# CVEs published 2005-09-06

12 CVEs were published on September 6, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-2336](https://cve.now/CVE-2005-2336.md): Cross-site scripting (XSS) vulnerability in Hiki 0.8.0 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via "missing (no CVSS)
- [CVE-2005-2494](https://cve.now/CVE-2005-2494.md): kcheckpass in KDE 3.2.0 up to 3.4.2 allows local users to gain root access via a symlink attack on lock files. (no CVSS)
- [CVE-2005-2656](https://cve.now/CVE-2005-2656.md): Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, which allows local users to cause a denial of se (no CVSS)
- [CVE-2005-2700](https://cve.now/CVE-2005-2700.md): ssl\_engine\_kernel.c in mod\_ssl before 2.8.24, when using "SSLVerifyClient optional" in the global virtual host configuration, does not prope (no CVSS)
- [CVE-2005-2763](https://cve.now/CVE-2005-2763.md): Multiple format string vulnerabilities in OpenTTD before 0.4.0.1 allow remote attackers to cause a denial of service (crash) and possibly ex (no CVSS)
- [CVE-2005-2797](https://cve.now/CVE-2005-2797.md): OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding ("-D" option) when a listen address is not prov (no CVSS)
- [CVE-2005-2798](https://cve.now/CVE-2005-2798.md): sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using (no CVSS)
- [CVE-2005-2800](https://cve.now/CVE-2005-2800.md): Memory leak in the seq\_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows local users to caus (no CVSS)
- [CVE-2005-2801](https://cve.now/CVE-2005-2801.md): xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the name\_index fields when sharing xattr blocks (no CVSS)
- [CVE-2005-2803](https://cve.now/CVE-2005-2803.md): Cross-site scripting (XSS) vulnerability in Hiki 0.8.1 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via a page na (no CVSS)
- [CVE-2005-2805](https://cve.now/CVE-2005-2805.md): forum\_post.php in e107 0.6 allows remote attackers to post to non-existent forums by modifying the forum number. (no CVSS)
- [CVE-2005-2806](https://cve.now/CVE-2005-2806.md): client.cpp in BNBT EasyTracker 7.7r3.2004.10.27 and earlier allows remote attackers to cause a denial of service (application hang) via an H (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-09-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.