# CVEs published 2005-08-05

65 CVEs were published on August 5, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2001-1573](https://cve.now/CVE-2001-1573.md): Buffer overflow in smtpscan.dll for Trend Micro InterScan VirusWall 3.51 for Windows NT has allows remote attackers to execute arbitrary cod (no CVSS)
- [CVE-2001-1574](https://cve.now/CVE-2001-1574.md): Buffer overflow in (1) HttpSaveCVP.dll and (2) HttpSaveCSP.dll in Trend Micro InterScan VirusWall 3.5.1 allows remote attackers to execute a (no CVSS)
- [CVE-2001-1575](https://cve.now/CVE-2001-1575.md): Apple Personal Web Sharing (PWS) 1.1, 1.5, and 1.5.5, when Web Sharing authentication is enabled, allows remote attackers to cause a denial (no CVSS)
- [CVE-2001-1576](https://cve.now/CVE-2001-1576.md): Buffer overflow in cron in Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument. (no CVSS)
- [CVE-2001-1577](https://cve.now/CVE-2001-1577.md): Unknown vulnerability in CDE in Caldera OpenUnix 7.1.0, 7.1.1, and 8.0 allows an xterm session to gain privileges when the session is reused (no CVSS)
- [CVE-2001-1578](https://cve.now/CVE-2001-1578.md): Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical information such as certain CPU registers an (no CVSS)
- [CVE-2001-1579](https://cve.now/CVE-2001-1579.md): The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null, which allows remote a (no CVSS)
- [CVE-2001-1580](https://cve.now/CVE-2001-1580.md): Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to read arbitrary files (no CVSS)
- [CVE-2002-2087](https://cve.now/CVE-2002-2087.md): Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (no CVSS)
- [CVE-2002-2088](https://cve.now/CVE-2002-2088.md): The MOSIX Project clump/os 5.4 creates a default VNC account without a password, which allows remote attackers to gain root access. (no CVSS)
- [CVE-2002-2089](https://cve.now/CVE-2002-2089.md): Buffer overflow in rcp in Solaris 9.0 allows local users to execute arbitrary code via a long command line argument. (no CVSS)
- [CVE-2002-2090](https://cve.now/CVE-2002-2090.md): Caucho Technology Resin server 2.1.1 to 2.1.2 allows remote attackers to obtain server's root path via requests for MS-DOS device names such (no CVSS)
- [CVE-2002-2091](https://cve.now/CVE-2002-2091.md): Format string vulnerability in Deception Finger Daemon, decfingerd, 0.7 may allow remote attackers to execute arbitrary code via the usernam (no CVSS)
- [CVE-2002-2092](https://cve.now/CVE-2002-2092.md): Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileg (no CVSS)
- [CVE-2002-2093](https://cve.now/CVE-2002-2093.md): The Video Control Panel on SGI O2/IRIX 6.5, when the Default Input is set to "Output Video", allows attackers to access a console session by (no CVSS)
- [CVE-2002-2094](https://cve.now/CVE-2002-2094.md): Joe Testa hellbent 01 allows remote attackers to determine the full path of the web root directory via a GET request with a relative path th (no CVSS)
- [CVE-2002-2095](https://cve.now/CVE-2002-2095.md): Joe Testa hellbent 01 webserver allows attackers to read files that are specified in the hellbent.prefs file by creating a file with a simil (no CVSS)
- [CVE-2002-2096](https://cve.now/CVE-2002-2096.md): Buffer overflow in Novell Remote Manager module, httpstk.nlm, in NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2002-2097](https://cve.now/CVE-2002-2097.md): The compression code in MaraDNS before 0.9.01 allows remote attackers to cause a denial of service via crafted DNS packets. (no CVSS)
- [CVE-2002-2098](https://cve.now/CVE-2002-2098.md): Buffer overflow in axspawn.c in Axspawn-pam before 0.2.1a allows remote attackers to execute arbitrary code via large packets. (no CVSS)
- [CVE-2002-2099](https://cve.now/CVE-2002-2099.md): Buffer overflow in the GNU DataDisplay Debugger (DDD) 3.3.1 allows local users to execute arbitrary code and possibly gain privileges via a (no CVSS)
- [CVE-2002-2100](https://cve.now/CVE-2002-2100.md): Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that (no CVSS)
- [CVE-2002-2101](https://cve.now/CVE-2002-2101.md): Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, via an "about:" or "ja (no CVSS)
- [CVE-2002-2102](https://cve.now/CVE-2002-2102.md): InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service (NullPointerException) via an invalid block (no CVSS)
- [CVE-2002-2103](https://cve.now/CVE-2002-2103.md): Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double- (no CVSS)
- [CVE-2002-2104](https://cve.now/CVE-2002-2104.md): graph.php in Ganglia PHP RRD Web Client 1.0.2 allows remote attackers to execute arbitrary commands via the command parameter, which is prov (no CVSS)
- [CVE-2002-2105](https://cve.now/CVE-2002-2105.md): Microsoft Windows XP allows local users to prevent the system from booting via a corrupt explorer.exe.manifest file. (no CVSS)
- [CVE-2002-2106](https://cve.now/CVE-2002-2106.md): PHP remote file inclusion vulnerability in WikkiTikkiTavi before 0.21 allows remote attackers to execute arbitrary PHP code via the Template (no CVSS)
- [CVE-2002-2107](https://cve.now/CVE-2002-2107.md): Cross-site scripting (XSS) vulnerability in the lookup script in Veridis OpenKeyServer (OKS) 1.2 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2002-2108](https://cve.now/CVE-2002-2108.md): Unknown vulnerability in the "VAIO Manual" software in certain Sony VAIO personal computers sold from November 2001 to January 2002, allows (no CVSS)
- [CVE-2002-2109](https://cve.now/CVE-2002-2109.md): Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP\_REFERER check and conduct unauthorized activities via (1) a (no CVSS)
- [CVE-2002-2110](https://cve.now/CVE-2002-2110.md): The RCA Digital Cable Modems DCM225 and DCM225E allow remote attackers to cause a denial of service (modem device reset) by connecting to po (no CVSS)
- [CVE-2002-2111](https://cve.now/CVE-2002-2111.md): Fwmon before 1.0.10 allows remote attackers to cause a denial of service (crash) by causing the kernel to return a large packet. (no CVSS)
- [CVE-2002-2112](https://cve.now/CVE-2002-2112.md): RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface Specifications DOCSI (no CVSS)
- [CVE-2002-2113](https://cve.now/CVE-2002-2113.md): search.cgi in AGH HTMLsearch 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the template parameter. (no CVSS)
- [CVE-2002-2114](https://cve.now/CVE-2002-2114.md): Artekopia Netjuke before 1.0 b7 allows remote attackers to execute arbitrary code on the web server, possibly via the section parameter, whi (no CVSS)
- [CVE-2002-2115](https://cve.now/CVE-2002-2115.md): Cross-site scripting (XSS) vulnerability in Hyper NIKKI System (HNS) Lite before 0.9 and HNS before 2.10-pl2 allows remote attackers to inje (no CVSS)
- [CVE-2002-2116](https://cve.now/CVE-2002-2116.md): Netgear RM-356 and RT-338 series SOHO routers allow remote attackers to cause a denial of service (crash) via a UDP port scan, as demonstrat (no CVSS)
- [CVE-2002-2117](https://cve.now/CVE-2002-2117.md): Microsoft Windows XP allows remote attackers to cause a denial of service (CPU consumption) by flooding UDP port 500 (ISAKMP). (no CVSS)
- [CVE-2002-2118](https://cve.now/CVE-2002-2118.md): Buffer overflow in Blue World Lasso Web Data Engine 3.6.5 allows remote attackers to cause a denial of service via a long URL. (no CVSS)
- [CVE-2002-2119](https://cve.now/CVE-2002-2119.md): Novell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote attackers to conduct brute force password g (no CVSS)
- [CVE-2002-2120](https://cve.now/CVE-2002-2120.md): Multiple buffer overflows in QNX RTOS 4.25 may allow attackers to execute arbitrary code via long filename arguments to (1) Watcom or (2) in (no CVSS)
- [CVE-2002-2121](https://cve.now/CVE-2002-2121.md): SurfControl SuperScout Email filter for SMTP 3.5.1 allows remote attackers to cause a denial of service (crash) via a long SMTP (1) HELO or (no CVSS)
- [CVE-2002-2122](https://cve.now/CVE-2002-2122.md): Pointsec before 1.2 for PalmOS stores a user's PIN number in memory in plaintext, which allows a local attacker who steals an unlocked Palm (no CVSS)
- [CVE-2004-2298](https://cve.now/CVE-2004-2298.md): Novell Internet Messaging System (NIMS) 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, wh (no CVSS)
- [CVE-2004-2299](https://cve.now/CVE-2004-2299.md): Buffer overflow in Omnicron OmniHTTPd 3.0a and earlier allows remote attackers to execute arbitrary code via an HTTP GET request with a long (no CVSS)
- [CVE-2004-2300](https://cve.now/CVE-2004-2300.md): Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long (no CVSS)
- [CVE-2004-2301](https://cve.now/CVE-2004-2301.md): Eudora before 6.1.1 allows remote attackers to cause a denial of service (crash) via an e-mail with a long "To:" field, possibly due to a bu (no CVSS)
- [CVE-2005-1268](https://cve.now/CVE-2005-1268.md): Off-by-one error in the mod\_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remo (no CVSS)
- [CVE-2005-1272](https://cve.now/CVE-2005-1272.md): Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remo (no CVSS)
- [CVE-2005-1761](https://cve.now/CVE-2005-1761.md): Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service (kernel crash) via ptrace and the restore\_ (no CVSS)
- [CVE-2005-1767](https://cve.now/CVE-2005-1767.md): traps.c in the Linux kernel 2.6.x and 2.4.x executes stack segment faults on an exception stack, which allows local users to cause a denial (no CVSS)
- [CVE-2005-1854](https://cve.now/CVE-2005-1854.md): Unknown vulnerability in apt-cacher in Debian 3.1, related to "missing input sanitising," allows remote attackers to execute arbitrary comma (no CVSS)
- [CVE-2005-2353](https://cve.now/CVE-2005-2353.md): run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on tem (no CVSS)
- [CVE-2005-2471](https://cve.now/CVE-2005-2471.md): pstopnm in netpbm does not properly use the "-dSAFER" option when calling Ghostscript to convert a PostScript file into a (1) PBM, (2) PGM, (no CVSS)
- [CVE-2005-2472](https://cve.now/CVE-2005-2472.md): Multiple buffer overflows in BusinessMail 4.60.00 allow remote attackers to cause a denial of service (application crash) via a long string (no CVSS)
- [CVE-2005-2473](https://cve.now/CVE-2005-2473.md): Multiple SQL injection vulnerabilities in ChurchInfo allow remote attackers to execute arbitrary SQL commands via the PersonID parameter to (no CVSS)
- [CVE-2005-2474](https://cve.now/CVE-2005-2474.md): ChurchInfo allows remote attackers to execute obtain sensitive information via the PersonID parameter to (1) PersonView.php, (2) MemberRoleC (no CVSS)
- [CVE-2005-2475](https://cve.now/CVE-2005-2475.md): Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being (no CVSS)
- [CVE-2005-2476](https://cve.now/CVE-2005-2476.md): Cross-site scripting (XSS) vulnerability in lost\_passowrd.php in Naxtor Shopping Cart 1.0 allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2005-2477](https://cve.now/CVE-2005-2477.md): shop\_display\_products.php in Naxtor Shopping Cart 1.0 allows remote attackers to obtain sensitive information via a cat\_id with a "'" (singl (no CVSS)
- [CVE-2005-2478](https://cve.now/CVE-2005-2478.md): SQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL commands via the user field on the login pa (no CVSS)
- [CVE-2005-2479](https://cve.now/CVE-2005-2479.md): Quick 'n Easy FTP Server 3.0 allows remote attackers to cause a denial of service (application crash or CPU consumption) via a long USER com (no CVSS)
- [CVE-2005-2480](https://cve.now/CVE-2005-2480.md): Cross-site scripting (XSS) vulnerability in ColdFusion Fusebox 4.1.0 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2005-2481](https://cve.now/CVE-2005-2481.md): ColdFusion Fusebox 4.1.0 allows remote attackers to obtain sensitive information via an invalid fuseaction parameter, which leaks the full s (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-08-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.