Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2005-03-14 CVE-2005-0505 Remote Security vulnerability in Information Resource Manager
Unknown vulnerability in Information Resource Manager (IRM) before 1.5.2.1 allows remote attackers to have "potentially serious" impact, related to LDAP logins.
network
low complexity
stackworks-enterprises
7.5
2005-03-14 CVE-2005-0504 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Linux Kernel
Buffer overflow in the MoxaDriverIoctl function for the moxa serial driver (moxa.c) in Linux 2.2.x, 2.4.x, and 2.6.x before 2.6.22 allows local users to execute arbitrary code via a certain modified length value.
local
low complexity
linux CWE-119
4.6
2005-03-14 CVE-2005-0473 Remote Denial of Service vulnerability in Gaim
The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0208.
network
low complexity
rob-flynn mandrakesoft redhat
5.0
2005-03-14 CVE-2005-0472 Remote Denial of Service vulnerability in Gaim
Gaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via malformed SNAC packets from (1) AIM or (2) ICQ.
network
low complexity
rob-flynn mandrakesoft redhat
5.0
2005-03-14 CVE-2005-0471 Remote Security vulnerability in SUN JDK and JRE
Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system that uses 8.3 style short names, which allows remote attackers to write arbitrary files to known locations and facilitates the exploitation of vulnerabilities in applications that rely on unpredictable file names.
network
low complexity
sun
5.0
2005-03-14 CVE-2005-0470 Buffer overflow in wpa_supplicant before 0.2.7 allows remote attackers to cause a denial of service (segmentation fault) via invalid EAPOL-Key packet data.
network
low complexity
wpa-supplicant gentoo suse
5.0
2005-03-14 CVE-2005-0398 Denial of Service vulnerability in KAME Racoon Malformed ISAKMP Packet Headers
The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.
network
low complexity
ipsec-tools kame sgi altlinux redhat suse
5.0
2005-03-14 CVE-2005-0259 Unspecified vulnerability in PHPbb Group PHPbb
phpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled, allows local users to read arbitrary files by providing both a local and remote location for an avatar, then modifying the "Upload Avatar from a URL:" field to reference the target file.
network
low complexity
phpbb-group
6.4
2005-03-14 CVE-2005-0258 Unspecified vulnerability in PHPbb Group PHPbb
Directory traversal vulnerability in (1) usercp_register.php and (2) usercp_avatar.php for phpBB 2.0.11, and possibly other versions, with gallery avatars enabled, allows remote attackers to delete (unlink) arbitrary files via "/../" sequences in the avatarselect parameter.
network
low complexity
phpbb-group
5.0
2005-03-12 CVE-2005-0780 Unspecified vulnerability in PHP Arena Pafiledb
paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) auth.php, (2) login.php, (3) category.php, (4) file.php, (5) team.php, (6) license.php, (7) custom.php, (8) admins.php, or (9) backupdb.php, which reveal the path in a PHP error message.
network
low complexity
php-arena
5.0