Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2005-06-08 CVE-2005-1724 Unspecified vulnerability in Apple mac OS X Server 10.4/10.4.1
NFS on Apple Mac OS X 10.4.x up to 10.4.1 does not properly obey the -network or -mask flags for a filesystem and exports it to everyone, which allows remote attackers to bypass intended access restrictions.
network
low complexity
apple
7.5
2005-06-08 CVE-2005-1723 Unspecified vulnerability in Apple mac OS X Server 10.4/10.4.1
LaunchServices in Apple Mac OS X 10.4.x up to 10.4.1 does not properly mark file extensions and MIME types as unsafe if an Apple Uniform Type Identifier (UTI) is not created when the type is added to the database of unsafe types, which could allow attackers to bypass intended restrictions.
network
low complexity
apple
7.5
2005-06-08 CVE-2005-0756 Resource Management Errors vulnerability in Linux Kernel 2.6.8.1
ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to cause a denial of service (kernel crash).
local
low complexity
linux CWE-399
2.1
2005-06-07 CVE-2005-1969 Unspecified vulnerability in Pragma Systems Pragma Telnetserver 6.0
Cross-site scripting (XSS) vulnerability in Pragma Systems Telnetserver 6.0 allows remote attackers to inject arbitrary web script or HTML, and hide activities in log files, via a "<!--" (HTML comment) in a session.
network
pragma-systems
4.3
2005-06-07 CVE-2005-1961 Security Bypass vulnerability in Consortium C-Jdbc
Unknown vulnerability in ObjectWeb Consortium C-JDBC before 1.3.1 allows local users to bypass intended access restrictions and obtain the cache results from another user.
local
low complexity
objectweb
4.6
2005-06-07 CVE-2005-1890 Remote Security vulnerability in Mortiforo
Unknown vulnerability in Mortiforo before 0.9.1 allows users to access private forums via unknown attack vectors.
network
low complexity
mortiforo
5.0
2005-06-07 CVE-2005-1889 Remote Security vulnerability in SUN Java System web Server 6.0/6.1
Unknown vulnerability in Sun ONE Application Server 6.5 SP1 Maintenance Update 6 and earlier allows attackers to read files.
network
low complexity
sun
5.0
2005-06-06 CVE-2005-1888 HTML Injection vulnerability in MediaWiki Page Template
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates.
network
mediawiki
4.3
2005-06-06 CVE-2005-1885 Information Disclosure vulnerability in Yapig 0.92B/0.93U/0.94U
view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to obtain sensitive information via a phid parameter that is not an integer, which reveals the path in an error message.
network
low complexity
yapig
5.0
2005-06-06 CVE-2005-1880 Link Following vulnerability in Everybuddy 0.4.3
everybuddy 0.4.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget.
local
low complexity
everybuddy CWE-59
5.5