# CVEs published 2005-02-16

21 CVEs were published on February 16, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-0011](https://cve.now/CVE-2005-0011.md): Multiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars support for Instrument Neutral Distributed Inter (no CVSS)
- [CVE-2005-0070](https://cve.now/CVE-2005-0070.md): Synaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not drop privileges before processing configurat (no CVSS)
- [CVE-2005-0105](https://cve.now/CVE-2005-0105.md): Unknown vulnerability in typespeed 0.4.1 and earlier allows local users to gain privileges. (no CVSS)
- [CVE-2005-0176](https://cve.now/CVE-2005-0176.md): The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memor (no CVSS)
- [CVE-2005-0177](https://cve.now/CVE-2005-0177.md): nls\_ascii.c in Linux before 2.6.8.1 uses an incorrect table size, which allows attackers to cause a denial of service (kernel crash) via a b (no CVSS)
- [CVE-2005-0178](https://cve.now/CVE-2005-0178.md): Race condition in the setsid function in Linux before 2.6.8.1 allows local users to cause a denial of service (crash) and possibly access po (no CVSS)
- [CVE-2005-0362](https://cve.now/CVE-2005-0362.md): awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) "pluginmode", (2) "loadp (no CVSS)
- [CVE-2005-0363](https://cve.now/CVE-2005-0363.md): awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter. (no CVSS)
- [CVE-2005-0406](https://cve.now/CVE-2005-0406.md): A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an in (no CVSS)
- [CVE-2005-0407](https://cve.now/CVE-2005-0407.md): Cross-site scripting (XSS) vulnerability in Openconf 1.04, and possibly other versions before 1.10, allows remote attackers to inject arbitr (no CVSS)
- [CVE-2005-0408](https://cve.now/CVE-2005-0408.md): CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the id\_hash cookie, which allows remote attackers to (no CVSS)
- [CVE-2005-0409](https://cve.now/CVE-2005-0409.md): CitrusDB 0.3.6 and earlier does not verify authorization for the (1) importcc.php and (2) uploadcc.php, which allows remote attackers to upl (no CVSS)
- [CVE-2005-0410](https://cve.now/CVE-2005-0410.md): SQL injection vulnerability in importcc.php for CitrusDB 0.3.6 and earlier allows remote attackers to inject data via the fields of a CSV fi (no CVSS)
- [CVE-2005-0411](https://cve.now/CVE-2005-0411.md): Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote attackers and local users to include arbitrary P (no CVSS)
- [CVE-2005-0430](https://cve.now/CVE-2005-0430.md): The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service (shutdown game server) and possi (no CVSS)
- [CVE-2005-0449](https://cve.now/CVE-2005-0449.md): The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) or bypass firewall (no CVSS)
- [CVE-2005-0450](https://cve.now/CVE-2005-0450.md): Directory traversal vulnerability in Sami HTTP Server 1.0.5 allows remote attackers to read arbitrary files via an HTTP request containing ( (no CVSS)
- [CVE-2005-0451](https://cve.now/CVE-2005-0451.md): Sami HTTP Server 1.0.5 allows remote attackers to cause a denial of service via an HTTP request containing two CRLF sequences, which trigger (no CVSS)
- [CVE-2005-0452](https://cve.now/CVE-2005-0452.md): Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrar (no CVSS)
- [CVE-2005-0453](https://cve.now/CVE-2005-0453.md): The buffer\_urldecode function in Lighttpd 1.3.7 and earlier does not properly handle control characters, which allows remote attackers to ob (no CVSS)
- [CVE-2005-0454](https://cve.now/CVE-2005-0454.md): Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-02-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.