# CVEs published 2005-07-05

16 CVEs were published on July 5, 2005: 1 critical, 0 high. Days are UTC.

- [CVE-2004-2154](https://cve.now/CVE-2004-2154.md): CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a prin (CVSS 9.8)
- [CVE-2005-1625](https://cve.now/CVE-2005-1625.md): Stack-based buffer overflow in the UnixAppOpenFilePerform function in Adobe Reader 5.0.9 and 5.0.10 for Unix allows remote attackers to exec (no CVSS)
- [CVE-2005-1917](https://cve.now/CVE-2005-1917.md): kpopper 1.0 and earlier allows local users to create and overwrite arbitrary files via a symlink attack on the .popper-new temporary file. (no CVSS)
- [CVE-2005-2134](https://cve.now/CVE-2005-2134.md): The (1) clcs and (2) emuxki drivers in NetBSD 1.6 through 2.0.2 allow local users to cause a denial of service (kernel crash) by using the s (no CVSS)
- [CVE-2005-2135](https://cve.now/CVE-2005-2135.md): SQL injection vulnerability in verify.asp in EtoShop Dynamic Biz Website Builder (QuickWeb) 1.0 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2005-2136](https://cve.now/CVE-2005-2136.md): Raritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set (1) world-readable permissions for /etc/shadow and (2) w (no CVSS)
- [CVE-2005-2137](https://cve.now/CVE-2005-2137.md): Unknown vulnerability in NateOn Messenger 3.0 allows remote attackers to list arbitrary directories via unknown attack vectors. (no CVSS)
- [CVE-2005-2138](https://cve.now/CVE-2005-2138.md): Cross-site scripting (XSS) vulnerability in index.php in Comdev eCommerce 3.0 and 3.1 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2005-2139](https://cve.now/CVE-2005-2139.md): PHP remote file inclusion vulnerability in user\_check.php for Pavsta Auto Site allows remote attackers to execute arbitrary PHP code via the (no CVSS)
- [CVE-2005-2140](https://cve.now/CVE-2005-2140.md): Directory traversal vulnerability in default.asp for FSboard 2.0 allows remote attackers to read arbitrary files via ".." sequences in the f (no CVSS)
- [CVE-2005-2141](https://cve.now/CVE-2005-2141.md): TCP Chat 1.0 allows remote attackers to cause a denial of service (crash) via a long string to the chat service, possibly triggering a buffe (no CVSS)
- [CVE-2005-2142](https://cve.now/CVE-2005-2142.md): Directory traversal vulnerability in Golden FTP Server 2.60 allows remote authenticated attackers to list arbitrary directories via a "\\.." (no CVSS)
- [CVE-2005-2143](https://cve.now/CVE-2005-2143.md): Microsoft Front Page allows attackers to cause a denial of service (crash) via a crafted style tag in a web page. (no CVSS)
- [CVE-2005-2144](https://cve.now/CVE-2005-2144.md): Prevx Pro 2005 1.0 allows local users to bypass file protection and modify files by using MapViewOfFile to perform memory mapping on the fil (no CVSS)
- [CVE-2005-2145](https://cve.now/CVE-2005-2145.md): The kernel driver in Prevx Pro 2005 1.0 does not verify the source of certain messages, which allows local users to bypass protection by sen (no CVSS)
- [CVE-2005-2146](https://cve.now/CVE-2005-2146.md): SSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure permissions when generating the Secure Shell ho (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-07-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.