# CVEs published 2005-02-27

16 CVEs were published on February 27, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-0565](https://cve.now/CVE-2005-0565.md): The Announce module in phpWebSite 0.10.0 and earlier allows remote attackers to execute arbitrary PHP code by setting the Image field to ref (no CVSS)
- [CVE-2005-0566](https://cve.now/CVE-2005-0566.md): Buffer overflow in Golden FTP Server Pro (goldenftpd) 2.x allows remote attackers to execute arbitrary code via a long RNTO command. (no CVSS)
- [CVE-2005-0567](https://cve.now/CVE-2005-0567.md): Multiple PHP remote file inclusion vulnerabilities in phpMyAdmin 2.6.1 allow remote attackers to execute arbitrary PHP code by modifying the (no CVSS)
- [CVE-2005-0568](https://cve.now/CVE-2005-0568.md): Soldier of Fortune II 1.03 gold allows remote attackers to cause a denial of service (application crash) via a large cl\_guid value, which re (no CVSS)
- [CVE-2005-0569](https://cve.now/CVE-2005-0569.md): Multiple SQL injection vulnerabilities in PunBB 1.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) language paramete (no CVSS)
- [CVE-2005-0570](https://cve.now/CVE-2005-0570.md): profile.php in PunBB 1.2.1 allows remote attackers to cause a denial of service (account lockout) by setting the user's password to NULL. (no CVSS)
- [CVE-2005-0571](https://cve.now/CVE-2005-0571.md): admin\_loader.php in PunBB 1.2.1 allows remote attackers to read arbitrary files via the plugin parameter. (no CVSS)
- [CVE-2005-0572](https://cve.now/CVE-2005-0572.md): index.php in phpWebSite 0.10.0 and earlier allows remote attackers to obtain sensitive information via an invalid SEA\_search\_module paramete (no CVSS)
- [CVE-2005-0573](https://cve.now/CVE-2005-0573.md): Gaim 1.1.3 on Windows systems allows remote attackers to cause a denial of service (client crash) via a file transfer in which the filename (no CVSS)
- [CVE-2005-0574](https://cve.now/CVE-2005-0574.md): Directory traversal vulnerability in CIS WebServer 3.5.13 allows remote attackers to read arbitrary files via .. (no CVSS)
- [CVE-2005-0575](https://cve.now/CVE-2005-0575.md): Buffer overflow in Stormy Studios Knet 1.04c and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary (no CVSS)
- [CVE-2005-0576](https://cve.now/CVE-2005-0576.md): Unknown vulnerability in Standard Type Services Framework (STSF) Font Server Daemon (stfontserverd) in Solaris 9 allows local users to modif (no CVSS)
- [CVE-2005-0577](https://cve.now/CVE-2005-0577.md): Format string vulnerability in DNA MKBold-MKItalic 0.06\_1 and earlier allows remote attackers to execute arbitrary code via crafted BDF font (no CVSS)
- [CVE-2005-0578](https://cve.now/CVE-2005-0578.md): Firefox before 1.0.1 and Mozilla Suite before 1.7.6 use a predictable filename for the plugin temporary directory, which allows local users (no CVSS)
- [CVE-2005-0579](https://cve.now/CVE-2005-0579.md): nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allows local users to acc (no CVSS)
- [CVE-2005-0580](https://cve.now/CVE-2005-0580.md): cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-02-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.