# CVEs published 2005-11-25

7 CVEs were published on November 25, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-3811](https://cve.now/CVE-2005-3811.md): Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to ove (no CVSS)
- [CVE-2005-3805](https://cve.now/CVE-2005-3805.md): A locking problem in POSIX timer cleanup handling on exit in Linux kernel 2.6.10 to 2.6.14, when running on SMP systems, allows local users (no CVSS)
- [CVE-2005-3806](https://cve.now/CVE-2005-3806.md): The IPv6 flow label handling code (ip6\_flowlabel.c) in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in c (no CVSS)
- [CVE-2005-3807](https://cve.now/CVE-2005-3807.md): Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows local users to cause a denial of service (mem (no CVSS)
- [CVE-2005-3808](https://cve.now/CVE-2005-3808.md): Integer overflow in the invalidate\_inode\_pages2\_range function in mm/truncate.c in Linux kernel 2.6.11 to 2.6.14 allows local users to cause (no CVSS)
- [CVE-2005-3809](https://cve.now/CVE-2005-3809.md): The nfattr\_to\_tcp function in ip\_conntrack\_proto\_tcp.c in ctnetlink in Linux kernel 2.6.14 up to 2.6.14.3 allows attackers to cause a denial (no CVSS)
- [CVE-2005-3810](https://cve.now/CVE-2005-3810.md): ip\_conntrack\_proto\_icmp.c in ctnetlink in Linux kernel 2.6.14 up to 2.6.14.3 allows attackers to cause a denial of service (kernel oops) via (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-11-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.