# CVEs published 2005-10-05

25 CVEs were published on October 5, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-0023](https://cve.now/CVE-2005-0023.md): gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. (no CVSS)
- [CVE-2005-2758](https://cve.now/CVE-2005-2758.md): Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote attackers to execute a (no CVSS)
- [CVE-2005-2960](https://cve.now/CVE-2005-2960.md): cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a differe (no CVSS)
- [CVE-2005-2961](https://cve.now/CVE-2005-2961.md): Buffer overflow in the get\_string\_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remot (no CVSS)
- [CVE-2005-2966](https://cve.now/CVE-2005-2966.md): The Python SVG import plugin (diasvg\_import.py) for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a (no CVSS)
- [CVE-2005-3137](https://cve.now/CVE-2005-3137.md): The (1) cfmailfilter and (2) cfcron.in files for cfengine 1.6.5 allow local users to overwrite arbitrary files via a symlink attack on tempo (no CVSS)
- [CVE-2005-3138](https://cve.now/CVE-2005-3138.md): Bugzilla 2.18rc1 through 2.18.3, 2.19 through 2.20rc2, and 2.21 allows remote attackers to obtain sensitive information such as the list of (no CVSS)
- [CVE-2005-3139](https://cve.now/CVE-2005-3139.md): Bugzilla 2.19.1 through 2.20rc2 and 2.21, with user matching turned on in substring mode, allows attackers to list all users whose names mat (no CVSS)
- [CVE-2005-3140](https://cve.now/CVE-2005-3140.md): Procom NetFORCE 800 4.02 M10 Build 20 and possibly other versions sends the NIS password map (passwd.nis) as a file attachment in diagnostic (no CVSS)
- [CVE-2005-3141](https://cve.now/CVE-2005-3141.md): Cerulean Studios Trillian 3.0 allows remote attackers to cause a denial of service (crash) via a reverse direct connection from a different (no CVSS)
- [CVE-2005-3142](https://cve.now/CVE-2005-3142.md): Heap-based buffer overflow in Kaspersky Antivirus (KAV) 5.0 and Kaspersky Personal Security Suite 1.1 allows remote attackers to execute arb (no CVSS)
- [CVE-2005-3143](https://cve.now/CVE-2005-3143.md): Unspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to cause a denial of service (crash) via IMAP c (no CVSS)
- [CVE-2005-3144](https://cve.now/CVE-2005-3144.md): httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service via long HTTP headers. (no CVSS)
- [CVE-2005-3145](https://cve.now/CVE-2005-3145.md): httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service (resource consumption) by connecting to sblim- (no CVSS)
- [CVE-2005-3146](https://cve.now/CVE-2005-3146.md): StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files. (no CVSS)
- [CVE-2005-3147](https://cve.now/CVE-2005-3147.md): StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sensitive information. (no CVSS)
- [CVE-2005-3148](https://cve.now/CVE-2005-3148.md): StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recovered (no CVSS)
- [CVE-2005-3149](https://cve.now/CVE-2005-3149.md): Uim 0.4.x before 0.4.9.1 and 0.5.0 and earlier does not properly handle the LIBUIM\_VANILLA environment variable when a suid or sgid applicat (no CVSS)
- [CVE-2005-3150](https://cve.now/CVE-2005-3150.md): Format string vulnerability in the Log\_Flush function in Weex 2.6.1.5, 2.6.1, and possibly other versions allows remote FTP servers to execu (no CVSS)
- [CVE-2005-3151](https://cve.now/CVE-2005-3151.md): Buffer overflow in blenderplay in Blender Player 2.37a allows attackers to execute arbitrary code via a long command line argument. (no CVSS)
- [CVE-2005-3152](https://cve.now/CVE-2005-3152.md): Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2005-3153](https://cve.now/CVE-2005-3153.md): login.php in myBloggie 2.1.3 beta and earlier allows remote attackers to bypass a whitelist regular expression and conduct SQL injection att (no CVSS)
- [CVE-2005-3154](https://cve.now/CVE-2005-3154.md): Format string vulnerability in the logging functionality in BitDefender AntiVirus 7.2 through 9 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2005-3155](https://cve.now/CVE-2005-3155.md): Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute arbitrary code. (no CVSS)
- [CVE-2005-3156](https://cve.now/CVE-2005-3156.md): Directory traversal vulnerability in printfaq.php in EasyGuppy (Guppy for Windows) 4.5.4 and 4.5.5 allows remote attackers to read arbitrary (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-10-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.