# CVEs published 2005-02-24

19 CVEs were published on February 24, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0481](https://cve.now/CVE-2004-0481.md): The logging feature in kcms\_configure in the KCMS package on Solaris 8 and 9, and possibly other versions, allows local users to corrupt arb (no CVSS)
- [CVE-2005-0160](https://cve.now/CVE-2005-0160.md): Multiple buffer overflows in unace 1.2b allow attackers to execute arbitrary code via (1) 2 overflows in ACE archives, (2) a long command li (no CVSS)
- [CVE-2005-0161](https://cve.now/CVE-2005-0161.md): Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archive containing (1) .. (no CVSS)
- [CVE-2005-0529](https://cve.now/CVE-2005-0529.md): Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types for offset arguments to the proc\_file\_read and locks\_read\_proc functions, wh (no CVSS)
- [CVE-2005-0530](https://cve.now/CVE-2005-0530.md): Signedness error in the copy\_from\_read\_buf function in n\_tty.c for Linux kernel 2.6.10 and 2.6.11rc1 allows local users to read kernel memor (no CVSS)
- [CVE-2005-0531](https://cve.now/CVE-2005-0531.md): The atm\_get\_addr function in addr.c for Linux kernel 2.6.10 and 2.6.11 before 2.6.11-rc4 may allow local users to trigger a buffer overflow (no CVSS)
- [CVE-2005-0532](https://cve.now/CVE-2005-0532.md): The reiserfs\_copy\_from\_user\_to\_file\_region function in reiserfs/file.c for Linux kernel 2.6.10 and 2.6.11 before 2.6.11-rc4, when running on (no CVSS)
- [CVE-2005-0533](https://cve.now/CVE-2005-0533.md): Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote atta (no CVSS)
- [CVE-2005-0534](https://cve.now/CVE-2005-0534.md): Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allow remote attackers to i (no CVSS)
- [CVE-2005-0535](https://cve.now/CVE-2005-0535.md): Cross-site request forgery (CSRF) vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perf (no CVSS)
- [CVE-2005-0536](https://cve.now/CVE-2005-0536.md): Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary f (no CVSS)
- [CVE-2005-0537](https://cve.now/CVE-2005-0537.md): Multiple SQL injection vulnerabilities in page.php for iGeneric (iG) Shop 1.2 may allow remote attackers to execute arbitrary SQL statements (no CVSS)
- [CVE-2005-0538](https://cve.now/CVE-2005-0538.md): Directory traversal vulnerability in (1) GinpPictureServlet.java and (2) PicCollection.java in ginp (Java Photo Gallery Web Application) bef (no CVSS)
- [CVE-2005-0539](https://cve.now/CVE-2005-0539.md): Unknown vulnerability in IBM Hardware Management Console (HMC) before 4.4 for POWER5 servers allows local users to gain privileges, related (no CVSS)
- [CVE-2005-0540](https://cve.now/CVE-2005-0540.md): Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote attackers to obtain sensitive information via a direct request to the /a (no CVSS)
- [CVE-2005-0541](https://cve.now/CVE-2005-0541.md): consoleConnect.jsp in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote attackers to connect to arbitrary consoles by modi (no CVSS)
- [CVE-2005-0542](https://cve.now/CVE-2005-0542.md): saveUser.do in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows local users to gain privileges by setting the adminUser paramete (no CVSS)
- [CVE-2005-0543](https://cve.now/CVE-2005-0543.md): Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via (1) the str (no CVSS)
- [CVE-2005-0544](https://cve.now/CVE-2005-0544.md): phpMyAdmin 2.6.1 allows remote attackers to obtain the full path of the server via direct requests to (1) sqlvalidator.lib.php, (2) sqlparse (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-02-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.