# CVEs published 2005-09-30

15 CVEs were published on September 30, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-2660](https://cve.now/CVE-2005-2660.md): apachetop 0.12.5 and earlier, when running in debug mode, allows local users to create or append to arbitrary files via a symlink attack on (no CVSS)
- [CVE-2005-2917](https://cve.now/CVE-2005-2917.md): Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attac (no CVSS)
- [CVE-2005-2962](https://cve.now/CVE-2005-2962.md): The post-installation script for ntlmaps before 0.9.9 sets world-readable permissions for the configuration file, which allows local users t (no CVSS)
- [CVE-2005-3060](https://cve.now/CVE-2005-3060.md): Buffer overflow in getconf in IBM AIX 5.2 to 5.3 allows local users to execute arbitrary code via unknown vectors. (no CVSS)
- [CVE-2005-3105](https://cve.now/CVE-2005-3105.md): The mprotect code (mprotect.c) in Linux 2.6 on Itanium IA64 Montecito processors does not properly maintain cache coherency as required by t (no CVSS)
- [CVE-2005-3106](https://cve.now/CVE-2005-3106.md): Race condition in Linux 2.6, when threads are sharing memory mapping via CLONE\_VM (such as linuxthreads and vfork), might allow local users (CVSS 4.7)
- [CVE-2005-3107](https://cve.now/CVE-2005-3107.md): fs/exec.c in Linux 2.6, when one thread is tracing another thread that shares the same memory map, might allow local users to cause a denial (no CVSS)
- [CVE-2005-3108](https://cve.now/CVE-2005-3108.md): mm/ioremap.c in Linux 2.6 on 64-bit x86 systems allows local users to cause a denial of service or an information leak via an ioremap on a c (no CVSS)
- [CVE-2005-3109](https://cve.now/CVE-2005-3109.md): The HFS and HFS+ (hfsplus) modules in Linux 2.6 allow attackers to cause a denial of service (oops) by using hfsplus to mount a filesystem t (no CVSS)
- [CVE-2005-3110](https://cve.now/CVE-2005-3110.md): Race condition in ebtables netfilter module (ebtables.c) in Linux 2.6, when running on an SMP system that is operating under a heavy load, m (no CVSS)
- [CVE-2005-3111](https://cve.now/CVE-2005-3111.md): The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local users to modify arbi (no CVSS)
- [CVE-2005-3112](https://cve.now/CVE-2005-3112.md): The "reset password" feature in Macromedia Breeze 5.0 stores passwords in plaintext in the database instead of the hash, which allows attack (no CVSS)
- [CVE-2005-3113](https://cve.now/CVE-2005-3113.md): The ActiveX control for NateOn Messenger (NateonDownloadManager.ocx) allows remote attackers to download and execute arbitrary programs by s (no CVSS)
- [CVE-2005-3114](https://cve.now/CVE-2005-3114.md): Buffer overflow in the ActiveX control for NateOn Messenger (NateonDownloadManager.ocx) allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2005-3115](https://cve.now/CVE-2005-3115.md): mpeg-tools before 1.5b-r2 creates multiple temporary files insecurely, which allows local users to overwrite arbitrary files via (1) ts.stat (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-09-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.