# CVEs published 2005-04-06

7 CVEs were published on April 6, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-0967](https://cve.now/CVE-2005-0967.md): Gaim 1.2.0 allows remote attackers to cause a denial of service (application crash) via a malformed file transfer request to a Jabber user, (no CVSS)
- [CVE-2005-0986](https://cve.now/CVE-2005-0986.md): NLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other versions allows remote attackers to cause a deni (no CVSS)
- [CVE-2005-0987](https://cve.now/CVE-2005-0987.md): Unknown vulnerability in IRC Services NickServ LISTLINKS before 5.0.50 allows remote attackers to obtain the links of a nick. (no CVSS)
- [CVE-2005-0988](https://cve.now/CVE-2005-0988.md): Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary f (no CVSS)
- [CVE-2005-0989](https://cve.now/CVE-2005-0989.md): The find\_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remot (no CVSS)
- [CVE-2005-0990](https://cve.now/CVE-2005-0990.md): unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file. (no CVSS)
- [CVE-2005-0991](https://cve.now/CVE-2005-0991.md): RC.BOOT in IBM AIX 5.1, 5.2, and 5.3 does not "use a secure location for temporary files," which allows local users to have an unknown impac (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-04-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.