# CVEs published 2005-10-18

7 CVEs were published on October 18, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-2969](https://cve.now/CVE-2005-2969.md): The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL\_OP\_MSIE\_SSLV2\_RSA\_PADDING optio (no CVSS)
- [CVE-2005-2978](https://cve.now/CVE-2005-2978.md): pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap ( (no CVSS)
- [CVE-2005-3252](https://cve.now/CVE-2005-3252.md): Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code v (no CVSS)
- [CVE-2005-3254](https://cve.now/CVE-2005-3254.md): The CGIwrap program before 3.9 on Debian GNU/Linux uses an incorrect minimum value of 100 for a UID to determine whether it can perform a se (no CVSS)
- [CVE-2005-3255](https://cve.now/CVE-2005-3255.md): The (1) cgiwrap and (2) php-cgiwrap packages before 3.9 in Debian GNU/Linux provide access to debugging CGIs under the web document root, wh (no CVSS)
- [CVE-2005-3256](https://cve.now/CVE-2005-3256.md): The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, (no CVSS)
- [CVE-2005-3257](https://cve.now/CVE-2005-3257.md): The VT implementation (vt\_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDS (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-10-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.