# CVEs published 2005-10-05

25 CVEs were published on October 5, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-0023](https://cve.now/CVE-2005-0023.md): gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. (no CVSS)
- [CVE-2005-2758](https://cve.now/CVE-2005-2758.md): Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote attackers to execute… (no CVSS)
- [CVE-2005-2960](https://cve.now/CVE-2005-2960.md): cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a… (no CVSS)
- [CVE-2005-2961](https://cve.now/CVE-2005-2961.md): Buffer overflow in the get\_string\_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows… (no CVSS)
- [CVE-2005-2966](https://cve.now/CVE-2005-2966.md): The Python SVG import plugin (diasvg\_import.py) for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via… (no CVSS)
- [CVE-2005-3137](https://cve.now/CVE-2005-3137.md): The (1) cfmailfilter and (2) cfcron.in files for cfengine 1.6.5 allow local users to overwrite arbitrary files via a symlink attack on… (no CVSS)
- [CVE-2005-3138](https://cve.now/CVE-2005-3138.md): Bugzilla 2.18rc1 through 2.18.3, 2.19 through 2.20rc2, and 2.21 allows remote attackers to obtain sensitive information such as the list… (no CVSS)
- [CVE-2005-3139](https://cve.now/CVE-2005-3139.md): Bugzilla 2.19.1 through 2.20rc2 and 2.21, with user matching turned on in substring mode, allows attackers to list all users whose names… (no CVSS)
- [CVE-2005-3140](https://cve.now/CVE-2005-3140.md): Procom NetFORCE 800 4.02 M10 Build 20 and possibly other versions sends the NIS password map (passwd.nis) as a file attachment in… (no CVSS)
- [CVE-2005-3141](https://cve.now/CVE-2005-3141.md): Cerulean Studios Trillian 3.0 allows remote attackers to cause a denial of service (crash) via a reverse direct connection from a… (no CVSS)
- [CVE-2005-3142](https://cve.now/CVE-2005-3142.md): Heap-based buffer overflow in Kaspersky Antivirus (KAV) 5.0 and Kaspersky Personal Security Suite 1.1 allows remote attackers to execute… (no CVSS)
- [CVE-2005-3143](https://cve.now/CVE-2005-3143.md): Unspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to cause a denial of service (crash) via IMAP… (no CVSS)
- [CVE-2005-3144](https://cve.now/CVE-2005-3144.md): httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service via long HTTP headers. (no CVSS)
- [CVE-2005-3145](https://cve.now/CVE-2005-3145.md): httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service (resource consumption) by connecting to… (no CVSS)
- [CVE-2005-3146](https://cve.now/CVE-2005-3146.md): StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files. (no CVSS)
- [CVE-2005-3147](https://cve.now/CVE-2005-3147.md): StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sensitive information. (no CVSS)
- [CVE-2005-3148](https://cve.now/CVE-2005-3148.md): StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2)… (no CVSS)
- [CVE-2005-3149](https://cve.now/CVE-2005-3149.md): Uim 0.4.x before 0.4.9.1 and 0.5.0 and earlier does not properly handle the LIBUIM\_VANILLA environment variable when a suid or sgid… (no CVSS)
- [CVE-2005-3150](https://cve.now/CVE-2005-3150.md): Format string vulnerability in the Log\_Flush function in Weex 2.6.1.5, 2.6.1, and possibly other versions allows remote FTP servers to… (no CVSS)
- [CVE-2005-3151](https://cve.now/CVE-2005-3151.md): Buffer overflow in blenderplay in Blender Player 2.37a allows attackers to execute arbitrary code via a long command line argument. (no CVSS)
- [CVE-2005-3152](https://cve.now/CVE-2005-3152.md): Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.3 allow remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2005-3153](https://cve.now/CVE-2005-3153.md): login.php in myBloggie 2.1.3 beta and earlier allows remote attackers to bypass a whitelist regular expression and conduct SQL injection… (no CVSS)
- [CVE-2005-3154](https://cve.now/CVE-2005-3154.md): Format string vulnerability in the logging functionality in BitDefender AntiVirus 7.2 through 9 allows remote attackers to cause a denial… (no CVSS)
- [CVE-2005-3155](https://cve.now/CVE-2005-3155.md): Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute arbitrary code. (no CVSS)
- [CVE-2005-3156](https://cve.now/CVE-2005-3156.md): Directory traversal vulnerability in printfaq.php in EasyGuppy (Guppy for Windows) 4.5.4 and 4.5.5 allows remote attackers to read… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2005-10-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.