Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2005-09-08 | CVE-2005-2860 | HTML Injection vulnerability in Multiple Vendor Web Vulnerability Scanners Cross-site scripting (XSS) vulnerability in Nikto 1.35 and earlier allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response header, which is directly injected into an HTML report. network nikto | 4.3 |
| 2005-09-08 | CVE-2005-2859 | Local Security vulnerability in Savant Webserver 3.1 Savant Web Server stores user credentials in plaintext in the Savant\Users registry key, which allows local users to gain privileges. | 4.6 |
| 2005-09-08 | CVE-2005-2857 | Remote Security vulnerability in Softstack Free Smtp Server 2.2 Free SMTP Server 2.2 allows remote attackers to use the server as an open mail relay (spam proxy). | 7.5 |
| 2005-09-08 | CVE-2005-2856 | Buffer Errors vulnerability in Winace 2.6.0.0 Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including (1) ALZip 5.51 through 6.11, (2) Servant Salamander 2.0 and 2.5 Beta 1, (3) WinHKI 1.66 and 1.67, (4) ExtractNow 3.x, (5) Total Commander 6.53, (6) Anti-Trojan 5.5.421, (7) PowerArchiver before 9.61, (8) UltimateZip 2.7,1, 3.0.3, and 3.1b, (9) Where Is It (WhereIsIt) 3.73.501, (10) FilZip 3.04, (11) IZArc 3.5 beta3, (12) Eazel 1.0, (13) Rising Antivirus 18.27.21 and earlier, (14) AutoMate 6.1.0.0, (15) BitZipper 4.1 SR-1, (16) ZipTV, and other products, allows user-assisted attackers to execute arbitrary code via a long filename in an ACE archive. | 7.5 |
| 2005-09-08 | CVE-2005-2855 | HTML Injection vulnerability in Unclassified Newsboard Unclassified Newsboard 1.5.3 Cross-site scripting (XSS) vulnerability in Unclassified NewsBoard 1.5.3 allows remote attackers to inject arbitrary web script or HTML via the description field. network unclassified-newsboard | 4.3 |
| 2005-09-08 | CVE-2005-2854 | Unspecified vulnerability in Thesitewizard.Com Chfeedback.Pl Feedback Form Perl Script 2.0.1 CRLF injection vulnerability in thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1 allows remote attackers to use the script as a mail relay (spam proxy) via CRLF sequences in the (1) name or (2) email fields, which are injected into mail headers. | 5.0 |
| 2005-09-08 | CVE-2005-2853 | HTML Injection vulnerability in Guppy 4.5/4.5.3/4.5.3A Multiple cross-site scripting (XSS) vulnerabilities in GuppY 4.5.3a and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the pg parameter to printfaq.php, or the (2) Referer or (3) User-Agent HTTP headers, which are not properly handled by error.php. network guppy | 4.3 |
| 2005-09-08 | CVE-2005-2852 | Denial-Of-Service vulnerability in Novell Netware 5.1/6.0/6.5 Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a denial of service (ABEND) via an incorrect password length, as exploited by the "worm.rbot.ccc" worm. | 5.0 |
| 2005-09-08 | CVE-2005-2851 | Unspecified vulnerability in Smb4K 0.4/0.5/0.6 smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the (1) smb4k.tmp or (2) sudoers temporary files. | 2.1 |
| 2005-09-08 | CVE-2005-2850 | Denial-Of-Service vulnerability in Whitsoft Development Slimftpd 3.17 SlimFTPd 3.17 allows remote attackers to cause a denial of service (crash) via certain (1) USER and (2) PASS commands, possibly due to a buffer overflow or off-by-one error. | 5.0 |