Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2005-02-07 CVE-2005-0100 Remote Format String vulnerability in GNU Emacs and Xemacs
Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.
network
low complexity
gnu
7.5
2005-02-07 CVE-2004-1131 Local Buffer Overflow vulnerability in SCO OpenServer Enable And Disable
Multiple buffer overflows in the enable command for SCO OpenServer 5.0.6 and 5.0.7 allow local users to execute arbitrary code via long command line arguments.
local
low complexity
sco
7.2
2005-02-03 CVE-2005-0226 Remote Format String vulnerability in Ngircd 0.8.2
Format string vulnerability in the Log_Resolver function in log.c for ngIRCd 0.8.2 and earlier, when compiled with IDENT, logging to SYSLOG, and with DEBUG enabled, allows remote attackers to execute arbitrary code.
network
low complexity
ngircd
7.5
2005-02-02 CVE-2005-0152 Unspecified vulnerability in Squirrelmail 1.2.6
PHP remote file inclusion vulnerability in Squirrelmail 1.2.6 allows remote attackers to execute arbitrary code via "URL manipulation."
network
low complexity
squirrelmail
7.5
2005-02-01 CVE-2005-0101 Remote Buffer Overflow vulnerability in Newspost
Buffer overflow in the socket_getline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to execute arbitrary code via a long string without a newline character.
network
low complexity
newspost
7.5
2005-01-28 CVE-2005-0316 Unspecified vulnerability in Webwasher Classic 2.2.1/3.3
WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions.
network
low complexity
webwasher
7.5
2005-01-27 CVE-2005-0313 Multiple vulnerability in Amax Information Technologies Magic Winmail Server 4.0
Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to (1) upload arbitrary files via certain parameters to upload.php or (2) read arbitrary files via certain parameters to download.php, and remote authenticated users to read, create, or delete arbitrary directories and files via the IMAP commands (3) CREATE, (4) EXAMINE, (5) SELECT, or (6) DELETE.
network
low complexity
amax-information-technologies
7.5
2005-01-27 CVE-2004-0936 RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system. 7.5
2005-01-27 CVE-2004-0935 Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system. 7.5
2005-01-27 CVE-2004-0934 Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system. 7.5