# CVEs published 2005-10-06

21 CVEs were published on October 6, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-3118](https://cve.now/CVE-2005-3118.md): Mason before 1.0.0 does not install the init script after the user uses Mason to configure a firewall, which causes the system to run withou (no CVSS)
- [CVE-2005-3157](https://cve.now/CVE-2005-3157.md): SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to execute arbitrary SQL commands via the msg\_sen (no CVSS)
- [CVE-2005-3158](https://cve.now/CVE-2005-3158.md): SQL injection vulnerability in messages.php in PHP-Fusion 6.00.106 and 6.00.107 allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2005-3159](https://cve.now/CVE-2005-3159.md): SQL injection vulnerability in messages.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the msg\_view paramet (no CVSS)
- [CVE-2005-3160](https://cve.now/CVE-2005-3160.md): Multiple SQL injection vulnerabilities in photogallery.php in PHP-Fusion allow remote attackers to execute arbitrary SQL commands via the (1 (no CVSS)
- [CVE-2005-3161](https://cve.now/CVE-2005-3161.md): Multiple SQL injection vulnerabilities in PHP-Fusion before 6.00.110 allow remote attackers to execute arbitrary SQL commands via (1) the ac (no CVSS)
- [CVE-2005-3163](https://cve.now/CVE-2005-3163.md): Unspecified vulnerability in Polipo 0.9.8 and earlier allows attackers to read files outside of the web root. (no CVSS)
- [CVE-2005-3164](https://cve.now/CVE-2005-3164.md): The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4.1.0 through 4.1.36, as used in Hitachi Cosminexus Application Server and standa (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2005-3165](https://cve.now/CVE-2005-3165.md): Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2005-3166](https://cve.now/CVE-2005-3166.md): Unspecified vulnerability in "edit submission handling" for MediaWiki 1.4.x before 1.4.10 and 1.3.x before 1.3.16 allows remote attackers to (no CVSS)
- [CVE-2005-3167](https://cve.now/CVE-2005-3167.md): Incomplete blacklist vulnerability in MediaWiki before 1.4.11 does not properly remove certain CSS inputs (HTML inline style attributes) tha (no CVSS)
- [CVE-2005-3168](https://cve.now/CVE-2005-3168.md): The SECEDIT command on Microsoft Windows 2000 before Update Rollup 1 for SP4, when using a security template to set Access Control Lists (AC (no CVSS)
- [CVE-2005-3169](https://cve.now/CVE-2005-3169.md): Microsoft Windows 2000 before Update Rollup 1 for SP4, when the "audit directory service access" policy is enabled, does not record a 565 ev (no CVSS)
- [CVE-2005-3170](https://cve.now/CVE-2005-3170.md): The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets Layer (LDAPS) even w (CVSS 5.0)
- [CVE-2005-3171](https://cve.now/CVE-2005-3171.md): Microsoft Windows 2000 before Update Rollup 1 for SP4 records Event ID 1704 to indicate that Group Policy security settings were successfull (no CVSS)
- [CVE-2005-3172](https://cve.now/CVE-2005-3172.md): The WideCharToMultiByte function in Microsoft Windows 2000 before Update Rollup 1 for SP4 does not properly convert strings with Japanese co (no CVSS)
- [CVE-2005-3173](https://cve.now/CVE-2005-3173.md): Microsoft Windows 2000 before Update Rollup 1 for SP4 does not apply group policies if the user logs on using UPN credentials with a trailin (no CVSS)
- [CVE-2005-3174](https://cve.now/CVE-2005-3174.md): Microsoft Windows 2000 before Update Rollup 1 for SP4 allows users to log on to the domain, even when their password has expired, if the ful (no CVSS)
- [CVE-2005-3175](https://cve.now/CVE-2005-3175.md): Microsoft Windows 2000 before Update Rollup 1 for SP4 allows a local administrator to unlock a computer even if it has been locked by a doma (no CVSS)
- [CVE-2005-3176](https://cve.now/CVE-2005-3176.md): Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services client in a security log (no CVSS)
- [CVE-2005-3177](https://cve.now/CVE-2005-3177.md): CHKDSK in Microsoft Windows 2000 before Update Rollup 1 for SP4, Windows XP, and Windows Server 2003, when running in fix mode, does not pro (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-10-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.