# CVEs published 2005-03-13

30 CVEs were published on March 13, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2002-1591](https://cve.now/CVE-2002-1591.md): AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could all (no CVSS)
- [CVE-2002-1592](https://cve.now/CVE-2002-1592.md): The ap\_log\_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that (no CVSS)
- [CVE-2002-1593](https://cve.now/CVE-2002-1593.md): mod\_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a nu (no CVSS)
- [CVE-2002-1594](https://cve.now/CVE-2002-1594.md): Buffer overflow in (1) grpck and (2) pwck, if installed setuid on a system as recommended in some AIX documentation, may allow local users t (no CVSS)
- [CVE-2002-1595](https://cve.now/CVE-2002-1595.md): Cisco SN 5420 Storage Router 1.1(5) and earlier allows attackers to read configuration files without authorization. (no CVSS)
- [CVE-2002-1596](https://cve.now/CVE-2002-1596.md): Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (router crash) via an HTTP request with (no CVSS)
- [CVE-2002-1597](https://cve.now/CVE-2002-1597.md): Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (halt) via a fragmented packet to the G (no CVSS)
- [CVE-2002-1598](https://cve.now/CVE-2002-1598.md): Buffer overflows in Computer Associates MLink (CA-MLink) 6.5 and earlier may allow local users to execute arbitrary code via long command li (no CVSS)
- [CVE-2002-1599](https://cve.now/CVE-2002-1599.md): DansGuardian before 2.4.5-1 allows remote attackers to bypass content filtering rules via hex-encoded URLs. (no CVSS)
- [CVE-2002-1600](https://cve.now/CVE-2002-1600.md): Directory traversal vulnerability in Mike Spice's My Classifieds (classifieds.cgi) before 1.3 allows remote attackers to overwrite arbitrary (no CVSS)
- [CVE-2005-0729](https://cve.now/CVE-2005-0729.md): Format string vulnerability in Xpand Rally 1.1.0.0 and earlier allows remote attackers to execute arbitrary code via format string specifier (no CVSS)
- [CVE-2005-0730](https://cve.now/CVE-2005-0730.md): PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service via a request to a file on the flo (no CVSS)
- [CVE-2005-0731](https://cve.now/CVE-2005-0731.md): PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service (CPU consumption) via a direct req (no CVSS)
- [CVE-2005-0732](https://cve.now/CVE-2005-0732.md): PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to obtain the full path of the web server via a request for a n (no CVSS)
- [CVE-2005-0733](https://cve.now/CVE-2005-0733.md): PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to determine the existence of files via an HTTP request with a (no CVSS)
- [CVE-2005-0734](https://cve.now/CVE-2005-0734.md): PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service (memory exhaustion and process cra (no CVSS)
- [CVE-2005-0735](https://cve.now/CVE-2005-0735.md): newsscript.pl for NewsScript allows remote attackers to gain privileges by setting the mode parameter to admin. (no CVSS)
- [CVE-2005-0736](https://cve.now/CVE-2005-0736.md): Integer overflow in sys\_epoll\_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large n (no CVSS)
- [CVE-2005-0737](https://cve.now/CVE-2005-0737.md): Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode. (no CVSS)
- [CVE-2005-0738](https://cve.now/CVE-2005-0738.md): Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) by deleting or moving (no CVSS)
- [CVE-2005-0739](https://cve.now/CVE-2005-0739.md): The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could l (no CVSS)
- [CVE-2005-0740](https://cve.now/CVE-2005-0740.md): The TCP stack (tcp\_input.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of service (system panic) via crafted values in (no CVSS)
- [CVE-2005-0741](https://cve.now/CVE-2005-0741.md): Cross-site scripting (XSS) vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2005-0742](https://cve.now/CVE-2005-0742.md): Cross-site scripting (XSS) vulnerability in Sun Java System Application Server 7 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2005-0743](https://cve.now/CVE-2005-0743.md): The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote attackers to upload arbitrary PHP scripts, wh (no CVSS)
- [CVE-2005-0744](https://cve.now/CVE-2005-0744.md): The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privileges by (1) sniffing (no CVSS)
- [CVE-2005-0745](https://cve.now/CVE-2005-0745.md): UTStarcom iAN-02EX VoIP Analog Terminal Adaptor (ATA) allows local users to bypass ATA access restrictions by dialing "\*#26845#" and causing (no CVSS)
- [CVE-2005-0746](https://cve.now/CVE-2005-0746.md): The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the serv (no CVSS)
- [CVE-2005-0747](https://cve.now/CVE-2005-0747.md): ApplyYourself i-Class allows remote attackers to obtain sensitive information about their own applications by reusing the hidden ID field, a (no CVSS)
- [CVE-2005-0748](https://cve.now/CVE-2005-0748.md): PHP remote file inclusion vulnerability in initdb.php for WEBInsta Mailing list manager 1.3d allows remote attackers to execute arbitrary PH (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-03-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.