Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2005-06-09 CVE-2005-1882 Remote Security vulnerability in Yapig 0.93U/0.94U
PHP remote file inclusion vulnerability in last_gallery.php in YaPiG 0.93u and 0.94u allows remote attackers to execute arbitrary PHP code via the YAPIG_PATH parameter.
network
low complexity
yapig
7.5
2005-06-09 CVE-2005-1879 Link Following vulnerability in Lutel Lutelwall
LutelWall 0.97 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget.
local
low complexity
lutel CWE-59
5.5
2005-06-09 CVE-2005-1878 Local Security vulnerability in Giptables Firewall
GIPTables Firewall 1.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the temp.ip.addresses temporary file.
local
high complexity
giptables
1.2
2005-06-09 CVE-2005-1874 Directory traversal vulnerability in Dzip before 2.9 allows remote attackers to create arbitrary files via a filename containing a ..
network
low complexity
evan-wagner
5.0
2005-06-09 CVE-2005-1873 Remote Security vulnerability in Crob FTP 3.6.1
Multiple buffer overflows in Crob FTP 3.6.1, and possibly earlier versions, allow remote attackers to execute arbitrary code via (1) an FTP command with a large string followed by the RMD command with a long string or (2) a globbing ("*") character followed by a long string.
network
low complexity
crob
7.5
2005-06-09 CVE-2005-1871 Remote Security vulnerability in Drupal
Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."
network
low complexity
drupal
7.5
2005-06-09 CVE-2005-1870 Remote Security vulnerability in Popper 1.41R2
PHP remote file inclusion vulnerability in childwindow.inc.php in Popper 1.41-r2 and earlier allows remote attackers to execute arbitrary PHP code via the form parameter.
network
low complexity
popper
5.0
2005-06-09 CVE-2005-1867 Remote Security vulnerability in Brightmail Anti-Spam
Symantec Brightmail AntiSpam before 6.0.2 has a hard-coded database administrator password, which allows remote attackers to gain privileges.
network
low complexity
symantec
7.5
2005-06-09 CVE-2005-1864 Remote Security vulnerability in Vincent HOR Calendarix Advanced 1.5
PHP remote file inclusion vulnerability in cal_admintop.php in Calendarix Advanced 1.5 allows remote attackers to execute arbitrary PHP code via the calpath parameter.
network
low complexity
vincent-hor
5.0
2005-06-09 CVE-2005-1763 Buffer overflow in ptrace in the Linux Kernel for 64-bit architectures allows local users to write bytes into kernel memory.
local
low complexity
novell suse
7.2