# CVEs published 2005-06-29

14 CVEs were published on June 29, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-0771](https://cve.now/CVE-2005-0771.md): VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by cal (no CVSS)
- [CVE-2005-0773](https://cve.now/CVE-2005-0773.md): Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allow (no CVSS)
- [CVE-2005-2069](https://cve.now/CVE-2005-2069.md): pam\_ldap and nss\_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the cl (no CVSS)
- [CVE-2005-2070](https://cve.now/CVE-2005-2070.md): The ClamAV Mail fILTER (clamav-milter) 0.84 through 0.85d, when used in Sendmail using long timeouts, allows remote attackers to cause a den (no CVSS)
- [CVE-2005-2071](https://cve.now/CVE-2005-2071.md): traceroute in Sun Solaris 10 on x86 systems allows local users to execute arbitrary code with PRIV\_NET\_RAWACCESS privileges via (1) a large (no CVSS)
- [CVE-2005-2072](https://cve.now/CVE-2005-2072.md): The runtime linker (ld.so) in Solaris 8, 9, and 10 trusts the LD\_AUDIT environment variable in setuid or setgid programs, which allows local (no CVSS)
- [CVE-2005-2073](https://cve.now/CVE-2005-2073.md): Unknown vulnerability in IBM DB2 8.1.4 through 8.1.9 and 8.2.0 through 8.2.2 allows local users with SELECT privileges to conduct unauthoriz (no CVSS)
- [CVE-2005-2074](https://cve.now/CVE-2005-2074.md): Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.0.105 allows remote attackers to inject arbitrary web script or HTML via a news or (no CVSS)
- [CVE-2005-2075](https://cve.now/CVE-2005-2075.md): PHP-Fusion 5.0 and 6.0 stores the database file with a predictable filename under the web document root with insufficient access control, wh (no CVSS)
- [CVE-2005-2076](https://cve.now/CVE-2005-2076.md): HP Version Control Repository Manager (VCRM) before 2.1.1.730 does not properly handle the "@" character in a proxy password, which could al (no CVSS)
- [CVE-2005-2077](https://cve.now/CVE-2005-2077.md): Cross-site scripting (XSS) vulnerability in error.asp for Hosting Controller allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2005-2078](https://cve.now/CVE-2005-2078.md): BisonFTP Server V4R1 allows remote authenticated users to cause a denial of service via an invalid command with a long argument. (no CVSS)
- [CVE-2005-2079](https://cve.now/CVE-2005-2079.md): Heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0 through 10.0 for Windows Servers allows remote attacker (no CVSS)
- [CVE-2005-2080](https://cve.now/CVE-2005-2080.md): Unknown vulnerability in Remote Agent for Windows Servers (RAWS) in VERITAS Backup Exec 9.0 through 10.0 for Windows, and 9.0.4019 through 9 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-06-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.