Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2005-07-13 CVE-2005-2248 Directory Traversal vulnerability in Sven-Ove Bjerkan Downloadprotect 1.0/1.0.1/1.0.2B
Directory traversal vulnerability in DownloadProtect before 1.0.3 allows remote attackers to read files above the download folder.
network
low complexity
sven-ove-bjerkan
5.0
2005-07-13 CVE-2005-2095 Unspecified vulnerability in Squirrelmail
options_identities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the $_POST variable, which allows remote attackers to modify or read the preferences of other users, conduct cross-site scripting XSS) attacks, and write arbitrary files.
network
squirrelmail
4.3
2005-07-12 CVE-2005-2247 Unspecified vulnerability in Moodle
Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors.
network
low complexity
moodle
critical
10.0
2005-07-12 CVE-2005-2246 File Include vulnerability in iPhotoAlbum
Multiple PHP remote file inclusion vulnerabilities in iPhotoAlbum 1.1 allow remote attackers to execute arbitrary code via the (1) doc_path parameter to getpage.php or (2) set_menu parameter to lib/static/header.php.
network
low complexity
iphotoalbum
7.5
2005-07-12 CVE-2005-2245 SSL Authentication Bypass vulnerability in F5 BIG-IP
Unknown vulnerability in F5 BIG-IP 9.0.2 through 9.1 allows attackers to "subvert the authentication of SSL transactions," via unknown attack vectors, possibly involving NATIVE ciphers.
network
low complexity
f5
7.5
2005-07-12 CVE-2005-2244 Remote Heap Buffer Overflow vulnerability in Cisco CallManager AUPair Service
The aupair service (aupair.exe) in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to execute arbitrary code or corrupt memory via crafted packets that trigger a memory allocation failure and lead to a buffer overflow.
network
low complexity
cisco
5.0
2005-07-12 CVE-2005-2243 Failed Logins Remote Denial Of Service vulnerability in Cisco CallManager
Memory leak in inetinfo.exe in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1, when Multi Level Admin (MLA) is enabled, allows remote attackers to cause a denial of service (memory consumption) via a large number of Admin Service Tool (AST) logins that fail.
network
low complexity
cisco
5.0
2005-07-12 CVE-2005-2242 Remote Denial Of Service vulnerability in Cisco CallManager CTI Manager
Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to cause a denial of service (memory consumption and restart) via crafted packets to (1) the CTI Manager (ctimgr.exe) or (2) the CallManager (ccm.exe).
network
low complexity
cisco
5.0
2005-07-12 CVE-2005-2241 Remote Denial Of Service vulnerability in Cisco CallManager RISDC
Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 does not quickly time out Realtime Information Server Data Collection (RISDC) sockets, which results in a "resource leak" that allows remote attackers to cause a denial of service (memory and connection consumption) in RisDC.exe.
network
low complexity
cisco
5.0
2005-07-12 CVE-2005-2240 Unspecified vulnerability in Xpvm 1.2.5
xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file.
local
low complexity
xpvm
2.1