Vulnerabilities > Medium

DATE CVE VULNERABILITY TITLE RISK
2005-05-02 CVE-2005-0210 Resource Management Errors vulnerability in Linux Kernel 2.6.8.1
Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service (memory consumption) via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice.
local
low complexity
linux CWE-399
4.9
2005-05-02 CVE-2005-0208 Remote Denial of Service vulnerability in Gaim
The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0473.
network
low complexity
rob-flynn
5.0
2005-05-02 CVE-2005-0205 KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of file descriptors before executing kppp.
local
low complexity
bernd-wuebben kde
4.6
2005-05-02 CVE-2005-0202 Unspecified vulnerability in GNU Mailman
Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences.
network
low complexity
gnu
5.0
2005-05-02 CVE-2005-0197 Configuration vulnerability in Cisco IOS
Cisco IOS 12.1T, 12.2, 12.2T, 12.3 and 12.3T, with Multi Protocol Label Switching (MPLS) installed but disabled, allows remote attackers to cause a denial of service (device reload) via a crafted packet sent to the disabled interface.
low complexity
cisco CWE-16
6.1
2005-05-02 CVE-2005-0196 Unspecified vulnerability in Cisco IOS
Cisco IOS 12.0 through 12.3YL, with BGP enabled and running the bgp log-neighbor-changes command, allows remote attackers to cause a denial of service (device reload) via a malformed BGP packet.
network
low complexity
cisco
5.0
2005-05-02 CVE-2005-0195 Unspecified vulnerability in Cisco IOS
Cisco IOS 12.0S through 12.3YH allows remote attackers to cause a denial of service (device restart) via a crafted IPv6 packet.
network
low complexity
cisco
5.0
2005-05-02 CVE-2005-0148 Unspecified vulnerability in Mozilla Thunderbird 0.6/0.7/0.8
Thunderbird before 0.9, when running on Windows systems, uses the default handler when processing javascript: links, which invokes Internet Explorer and may expose the Thunderbird user to vulnerabilities in the version of Internet Explorer that is installed on the user's system.
network
low complexity
mozilla
5.0
2005-05-02 CVE-2005-0146 Unspecified vulnerability in Mozilla Firefox and Mozilla
Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from the clipboard via Javascript that generates a middle-click event on systems for which a middle-click performs a paste operation.
network
low complexity
mozilla
5.0
2005-05-02 CVE-2005-0133 Unspecified vulnerability in Clam Anti-Virus Clamav
ClamAV 0.80 and earlier allows remote attackers to cause a denial of service (clamd daemon crash) via a ZIP file with malformed headers.
network
low complexity
clam-anti-virus
5.0