# CVEs published 2005-04-21

83 CVEs were published on April 21, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-1999-1573](https://cve.now/CVE-1999-1573.md): Multiple unknown vulnerabilities in the "r-cmnds" (1) remshd, (2) rexecd, (3) rlogind, (4) rlogin, (5) remsh, (6) rcp, (7) rexec, and (8) rd (no CVSS)
- [CVE-1999-1574](https://cve.now/CVE-1999-1574.md): Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump and possibly execute arbitrary code via (no CVSS)
- [CVE-1999-1575](https://cve.now/CVE-1999-1575.md): The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb (no CVSS)
- [CVE-1999-1576](https://cve.now/CVE-1999-1576.md): Buffer overflow in Adobe Acrobat ActiveX control (pdf.ocx, PDF.PdfCtrl.1) 1.3.188 for Acrobat Reader 4.0 allows remote attackers to execute (no CVSS)
- [CVE-1999-1577](https://cve.now/CVE-1999-1577.md): Buffer overflow in HHOpen ActiveX control (hhopen.ocx) 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-1999-1578](https://cve.now/CVE-1999-1578.md): Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.01 and 5 allows remote (no CVSS)
- [CVE-1999-1579](https://cve.now/CVE-1999-1579.md): The Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote (no CVSS)
- [CVE-1999-1580](https://cve.now/CVE-1999-1580.md): SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modif (no CVSS)
- [CVE-1999-1581](https://cve.now/CVE-1999-1581.md): Memory leak in Simple Network Management Protocol (SNMP) agent (snmp.exe) for Windows NT 4.0 before Service Pack 4 allows remote attackers t (no CVSS)
- [CVE-1999-1582](https://cve.now/CVE-1999-1582.md): By design, the "established" command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an al (no CVSS)
- [CVE-1999-1583](https://cve.now/CVE-1999-1583.md): Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument. (no CVSS)
- [CVE-2000-1215](https://cve.now/CVE-2000-1215.md): The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and build date) in the HTTP h (no CVSS)
- [CVE-2000-1216](https://cve.now/CVE-2000-1216.md): Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo\_error routine. (no CVSS)
- [CVE-2000-1217](https://cve.now/CVE-2000-1217.md): Microsoft Windows 2000 before Service Pack 2 (SP2), when running in a non-Windows 2000 domain and using NTLM authentication, and when creden (no CVSS)
- [CVE-2000-1218](https://cve.now/CVE-2000-1218.md): The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to (no CVSS)
- [CVE-2000-1219](https://cve.now/CVE-2000-1219.md): The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer overflows, which may leave applications vu (no CVSS)
- [CVE-2000-1220](https://cve.now/CVE-2000-1220.md): The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing s (no CVSS)
- [CVE-2000-1221](https://cve.now/CVE-2000-1221.md): The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostnam (no CVSS)
- [CVE-2000-1222](https://cve.now/CVE-2000-1222.md): AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to gain privileges by mo (no CVSS)
- [CVE-2000-1223](https://cve.now/CVE-2000-1223.md): quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters in the URL portion o (no CVSS)
- [CVE-2001-1434](https://cve.now/CVE-2001-1434.md): Cisco IOS 12.0(5)XU through 12.1(2) allows remote attackers to read system administration and topology information via an "snmp-server host" (no CVSS)
- [CVE-2001-1435](https://cve.now/CVE-2001-1435.md): inetd in Compaq Tru64 UNIX 5.1 allows attackers to cause a denial of service (network connection loss) by causing one of the services handle (no CVSS)
- [CVE-2001-1436](https://cve.now/CVE-2001-1436.md): Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which makes it easier for users with physic (no CVSS)
- [CVE-2001-1437](https://cve.now/CVE-2001-1437.md): easyScripts easyNews 1.5 allows remote attackers to obtain the full path of the web root via a view request with a non-integer news message (no CVSS)
- [CVE-2001-1438](https://cve.now/CVE-2001-1438.md): Handspring Visor 1.0 and 1.0.1 with the VisorPhone Springboard module installed allows remote attackers to cause a denial of service (PalmOS (no CVSS)
- [CVE-2001-1439](https://cve.now/CVE-2001-1439.md): Buffer overflow in the text editor functionality in HP-UX 10.01 through 11.04 on HP9000 Series 700 and Series 800 allows local users to caus (no CVSS)
- [CVE-2001-1440](https://cve.now/CVE-2001-1440.md): Unknown vulnerability in login for AIX 5.1L, when using loadable authentication modules, allows remote attackers to gain access to the syste (no CVSS)
- [CVE-2001-1441](https://cve.now/CVE-2001-1441.md): Cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional allows remote attackers to execute JavaScript on other clien (no CVSS)
- [CVE-2001-1442](https://cve.now/CVE-2001-1442.md): Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c c (no CVSS)
- [CVE-2001-1443](https://cve.now/CVE-2001-1443.md): KTH Kerberos IV and Kerberos V (Heimdal) for Telnet clients do not encrypt connections if the server does not support the requested encrypti (no CVSS)
- [CVE-2001-1444](https://cve.now/CVE-2001-1444.md): The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt authentication and encryption opt (no CVSS)
- [CVE-2001-1445](https://cve.now/CVE-2001-1445.md): Unknown vulnerability in the SMTP server in Lotus Domino 5.0 through 5.7 allows remote attackers to bypass mail relaying restrictions via cr (no CVSS)
- [CVE-2001-1446](https://cve.now/CVE-2001-1446.md): Find-By-Content in Mac OS X 10.0 through 10.0.4 creates world-readable index files named .FBCIndex in every directory, which allows remote a (no CVSS)
- [CVE-2001-1447](https://cve.now/CVE-2001-1447.md): NetInfo Manager for Mac OS X 10.0 through 10.1 allows local users to gain root privileges by opening applications using the (1) "recent item (no CVSS)
- [CVE-2001-1448](https://cve.now/CVE-2001-1448.md): Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly execute code via a symli (no CVSS)
- [CVE-2001-1449](https://cve.now/CVE-2001-1449.md): The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers (no CVSS)
- [CVE-2001-1450](https://cve.now/CVE-2001-1450.md): Microsoft Internet Explorer 5.0 through 6.0 allows attackers to cause a denial of service (browser crash) via a crafted FTP URL such as "/.# (no CVSS)
- [CVE-2001-1451](https://cve.now/CVE-2001-1451.md): Memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, all (no CVSS)
- [CVE-2001-1452](https://cve.now/CVE-2001-1452.md): By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows (no CVSS)
- [CVE-2001-1453](https://cve.now/CVE-2001-1453.md): Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via a long host paramete (no CVSS)
- [CVE-2001-1454](https://cve.now/CVE-2001-1454.md): Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database request. (no CVSS)
- [CVE-2001-1455](https://cve.now/CVE-2001-1455.md): Netegrity SiteMinder 3.6 through 4.5.1 allows remote attackers to bypass filtering via URLs containing Unicode characters. (no CVSS)
- [CVE-2001-1456](https://cve.now/CVE-2001-1456.md): Buffer overflow in the (1) smap/smapd and (2) CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute arbitra (no CVSS)
- [CVE-2001-1457](https://cve.now/CVE-2001-1457.md): Buffer overflow in CrazyWWWBoard 2000p4 and 2000LEp5 allows remote attackers to execute arbitrary code via a long HTTP\_USER\_AGENT CGI enviro (no CVSS)
- [CVE-2001-1458](https://cve.now/CVE-2001-1458.md): Directory traversal vulnerability in Novell GroupWise 5.5 and 6.0 allows remote attackers to read arbitrary files via a request for /servlet (no CVSS)
- [CVE-2001-1459](https://cve.now/CVE-2001-1459.md): OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, which allows (no CVSS)
- [CVE-2001-1460](https://cve.now/CVE-2001-1460.md): SQL injection vulnerability in article.php in PostNuke 0.62 through 0.64 allows remote attackers to bypass authentication via the user param (no CVSS)
- [CVE-2001-1461](https://cve.now/CVE-2001-1461.md): Directory traversal vulnerability in WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows (no CVSS)
- [CVE-2001-1462](https://cve.now/CVE-2001-1462.md): WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to cause the WebID agent to (no CVSS)
- [CVE-2001-1463](https://cve.now/CVE-2001-1463.md): The remote administration client for RhinoSoft Serv-U 3.0 sends the user password in plaintext even when S/KEY One-Time Password (OTP) authe (no CVSS)
- [CVE-2001-1464](https://cve.now/CVE-2001-1464.md): Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in t (no CVSS)
- [CVE-2001-1465](https://cve.now/CVE-2001-1465.md): SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filter (no CVSS)
- [CVE-2001-1466](https://cve.now/CVE-2001-1466.md): Buffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a lo (no CVSS)
- [CVE-2001-1467](https://cve.now/CVE-2001-1467.md): mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process ID, which limits the (no CVSS)
- [CVE-2001-1468](https://cve.now/CVE-2001-1468.md): PHP remote file inclusion vulnerability in checklogin.php in phpSecurePages 0.24 and earlier allows remote attackers to execute arbitrary PH (no CVSS)
- [CVE-2001-1469](https://cve.now/CVE-2001-1469.md): The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the original message's cyclic r (no CVSS)
- [CVE-2001-1470](https://cve.now/CVE-2001-1470.md): The IDEA cipher as implemented by SSH1 does not protect the final block of a message against modification, which allows remote attackers to (no CVSS)
- [CVE-2001-1471](https://cve.now/CVE-2001-1471.md): prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid language value, which pr (no CVSS)
- [CVE-2001-1472](https://cve.now/CVE-2001-1472.md): SQL injection vulnerability in prefs.php in phpBB 1.4.0 and 1.4.1 allows remote authenticated users to execute arbitrary SQL commands and ga (no CVSS)
- [CVE-2001-1473](https://cve.now/CVE-2001-1473.md): The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by c (no CVSS)
- [CVE-2001-1474](https://cve.now/CVE-2001-1474.md): SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections t (no CVSS)
- [CVE-2001-1475](https://cve.now/CVE-2001-1475.md): SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is genera (no CVSS)
- [CVE-2001-1476](https://cve.now/CVE-2001-1476.md): SSH before 2.0, with RC4 encryption and the "disallow NULL passwords" option enabled, makes it easier for remote attackers to guess portions (no CVSS)
- [CVE-2003-1132](https://cve.now/CVE-2003-1132.md): The DNS server for Cisco Content Service Switch (CSS) 11000 and 11500, when prompted for a nonexistent AAAA record, responds with response c (no CVSS)
- [CVE-2004-0928](https://cve.now/CVE-2004-0928.md): The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication (no CVSS)
- [CVE-2004-0984](https://cve.now/CVE-2004-0984.md): Unknown vulnerability in the dotlock implementation in mailutils before 1:0.5-4 on Debian GNU/Linux allows attackers to gain privileges. (no CVSS)
- [CVE-2004-1082](https://cve.now/CVE-2004-1082.md): mod\_digest\_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remot (no CVSS)
- [CVE-2004-1775](https://cve.now/CVE-2004-1775.md): Cisco VACM (View-based Access Control MIB) for Catalyst Operating Software (CatOS) 5.5 and 6.1 and IOS 12.0 and 12.1 allows remote attackers (no CVSS)
- [CVE-2004-1776](https://cve.now/CVE-2004-1776.md): Cisco IOS 12.1(3) and 12.1(3)T allows remote attackers to read and modify device configuration data via the cable-docsis read-write communit (no CVSS)
- [CVE-2005-0035](https://cve.now/CVE-2005-0035.md): The Acrobat web control in Adobe Acrobat and Acrobat Reader 7.0 and earlier, when used with Internet Explorer, allows remote attackers to de (no CVSS)
- [CVE-2005-0753](https://cve.now/CVE-2005-0753.md): Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code. (no CVSS)
- [CVE-2005-0755](https://cve.now/CVE-2005-0755.md): Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to (no CVSS)
- [CVE-2005-1061](https://cve.now/CVE-2005-1061.md): The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via certain strings in the (no CVSS)
- [CVE-2005-1195](https://cve.now/CVE-2005-1195.md): Multiple heap-based buffer overflows in the code used to handle (1) MMS over TCP (MMST) streams or (2) RealMedia RTSP streams in xine-lib be (no CVSS)
- [CVE-2005-1196](https://cve.now/CVE-2005-1196.md): SQL injection vulnerability in kb.php in the Knowledge Base module for phpBB allows remote attackers to obtain sensitive information and exe (no CVSS)
- [CVE-2005-1197](https://cve.now/CVE-2005-1197.md): SQL injection vulnerability in the SYS.DBMS\_CDC\_IPUBLISH.CREATE\_SCN\_CHANGE\_SET procedure in Oracle Database Server 10g allows remote attacke (no CVSS)
- [CVE-2005-1198](https://cve.now/CVE-2005-1198.md): Directory traversal vulnerability in apexec.pl for Anaconda Foundation Directory allows remote attackers to read arbitrary files via hex-enc (no CVSS)
- [CVE-2005-1199](https://cve.now/CVE-2005-1199.md): SQL injection vulnerability in printthread.php in UBB.Threads allows remote attackers to execute arbitrary SQL commands via the main paramet (no CVSS)
- [CVE-2005-1200](https://cve.now/CVE-2005-1200.md): PHP remote file inclusion vulnerability in main\_index.php in AZ Bulletin Board (AZbb) 1.0.07a through 1.0.07c allows remote attackers to exe (no CVSS)
- [CVE-2005-1201](https://cve.now/CVE-2005-1201.md): Multiple directory traversal vulnerabilities in AZ Bulletin board (AZbb) before 1.0.08 allow (1) remote authenticated users with administrat (no CVSS)
- [CVE-2005-1202](https://cve.now/CVE-2005-1202.md): Multiple cross-site scripting (XSS) vulnerabilities in eGroupware before 1.0.0.007 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2005-1203](https://cve.now/CVE-2005-1203.md): Multiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.007 allow remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2005-1204](https://cve.now/CVE-2005-1204.md): Desktop Rover 3.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application crash) via a crafted pac (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-04-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.