# CVEs published 2005-09-20

14 CVEs were published on September 20, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-2919](https://cve.now/CVE-2005-2919.md): libclamav/fsg.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers to cause a denial of service (infinite loop) via a crafted FS (no CVSS)
- [CVE-2005-2920](https://cve.now/CVE-2005-2920.md): Buffer overflow in libclamav/upx.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers to execute arbitrary code via a crafted UP (no CVSS)
- [CVE-2005-2968](https://cve.now/CVE-2005-2968.md): Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the br (no CVSS)
- [CVE-2005-2991](https://cve.now/CVE-2005-2991.md): ncompress 4.2.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files using (1) zdiff or (2) z (no CVSS)
- [CVE-2005-2993](https://cve.now/CVE-2005-2993.md): Unspecified vulnerability in the FTP Daemon (ftpd) for HP Tru64 UNIX 4.0F PK8 and other versions up to HP Tru64 UNIX 5.1B-3, and HP-UX B.11. (no CVSS)
- [CVE-2005-2994](https://cve.now/CVE-2005-2994.md): Unspecified vulnerability in the web client for IBM Rational ClearQuest 2002.05.00 and 2002.05.20, and 2003.06.00 through 2003.06.15 before (no CVSS)
- [CVE-2005-2995](https://cve.now/CVE-2005-2995.md): bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on (1) the temporary file used by autocon (no CVSS)
- [CVE-2005-2996](https://cve.now/CVE-2005-2996.md): Multiple heap-based and stack-based buffer overflows in certain DCOM server components in VERITAS Storage Exec Storage Exec 5.3 before Hotfi (no CVSS)
- [CVE-2005-2997](https://cve.now/CVE-2005-2997.md): Multiple directory traversal vulnerabilities in PHP Advanced Transfer Manager 1.30 allow remote attackers to read arbitrary files via ".." s (no CVSS)
- [CVE-2005-2998](https://cve.now/CVE-2005-2998.md): PHP Advanced Transfer Manager 1.30 has a default password for the administrator user, which allows remote attackers to upload and execute ar (no CVSS)
- [CVE-2005-2999](https://cve.now/CVE-2005-2999.md): PHP Advanced Transfer Manager 1.30 allows remote attackers to obtain sensitive PHP configuration information via a direct request to test.ph (no CVSS)
- [CVE-2005-3000](https://cve.now/CVE-2005-3000.md): Multiple cross-site scripting (XSS) vulnerabilities in viewers/txt.php in PHP Advanced Transfer Manager 1.30 allow remote attackers to injec (no CVSS)
- [CVE-2005-3001](https://cve.now/CVE-2005-3001.md): Unspecified vulnerability in the "tl" driver in Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors. (no CVSS)
- [CVE-2005-3002](https://cve.now/CVE-2005-3002.md): Multi-Computer Control System (MCCS) 1.0 allows remote attackers to cause a denial of service via a malformed UDP packet. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-09-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.