Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2005-05-02 CVE-2005-0597 Remote vulnerability in Cisco Application and Content Networking System
Cisco devices running Application and Content Networking System (ACNS) 5.0 before 5.0.17.6 and 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service (process restart) via a "crafted TCP connection."
network
low complexity
cisco
5.0
2005-05-02 CVE-2005-0596 Denial Of Service vulnerability in PHP 4.0
PHP 4 (PHP4) allows attackers to cause a denial of service (daemon crash) by using the readfile function on a file whose size is a multiple of the page size.
local
low complexity
php
2.1
2005-05-02 CVE-2005-0595 Remote Buffer Overflow vulnerability in Working Resources Inc. Badblue 2.55
Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand parameter.
network
low complexity
working-resources-inc
7.5
2005-05-02 CVE-2005-0591 Unspecified vulnerability in Mozilla Firefox
Firefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka "Firespoofing."
network
high complexity
mozilla
2.6
2005-05-02 CVE-2005-0590 Remote vulnerability in Mozilla Firefox, Mozilla and Thunderbird
The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long "user:pass" sequence in the URL, which appears before the real hostname.
network
low complexity
mozilla
5.0
2005-05-02 CVE-2005-0589 Remote vulnerability in Mozilla Suite
The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that monitors the values that are generated by the autocomplete capability.
network
low complexity
mozilla
5.0
2005-05-02 CVE-2005-0588 Remote vulnerability in Mozilla Suite
Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system.
network
low complexity
mozilla
5.0
2005-05-02 CVE-2005-0586 Remote vulnerability in Mozilla Suite
Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the extensions of files to download via the Content-Disposition header, which could be used to trick users into downloading dangerous content.
network
high complexity
mozilla
2.6
2005-05-02 CVE-2005-0584 Unspecified vulnerability in Mozilla Firefox and Mozilla
Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that generated the prompt, which could facilitate spoofing and phishing attacks.
network
high complexity
mozilla
2.6
2005-05-02 CVE-2005-0583 Unspecified vulnerability in Broadcom License Software 0.1.0.15
Directory traversal vulnerability in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to create arbitrary files via ..
network
low complexity
broadcom
5.0