Explain the CVE ID: What does the identifier CVE-2005-0970 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0970.

Mac OS X 10.3.9 and earlier allows users to install, create, and execute setuid/setgid scripts, contrary to the intended design, which may allow attackers to conduct unauthorized activities with escalated privileges via vulnerable scripts.


Provide references for further information: Can you share references or external links related to CVE-2005-0970?

{'name': 'APPLE-SA-2005-04-15', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0970?


Explain the CVE ID: What does the identifier CVE-2005-0971 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0971.

Stack-based buffer overflow in the semop system call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments.


Provide references for further information: Can you share references or external links related to CVE-2005-0971?

{'name': 'VU#212190', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/212190'}, {'name': 'APPLE-SA-2005-04-15', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0971?


Explain the CVE ID: What does the identifier CVE-2005-0972 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0972.

Integer overflow in the searchfs system call in Mac OS X 10.3.9 and earlier allows local users to execute arbitrary code via crafted parameters.


Provide references for further information: Can you share references or external links related to CVE-2005-0972?

{'name': 'APPLE-SA-2005-04-15', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html'}, {'name': 'VU#185702', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/185702'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0972?


Explain the CVE ID: What does the identifier CVE-2005-0973 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0973.

Unknown vulnerability in the setsockopt system call in Mac OS X 10.3.9 and earlier allows local users to cause a denial of service (memory exhaustion) via crafted arguments.


Provide references for further information: Can you share references or external links related to CVE-2005-0973?


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0973?


Explain the CVE ID: What does the identifier CVE-2005-0974 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0974.

Unknown vulnerability in the nfs_mount call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments.


Provide references for further information: Can you share references or external links related to CVE-2005-0974?

{'name': 'VU#713614', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/713614'}, {'name': 'APPLE-SA-2005-04-15', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html'}, {'name': 'APPLE-SA-2005-05-19', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/May/msg00004.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0974?


Explain the CVE ID: What does the identifier CVE-2005-0975 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0975.

Integer signedness error in the parse_machfile function in the mach-o loader (mach_loader.c) for the Darwin Kernel as used in Mac OS X 10.3.7, and other versions before 10.3.9, allows local users to cause a denial of service (CPU consumption) via a crafted mach-o header.


Provide references for further information: Can you share references or external links related to CVE-2005-0975?

{'name': '1013735', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013735'}, {'name': 'APPLE-SA-2005-04-15', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html'}, {'name': '1012941', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012941'}, {'tags': ['x_refsource_MISC'], 'url': 'http://felinemenace.org/advisories/macosx.txt'}, {'name': 'macos-machloader-dos(18979)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18979'}, {'name': 'ADV-2005-0041', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0041'}, {'name': '20050119 Darwin Kernel Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110616533903671&w=2'}, {'name': '13902', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13902'}, {'name': 'P-185', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-185.shtml'}, {'name': '12314', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12314'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0975?


Explain the CVE ID: What does the identifier CVE-2005-0976 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0976.

AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XMLHttpRequest Javascript component, as demonstrated using automatically mounted disk images and file:// URLs.


Provide references for further information: Can you share references or external links related to CVE-2005-0976?

{'name': 'APPLE-SA-2005-04-15', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://remahl.se/david/vuln/001/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0976?


Explain the CVE ID: What does the identifier CVE-2005-0977 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0977.

The shmem_nopage function in shmem.c for the tmpfs driver in Linux kernel 2.6 does not properly verify the address argument, which allows local users to cause a denial of service (kernel crash) via an invalid address.


Provide references for further information: Can you share references or external links related to CVE-2005-0977?

{'name': 'oval:org.mitre.oval:def:10400', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10400'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://linux.bkbits.net:8080/linux-2.6/cset%40420551fbRlv9-QG6Gw9Lw_bKVfPSsg'}, {'name': 'RHSA-2005:366', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-366.html'}, {'name': 'USN-103-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/103-1/'}, {'name': '12970', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12970'}, {'name': 'FLSA:157459-3', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/427980/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://lkml.org/lkml/2005/2/5/111'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0977?


Explain the CVE ID: What does the identifier CVE-2005-0978 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0978.

Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote attackers to upload arbitrary files via a .. (dot dot) in a PUSH command.


Provide references for further information: Can you share references or external links related to CVE-2005-0978?

{'name': "20050401 DMA[2005-0401a] - 'IVT BlueSoleil Directory Transversal'", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111238511206503&w=2'}, {'name': '14790', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14790/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalmunition.com/DMA%5B2005-0401a%5D.txt'}, {'name': 'bluesoleil-object-push-directory-traversal(19930)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19930'}, {'name': '12961', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12961'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0978?


Explain the CVE ID: What does the identifier CVE-2005-0979 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0979.

Multiple buffer overflows in RUMBA 7.3 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via crafted values in a profile file, as demonstrated using a long SysName field.


Provide references for further information: Can you share references or external links related to CVE-2005-0979?

{'name': '20050401 Buffer Overflow within the RUMBA product', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111238364916500&w=2'}, {'name': '12965', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12965'}, {'name': 'rumba-profile-values-bo(19934)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19934'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0979?


Explain the CVE ID: What does the identifier CVE-2005-0980 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0980.

PHP remote file inclusion vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary PHP code by modifying the view parameter to reference a URL on a remote web server that contains the code.


Provide references for further information: Can you share references or external links related to CVE-2005-0980?

{'name': '14802', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14802'}, {'name': '20050402 AlstraSoft EPay Pro v2.0 has file include and multiple xss', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111247198021626&w=2'}, {'name': '12973', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12973'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0980?


Explain the CVE ID: What does the identifier CVE-2005-0981 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0981.

Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Pro 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) payment or (2) send parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0981?

{'name': '14802', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14802'}, {'name': '20050402 AlstraSoft EPay Pro v2.0 has file include and multiple xss', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111247198021626&w=2'}, {'name': '12974', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12974'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0981?


Explain the CVE ID: What does the identifier CVE-2005-0982 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0982.

Multiple cross-site scripting (XSS) vulnerabilities in Yet Another Forum.net 0.9.9 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) location, or (3) Subject field.


Provide references for further information: Can you share references or external links related to CVE-2005-0982?

{'name': '1013632', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013632'}, {'name': '20050402 Yet Another Forum.net XSS vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111247338301262&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0982?


Explain the CVE ID: What does the identifier CVE-2005-0983 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0983.

Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data.


Provide references for further information: Can you share references or external links related to CVE-2005-0983?

{'name': '14811', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14811'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/q3msgboom-adv.txt'}, {'name': '12976', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12976'}, {'name': '20050402 In-game players kicking in the Quake 3 engine', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111246796918067&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bani.anime.net/banimod/forums/viewtopic.php?p=27322'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0983?


Explain the CVE ID: What does the identifier CVE-2005-0984 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0984.

Buffer overflow in the G_Printf function in Star Wars Jedi Knight: Jedi Academy 1.011 and earlier allows remote attackers to execute arbitrary code via a long message using commands such as (1) say and (2) tell.


Provide references for further information: Can you share references or external links related to CVE-2005-0984?

{'name': '12977', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12977'}, {'name': '14809', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14809'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/jamsgbof-adv.txt'}, {'name': '20050402 In-game server buffer-overflow in Jedi Academy 1.011', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111246855213653&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0984?


Explain the CVE ID: What does the identifier CVE-2005-0985 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0985.

Unspecified vulnerability in the Mac OS X kernel before 10.3.8 allows local users to cause a denial of service (temporary hang) via unspecified attack vectors related to the fan control unit (FCU) driver.


Provide references for further information: Can you share references or external links related to CVE-2005-0985?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=301324'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0985?


Explain the CVE ID: What does the identifier CVE-2005-0986 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0986.

NLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other versions allows remote attackers to cause a denial of service (deep recursion and nHTTP.exe process crash) via a long GET request containing UNICODE decimal value 430 characters, which causes the stack to be exhausted.  NOTE: IBM has reported that it is unable to replicate this issue.


Provide references for further information: Can you share references or external links related to CVE-2005-0986?

{'tags': ['x_refsource_MISC'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg21202446'}, {'name': '14858', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14858'}, {'name': '20050406 IBM Lotus Domino Server Web Service DoS Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=224&type=vulnerabilities'}, {'tags': ['x_refsource_MISC'], 'url': 'http://news.zdnet.co.uk/software/applications/0%2C39020384%2C39194293%2C00.htm'}, {'name': 'ADV-2005-0322', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0322'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0986?


Explain the CVE ID: What does the identifier CVE-2005-0987 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0987.

Unknown vulnerability in IRC Services NickServ LISTLINKS before 5.0.50 allows remote attackers to obtain the links of a nick.


Provide references for further information: Can you share references or external links related to CVE-2005-0987?

{'name': '1013622', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013622'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ircservices.esper.net/Changes.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0987?


Explain the CVE ID: What does the identifier CVE-2005-0988 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0988.

Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.


Provide references for further information: Can you share references or external links related to CVE-2005-0988?

{'name': 'APPLE-SA-2006-08-01', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html'}, {'name': '22033', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/22033'}, {'name': 'ADV-2006-3101', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/3101'}, {'name': '21253', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21253'}, {'name': 'DSA-752', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-752'}, {'name': '101816', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101816-1'}, {'name': 'RHSA-2005:357', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2005-357.html'}, {'name': '19289', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/19289'}, {'name': 'TA06-214A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-214A.html'}, {'name': '12996', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12996'}, {'name': '15487', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15487'}, {'name': 'oval:org.mitre.oval:def:765', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A765'}, {'name': 'oval:org.mitre.oval:def:10242', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10242'}, {'name': 'oval:org.mitre.oval:def:1169', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1169'}, {'name': 'SCOSA-2005.58', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt'}, {'name': '18100', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18100'}, {'name': 'SSA:2006-262', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852'}, {'name': '20050404 gzip TOCTOU file-permissions vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/394965'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0988?


Explain the CVE ID: What does the identifier CVE-2005-0989 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0989.

The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method.


Provide references for further information: Can you share references or external links related to CVE-2005-0989?

{'name': 'oval:org.mitre.oval:def:100025', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100025'}, {'name': 'RHSA-2005:386', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-386.html'}, {'name': '12988', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12988'}, {'name': 'SCOSA-2005.49', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt'}, {'name': '14820', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14820'}, {'name': '19823', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19823'}, {'name': '15495', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/15495'}, {'name': '1013635', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013635'}, {'name': 'RHSA-2005:601', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-601.html'}, {'name': 'GLSA-200504-18', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml'}, {'name': '1013643', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013643'}, {'name': 'oval:org.mitre.oval:def:11706', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11706'}, {'name': 'RHSA-2005:384', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-384.html'}, {'name': 'RHSA-2005:383', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-383.html'}, {'name': 'SUSE-SA:2006:022', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006_04_25.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=288688'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/mfsa2005-33.html'}, {'name': '14821', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14821'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0989?


Explain the CVE ID: What does the identifier CVE-2005-0990 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0990.

unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file.


Provide references for further information: Can you share references or external links related to CVE-2005-0990?

{'name': 'oval:org.mitre.oval:def:9613', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9613'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.ubuntu.com/show_bug.cgi?id=8459'}, {'name': 'sharutils-temp-file-symlink(19957)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19957'}, {'name': '12981', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12981'}, {'name': 'USN-104-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/104-1/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=302412'}, {'name': 'RHSA-2005:377', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-377.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0990?


Explain the CVE ID: What does the identifier CVE-2005-0991 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0991.

RC.BOOT in IBM AIX 5.1, 5.2, and 5.3 does not "use a secure location for temporary files," which allows local users to have an unknown impact, probably by overwriting files.


Provide references for further information: Can you share references or external links related to CVE-2005-0991?

{'name': 'IY59205', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY59205&apar=only'}, {'name': 'IY59206', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY59206&apar=only'}, {'name': '12992', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12992'}, {'name': 'IY59207', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY59207&apar=only'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0991?


Explain the CVE ID: What does the identifier CVE-2005-0992 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0992.

Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin before 2.6.2-rc1 allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0992?

{'name': '20050404 phpMyAdmin Cross-site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111264361622660&w=2'}, {'name': '12982', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12982'}, {'name': '14799', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14799'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.arrelnet.com/advisories/adv20050403.html'}, {'name': 'phpmyadmin-convcharset-xss(19940)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19940'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-3'}, {'name': 'GLSA-200504-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200504-08.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0992?


Explain the CVE ID: What does the identifier CVE-2005-0993 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0993.

Buffer overflow in nwprint in SCO OpenServer 5.0.7 allows local users to execute arbitrary code via a long command line argument.


Provide references for further information: Can you share references or external links related to CVE-2005-0993?

{'name': '12986', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12986'}, {'name': '20050404 possible privilege escalation on Sco OpenServer 5.0.7', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111263251718491&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0993?


Explain the CVE ID: What does the identifier CVE-2005-0994 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0994.

Multiple SQL injection vulnerabilities in ProductCart 2.7 allow remote attackers to execute arbitrary SQL commands via (1) the Category or resultCnt parameters to advSearch_h.asp, and possibly (2) the offset parameter to tarinasworld_butterflyjournal.asp. NOTE: it is possible that item (2) is the result of a typo or editing error from the original research report.


Provide references for further information: Can you share references or external links related to CVE-2005-0994?

{'name': '15263', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15263'}, {'name': '14833', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14833'}, {'name': '15265', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15265'}, {'name': '12990', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12990'}, {'tags': ['x_refsource_MISC'], 'url': 'http://digitalparadox.org/advisories/prodcart.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0994?


Explain the CVE ID: What does the identifier CVE-2005-0995 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0995.

Multiple cross-site scripting (XSS) vulnerabilities in ProductCart 2.7 allow remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter to advSearch_h.asp, (2) the redirectUrl parameter to NewCust.asp, (3) the country parameter to storelocator_submit.asp, or (4) the error parameter to techErr.asp. NOTE: it has been reported that storelocator_submit.asp does not exist in ProductCart.


Provide references for further information: Can you share references or external links related to CVE-2005-0995?

{'name': '15264', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15264'}, {'name': '15267', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15267'}, {'name': '14833', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14833'}, {'name': '12990', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12990'}, {'name': '15268', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15268'}, {'tags': ['x_refsource_MISC'], 'url': 'http://digitalparadox.org/advisories/prodcart.txt'}, {'name': '15266', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15266'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0995?


Explain the CVE ID: What does the identifier CVE-2005-0996 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0996.

Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the email or url parameters in the Add function, (2) the min parameter in the viewsdownload function, or (3) the min parameter in the search function.


Provide references for further information: Can you share references or external links related to CVE-2005-0996?

{'name': '20050403 [SECURITYREASON.COM] phpnuke 7.6 Multiple vulnerabilities in Downloads Module cXIb8O3.13', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111289685724764&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0996?


Explain the CVE ID: What does the identifier CVE-2005-0997 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0997.

Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 7.6 allow remote attackers to execute arbitrary SQL commands via (1) the email or url parameters in the Add function, (2) the url parameter in the modifylinkrequestS function, (3) the orderby or min parameters in the viewlink function, (4) the orderby, min, or show parameters in the search function, or (5) the ratenum parameter in the MostPopular function.


Provide references for further information: Can you share references or external links related to CVE-2005-0997?

{'name': '20050403 [SECURITYREASON.COM] phpnuke 7.6 Multiple vulnerabilities in Web_Links Module cXIb8O3.14', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111289685724764&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0997?


Explain the CVE ID: What does the identifier CVE-2005-0998 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0998.

The Web_Links module for PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via an invalid show parameter, which triggers a division by zero PHP error that leaks the full pathname of the server.


Provide references for further information: Can you share references or external links related to CVE-2005-0998?


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0998?


Explain the CVE ID: What does the identifier CVE-2005-0999 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0999.

SQL injection vulnerability in the Top module for PHP-Nuke 6.x through 7.6 allows remote attackers to execute arbitrary SQL commands via the querylang parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0999?

{'name': '20050406 [waraxe-2005-SA#041] - Critical Sql Injection in PhpNuke 6.x-7.6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111281649616901&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.waraxe.us/advisory-41.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0999?


Explain the CVE ID: What does the identifier CVE-2005-1000 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1000.

Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the bid parameter to the EmailStats op in banners.pgp, (2) the ratenum parameter in the TopRated and MostPopular actions in the Web_Links module, (3) the ttitle parameter in the viewlinkdetails, viewlinkeditorial, viewlinkcomments, and ratelink actions in the Web_Links module, or (4) the username parameter in the Your_Account module.


Provide references for further information: Can you share references or external links related to CVE-2005-1000?

{'name': '20050404 [SECURITYREASON.COM] PhpNuke 7.6=>x Multiple vulnerabilities cXIb8O3.12', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2005-04/0037.html'}, {'name': '20050403 Full path disclosure and XSS in PHPNuke', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111263454308478&w=2'}, {'name': 'phpnuke-modulesphp-xss(19952)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19952'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1000?


Explain the CVE ID: What does the identifier CVE-2005-1001 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1001.

PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to (1) the Surveys module with the file parameter set to comments or (2) 3D-Fantasy/theme.php, which leaks the full pathname of the web server in a PHP error message.


Provide references for further information: Can you share references or external links related to CVE-2005-1001?

{'name': '20050404 [SECURITYREASON.COM] PhpNuke 7.6=>x Multiple vulnerabilities cXIb8O3.12', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2005-04/0037.html'}, {'name': 'phpnuke-modulesphp-path-disclosure(19953)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19953'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1001?


Explain the CVE ID: What does the identifier CVE-2005-1002 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1002.

logwebftbs2000.exe in Logics Software File Transfer (LOG-FT) allows remote attackers to read arbitrary files via modified (1) VAR_FT_LANG and (2) VAR_FT_TMPL parameters.


Provide references for further information: Can you share references or external links related to CVE-2005-1002?

{'name': '12998', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12998'}, {'name': '20050405 Logics Software BS2000 Host to Web Client ALL PLATFORMS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111271950916436&w=2'}, {'name': '14851', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14851'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1002?


Explain the CVE ID: What does the identifier CVE-2005-1003 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1003.

Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote attackers to include arbitrary PHP files via .. (dot dot) sequences in the modID parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-1003?

{'name': '20050404 Authenticaion bypass, Directory transversal and XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111264602406090&w=2'}, {'name': '1013640', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013640'}, {'name': 'payprocart-dotdot-directory-traversal(19954)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19954'}, {'name': '14832', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14832'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1003?


Explain the CVE ID: What does the identifier CVE-2005-1004 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1004.

Cross-site scripting (XSS) vulnerability in usrdetails.php in ProfitCode PayProCart 3.0 allows remote attackers to inject arbitrary web script or HTML via the sgnuptype parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-1004?

{'name': 'Payprocart-usrdetails-xss(19955)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19955'}, {'name': '20050404 Authenticaion bypass, Directory transversal and XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111264602406090&w=2'}, {'name': '1013640', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013640'}, {'name': '14832', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14832'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1004?


Explain the CVE ID: What does the identifier CVE-2005-1005 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1005.

ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as demonstrated via a direct request to adminshop/index.php with hex-encoded .. sequences in the ftoedit parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-1005?

{'name': '20050404 Authenticaion bypass, Directory transversal and XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111264602406090&w=2'}, {'name': '1013640', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013640'}, {'name': '14832', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14832'}, {'name': 'payprocart-index-bypass-authentication(19956)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19956'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1005?


Explain the CVE ID: What does the identifier CVE-2005-1006 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1006.

Multiple cross-site scripting (XSS) vulnerabilities in SonicWALL SOHO 5.1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) the user login name, which is not filtered when the administrator views the log file.


Provide references for further information: Can you share references or external links related to CVE-2005-1006?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.oliverkarow.de/research/SonicWall.txt'}, {'name': '14823', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14823'}, {'name': 'sonicwall-username-code-execution(19960)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19960'}, {'name': '15261', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15261'}, {'name': '20050404 SonicWALL SOHO/10 - XSS vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2005-04/0041.html'}, {'name': '12984', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12984'}, {'name': 'sonicwall-http-get-requests-xss(19958)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19958'}, {'name': '1013638', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013638'}, {'name': '15262', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15262'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1006?


Explain the CVE ID: What does the identifier CVE-2005-1007 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1007.

Unknown vulnerability in the LIST functionality in CommuniGate Pro before 4.3c3 allows remote attackers to cause a denial of service (server crash) via certain multipart messages.


Provide references for further information: Can you share references or external links related to CVE-2005-1007?

{'name': '14604', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14604'}, {'name': '15257', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15257'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.stalker.com/CommuniGatePro/History.html'}, {'name': 'communigatepro-list-dos(19961)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19961'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1007?


Explain the CVE ID: What does the identifier CVE-2005-1008 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1008.

Cross-site scripting (XSS) vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via a "javascript:" URL in an IMG tag.


Provide references for further information: Can you share references or external links related to CVE-2005-1008?

{'name': '1013614', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013614'}, {'name': '12958', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12958'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1008?


Explain the CVE ID: What does the identifier CVE-2005-1009 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1009.

Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or (2) local users to execute arbitrary code via a long Name entry in the configure.cfg file.


Provide references for further information: Can you share references or external links related to CVE-2005-1009?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.class101.org/netv-remhbof.pdf'}, {'name': '14814', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14814'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hat-squad.com/en/000165.html'}, {'name': '20050401 [Hat-Squad Advisory] Bakbone NetVault Heap overflow Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/394801'}, {'name': '1013625', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013625'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hat-squad.com/en/000164.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.class101.org/netv-locsbof.pdf'}, {'name': '12967', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12967'}, {'name': 'netvault-configurecfg-bo(19932)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19932'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1009?


Explain the CVE ID: What does the identifier CVE-2005-1010 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1010.

Cross-site scripting (XSS) vulnerability in Comersus Cart 6 allows remote attackers to inject arbitrary web script or HTML via the account username.


Provide references for further information: Can you share references or external links related to CVE-2005-1010?

{'name': '1013634', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013634'}, {'name': 'comersus-username-xss(19962)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19962'}, {'name': '13000', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13000'}, {'name': '14825', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14825'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1010?


Explain the CVE ID: What does the identifier CVE-2005-1011 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1011.

SQL injection vulnerability in content.asp in SiteEnable allows remote attackers to execute arbitrary SQL commands via the sortby parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-1011?

{'name': '1013631', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013631'}, {'name': '12985', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12985'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zone-h.com/en/advisories/read/id=7367/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1011?


Explain the CVE ID: What does the identifier CVE-2005-1012 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1012.

Cross-site scripting (XSS) vulnerability in Iatek SiteEnable allows remote attackers to inject arbitrary web script or HTML via (1) the contenttype parameter to content.asp, (2) the title, or (3) the description.


Provide references for further information: Can you share references or external links related to CVE-2005-1012?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.zone-h.com/en/advisories/read/id=7367/'}, {'name': '1013631', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013631'}, {'name': 'portalapp-contentasp-xss(19891)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19891'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1012?


Explain the CVE ID: What does the identifier CVE-2005-1013 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1013.

The SMTP service in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to cause a denial of service (server crash) via an EHLO command with a Unicode string.


Provide references for further information: Can you share references or external links related to CVE-2005-1013?

{'name': '12994', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12994'}, {'name': 'mailenable-smtp-dos(19948)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19948'}, {'name': '1013637', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013637'}, {'name': 'mailenable-ehlo-dos(19973)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19973'}, {'name': '15232', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15232'}, {'name': '20050405 MailEnable Smtpd remote Dos [x0n3-h4ck]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111273637518494&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mailenable.com/hotfix/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/windowsntfocus/5HP031PFFG.html'}, {'name': '14812', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14812'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1013?


Explain the CVE ID: What does the identifier CVE-2005-1014 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1014.

Buffer overflow in the IMAP service for MailEnable Enterprise 1.04 and earlier and Professional 1.54 allows remote attackers to execute arbitrary code via a long AUTHENTICATE command.


Provide references for further information: Can you share references or external links related to CVE-2005-1014?

{'name': '1013637', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013637'}, {'name': 'mailenable-imap-dos(19947)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19947'}, {'name': '20050405 MailEnable Imapd remote BoF + Exploit [x0n3-h4ck]', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2005-April/033123.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mailenable.com/hotfix/'}, {'name': '12995', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12995'}, {'name': '14812', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14812'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1014?


Explain the CVE ID: What does the identifier CVE-2005-1015 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1015.

Buffer overflow in MailEnable Imapd (MEIMAP.exe) allows remote attackers to execute arbitrary code via a long LOGIN command.


Provide references for further information: Can you share references or external links related to CVE-2005-1015?

{'name': '20050406 Re: MailEnable Imapd remote BoF + Exploit [x0n3-h4ck]', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2005-April/033144.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1015?


Explain the CVE ID: What does the identifier CVE-2005-1016 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1016.

Cross-site scripting (XSS) vulnerability in links_add_form.asp for MaxWebPortal 1.33 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URL in a banner URL.


Provide references for further information: Can you share references or external links related to CVE-2005-1016?

{'name': '1013617', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013617'}, {'name': '14752', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14752'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hackerscenter.com/archive/view.asp?id=1807'}, {'name': '12968', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12968'}, {'name': 'maxwebportal-linksaddform-xss(19929)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19929'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1016?


Explain the CVE ID: What does the identifier CVE-2005-1017 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1017.

SQL injection vulnerability in the Update_Events function in events_functions.asp in MaxWebPortal 1.33 and earlier allows remote attackers to execute arbitrary SQL commands via the EVENT_ID parameter, as demonstrated using events.asp.


Provide references for further information: Can you share references or external links related to CVE-2005-1017?

{'name': '1013617', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013617'}, {'name': 'maxwebportal-eventsfunctions-sql-injection(19928)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19928'}, {'name': '14752', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14752'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hackerscenter.com/archive/view.asp?id=1807'}, {'name': '12968', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12968'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1017?


Explain the CVE ID: What does the identifier CVE-2005-1018 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1018.

Buffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup allows remote authenticated users to cause a denial of service or execute arbitrary code via an agent request to TCP port 6050 with a large argument before the option field.


Provide references for further information: Can you share references or external links related to CVE-2005-1018?

{'name': '20050414 Computer Associates BrightStor ARCserve Backup and BrightStor Enterprise Backup UniversalAgent buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111351851802682&w=2'}, {'name': '13102', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13102'}, {'name': '20050217 RE: BrightStor ARCserve Backup buffer overflow PoC (fixes available)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/390760'}, {'name': '20050411 Computer Associates BrightStor ARCserve Backup UniversalAgent Buffer Overflow', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=232&type=vulnerabilities'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1018?


Explain the CVE ID: What does the identifier CVE-2005-1019 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1019.

Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable.


Provide references for further information: Can you share references or external links related to CVE-2005-1019?

{'tags': ['x_refsource_MISC'], 'url': 'http://security-tmp.h14.ru/exploits/23laeon.c.txt'}, {'name': '20050404 Local buffer overflow  on Aeon<=0.2a', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111262942708249&w=2'}, {'name': 'aeon-getconfig-bo(19951)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19951'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1019?


Explain the CVE ID: What does the identifier CVE-2005-1020 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1020.

Secure Shell (SSH) 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of service (device reload) (1) via a username that contains a domain name when using a TACACS+ server to authenticate, (2) when a new SSH session is in the login phase and a currently logged in user issues a send command, or (3) when IOS is logging messages and an SSH session is terminated while the server is sending data.


Provide references for further information: Can you share references or external links related to CVE-2005-1020?

{'name': '1013655', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2005/Apr/1013655.html'}, {'name': '13043', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13043'}, {'name': 'cisco-ios-sshv2-tacacs-authentication-dos(19987)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19987'}, {'name': 'cisco-ios-authentication-send-dos(19989)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19989'}, {'name': '14854', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14854'}, {'name': 'cisco-ios-ssh-message-log-dos(19990)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19990'}, {'name': '20050406 Vulnerabilities in Cisco IOS Secure Shell Server', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20050406-ssh.shtml'}, {'name': 'oval:org.mitre.oval:def:5455', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5455'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1020?


Explain the CVE ID: What does the identifier CVE-2005-1021 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1021.

Memory leak in Secure Shell (SSH) in Cisco IOS 12.0 through 12.3, when authenticating against a TACACS+ server, allows remote attackers to cause a denial of service (memory consumption) via an incorrect username or password.


Provide references for further information: Can you share references or external links related to CVE-2005-1021?

{'name': '1013655', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2005/Apr/1013655.html'}, {'name': 'cisco-ios-memory-leak-dos(19991)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19991'}, {'name': '15303', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15303'}, {'name': '13042', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13042'}, {'name': '14854', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14854'}, {'name': '20050406 Vulnerabilities in Cisco IOS Secure Shell Server', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20050406-ssh.shtml'}, {'name': 'oval:org.mitre.oval:def:5687', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5687'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1021?


Explain the CVE ID: What does the identifier CVE-2005-1022 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1022.

ColdFusion 6.1 Updater 1 places Java .class files under the web root in the /WEB-INF/cfclasses directory, which allows remote attackers to obtain sensitive information.


Provide references for further information: Can you share references or external links related to CVE-2005-1022?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.macromedia.com/devnet/security/security_zone/mpsb05-02.html'}, {'name': '20050407 Macromedia Security Bulletin - ColdFusion MX 6.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111290407411801&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1022?


Explain the CVE ID: What does the identifier CVE-2005-1023 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1023.

Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x to 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) min parameter to the Search module, (2) the categories parameter to the FAQ module, or (3) the ltr parameter to the Encyclopedia module.  NOTE: the bid parameter issue in banners.php is already an item in CVE-2005-1000.


Provide references for further information: Can you share references or external links related to CVE-2005-1023?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityreason.com/adv/PHPNuke%206.x-7.6-p1.txt'}, {'name': '20050403 Full path disclosure and XSS in PHPNuke', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111263454308478&w=2'}, {'name': 'phpnuke-modulesphp-xss(19952)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19952'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1023?


Explain the CVE ID: What does the identifier CVE-2005-1024 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1024.

modules.php in PHP-Nuke 6.x to 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) my_headlines, (2) userinfo, or (3) search, which reveals the path in a PHP error message.


Provide references for further information: Can you share references or external links related to CVE-2005-1024?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityreason.com/adv/PHPNuke%206.x-7.6-p1.txt'}, {'name': 'phpnuke-modulesphp-path-disclosure(19953)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19953'}, {'name': '20050403 Full path disclosure and XSS in PHPNuke', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111263454308478&w=2'}, {'name': 'phpnuke-myheadlines-path-disclosure(44980)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/44980'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1024?


Explain the CVE ID: What does the identifier CVE-2005-1025 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1025.

The FTP server in AS/400 4.3, when running in IFS mode, allows remote attackers to obtain sensitive information via a symlink attack using RCMD and the ADDLNK utility, as demonstrated using the QSYS.LIB library.


Provide references for further information: Can you share references or external links related to CVE-2005-1025?

{'name': '15300', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15300'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.venera.com/downloads/AS400_user_accounts_ftp_disclosure.pdf'}, {'name': '20050404 Disclosure of AS/400 user accounts via the FTP server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111264136829017&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1025?


Explain the CVE ID: What does the identifier CVE-2005-1026 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1026.

Multiple SQL injection vulnerabilities in SnailSource phpBB 2.0.x mods allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to dlman.php in DLMan Pro or (2) id parameter to links.php in Linkz Pro (aka LinksLinks Pro).


Provide references for further information: Can you share references or external links related to CVE-2005-1026?

{'name': '13030', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13030'}, {'name': '20050404 SQL INJECTION in DLMan Pro.  PHPBB Mod.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111272430128195&w=2'}, {'name': '20050404 SQL INJECTION in LinksLinks Pro.  PHPBB Mod.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111271895819594&w=2'}, {'name': '13028', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13028'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.snailsource.com/forum/dlman.php?func=file_info&file_id=77'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1026?


Explain the CVE ID: What does the identifier CVE-2005-1027 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1027.

Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x through 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter in the Your_Account module, (2) avatarcategory parameter in the Your_Account module, or (3) lid parameter in the Downloads module.


Provide references for further information: Can you share references or external links related to CVE-2005-1027?

{'name': '7570', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7570'}, {'name': '20030511 PHPNuke "Your Account" XSS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/321324'}, {'name': '20050404 [SECURITYREASON.COM] Full path disclosure and XSS in PHPNuke part 3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111272010303144&w=2'}, {'name': 'phpnuke-modules-xss(11994)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11994'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1027?


Explain the CVE ID: What does the identifier CVE-2005-1028 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1028.

PHP-Nuke 6.x through 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) index.php with the forum_admin parameter set, (2) the Surveys module, or (3) the Your_Account module, which reveals the path in a PHP error message.


Provide references for further information: Can you share references or external links related to CVE-2005-1028?

{'name': '20050404 [SECURITYREASON.COM] Full path disclosure and XSS in PHPNuke part 3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111272010303144&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1028?


Explain the CVE ID: What does the identifier CVE-2005-1029 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1029.

Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) SortDir, or (3) Sortby parameter to default.asp, (4) itemID parameter to ItemInfo.asp, or (5) Email field to sendpassword.asp.


Provide references for further information: Can you share references or external links related to CVE-2005-1029?

{'name': '13034', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13034'}, {'name': 'aah-multiple-scripts-sql-injection(19977)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19977'}, {'name': '15283', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15283'}, {'name': '1013649', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2005/Apr/1013649.html'}, {'name': '15281', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15281'}, {'name': '13032', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13032'}, {'tags': ['x_refsource_MISC'], 'url': 'http://digitalparadox.org/advisories/aass.txt'}, {'name': '20050406 Active Auction House has multiple Sql injection, error and XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111280834000432&w=2'}, {'name': '13035', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13035'}, {'name': '14839', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14839'}, {'name': '15282', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15282'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1029?


Explain the CVE ID: What does the identifier CVE-2005-1030 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1030.

Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary web script or HTML via the (1) ReturnURL, (2) password, (3) username parameter, (4) ReturnURL parameter to account.asp, (5) Table, (6) Title parameter to sendpassword.asp, or (7) itemid to watchthisitem.asp.


Provide references for further information: Can you share references or external links related to CVE-2005-1030?

{'name': '15287', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15287'}, {'name': '13038', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13038'}, {'name': '15286', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15286'}, {'name': '13036', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13036'}, {'name': '13039', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13039'}, {'name': '1013649', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2005/Apr/1013649.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://digitalparadox.org/advisories/aass.txt'}, {'name': '20050406 Active Auction House has multiple Sql injection, error and XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111280834000432&w=2'}, {'name': '15284', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15284'}, {'name': '15285', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15285'}, {'name': 'aah-multiple-scripts-xss(19975)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19975'}, {'name': '14839', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14839'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1030?


Explain the CVE ID: What does the identifier CVE-2005-1031 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1031.

RUNCMS 1.1A, and possibly other products based on e-Xoops (exoops), when "Allow custom avatar upload" is enabled, does not properly verify uploaded files, which allows remote attackers to upload arbitrary files.


Provide references for further information: Can you share references or external links related to CVE-2005-1031?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.runcms.org/public/modules/news/'}, {'name': '14869', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14869'}, {'name': '20050406 runcms/e-xoops 1.1A and below file upload vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111280711228450&w=2'}, {'name': '13027', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13027'}, {'name': 'exoops-runcms-upload-files(20001)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20001'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1031?


Explain the CVE ID: What does the identifier CVE-2005-1032 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1032.


Provide references for further information: Can you share references or external links related to CVE-2005-1032?


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1032?


Explain the CVE ID: What does the identifier CVE-2005-1033 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1033.

CubeCart 2.0.6 allows remote attackers to obtain sensitive information via an invalid (1) language parameter to index.php, (2) PHPSESSID parameter to index.php, (3) product parameter to tellafriend.php, (4) add parameter to view_cart.php, or (5) product parameter to view_product.php, which reveals the path in a PHP error message.


Provide references for further information: Can you share references or external links related to CVE-2005-1033?

{'name': '14064', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/14064'}, {'name': '1013660', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013660'}, {'name': '20050406 [NOBYTES.COM: #6] CubeCart 2.0.6 - Information Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111281457918479&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1033?


Explain the CVE ID: What does the identifier CVE-2005-1034 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1034.

SurgeFTP 2.2m1 allows remote attackers to cause a denial of service (application hang) via the LEAK command.


Provide references for further information: Can you share references or external links related to CVE-2005-1034?

{'name': '1013664', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013664'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.org.sg/vuln/surgeftp22m1.html'}, {'name': '13054', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13054'}, {'name': '14888', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14888'}, {'name': '20050407 [SIG^2 G-TEC] SurgeFTP LEAK Command Denial-Of-Service Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111289226204780&w=2'}, {'name': 'surgeftp-leak-ftp-dos(20011)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20011'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1034?


Explain the CVE ID: What does the identifier CVE-2005-1035 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1035.

Multiple buffer overflows in Pavuk before 0.9.32 have unknown attack vectors and impact.


Provide references for further information: Can you share references or external links related to CVE-2005-1035?

{'name': '14571', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14571'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=313436'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1035?


Explain the CVE ID: What does the identifier CVE-2005-1036 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1036.

FreeBSD 5.x to 5.4 on AMD64 does not properly initialize the IO permission bitmap used to allow user access to certain hardware, which allows local users to bypass intended access restrictions to cause a denial of service, obtain sensitive information, and possibly gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2005-1036?

{'name': 'FreeBSD-SA-05:03', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:03.amd64.asc'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1036?


Explain the CVE ID: What does the identifier CVE-2005-1037 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1037.

Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges.


Provide references for further information: Can you share references or external links related to CVE-2005-1037?

{'name': 'IY68825', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY68825&apar=only'}, {'name': '14856', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14856'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.niscc.gov.uk/niscc/docs/br-20050405-00278.html?lang=en'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1037?


Explain the CVE ID: What does the identifier CVE-2005-1038 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1038.

crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink.  NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235.


Provide references for further information: Can you share references or external links related to CVE-2005-1038?

{'name': '20060401-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U'}, {'name': 'RHSA-2006:0117', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2006-0117.html'}, {'name': 'SUSE-SR:2007:007', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2007_007_suse.html'}, {'name': '24995', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24995'}, {'name': 'oval:org.mitre.oval:def:11104', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11104'}, {'name': 'RHSA-2005:361', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-361.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2006-118.htm'}, {'name': '19532', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19532'}, {'name': '13024', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13024'}, {'name': '20666', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20666'}, {'name': '20050406 crontab from vixie-cron allows read other users crontabs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/395093'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1038?


Explain the CVE ID: What does the identifier CVE-2005-1039 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1039.

Race condition in Core Utilities (coreutils) 5.2.1, when (1) mkdir, (2) mknod, or (3) mkfifo is running with the -m switch, allows local users to modify permissions of other files.


Provide references for further information: Can you share references or external links related to CVE-2005-1039?

{'name': '13053', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13053'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1039?


Explain the CVE ID: What does the identifier CVE-2005-1040 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1040.

Multiple unknown vulnerabilities in netapplet in Novell Linux Desktop 9 allow local users to gain root privileges, related to "User input [being] passed to network scripts without verification."


Provide references for further information: Can you share references or external links related to CVE-2005-1040?

{'name': 'SUSE-SR:2005:010', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.suse.com/archive/suse-security-announce/2005-Apr/0002.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1040?


Explain the CVE ID: What does the identifier CVE-2005-1041 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1041.

The fib_seq_start function in fib_hash.c in Linux kernel allows local users to cause a denial of service (system crash) via /proc/net/route.


Provide references for further information: Can you share references or external links related to CVE-2005-1041?

{'name': 'RHSA-2005:366', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-366.html'}, {'name': '13267', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13267'}, {'name': '[bk-commits-head] 20050319 [PATCH] Fix crash while reading /proc/net/route', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=bk-commits-head&m=111186506706769&w=2'}, {'name': 'SUSE-SA:2005:068', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.securityfocus.com/archive/1/419522/100/0/threaded'}, {'name': 'oval:org.mitre.oval:def:9487', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9487'}, {'name': '17918', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17918'}, {'name': 'FLSA:157459-3', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/427980/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1041?


Explain the CVE ID: What does the identifier CVE-2005-1042 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1042.

Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that leads to a negative byte count.


Provide references for further information: Can you share references or external links related to CVE-2005-1042?

{'name': 'RHSA-2005:406', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-406.html'}, {'name': 'MDKSA-2005:072', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:072'}, {'name': 'oval:org.mitre.oval:def:10822', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10822'}, {'name': 'GLSA-200504-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml'}, {'name': 'APPLE-SA-2005-06-08', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=154021'}, {'name': 'USN-112-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/112-1/'}, {'name': 'RHSA-2005:405', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-405.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.php.net/diff.php/php-src/ext/exif/exif.c?r1=1.118.2.33&r2=1.118.2.34&ty=u'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1042?


Explain the CVE ID: What does the identifier CVE-2005-1043 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1043.

exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes significant stack recursion.


Provide references for further information: Can you share references or external links related to CVE-2005-1043?

{'name': 'RHSA-2005:406', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-406.html'}, {'name': 'MDKSA-2005:072', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:072'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=154025'}, {'name': 'GLSA-200504-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml'}, {'name': 'APPLE-SA-2005-06-08', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html'}, {'name': 'oval:org.mitre.oval:def:10307', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10307'}, {'name': 'USN-112-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/112-1/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.php.net/diff.php/php-src/ext/exif/exif.c?r1=1.118.2.29&r2=1.118.2.30&ty=u'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1043?


Explain the CVE ID: What does the identifier CVE-2005-1044 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1044.


Provide references for further information: Can you share references or external links related to CVE-2005-1044?


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1044?


Explain the CVE ID: What does the identifier CVE-2005-1045 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1045.

OpenText FirstClass 8.0 client does not properly sanitize strings before passing them to the Windows ShellExecute API, which allows remote attackers to execute arbitrary commands via a UNC path in a bookmark.


Provide references for further information: Can you share references or external links related to CVE-2005-1045?

{'name': '15356', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15356'}, {'name': '13079', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13079'}, {'name': '1013665', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013665'}, {'name': '14898', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14898/'}, {'name': '20050408 OpenText FirstClass 8.0 Client Arbitrary File Execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111323587931293&w=2'}, {'name': 'firstclass-bookmark-command-execution(20032)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20032'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1045?


Explain the CVE ID: What does the identifier CVE-2005-1046 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1046.

Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file.


Provide references for further information: Can you share references or external links related to CVE-2005-1046?

{'name': 'oval:org.mitre.oval:def:11081', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11081'}, {'name': 'SUSE-SA:2005:022', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_22_kdelibs3.html'}, {'name': 'oval:org.mitre.oval:def:5802', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5802'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20050421-1.txt'}, {'name': 'FLSA:178606', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/427976/100/0/threaded'}, {'name': 'ADV-2005-0331', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0331'}, {'name': '14908', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14908'}, {'name': '201320', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-201320-1'}, {'name': 'DSA-714', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-714'}, {'name': '28114', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28114'}, {'name': '103170', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-103170-1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.kde.org/show_bug.cgi?id=102328'}, {'name': '13096', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13096'}, {'name': 'RHSA-2005:393', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-393.html'}, {'name': 'ADV-2007-4241', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/4241'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1046?


Explain the CVE ID: What does the identifier CVE-2005-1047 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1047.

Meilad File upload script (up.php) mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded, which allows remote authenticated users to execute arbitrary commands by uploading PHP files, then directly requesting them from the uploads directory.


Provide references for further information: Can you share references or external links related to CVE-2005-1047?

{'name': '1013671', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013671'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.defacers.com.mx/advisories/2.txt'}, {'name': '20050408 phpBB Upload Script "up.php" Arbitrary File Upload', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111299353030534&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1047?


Explain the CVE ID: What does the identifier CVE-2005-1048 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1048.

SQL injection vulnerability in modules.php in PostNuke 0.760 RC3 allows remote attackers to execute arbitrary SQL statements via the sid parameter.  NOTE: the vendor reports that they could not reproduce the issues for 760 RC3, or for .750.


Provide references for further information: Can you share references or external links related to CVE-2005-1048?

{'tags': ['x_refsource_MISC'], 'url': 'http://digitalparadox.org/advisories/postnuke.txt'}, {'name': 'postnuke-sid-sql-injection(20019)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20019'}, {'name': '20050408 Sql injection, xss and path disclosure vulnerabilities in PostNuke 0.760-RC3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111298226029957&w=2'}, {'name': '15371', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15371'}, {'name': '14868', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14868/'}, {'name': '1013670', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013670'}, {'tags': ['x_refsource_MISC'], 'url': 'http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2679'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1048?


Explain the CVE ID: What does the identifier CVE-2005-1049 mean in the context of cybersecurity?