photo Viewer for Sony PSP 2.0 firmware allows remote attackers to cause a denial of service via a crafted TIFF image.
32 CVE-2005-3083 XSS 2005-09-27 2016-10-18
4.3
 None Remote Medium Not required None Partial None
Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 0.10 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
33 CVE-2005-3082 Exec Code Sql 2005-09-27 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in admin.php in SEO-Board 1.0.2 allows remote attackers to execute arbitrary SQL commands via the user_pass_sha1 value in a cookie.
34 CVE-2005-3081 Exec Code 2005-09-27 2008-09-05
4.6
 None Local Low Not required Partial Partial Partial
wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the SITE command.
35 CVE-2005-3080 2005-09-27 2008-09-05
5.0
 None Remote Low Not required Partial None None
contrib/example.php in GeSHi before 1.0.7.3 allows remote attackers to read arbitrary files via the language field without a source field set.
36 CVE-2005-3079 2005-09-27 2008-09-05
4.6
 None Remote High ??? Partial Partial Partial
PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language selection.
37 CVE-2005-3078 XSS 2005-09-27 2008-09-05
4.3
 None Remote Medium Not required None Partial None
Cross-site scripting (XSS) vulnerability in PunBB before 1.2.8 allows remote attackers to inject arbitrary web script or HTML via the "forgotten e-mail" feature.
38 CVE-2005-3077 DoS 2005-09-27 2008-09-05
5.0
 None Remote Low Not required None None Partial
Microsoft Internet Explorer 5.2.3 for Mac OS allows remote attackers to cause a denial of service (crash) via a web page with malformed attributes in a BGSOUND tag, possibly involving double-quotes in an about: URI.
39 CVE-2005-3076 Exec Code 2005-09-27 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Simplog 0.9.1 might allow remote attackers to execute arbitrary SQL commands or trigger SQL error messages via invalid (1) pid, (2) blogid, (3) cid, or (4) m parameters to archive.php, or the (5) blogid parameter to blogadmin.php.
40 CVE-2005-3075 Exec Code Sql 2005-09-27 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in Zengaia before 0.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
41 CVE-2005-3074 Exec Code Sql 2005-09-27 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in rsyslogd in RSyslog before 1.0.1 and before 1.10.1 allows remote attackers to execute arbitrary SQL commands via crafted syslog messages.
42 CVE-2005-3073 2005-09-27 2017-07-11
5.0
 None Remote Low Not required None Partial None
Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the (1) "mike", (2) "standard", or (3) "foundation" demo, allows attackers to inject Interchange Tag Language (ITL) elements into the forum/submit.html page.
43 CVE-2005-3072 Exec Code Sql 2005-09-27 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
44 CVE-2005-3071 DoS 2005-09-27 2018-10-30
2.1
 None Local Low Not required None None Partial
Unspecified vulnerability in Unix File System (UFS) on Solaris 8 and 9, when logging is enabled, allows local users to cause a denial of service ("soft hang") via certain write operations to UFS.
45 CVE-2005-3070 DoS 2005-09-27 2008-09-05
3.6
 None Local Low Not required Partial None Partial
HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file.
46 CVE-2005-3069 2005-09-27 2008-09-05
2.1
 None Local Low Not required None Partial None
xferfaxstats in HylaFax 4.2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the xferfax$$ temporary file.
47 CVE-2005-3068 2005-09-27 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
Unspecified vulnerability in Eric Integrated Development Environment (eric3) before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit."
48 CVE-2005-3067 XSS 2005-09-27 2011-03-08
4.3
 None Remote Medium Not required None Partial None
Cross-site scripting (XSS) vulnerability in perldiver.cgi in PerlDiver 2.x allows remote attackers to inject arbitrary web script or HTML via the module parameter.
49 CVE-2005-3066 XSS 2005-09-27 2011-03-08
4.3
 None Remote Medium Not required None Partial None
Cross-site scripting (XSS) vulnerability in perldiver.pl in PerlDiver 1.x allows remote attackers to inject arbitrary web script or HTML via the query string. NOTE: this issue was originally disputed by the vendor, but it has since been acknowledged.
50 CVE-2005-3065 119 DoS Overflow 2005-09-27 2016-05-27
5.0
 None Remote Low Not required None None Partial
MultiTheftAuto 0.5 patch 1 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted command 40 that causes a -1 length to be used and triggers an out-of-bounds read.
Total number of vulnerabilities : 309   Page : 1 (This Page)2 3 4 5 6 7
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.