Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2005-05-02 CVE-2005-0212 Remote Denial Of Service vulnerability in Amp II 3D Game Engine
The Amp II engine as used by Gore: Ultimate Soldier 1.50 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero byte UDP packet.
network
low complexity
amp
5.0
2005-05-02 CVE-2005-0211 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
network
low complexity
squid-cache debian CWE-119
7.5
2005-05-02 CVE-2005-0210 Resource Management Errors vulnerability in Linux Kernel 2.6.8.1
Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service (memory consumption) via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice.
local
low complexity
linux CWE-399
4.9
2005-05-02 CVE-2005-0209 Improper Input Validation vulnerability in Linux Kernel 2.6.8.1
Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via crafted IP packet fragments.
network
low complexity
linux CWE-20
7.8
2005-05-02 CVE-2005-0208 Remote Denial of Service vulnerability in Gaim
The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0473.
network
low complexity
rob-flynn
5.0
2005-05-02 CVE-2005-0207 Local NFS I/O Denial of Service vulnerability in Linux Kernel
Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via O_DIRECT.
local
low complexity
conectiva linux redhat suse
2.1
2005-05-02 CVE-2005-0205 KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of file descriptors before executing kppp.
local
low complexity
bernd-wuebben kde
4.6
2005-05-02 CVE-2005-0204 Multiple vulnerability in Linux Kernel
Linux kernel before 2.6.9, when running on the AMD64 and Intel EM64T architectures, allows local users to write to privileged IO ports via the OUTS instruction.
local
low complexity
linux
2.1
2005-05-02 CVE-2005-0202 Unspecified vulnerability in GNU Mailman
Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences.
network
low complexity
gnu
5.0
2005-05-02 CVE-2005-0200 Improper Input Validation vulnerability in Tiki Tikiwiki Cms/Groupware 1.6.1
TikiWiki before 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2004-1386.
network
low complexity
tiki CWE-20
7.5