# CVEs published 2005-10-20

22 CVEs were published on October 20, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-2469](https://cve.now/CVE-2005-2469.md): Stack-based buffer overflow in the NMAP Agent for Novell NetMail 3.52C and possibly earlier versions allows local users to execute arbitrary (no CVSS)
- [CVE-2005-2759](https://cve.now/CVE-2005-2759.md): \*\* SPLIT \*\* The jlucaller program in LiveUpdate for Symantec Norton AntiVirus 9.0.3 on Macintosh runs setuid when executing Java programs, w (no CVSS)
- [CVE-2005-2971](https://cve.now/CVE-2005-2971.md): Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a (no CVSS)
- [CVE-2005-3121](https://cve.now/CVE-2005-3121.md): A rule file in module-assistant before 0.9.10 causes a temporary file to be created insecurely, which allows local users to conduct unauthor (no CVSS)
- [CVE-2005-3182](https://cve.now/CVE-2005-3182.md): Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers to execute arbitrary code via long headers (no CVSS)
- [CVE-2005-3184](https://cve.now/CVE-2005-3184.md): Buffer overflow vulnerability in the unicode\_to\_bytes in the Service Location Protocol (srvloc) dissector (packet-srvloc.c) in Ethereal allo (no CVSS)
- [CVE-2005-3258](https://cve.now/CVE-2005-3258.md): The rfc1738\_do\_escape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service (segmentat (no CVSS)
- [CVE-2005-3259](https://cve.now/CVE-2005-3259.md): Multiple SQL injection vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to execute arbitrary SQL commands an (no CVSS)
- [CVE-2005-3260](https://cve.now/CVE-2005-3260.md): Multiple cross-site scripting (XSS) vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2005-3261](https://cve.now/CVE-2005-3261.md): getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obta (no CVSS)
- [CVE-2005-3262](https://cve.now/CVE-2005-3262.md): Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifier (no CVSS)
- [CVE-2005-3263](https://cve.now/CVE-2005-3263.md): Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via an ACE (no CVSS)
- [CVE-2005-3264](https://cve.now/CVE-2005-3264.md): Cross-site scripting (XSS) vulnerability in thread.php for Zeroblog 1.1f and 1.2a allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2005-3268](https://cve.now/CVE-2005-3268.md): yiff server (yiff-server) 2.14.2 on Debian GNU/Linux runs as root and does not properly verify ownership of files that it opens, which allow (no CVSS)
- [CVE-2005-3269](https://cve.now/CVE-2005-3269.md): Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, an (no CVSS)
- [CVE-2005-3270](https://cve.now/CVE-2005-3270.md): Untrusted search path vulnerability in DiskMountNotify for Symantec Norton AntiVirus 9.0.3 allows local users to gain privileges by modifyin (no CVSS)
- [CVE-2005-3271](https://cve.now/CVE-2005-3271.md): Exec in Linux kernel 2.6 does not properly clear posix-timers in multi-threaded environments, which results in a resource leak and could all (no CVSS)
- [CVE-2005-3272](https://cve.now/CVE-2005-3272.md): Linux kernel before 2.6.12 allows remote attackers to poison the bridge forwarding table using frames that have already been dropped by filt (no CVSS)
- [CVE-2005-3273](https://cve.now/CVE-2005-3273.md): The rose\_rt\_ioctl function in rose\_route.c for Radionet Open Source Environment (ROSE) in Linux 2.6 kernels before 2.6.12, and 2.4 before 2. (no CVSS)
- [CVE-2005-3274](https://cve.now/CVE-2005-3274.md): Race condition in ip\_vs\_conn\_flush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, allows local users to (no CVSS)
- [CVE-2005-3275](https://cve.now/CVE-2005-3275.md): The NAT code (1) ip\_nat\_proto\_tcp.c and (2) ip\_nat\_proto\_udp.c in Linux kernel 2.6 before 2.6.13 and 2.4 before 2.4.32-rc1 incorrectly decla (no CVSS)
- [CVE-2005-3276](https://cve.now/CVE-2005-3276.md): The sys\_get\_thread\_area function in process.c in Linux 2.6 before 2.6.12.4 and 2.6.13 does not clear a data structure before copying it to u (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-10-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.