# CVEs published 2005-08-23

19 CVEs were published on August 23, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-2665](https://cve.now/CVE-2005-2665.md): Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitra (no CVSS)
- [CVE-2005-2666](https://cve.now/CVE-2005-2666.md): SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the k (no CVSS)
- [CVE-2005-2667](https://cve.now/CVE-2005-2667.md): Unknown vulnerability in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220\_13, and 1.11 before Build 29\_13 a (no CVSS)
- [CVE-2005-2668](https://cve.now/CVE-2005-2668.md): Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220\_13, and 1.11 before Build 29\_ (no CVSS)
- [CVE-2005-2669](https://cve.now/CVE-2005-2669.md): Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220\_13, and 1.11 before Build 29\_13 allows remote attackers to (no CVSS)
- [CVE-2005-2670](https://cve.now/CVE-2005-2670.md): Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall (no CVSS)
- [CVE-2005-2672](https://cve.now/CVE-2005-2672.md): pwmconfig in LM\_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink (no CVSS)
- [CVE-2005-2673](https://cve.now/CVE-2005-2673.md): SQL injection vulnerability in modcp.php in WoltLab Burning Board 2.2.2 and 2.3.3 allows remote authenticated attackers to execute arbitrary (no CVSS)
- [CVE-2005-2674](https://cve.now/CVE-2005-2674.md): Note: the vendor has disputed this issue. (no CVSS)
- [CVE-2005-2675](https://cve.now/CVE-2005-2675.md): Note: the vendor has disputed this issue. (no CVSS)
- [CVE-2005-2676](https://cve.now/CVE-2005-2676.md): Cross-site scripting (XSS) vulnerability in displayimage.php in Coppermine Photo Gallery before 1.3.4 allows remote attackers to inject arbi (no CVSS)
- [CVE-2005-2677](https://cve.now/CVE-2005-2677.md): ACNews stores the database in a file under the web document root with a db.inc extension and insufficient access control, which allows remot (no CVSS)
- [CVE-2005-2678](https://cve.now/CVE-2005-2678.md): Microsoft IIS 5.1 and 6 allows remote attackers to spoof the SERVER\_NAME variable to bypass security checks and conduct various attacks via (no CVSS)
- [CVE-2005-2679](https://cve.now/CVE-2005-2679.md): Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a lo (no CVSS)
- [CVE-2005-2680](https://cve.now/CVE-2005-2680.md): Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP4, when using entitlements, allows remote attackers to bypass access restrict (no CVSS)
- [CVE-2005-2681](https://cve.now/CVE-2005-2681.md): Unspecified vulnerability in the command line processing (CLI) logic in Cisco Intrusion Prevention System 5.0(1) and 5.0(2) allows local use (no CVSS)
- [CVE-2005-2682](https://cve.now/CVE-2005-2682.md): aspell\_setup.php in the SpellChecker plugin in DTLink AreaEdit before 0.4.3 allows remote attackers to execute arbitrary commands via shell (no CVSS)
- [CVE-2005-2683](https://cve.now/CVE-2005-2683.md): Multiple SQL injection vulnerabilities in PHPKit 1.6.1 allow remote attackers to execute arbitrary SQL commands via the (1) letter parameter (no CVSS)
- [CVE-2005-2684](https://cve.now/CVE-2005-2684.md): nquser.php in Virtual Edge Netquery 3.11 allows remote attackers to execute arbitrary commands via shell metacharacters in the host paramete (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-08-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.