CVEs published in February 2005

357 vulnerabilities, 13 critical, 0 exploited.

• debian reportbug reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive... CVE-2005-0625 Fix available 2.1 LowFebruary 28, 2005
• debian reportbug reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions... CVE-2005-0624 Fix available 2.1 LowFebruary 28, 2005
• bfriendly.com einstein Einstein 1.0.1 stores sensitive information such as usernames and passwords in plaintext in the... CVE-2005-0619 Public exploit 2.1 LowFebruary 28, 2005
• No product listed Multiple cross-site scripting (XSS) vulnerabilities in the Download module for PostNuke 0.750 and... CVE-2005-0616 4.3 MediumFebruary 28, 2005
• fckeditor Unknown vulnerability in FCKeditor 2.0 RC2, when used with PHP-Nuke, allows remote attackers to... CVE-2005-0613 Public exploit 5.0 MediumFebruary 28, 2005
• webmod Heap-based buffer overflow in server.cpp for WebMod 0.47 allows remote attackers to cause a... CVE-2005-0608 7.5 HighFebruary 28, 2005
• phpbb group phpbb viewtopic.php in phpBB 2.0.12 and earlier allows remote attackers to obtain sensitive information... CVE-2005-0603 Public exploit 5.0 MediumFebruary 28, 2005
• mozilla firefox, mozilla +1 more Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL "secure... CVE-2005-0593 Fix available 2.6 LowFebruary 28, 2005
• mozilla firefox, mozilla +1 more Heap-based buffer overflow in the UTF8ToNewUnicode function for Firefox before 1.0.1 and Mozilla... CVE-2005-0592 Fix available 7.5 HighFebruary 28, 2005
• mozilla firefox Firefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal... CVE-2005-0591 Fix available 2.6 LowFebruary 28, 2005
• mozilla firefox, mozilla, mozilla thunderbird +2 more The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and... CVE-2005-0590 Fix available 5.0 MediumFebruary 28, 2005
• mozilla firefox The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially... CVE-2005-0589 Fix available 5.0 MediumFebruary 28, 2005
• mozilla firefox, mozilla +1 more Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags... CVE-2005-0588 Fix available 5.0 MediumFebruary 28, 2005
• mozilla firefox, mozilla +1 more Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite... CVE-2005-0587 6.5 MediumFebruary 28, 2005
• mozilla firefox, mozilla +1 more Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the... CVE-2005-0586 Fix available 2.6 LowFebruary 28, 2005
• mozilla firefox, mozilla +1 more Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display,... CVE-2005-0585 Fix available 2.6 LowFebruary 28, 2005
• mozilla firefox, mozilla +1 more Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do... CVE-2005-0584 Fix available 2.6 LowFebruary 28, 2005
• mozilla firefox, mozilla, mozilla thunderbird +2 more String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as... CVE-2005-0255 Fix available 5.0 MediumFebruary 28, 2005
• rob flynn gaim The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of... CVE-2005-0208 5.0 MediumFebruary 28, 2005
• bernd wuebben kppp, kde +1 more KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly... CVE-2005-0205 Fix available 4.6 MediumFebruary 28, 2005
• mitel 3300 integrated communication platform The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2... CVE-2004-0945 5.0 MediumFebruary 28, 2005
• mozilla firefox, mozilla +1 more Firefox before 1.0.1 and Mozilla Suite before 1.7.6 use a predictable filename for the plugin... CVE-2005-0578 Fix available 2.1 LowFebruary 27, 2005
• dna mkbold-mkitalic Format string vulnerability in DNA MKBold-MKItalic 0.06_1 and earlier allows remote attackers to... CVE-2005-0577 5.1 MediumFebruary 27, 2005
• sun solaris Unknown vulnerability in Standard Type Services Framework (STSF) Font Server Daemon ... CVE-2005-0576 3.6 LowFebruary 27, 2005
• stormy studios knet Buffer overflow in Stormy Studios Knet 1.04c and earlier allows remote attackers to cause a... CVE-2005-0575 Public exploit 7.5 HighFebruary 27, 2005
• cupidsystems cis webserver Directory traversal vulnerability in CIS WebServer 3.5.13 allows remote attackers to read... CVE-2005-0574 5.0 MediumFebruary 27, 2005
• rob flynn gaim Gaim 1.1.3 on Windows systems allows remote attackers to cause a denial of service (client crash)... CVE-2005-0573 5.0 MediumFebruary 27, 2005
• phpwebsite index.php in phpWebSite 0.10.0 and earlier allows remote attackers to obtain sensitive... CVE-2005-0572 5.0 MediumFebruary 27, 2005
• punbb admin_loader.php in PunBB 1.2.1 allows remote attackers to read arbitrary files via the plugin... CVE-2005-0571 5.0 MediumFebruary 27, 2005
• punbb profile.php in PunBB 1.2.1 allows remote attackers to cause a denial of service (account lockout)... CVE-2005-0570 5.0 MediumFebruary 27, 2005
• punbb Multiple SQL injection vulnerabilities in PunBB 1.2.1 allow remote attackers to execute arbitrary... CVE-2005-0569 Public exploit 7.5 HighFebruary 27, 2005
• raven software soldier of fortune 2 Soldier of Fortune II 1.03 gold allows remote attackers to cause a denial of service (application... CVE-2005-0568 Public exploit 5.0 MediumFebruary 27, 2005
• phpmyadmin Multiple PHP remote file inclusion vulnerabilities in phpMyAdmin 2.6.1 allow remote attackers to... CVE-2005-0567 Fix available 7.5 HighFebruary 27, 2005
• phpwebsite The Announce module in phpWebSite 0.10.0 and earlier allows remote attackers to execute arbitrary... CVE-2005-0565 7.5 HighFebruary 27, 2005
• krzysztof dabrowski cmd5checkpw cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp... CVE-2005-0580 2.1 LowFebruary 25, 2005
• freenx nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable... CVE-2005-0579 4.6 MediumFebruary 25, 2005
• cyrus imapd Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary... CVE-2005-0546 Fix available 7.5 HighFebruary 25, 2005
• microsoft windows 2000, windows xp +1 more Microsoft Windows XP Pro SP2 and Windows 2000 Server SP4 running Active Directory allow local... CVE-2005-0545 7.2 HighFebruary 25, 2005
• mozilla firefox Firefox 1.0 allows remote attackers to execute arbitrary code via plugins that load "privileged... CVE-2005-0527 Fix available 5.1 MediumFebruary 25, 2005
• washington university wu-ftpd The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to... CVE-2005-0256 Public exploitFix available 5.0 MediumFebruary 25, 2005
• debian bsmtpd bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers... CVE-2005-0107 Fix available 7.5 HighFebruary 25, 2005
• cisco application and content networking software, content delivery manager, content distribution manager 4630 +7 more +9 more Cisco devices running Application and Content Networking System (ACNS) 5.0, 5.1 before 5.1.13.7,... CVE-2005-0600 5.0 MediumFebruary 24, 2005
• cisco application and content networking software, content delivery manager, content distribution manager 4630 +7 more +9 more The RealServer RealSubscriber on Cisco devices running Application and Content Networking System ... CVE-2005-0598 5.0 MediumFebruary 24, 2005
• hp hp-ux Unknown vulnerability in ftpd on HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23 allows... CVE-2005-0547 4.6 MediumFebruary 24, 2005
• phpmyadmin phpMyAdmin 2.6.1 allows remote attackers to obtain the full path of the server via direct... CVE-2005-0544 Fix available 5.0 MediumFebruary 24, 2005
• phpmyadmin Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject... CVE-2005-0543 Public exploitFix available 4.3 MediumFebruary 24, 2005
• cyclades alterpath manager saveUser.do in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows local users to gain... CVE-2005-0542 4.6 MediumFebruary 24, 2005
• cyclades alterpath manager consoleConnect.jsp in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote... CVE-2005-0541 7.5 HighFebruary 24, 2005
• cyclades alterpath manager Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote attackers to obtain sensitive... CVE-2005-0540 5.0 MediumFebruary 24, 2005
• ibm hardware management console Unknown vulnerability in IBM Hardware Management Console (HMC) before 4.4 for POWER5 servers... CVE-2005-0539 4.6 MediumFebruary 24, 2005
• Show olderLoading…