Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2005-05-02 CVE-2005-0215 Denial-Of-Service vulnerability in Mozilla 1.6
Mozilla 1.6 and possibly other versions allows remote attackers to cause a denial of service (application crash) via a XBM (X BitMap) file with a large (1) height or (2) width value.
network
low complexity
mozilla
5.0
2005-05-02 CVE-2005-0214 Remote Directory Traversal vulnerability in Alexander Palmo Simple PHP Blog 0.3.7C
Directory traversal vulnerability in Simple PHP Blog (SPHPBlog) 0.3.7c allows remote attackers to read or create arbitrary files via a ..
network
low complexity
alexander-palmo
5.0
2005-05-02 CVE-2005-0213 Remote vulnerability in Webtoolmaster Software Winhki 1.4D
Directory traversal vulnerability in WinHKI 1.4d allows remote attackers to overwrite arbitrary files via a ..
network
low complexity
webtoolmaster-software
5.0
2005-05-02 CVE-2005-0212 Remote Denial Of Service vulnerability in Amp II 3D Game Engine
The Amp II engine as used by Gore: Ultimate Soldier 1.50 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero byte UDP packet.
network
low complexity
amp
5.0
2005-05-02 CVE-2005-0211 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
network
low complexity
squid-cache debian CWE-119
7.5
2005-05-02 CVE-2005-0210 Resource Management Errors vulnerability in Linux Kernel 2.6.8.1
Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service (memory consumption) via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice.
local
low complexity
linux CWE-399
4.9
2005-05-02 CVE-2005-0209 Improper Input Validation vulnerability in Linux Kernel 2.6.8.1
Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via crafted IP packet fragments.
network
low complexity
linux CWE-20
7.8
2005-05-02 CVE-2005-0208 Remote Denial of Service vulnerability in Gaim
The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0473.
network
low complexity
rob-flynn
5.0
2005-05-02 CVE-2005-0207 Local NFS I/O Denial of Service vulnerability in Linux Kernel
Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via O_DIRECT.
local
low complexity
conectiva linux redhat suse
2.1
2005-05-02 CVE-2005-0205 KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of file descriptors before executing kppp.
local
low complexity
bernd-wuebben kde
4.6