# CVEs published 2005-03-28

26 CVEs were published on March 28, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2002-1634](https://cve.now/CVE-2002-1634.md): Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndsobj.nlm, (2) allfield (no CVSS)
- [CVE-2002-1635](https://cve.now/CVE-2002-1635.md): The Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location alias for /perl directory instead of a Scr (no CVSS)
- [CVE-2002-1636](https://cve.now/CVE-2002-1636.md): Cross-site scripting (XSS) vulnerability in the htp PL/SQL package for Oracle 9i Application Server (9iAS) allows remote attackers to inject (no CVSS)
- [CVE-2002-1637](https://cve.now/CVE-2002-1637.md): Multiple components in Oracle 9i Application Server (9iAS) are installed with over 160 default usernames and passwords, including (1) SYS, ( (no CVSS)
- [CVE-2002-1639](https://cve.now/CVE-2002-1639.md): Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a request to the oracle (no CVSS)
- [CVE-2002-1640](https://cve.now/CVE-2002-1640.md): Multiple cross-site scripting (XSS) vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to i (no CVSS)
- [CVE-2002-1641](https://cve.now/CVE-2002-1641.md): Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server (9iAS) allow remote attackers to execute arbitrary code via u (no CVSS)
- [CVE-2002-1642](https://cve.now/CVE-2002-1642.md): PostgreSQL 7.2.1 and 7.2.2 allows local users to delete transaction log (pg\_clog) data and cause a denial of service (data loss) via the VAC (no CVSS)
- [CVE-2002-1643](https://cve.now/CVE-2002-1643.md): Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a (no CVSS)
- [CVE-2002-1644](https://cve.now/CVE-2002-1644.md): SSH Secure Shell for Servers and SSH Secure Shell for Workstations 2.0.13 through 3.2.1, when running without a PTY, does not call setsid to (no CVSS)
- [CVE-2002-1645](https://cve.now/CVE-2002-1645.md): Buffer overflow in the URL catcher feature for SSH Secure Shell for Workstations client 3.1 to 3.2.0 allows remote attackers to execute arbi (no CVSS)
- [CVE-2002-1646](https://cve.now/CVE-2002-1646.md): SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuration and use less secure (no CVSS)
- [CVE-2002-1647](https://cve.now/CVE-2002-1647.md): The quick login feature in Slash Slashcode does not redirect the user to an alternate URL when the wrong password is provided, which makes i (no CVSS)
- [CVE-2002-1648](https://cve.now/CVE-2002-1648.md): Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail before 1.2.3 allows remote attackers to send email as other u (no CVSS)
- [CVE-2002-1649](https://cve.now/CVE-2002-1649.md): Cross-site scripting (XSS) vulnerability in read\_body.php in SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary Javascri (no CVSS)
- [CVE-2002-1650](https://cve.now/CVE-2002-1650.md): The spell checker plugin (check\_me.mod.php) for SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary commands via a modifi (no CVSS)
- [CVE-2002-1651](https://cve.now/CVE-2002-1651.md): Cross-site scripting (XSS) vulnerability in Verity Search97 allows remote attackers to insert arbitrary web content and steal sensitive info (no CVSS)
- [CVE-2002-1652](https://cve.now/CVE-2002-1652.md): Buffer overflow in cgicso.c for cgiemail 1.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary cod (no CVSS)
- [CVE-2002-1653](https://cve.now/CVE-2002-1653.md): Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to communicate without encr (no CVSS)
- [CVE-2002-1654](https://cve.now/CVE-2002-1654.md): iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authenticatio (no CVSS)
- [CVE-2002-1655](https://cve.now/CVE-2002-1655.md): The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2002-1656](https://cve.now/CVE-2002-1656.md): X-News (x\_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the password, e.g. (no CVSS)
- [CVE-2004-1772](https://cve.now/CVE-2004-1772.md): Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument. (no CVSS)
- [CVE-2004-1773](https://cve.now/CVE-2004-1773.md): Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, (no CVSS)
- [CVE-2005-0468](https://cve.now/CVE-2005-0468.md): Heap-based buffer overflow in the env\_opt\_add function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute a (no CVSS)
- [CVE-2005-0469](https://cve.now/CVE-2005-0469.md): Buffer overflow in the slc\_add\_reply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attacker (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-03-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.