# CVEs published 2005-07-05

16 CVEs were published on July 5, 2005: 1 critical, 0 high. Days are UTC.

- [CVE-2004-2154](https://cve.now/CVE-2004-2154.md): CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a… (CVSS 9.8)
- [CVE-2005-1625](https://cve.now/CVE-2005-1625.md): Stack-based buffer overflow in the UnixAppOpenFilePerform function in Adobe Reader 5.0.9 and 5.0.10 for Unix allows remote attackers to… (no CVSS)
- [CVE-2005-1917](https://cve.now/CVE-2005-1917.md): kpopper 1.0 and earlier allows local users to create and overwrite arbitrary files via a symlink attack on the .popper-new temporary file. (no CVSS)
- [CVE-2005-2134](https://cve.now/CVE-2005-2134.md): The (1) clcs and (2) emuxki drivers in NetBSD 1.6 through 2.0.2 allow local users to cause a denial of service (kernel crash) by using the… (no CVSS)
- [CVE-2005-2135](https://cve.now/CVE-2005-2135.md): SQL injection vulnerability in verify.asp in EtoShop Dynamic Biz Website Builder (QuickWeb) 1.0 allows remote attackers to execute… (no CVSS)
- [CVE-2005-2136](https://cve.now/CVE-2005-2136.md): Raritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set (1) world-readable permissions for /etc/shadow and (2)… (no CVSS)
- [CVE-2005-2137](https://cve.now/CVE-2005-2137.md): Unknown vulnerability in NateOn Messenger 3.0 allows remote attackers to list arbitrary directories via unknown attack vectors. (no CVSS)
- [CVE-2005-2138](https://cve.now/CVE-2005-2138.md): Cross-site scripting (XSS) vulnerability in index.php in Comdev eCommerce 3.0 and 3.1 allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2005-2139](https://cve.now/CVE-2005-2139.md): PHP remote file inclusion vulnerability in user\_check.php for Pavsta Auto Site allows remote attackers to execute arbitrary PHP code via… (no CVSS)
- [CVE-2005-2140](https://cve.now/CVE-2005-2140.md): Directory traversal vulnerability in default.asp for FSboard 2.0 allows remote attackers to read arbitrary files via ".." sequences in the… (no CVSS)
- [CVE-2005-2141](https://cve.now/CVE-2005-2141.md): TCP Chat 1.0 allows remote attackers to cause a denial of service (crash) via a long string to the chat service, possibly triggering a… (no CVSS)
- [CVE-2005-2142](https://cve.now/CVE-2005-2142.md): Directory traversal vulnerability in Golden FTP Server 2.60 allows remote authenticated attackers to list arbitrary directories via a… (no CVSS)
- [CVE-2005-2143](https://cve.now/CVE-2005-2143.md): Microsoft Front Page allows attackers to cause a denial of service (crash) via a crafted style tag in a web page. (no CVSS)
- [CVE-2005-2144](https://cve.now/CVE-2005-2144.md): Prevx Pro 2005 1.0 allows local users to bypass file protection and modify files by using MapViewOfFile to perform memory mapping on the… (no CVSS)
- [CVE-2005-2145](https://cve.now/CVE-2005-2145.md): The kernel driver in Prevx Pro 2005 1.0 does not verify the source of certain messages, which allows local users to bypass protection by… (no CVSS)
- [CVE-2005-2146](https://cve.now/CVE-2005-2146.md): SSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure permissions when generating the Secure Shell… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2005-07-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.