# CVEs published 2005-02-21

22 CVEs were published on February 21, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1085](https://cve.now/CVE-2003-1085.md): The HTTP server in the Thomson TWC305, TWC315, and TCW690 cable modem ST42.03.0a allows remote attackers to cause a denial of service (unsta (no CVSS)
- [CVE-2004-1701](https://cve.now/CVE-2004-1701.md): Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execut (no CVSS)
- [CVE-2004-1702](https://cve.now/CVE-2004-1702.md): The AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 does not properly check the return value of the ReceiveTransact (no CVSS)
- [CVE-2005-0090](https://cve.now/CVE-2005-0090.md): A regression error in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch omits an "access check," which allows local users to cause a (no CVSS)
- [CVE-2005-0091](https://cve.now/CVE-2005-0091.md): Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when using the hugemem kernel, allows local users to rea (no CVSS)
- [CVE-2005-0092](https://cve.now/CVE-2005-0092.md): Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when running on x86 with the hugemem kernel, allows loca (no CVSS)
- [CVE-2005-0204](https://cve.now/CVE-2005-0204.md): Linux kernel before 2.6.9, when running on the AMD64 and Intel EM64T architectures, allows local users to write to privileged IO ports via t (no CVSS)
- [CVE-2005-0467](https://cve.now/CVE-2005-0467.md): Multiple integer overflows in the (1) sftp\_pkt\_getstring and (2) fxp\_readdir\_recv functions in the PSFTP and PSCP clients for PuTTY 0.56, an (no CVSS)
- [CVE-2005-0490](https://cve.now/CVE-2005-0490.md): Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute (no CVSS)
- [CVE-2005-0491](https://cve.now/CVE-2005-0491.md): Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a long type 77 request. (no CVSS)
- [CVE-2005-0492](https://cve.now/CVE-2005-0492.md): Adobe Acrobat Reader 6.0.3 and 7.0.0 allows remote attackers to cause a denial of service (application crash) via a PDF file that contains a (no CVSS)
- [CVE-2005-0493](https://cve.now/CVE-2005-0493.md): CRLF injection vulnerability in bizmail.cgi in Biz Mail Form before 2.2 allows remote attackers to bypass the email check and send spam e-ma (no CVSS)
- [CVE-2005-0494](https://cve.now/CVE-2005-0494.md): The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a does not properly val (no CVSS)
- [CVE-2005-0495](https://cve.now/CVE-2005-0495.md): Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the (1) sn1, (2) ye (no CVSS)
- [CVE-2005-0496](https://cve.now/CVE-2005-0496.md): Arkeia Network Backup Client 5.x contains hard-coded credentials that effectively serve as a back door, which allows remote attackers to acc (no CVSS)
- [CVE-2005-0497](https://cve.now/CVE-2005-0497.md): ADP Elite System Max 9000 allows remote authenticated users to gain privileges by uploading a .profile that sets the ADPROOT environment var (no CVSS)
- [CVE-2005-0498](https://cve.now/CVE-2005-0498.md): Gigafast router (aka CompUSA router) allows remote attackers to gain sensitive information and bypass the login page via a direct request to (no CVSS)
- [CVE-2005-0499](https://cve.now/CVE-2005-0499.md): Gigafast router (aka CompUSA router) with the DNS proxy option enabled allows remote attackers to cause a denial of service via malformed DN (no CVSS)
- [CVE-2005-0500](https://cve.now/CVE-2005-0500.md): Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to spoof the domain name of a URL in a titlebar for a script-initiated popup (no CVSS)
- [CVE-2005-0501](https://cve.now/CVE-2005-0501.md): Buffer overflow in Bontago 1.1 and earlier allows remote attackers to execute arbitrary code via a long nickname. (no CVSS)
- [CVE-2005-0502](https://cve.now/CVE-2005-0502.md): Directory traversal vulnerability in Xinkaa 1.0.3 and earlier allows remote attackers to read arbitrary files via (1) ../ and (2) ..\\ charac (no CVSS)
- [CVE-2005-0503](https://cve.now/CVE-2005-0503.md): uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to ga (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-02-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.