# CVEs published 2005-10-27

38 CVEs were published on October 27, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2002-2124](https://cve.now/CVE-2002-2124.md): The recvn and sendn functions in nylon 0.2 do not check when the recv function call returns 0, which allows remote attackers to cause a deni (no CVSS)
- [CVE-2005-2973](https://cve.now/CVE-2005-2973.md): The udp\_v6\_get\_port function in udp.c in Linux 2.6 before 2.6.14-rc5, when running IPv6, allows local users to cause a denial of service (in (no CVSS)
- [CVE-2005-3088](https://cve.now/CVE-2005-3088.md): fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which (no CVSS)
- [CVE-2005-3241](https://cve.now/CVE-2005-3241.md): Multiple vulnerabilities in Ethereal 0.10.12 and earlier allow remote attackers to cause a denial of service (memory consumption) via unspec (no CVSS)
- [CVE-2005-3242](https://cve.now/CVE-2005-3242.md): Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (crash) via unknown vectors in (1) the IrDA dissector and (no CVSS)
- [CVE-2005-3243](https://cve.now/CVE-2005-3243.md): Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the (no CVSS)
- [CVE-2005-3244](https://cve.now/CVE-2005-3244.md): The BER dissector in Ethereal 0.10.3 to 0.10.12 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors. (no CVSS)
- [CVE-2005-3245](https://cve.now/CVE-2005-3245.md): Unspecified vulnerability in the ONC RPC dissector in Ethereal 0.10.3 to 0.10.12, when the "Dissect unknown RPC program numbers" option is e (no CVSS)
- [CVE-2005-3246](https://cve.now/CVE-2005-3246.md): Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (null dereference) via unknown vectors in the (1) SCSI, (2 (no CVSS)
- [CVE-2005-3247](https://cve.now/CVE-2005-3247.md): The SigComp UDVM in Ethereal 0.10.12 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors. (no CVSS)
- [CVE-2005-3248](https://cve.now/CVE-2005-3248.md): Unspecified vulnerability in the X11 dissector in Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (divide- (no CVSS)
- [CVE-2005-3249](https://cve.now/CVE-2005-3249.md): Unspecified vulnerability in the WSP dissector in Ethereal 0.10.1 to 0.10.12 allows remote attackers to cause a denial of service or corrupt (no CVSS)
- [CVE-2005-3265](https://cve.now/CVE-2005-3265.md): Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via (1) callto:// and (2) sk (no CVSS)
- [CVE-2005-3267](https://cve.now/CVE-2005-3267.md): Integer overflow in Skype client before 1.4.x.84 on Windows, before 1.3.x.17 on Mac OS, before 1.2.x.18 on Linux, and 1.1.x.6 and earlier al (no CVSS)
- [CVE-2005-3316](https://cve.now/CVE-2005-3316.md): The installation of ON Symantec Discovery 4.5.x and Symantec Discovery 6.0 creates the (1) DiscoveryWeb and (2) DiscoveryRO database account (no CVSS)
- [CVE-2005-3317](https://cve.now/CVE-2005-3317.md): Multiple stack-based buffer overflows in ZipGenius 5.5.1.468 and 6.0.2.1041, and other versions before 6.0.2.1050, allow remote attackers to (no CVSS)
- [CVE-2005-3318](https://cve.now/CVE-2005-3318.md): Buffer overflow in the \_chm\_decompress\_block function in CHM lib (chmlib) before 0.37, as used in products such as KchmViewer, allows attack (no CVSS)
- [CVE-2005-3319](https://cve.now/CVE-2005-3319.md): The apache2handler SAPI (sapi\_apache2.c) in the Apache module (mod\_php) for PHP 5.x before 5.1.0 final and 4.4 before 4.4.1 final allows att (no CVSS)
- [CVE-2005-3320](https://cve.now/CVE-2005-3320.md): Cross-site scripting (XSS) vulnerability in SiteTurn Domain Manager Pro allows remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2005-3321](https://cve.now/CVE-2005-3321.md): chkstat in SuSE Linux 9.0 through 10.0 allows local users to modify permissions of files by creating a hardlink to a file from a world-writa (no CVSS)
- [CVE-2005-3322](https://cve.now/CVE-2005-3322.md): Unspecified vulnerability in Squid on SUSE Linux 9.0 allows remote attackers to cause a denial of service (crash) via HTTPs (SSL). (no CVSS)
- [CVE-2005-3323](https://cve.now/CVE-2005-3323.md): docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in Re (no CVSS)
- [CVE-2005-3324](https://cve.now/CVE-2005-3324.md): SQL injection vulnerability in chat.php in MWChat 6.8 allows remote attackers to execute arbitrary SQL commands via the username parameter. (no CVSS)
- [CVE-2005-3325](https://cve.now/CVE-2005-3325.md): Multiple SQL injection vulnerabilities in (1) acid\_qry\_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.6b20 and (2) base\_qry (no CVSS)
- [CVE-2005-3326](https://cve.now/CVE-2005-3326.md): SQL injection vulnerability in usercp.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the awayda (no CVSS)
- [CVE-2005-3327](https://cve.now/CVE-2005-3327.md): Network Appliance Data ONTAP 7.0 and earlier allows iSCSI Initiators to bypass iSCSI authentication via a modified client that skips the Sec (no CVSS)
- [CVE-2005-3328](https://cve.now/CVE-2005-3328.md): PHP remote file inclusion vulnerability in common.php in PunBB 1.1.2 through 1.1.5 allows remote attackers to execute arbitrary code via the (no CVSS)
- [CVE-2005-3329](https://cve.now/CVE-2005-3329.md): Cross-site scripting (XSS) vulnerability in RSA Authentication Agent for Web 5.3 and earlier allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2005-3330](https://cve.now/CVE-2005-3330.md): The \_httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows rem (no CVSS)
- [CVE-2005-3331](https://cve.now/CVE-2005-3331.md): viewpatch in mgdiff 1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files. (no CVSS)
- [CVE-2005-3332](https://cve.now/CVE-2005-3332.md): PHP remote file include vulnerability in admin/define.inc.php in Belchior Foundry vCard 2.9 allows remote attackers to execute arbitrary PHP (no CVSS)
- [CVE-2005-3333](https://cve.now/CVE-2005-3333.md): SQL injection vulnerability in eBASEweb 3.0 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. (no CVSS)
- [CVE-2005-3334](https://cve.now/CVE-2005-3334.md): Cross-site scripting (XSS) vulnerability in index.php in Flyspray 0.9.7 through 0.9.8 (devel) allows remote attackers to inject arbitrary we (no CVSS)
- [CVE-2005-3335](https://cve.now/CVE-2005-3335.md): PHP file inclusion vulnerability in bug\_sponsorship\_list\_view\_inc.php in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbit (no CVSS)
- [CVE-2005-3336](https://cve.now/CVE-2005-3336.md): SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors. (no CVSS)
- [CVE-2005-3337](https://cve.now/CVE-2005-3337.md): Multiple cross-site scripting (XSS) vulnerabilities in Mantis before 0.19.3 allow remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2005-3338](https://cve.now/CVE-2005-3338.md): Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display the real email addresses of users. (no CVSS)
- [CVE-2005-3339](https://cve.now/CVE-2005-3339.md): Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-10-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.