# CVEs published 2005-02-15

35 CVEs were published on February 15, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-1487](https://cve.now/CVE-2004-1487.md): wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves t (no CVSS)
- [CVE-2004-1488](https://cve.now/CVE-2004-1488.md): wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote mali (no CVSS)
- [CVE-2005-0019](https://cve.now/CVE-2005-0019.md): Unknown vulnerability in hztty 2.0 and earlier allows local users to execute arbitrary commands. (no CVSS)
- [CVE-2005-0085](https://cve.now/CVE-2005-0085.md): Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML (no CVSS)
- [CVE-2005-0087](https://cve.now/CVE-2005-0087.md): The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execu (no CVSS)
- [CVE-2005-0159](https://cve.now/CVE-2005-0159.md): The tpkg-\* scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local users to overwrite arbitrary files via a symlin (no CVSS)
- [CVE-2005-0206](https://cve.now/CVE-2005-0206.md): The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux d (no CVSS)
- [CVE-2005-0419](https://cve.now/CVE-2005-0419.md): Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via long FTP commands, as d (no CVSS)
- [CVE-2005-0420](https://cve.now/CVE-2005-0420.md): Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a lin (no CVSS)
- [CVE-2005-0421](https://cve.now/CVE-2005-0421.md): DelphiTurk FTP 1.0 stores usernames and passwords in the profile.dat file, which allows local users to gain privileges. (no CVSS)
- [CVE-2005-0422](https://cve.now/CVE-2005-0422.md): DelphiTurk CodeBank (aka KodBank) 3.1 and earlier stores usernames and passwords in the Codebank registry key, which allows local users to g (no CVSS)
- [CVE-2005-0423](https://cve.now/CVE-2005-0423.md): SQL injection vulnerability in login.asp in ASPjar Guestbook allows remote attackers to execute arbitrary SQL commands via the password fiel (no CVSS)
- [CVE-2005-0424](https://cve.now/CVE-2005-0424.md): Unknown vulnerability in the delete.asp program in certain versions of ASPjar Guestbook allows remote attackers to delete messages. (no CVSS)
- [CVE-2005-0425](https://cve.now/CVE-2005-0425.md): Unknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on Windows, allows remote attackers to obtain the s (no CVSS)
- [CVE-2005-0426](https://cve.now/CVE-2005-0426.md): Unknown vulnerability in Solaris 8 and 9 allows remote attackers to cause a denial of service (panic) via "Heavy UDP Usage" that triggers a (no CVSS)
- [CVE-2005-0427](https://cve.now/CVE-2005-0427.md): The ebuild of Webmin before 1.170-r3 on Gentoo Linux includes the encrypted root password in the miniserv.users file when building a tbz2 of (no CVSS)
- [CVE-2005-0428](https://cve.now/CVE-2005-0428.md): The DNSPacket::expand method in dnspacket.cc in PowerDNS before 2.9.17 allows remote attackers to cause a denial of service by sending a ran (no CVSS)
- [CVE-2005-0429](https://cve.now/CVE-2005-0429.md): Direct code injection vulnerability in forumdisplay.php in vBulletin 3.0 through 3.0.4, when showforumusers is enabled, allows remote attack (no CVSS)
- [CVE-2005-0431](https://cve.now/CVE-2005-0431.md): Barracuda Spam Firewall 3.1.10 and earlier does not restrict the domains that white-listed domains can send mail to, which allows members of (no CVSS)
- [CVE-2005-0432](https://cve.now/CVE-2005-0432.md): BEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 Service Pack 3 and earlier, generates different login exceptions that suggest wh (no CVSS)
- [CVE-2005-0433](https://cve.now/CVE-2005-0433.md): Php-Nuke 7.5 allows remote attackers to determine the full path of the web server via invalid or missing arguments to (1) db.php, (2) mainfi (no CVSS)
- [CVE-2005-0434](https://cve.now/CVE-2005-0434.md): Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 7.5 allow remote attackers to inject arbitrary HTML or web script via (1) th (no CVSS)
- [CVE-2005-0435](https://cve.now/CVE-2005-0435.md): awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginmode parameters to raw (no CVSS)
- [CVE-2005-0436](https://cve.now/CVE-2005-0436.md): Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of Perl code via the Pl (no CVSS)
- [CVE-2005-0437](https://cve.now/CVE-2005-0437.md): Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to include arbitrary Perl modules via .. (no CVSS)
- [CVE-2005-0438](https://cve.now/CVE-2005-0438.md): awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to obtain sensitive information by setting the debug parameter. (no CVSS)
- [CVE-2005-0439](https://cve.now/CVE-2005-0439.md): Buffer overflow in the decode\_post function in ELOG before 2.5.7 allows remote attackers to execute arbitrary code via attachments with long (no CVSS)
- [CVE-2005-0440](https://cve.now/CVE-2005-0440.md): ELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration file that contains a sensitive write passwor (no CVSS)
- [CVE-2005-0441](https://cve.now/CVE-2005-0441.md): Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticated users t (no CVSS)
- [CVE-2005-0442](https://cve.now/CVE-2005-0442.md): Directory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote attackers to read arbitrary files via the language parameter (no CVSS)
- [CVE-2005-0443](https://cve.now/CVE-2005-0443.md): index.php in CubeCart 2.0.4 allows remote attackers to (1) obtain the full path for the web server or (2) conduct cross-site scripting (XSS) (no CVSS)
- [CVE-2005-0444](https://cve.now/CVE-2005-0444.md): VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries using a path that includes the rrdharan world-writable temporary direct (no CVSS)
- [CVE-2005-0445](https://cve.now/CVE-2005-0445.md): Cross-site scripting (XSS) vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web script via the domain n (no CVSS)
- [CVE-2005-0446](https://cve.now/CVE-2005-0446.md): Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qua (no CVSS)
- [CVE-2005-0447](https://cve.now/CVE-2005-0447.md): Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (hang) via a flood of certain ARP packets. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-02-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.