Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2005-05-02 CVE-2005-0400 Unspecified vulnerability in Linux Kernel
The ext2_make_empty function call in the Linux kernel before 2.6.11.6 does not properly initialize memory when creating a block for a new directory entry, which allows local users to obtain potentially sensitive information by reading the block.
local
low complexity
linux
2.1
2005-05-02 CVE-2005-0399 Remote Heap Overflow vulnerability in Mozilla Firefox, Mozilla and Thunderbird
Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.
network
high complexity
mozilla
5.1
2005-05-02 CVE-2005-0397 Unspecified vulnerability in Imagemagick
Format string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a filename argument to convert, which may be called by other web applications.
network
low complexity
imagemagick
7.5
2005-05-02 CVE-2005-0396 Local Denial of Service vulnerability in KDE Dcopserver and Desktop Communication Protocol Daemon
Desktop Communication Protocol (DCOP) daemon, aka dcopserver, in KDE before 3.4 allows local users to cause a denial of service (dcopserver consumption) by "stalling the DCOP authentication process."
local
low complexity
kde
2.1
2005-05-02 CVE-2005-0391 Unspecified vulnerability in Daniel DE Rauglaudre Geneweb
geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers to modify arbitrary files.
network
low complexity
daniel-de-rauglaudre
5.0
2005-05-02 CVE-2005-0388 Unspecified vulnerability in Remstats 1.0.13
Unknown vulnerability in the remoteping service in remstats 1.0.13 and earlier allows remote attackers to execute arbitrary commands "due to missing input sanitising."
network
low complexity
remstats
7.5
2005-05-02 CVE-2005-0387 Unspecified vulnerability in Remstats
remstats 1.0.13 and earlier, when processing uptime data, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.
local
low complexity
remstats
2.1
2005-05-02 CVE-2005-0386 Unspecified vulnerability in Mailreader.Com
Cross-site scripting (XSS) vulnerability in network.cgi in mailreader before 2.3.29 earlier allows remote attackers to inject arbitrary web script or HTML via MIME text/enriched or text/richtext messages.
network
mailreader-com
4.3
2005-05-02 CVE-2005-0383 Remote Security vulnerability in Trend Micro Control Manager 3.0Enterprise
Trend Micro Control Manager 3.0 Enterprise Edition allows remote attackers to gain privileges via a replay attack of the encrypted username and password.
network
low complexity
trend-micro
7.5
2005-05-02 CVE-2005-0382 Remote Denial of Service vulnerability in Breed Patch1
Breed patch 1 and earlier allows remote attackers to cause a denial of service (application crash) via an empty UDP packet, which triggers a null dereference.
network
low complexity
breed
5.0