# CVEs published 2005-02-08

63 CVEs were published on February 8, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2001-1414](https://cve.now/CVE-2001-1414.md): The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote attackers to hide th (no CVSS)
- [CVE-2002-1584](https://cve.now/CVE-2002-1584.md): Unknown vulnerability in the AUTH\_DES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platf (no CVSS)
- [CVE-2002-1585](https://cve.now/CVE-2002-1585.md): Unknown vulnerability in Solaris 8 for Intel and Solaris 8 and 9 for SPARC allows remote attackers to cause a denial of service via certain (no CVSS)
- [CVE-2002-1586](https://cve.now/CVE-2002-1586.md): Solaris 2.5.1 through 9 allows local users to cause a denial of service (kernel panic) by setting the sd\_struiowrq variable in the struioget (no CVSS)
- [CVE-2002-1587](https://cve.now/CVE-2002-1587.md): The libthread library (libthread.so.1) for Solaris 2.5.1 through 8 allows local users to cause a denial of service (hang) of an application (no CVSS)
- [CVE-2002-1588](https://cve.now/CVE-2002-1588.md): Mailtool for OpenWindows 3.6, 3.6.1, and 3.6.2 allows remote attackers to cause a denial of service (mailtool segmentation violation and cra (no CVSS)
- [CVE-2002-1589](https://cve.now/CVE-2002-1589.md): Unknown vulnerability in Solaris 8, when the 0x02 bit (aka TEST, KMF\_DEADBEEF, or deadbeef) is set in the kmem\_flags kernel parameter, allow (no CVSS)
- [CVE-2002-1590](https://cve.now/CVE-2002-1590.md): The Web-Based Enterprise Management (WBEM) packages (1) SUNWwbdoc, (2) SUNWwbcou, (3) SUNWwbdev and (4) SUNWmgapp packages, when installed u (no CVSS)
- [CVE-2003-1055](https://cve.now/CVE-2003-1055.md): Buffer overflow in the nss\_ldap.so.1 library for Sun Solaris 8 and 9 may allow local users to gain root access via a long hostname in an LDA (no CVSS)
- [CVE-2003-1056](https://cve.now/CVE-2003-1056.md): The ed editor for Sun Solaris 2.6, 7, and 8 allows local users to create or overwrite arbitrary files via a symlink attack on temporary file (no CVSS)
- [CVE-2003-1057](https://cve.now/CVE-2003-1057.md): Unknown vulnerability in CDE Print Viewer (dtprintinfo) for Sun Solaris 2.6 through 9 may allow local users to execute arbitrary code. (no CVSS)
- [CVE-2003-1058](https://cve.now/CVE-2003-1058.md): The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access (DGA) mode, allows local users to cause a denial of se (no CVSS)
- [CVE-2003-1059](https://cve.now/CVE-2003-1059.md): Unknown vulnerability in the libraries for the PGX32 frame buffer in Solaris 2.5.1 and 2.6 through 9 allows local users to gain root access. (no CVSS)
- [CVE-2003-1060](https://cve.now/CVE-2003-1060.md): The NFS Server for Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (UFS panic) via certain invalid UFS requests, wh (no CVSS)
- [CVE-2003-1061](https://cve.now/CVE-2003-1061.md): Race condition in Solaris 2.6 through 9 allows local users to cause a denial of service (kernel panic), as demonstrated via the namefs funct (no CVSS)
- [CVE-2003-1062](https://cve.now/CVE-2003-1062.md): Unknown vulnerability in the sysinfo system call for Solaris for SPARC 2.6 through 9, and Solaris for x86 2.6, 7, and 8, allows local users (no CVSS)
- [CVE-2003-1063](https://cve.now/CVE-2003-1063.md): The patches (1) 105693-13, (2) 108800-02, (3) 105694-13, and (4) 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, w (no CVSS)
- [CVE-2003-1064](https://cve.now/CVE-2003-1064.md): Solaris 8 with IPv6 enabled allows remote attackers to cause a denial of service (kernel panic) via a crafted IPv6 packet. (no CVSS)
- [CVE-2003-1065](https://cve.now/CVE-2003-1065.md): Unknown vulnerability in patches 108993-14 through 108993-19 and 108994-14 through 108994-19 for Solaris 8 may allow local users to cause a (no CVSS)
- [CVE-2003-1066](https://cve.now/CVE-2003-1066.md): Buffer overflow in the syslog daemon for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (syslogd crash) and poss (no CVSS)
- [CVE-2003-1067](https://cve.now/CVE-2003-1067.md): Multiple buffer overflows in the (1) dbm\_open function, as used in ndbm and dbm, and the (2) dbminit function in Solaris 2.6 through 9 allow (no CVSS)
- [CVE-2003-1068](https://cve.now/CVE-2003-1068.md): Buffer overflow in utmp\_update for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4659277, a d (no CVSS)
- [CVE-2003-1069](https://cve.now/CVE-2003-1069.md): The Telnet daemon (in.telnetd) for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (CPU consumption by infinite l (no CVSS)
- [CVE-2003-1070](https://cve.now/CVE-2003-1070.md): Unknown vulnerability in rpcbind for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (rpcbind crash). (no CVSS)
- [CVE-2003-1071](https://cve.now/CVE-2003-1071.md): rpc.walld (wall daemon) for Solaris 2.6 through 9 allows local users to send messages to logged on users that appear to come from arbitrary (no CVSS)
- [CVE-2003-1072](https://cve.now/CVE-2003-1072.md): Memory leak in lofiadm in Solaris 8 allows local users to cause a denial of service (kernel memory consumption). (no CVSS)
- [CVE-2003-1073](https://cve.now/CVE-2003-1073.md): A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. (no CVSS)
- [CVE-2003-1074](https://cve.now/CVE-2003-1074.md): Unknown vulnerability in newtask for Solaris 9 allows local users to gain root privileges. (no CVSS)
- [CVE-2003-1075](https://cve.now/CVE-2003-1075.md): Unknown vulnerability in the FTP server (in.ftpd) for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (temporary (no CVSS)
- [CVE-2003-1076](https://cve.now/CVE-2003-1076.md): Unknown vulnerability in sendmail for Solaris 7, 8, and 9 allows local users to cause a denial of service (unknown impact) and possibly gain (no CVSS)
- [CVE-2003-1077](https://cve.now/CVE-2003-1077.md): Unknown vulnerability in UFS for Solaris 9 for SPARC, with logging enabled, allows local users to cause a denial of service (UFS file system (no CVSS)
- [CVE-2003-1078](https://cve.now/CVE-2003-1078.md): The FTP client for Solaris 2.6, 7, and 8 with the debug (-d) flag enabled displays the user password on the screen during login. (no CVSS)
- [CVE-2003-1079](https://cve.now/CVE-2003-1079.md): Unknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for x86, allows remote attackers to cause a deni (no CVSS)
- [CVE-2003-1080](https://cve.now/CVE-2003-1080.md): Unknown vulnerability in mail for Solaris 2.6 through 9 allows local users to read the email of other users. (no CVSS)
- [CVE-2003-1081](https://cve.now/CVE-2003-1081.md): Aspppls for Solaris 8 allows local users to overwrite arbitrary files via a symlink attack on the .asppp.fifo temporary file. (no CVSS)
- [CVE-2003-1082](https://cve.now/CVE-2003-1082.md): Buffer overflow in utmp\_update for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4705891, a d (no CVSS)
- [CVE-2004-0848](https://cve.now/CVE-2004-0848.md): Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long (no CVSS)
- [CVE-2004-1131](https://cve.now/CVE-2004-1131.md): Multiple buffer overflows in the enable command for SCO OpenServer 5.0.6 and 5.0.7 allow local users to execute arbitrary code via long comm (no CVSS)
- [CVE-2004-1244](https://cve.now/CVE-2004-1244.md): Windows Media Player 9 allows remote attackers to execute arbitrary code via a PNG file containing large (1) width or (2) height values, aka (no CVSS)
- [CVE-2004-1393](https://cve.now/CVE-2004-1393.md): Unknown vulnerability in the tcsetattr function for Sun Solaris for SPARC 2.6, 7, and 8 allows local users to cause a denial of service (sys (no CVSS)
- [CVE-2004-1394](https://cve.now/CVE-2004-1394.md): The pfexec function for Sun Solaris 8 and 9 does not properly handle when a custom profile contains an invalid entry in the exec\_attr databa (no CVSS)
- [CVE-2005-0044](https://cve.now/CVE-2005-0044.md): The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of (no CVSS)
- [CVE-2005-0045](https://cve.now/CVE-2005-0045.md): The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, (no CVSS)
- [CVE-2005-0047](https://cve.now/CVE-2005-0047.md): Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage files, which allows atta (no CVSS)
- [CVE-2005-0049](https://cve.now/CVE-2005-0049.md): Windows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP redirection query, which (no CVSS)
- [CVE-2005-0050](https://cve.now/CVE-2005-0050.md): The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of mes (no CVSS)
- [CVE-2005-0051](https://cve.now/CVE-2005-0051.md): The Server service (srvsvc.dll) in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information (users who are accessing r (no CVSS)
- [CVE-2005-0053](https://cve.now/CVE-2005-0053.md): Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulner (no CVSS)
- [CVE-2005-0054](https://cve.now/CVE-2005-0054.md): Internet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security zone and execute arbitrary code via an HTML (no CVSS)
- [CVE-2005-0055](https://cve.now/CVE-2005-0055.md): Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange J (no CVSS)
- [CVE-2005-0056](https://cve.now/CVE-2005-0056.md): Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote att (no CVSS)
- [CVE-2005-0057](https://cve.now/CVE-2005-0057.md): The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link (no CVSS)
- [CVE-2005-0100](https://cve.now/CVE-2005-0100.md): Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, a (no CVSS)
- [CVE-2005-0231](https://cve.now/CVE-2005-0231.md): Firefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or data: URL to a tab, which allows remote attac (no CVSS)
- [CVE-2005-0232](https://cve.now/CVE-2005-0232.md): Firefox 1.0 allows remote attackers to modify Boolean configuration parameters for the about:config site by using a plugin such as Flash, an (no CVSS)
- [CVE-2005-0241](https://cve.now/CVE-2005-0241.md): The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling (no CVSS)
- [CVE-2005-0244](https://cve.now/CVE-2005-0244.md): PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command. (no CVSS)
- [CVE-2005-0245](https://cve.now/CVE-2005-0245.md): Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to (no CVSS)
- [CVE-2005-0246](https://cve.now/CVE-2005-0246.md): The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service (crash) via crafted arrays. (no CVSS)
- [CVE-2005-0247](https://cve.now/CVE-2005-0247.md): Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of (no CVSS)
- [CVE-2005-0248](https://cve.now/CVE-2005-0248.md): The Solaris Management Console (SMC) GUI for Solaris 8 and 9, when creating user accounts that are configured for password aging, creates th (no CVSS)
- [CVE-2005-0249](https://cve.now/CVE-2005-0249.md): Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX (no CVSS)
- [CVE-2005-0250](https://cve.now/CVE-2005-0250.md): Format string vulnerability in auditselect on IBM AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via format string speci (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-02-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.