Provide references for further information: Can you share references or external links related to CVE-2005-0186?

{'name': 'oval:org.mitre.oval:def:4849', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4849'}, {'name': '1012945', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012945'}, {'name': '13913', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13913'}, {'name': '20050119 Vulnerability in Cisco IOS Embedded Call Processing Solutions', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20050119-itscme.shtml'}, {'name': 'cisco-ios-sccp-dos(18956)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18956'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0186?


Explain the CVE ID: What does the identifier CVE-2005-0187 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0187.

Stack-based buffer overflow in the SetSkin function in AtHoc toolbar allows remote attackers to execute arbitrary code via a long skin name.


Provide references for further information: Can you share references or external links related to CVE-2005-0187?

{'name': '20050119 Multiple vulnerabilities in the AtHoc Toolbar (#NISR19012005c)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110616363415176&w=2'}, {'name': '11341', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11341'}, {'name': '20041006 Patch available for high risk flaws in the AtHoc Toolbar', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109710974324742&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/athoc-01full.txt'}, {'name': 'athoc-toolbar-bo(17627)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17627'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0187?


Explain the CVE ID: What does the identifier CVE-2005-0188 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0188.

Format string vulnerability in the SetBaseURL function in AtHoc toolbar allows remote attackers to execute arbitrary code via format string specifiers in an invalid URL that is recorded in the debug log.


Provide references for further information: Can you share references or external links related to CVE-2005-0188?

{'name': '20050119 Multiple vulnerabilities in the AtHoc Toolbar (#NISR19012005c)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110616363415176&w=2'}, {'name': '11341', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11341'}, {'name': '20041006 Patch available for high risk flaws in the AtHoc Toolbar', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109710974324742&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/athoc-01full.txt'}, {'name': 'athoc-toolbar-format-string(17628)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17628'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0188?


Explain the CVE ID: What does the identifier CVE-2005-0189 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0189.

Stack-based buffer overflow in the HandleAction function in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to execute arbitrary code via a long ShowPreferences argument.


Provide references for further information: Can you share references or external links related to CVE-2005-0189?

{'name': "20050119 RealPlayer 'ShowPreferences' Buffer Overflow Vulnerability (#NISR19012005e)", 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2005-q1/0046.html'}, {'name': "20050119 RealPlayer 'ShowPreferences' Buffer Overflow Vulnerability (#NISR19012005e)", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110616636318261&w=2'}, {'name': '12311', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12311'}, {'tags': ['x_refsource_MISC'], 'url': 'http://service.real.com/help/faq/security/040928_player/EN/'}, {'name': '20041006 Patch available for multiple high risk vulnerabilities in RealPlayer', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109707741022291&w=2'}, {'name': 'VU#698390', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/698390'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0189?


Explain the CVE ID: What does the identifier CVE-2005-0190 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0190.

Directory traversal vulnerability in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to delete arbitrary files via a Real Metadata Packages (RMP) file with a FILENAME tag containing .. (dot dot) sequences in a filename that ends with a ? (question mark) and an allowed file extension (e.g. .mp3), which bypasses the check for the file extension.


Provide references for further information: Can you share references or external links related to CVE-2005-0190?

{'name': '11308', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11308'}, {'name': '20050119 RealPlayer Arbitrary File Deletion Vulnerability (#NISR19012005f)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110616160228843&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://service.real.com/help/faq/security/040928_player/EN/'}, {'name': 'realplayer-media-file-deletion(17551)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17551'}, {'name': '12672', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12672/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/real-02full.txt'}, {'name': '20041006 Patch available for multiple high risk vulnerabilities in RealPlayer', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109707741022291&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0190?


Explain the CVE ID: What does the identifier CVE-2005-0191 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0191.

Off-by-one buffer overflow in the processing of tags in Real Metadata Package (RMP) files in RealPlayer 10.5 (6.0.12.1040) and earlier could allow remote attackers to execute arbitrary code via a long tag.


Provide references for further information: Can you share references or external links related to CVE-2005-0191?

{'name': 'realplayer-long-filename-offbyone-bo(18982)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18982'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/real-03full.txt'}, {'name': '20050119 RealPlayer Miscellaneous Vulnerabilities (#NISR19012005g)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110616302008401&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://service.real.com/help/faq/security/040928_player/EN/'}, {'name': '20041006 Patch available for multiple high risk vulnerabilities in RealPlayer', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109707741022291&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0191?


Explain the CVE ID: What does the identifier CVE-2005-0192 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0192.

Directory traversal vulnerability in the parsing of Skin file names in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an RJS filename.


Provide references for further information: Can you share references or external links related to CVE-2005-0192?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/real-03full.txt'}, {'name': '20050119 RealPlayer Miscellaneous Vulnerabilities (#NISR19012005g)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110616302008401&w=2'}, {'name': 'realplayer-rjs-filenane-directory-traversal(18984)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18984'}, {'tags': ['x_refsource_MISC'], 'url': 'http://service.real.com/help/faq/security/040928_player/EN/'}, {'name': '20041006 Patch available for multiple high risk vulnerabilities in RealPlayer', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109707741022291&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0192?


Explain the CVE ID: What does the identifier CVE-2005-0193 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0193.

Buffer overflow in the (1) -v and (2) -a switches in mRouter in iSync 1.5 in Mac OS X 10.3.7 and earlier allows local users to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2005-0193?

{'name': 'APPLE-SA-2005-04-19', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Apr/msg00001.html'}, {'name': '13965', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13965'}, {'name': '12334', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12334'}, {'name': '1012974', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012974'}, {'name': '20050122 Mac OS X 10.3 iSync Privilege Escalation', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110642400018425&w=2'}, {'name': 'isync-mrouter-bo(19011)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19011'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0193?


Explain the CVE ID: What does the identifier CVE-2005-0194 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0194.

Squid 2.5, when processing the configuration file, parses empty Access Control Lists (ACLs), including proxy_auth ACLs without defined auth schemes, in a way that effectively removes arguments, which could allow remote attackers to bypass intended ACLs if the administrator ignores the parser warnings.


Provide references for further information: Can you share references or external links related to CVE-2005-0194?

{'name': 'CLA-2005:923', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-empty_acls'}, {'name': '20050221 [USN-84-1] Squid vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110901183320453&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-empty_acls.patch'}, {'name': 'FLSA-2006:152809', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://fedoranews.org/updates/FEDORA--.shtml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/bugs/show_bug.cgi?id=1166'}, {'name': 'DSA-667', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-667'}, {'name': 'VU#260421', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/260421'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0194?


Explain the CVE ID: What does the identifier CVE-2005-0195 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0195.

Cisco IOS 12.0S through 12.3YH allows remote attackers to cause a denial of service (device restart) via a crafted IPv6 packet.


Provide references for further information: Can you share references or external links related to CVE-2005-0195?

{'name': '20050126 Multiple Crafted IPv6 Packets Cause Reload', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20050126-ipv6.shtml'}, {'name': 'VU#472582', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/472582'}, {'name': 'oval:org.mitre.oval:def:5813', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5813'}, {'name': 'cisco-ios-ipv6-dos(19072)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19072'}, {'name': 'TA05-026A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA05-026A.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0195?


Explain the CVE ID: What does the identifier CVE-2005-0196 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0196.

Cisco IOS 12.0 through 12.3YL, with BGP enabled and running the bgp log-neighbor-changes command, allows remote attackers to cause a denial of service (device reload) via a malformed BGP packet.


Provide references for further information: Can you share references or external links related to CVE-2005-0196?

{'name': '14034', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14034'}, {'name': '1013013', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013013'}, {'name': 'VU#689326', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/689326'}, {'name': '20050126 Cisco IOS Misformed BGP Packet Causes Reload', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20050126-bgp.shtml'}, {'name': 'oval:org.mitre.oval:def:5652', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5652'}, {'name': 'cisco-ios-bgp-packetdos(19074)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19074'}, {'name': 'TA05-026A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA05-026A.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0196?


Explain the CVE ID: What does the identifier CVE-2005-0197 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0197.

Cisco IOS 12.1T, 12.2, 12.2T, 12.3 and 12.3T, with Multi Protocol Label Switching (MPLS) installed but disabled, allows remote attackers to cause a denial of service (device reload) via a crafted packet sent to the disabled interface.


Provide references for further information: Can you share references or external links related to CVE-2005-0197?

{'name': 'VU#583638', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/583638'}, {'name': 'oval:org.mitre.oval:def:5662', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5662'}, {'name': '14031', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14031'}, {'name': 'cisco-ios-mpls-dos(19071)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19071'}, {'name': '12369', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12369'}, {'name': 'TA05-026A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA05-026A.html'}, {'name': '1013015', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013015'}, {'name': '20050126 Crafted Packet Causes Reload on Cisco Routers', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20050126-les.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0197?


Explain the CVE ID: What does the identifier CVE-2005-0198 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0198.

A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5) is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticate as arbitrary users.


Provide references for further information: Can you share references or external links related to CVE-2005-0198?

{'name': 'oval:org.mitre.oval:def:11306', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11306'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/CRDY-68QSL5'}, {'name': 'RHSA-2005:128', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-128.html'}, {'name': 'GLSA-200502-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-02.xml'}, {'name': 'MDKSA-2005:026', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:026'}, {'name': '14097', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14097'}, {'name': '1013037', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013037'}, {'name': 'VU#702777', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/702777'}, {'name': '14057', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14057'}, {'name': '12391', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12391'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0198?


Explain the CVE ID: What does the identifier CVE-2005-0199 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0199.

Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long MODE line that causes an incorrect length calculation, which leads to a buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2005-0199?

{'name': '[ngIRCd-ML] 20050126 ngIRCd 0.8.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://arthur.ath.cx/pipermail/ngircd-ml/2005-January/000228.html'}, {'name': '1013047', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013047'}, {'name': '14056', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14056'}, {'name': 'ngircd-listmakemask-bo(19143)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19143'}, {'name': 'GLSA-200501-40', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-40.xml'}, {'name': '14059', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14059'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=79705'}, {'name': '12397', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12397'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0199?


Explain the CVE ID: What does the identifier CVE-2005-0200 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0200.

TikiWiki before 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2004-1386.


Provide references for further information: Can you share references or external links related to CVE-2005-0200?

{'name': 'GLSA-200501-41', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-41.xml'}, {'name': '13948', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13948'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://tikiwiki.org/art102'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0200?


Explain the CVE ID: What does the identifier CVE-2005-0201 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0201.

D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket.


Provide references for further information: Can you share references or external links related to CVE-2005-0201?

{'name': '15833', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15833'}, {'name': '15844', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15844'}, {'name': '12435', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12435'}, {'name': 'MDKSA-2005:105', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:105'}, {'name': 'oval:org.mitre.oval:def:10973', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10973'}, {'name': '1013075', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013075'}, {'name': '15638', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15638'}, {'name': 'RHSA-2005:102', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-102.html'}, {'name': 'ESB-2005.0435', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=5156'}, {'name': 'USN-144-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/144-1/'}, {'name': '14119', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14119'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0201?


Explain the CVE ID: What does the identifier CVE-2005-0202 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0202.

Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences.


Provide references for further information: Can you share references or external links related to CVE-2005-0202?

{'name': 'RHSA-2005:137', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-137.html'}, {'name': '1013145', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013145'}, {'name': 'oval:org.mitre.oval:def:10657', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10657'}, {'name': 'MDKSA-2005:037', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:037'}, {'name': 'GLSA-200502-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-11.xml'}, {'name': '20050209 Administrivia: List Compromised due to Mailman Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031562.html'}, {'name': '20050209 [USN-78-1] Mailman vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110805795122386&w=2'}, {'name': 'SUSE-SA:2005:007', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_07_mailman.html'}, {'name': 'RHSA-2005:136', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-136.html'}, {'name': 'DSA-674', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-674'}, {'name': '14211', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14211'}, {'name': 'APPLE-SA-2005-03-21', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0202?


Explain the CVE ID: What does the identifier CVE-2005-0203 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0203.


Provide references for further information: Can you share references or external links related to CVE-2005-0203?


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0203?


Explain the CVE ID: What does the identifier CVE-2005-0204 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0204.

Linux kernel before 2.6.9, when running on the AMD64 and Intel EM64T architectures, allows local users to write to privileged IO ports via the OUTS instruction.


Provide references for further information: Can you share references or external links related to CVE-2005-0204?

{'name': '2006-0006', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2006/0006'}, {'name': '12598', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12598'}, {'name': 'RHSA-2005:092', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-092.html'}, {'name': 'RHSA-2005:293', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-293.html'}, {'name': '18784', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18784'}, {'name': 'oval:org.mitre.oval:def:10320', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10320'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0204?


Explain the CVE ID: What does the identifier CVE-2005-0205 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0205.

KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of file descriptors before executing kppp.


Provide references for further information: Can you share references or external links related to CVE-2005-0205?

{'name': 'oval:org.mitre.oval:def:9596', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9596'}, {'name': 'DSA-692', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-692'}, {'name': 'RHSA-2005:175', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-175.html'}, {'name': 'CLA-2005:934', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000934'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20050228-1.txt'}, {'name': '20050228 KPPP Privileged File Descriptor Leak Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=208&type=vulnerabilities'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0205?


Explain the CVE ID: What does the identifier CVE-2005-0206 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0206.

The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.


Provide references for further information: Can you share references or external links related to CVE-2005-0206?

{'name': 'oval:org.mitre.oval:def:11107', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11107'}, {'name': 'MDKSA-2005:041', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:041'}, {'name': '11501', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11501'}, {'name': 'RHSA-2005:034', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-034.html'}, {'name': 'MDKSA-2005:056', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:056'}, {'name': 'MDKSA-2005:043', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:043'}, {'name': 'RHSA-2005:213', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-213.html'}, {'name': 'MDKSA-2005:044', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:044'}, {'name': 'RHSA-2005:053', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-053.html'}, {'name': 'xpdf-pdf-bo(17818)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17818'}, {'name': 'MDKSA-2005:052', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:052'}, {'name': 'RHSA-2005:132', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-132.html'}, {'name': 'MDKSA-2005:042', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:042'}, {'name': 'RHSA-2005:057', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-057.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0206?


Explain the CVE ID: What does the identifier CVE-2005-0207 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0207.

Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via O_DIRECT.


Provide references for further information: Can you share references or external links related to CVE-2005-0207?

{'name': 'RHSA-2005:366', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-366.html'}, {'name': 'SUSE-SA:2005:003', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.securityfocus.com/advisories/7880'}, {'name': '12330', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12330'}, {'name': 'CLA-2005:930', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000930'}, {'name': 'oval:org.mitre.oval:def:11001', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11001'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0207?


Explain the CVE ID: What does the identifier CVE-2005-0208 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0208.

The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0473.


Provide references for further information: Can you share references or external links related to CVE-2005-0208?

{'name': 'VU#795812', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/795812'}, {'name': 'FLSA:158543', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/426078/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gaim.sourceforge.net/security/?id=12'}, {'name': '14386', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14386'}, {'name': 'oval:org.mitre.oval:def:10477', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10477'}, {'name': 'GLSA-200503-03', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200503-03.xml'}, {'name': '20050225 [USN-85-1] Gaim vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110935655500670&w=2'}, {'name': 'MDKSA-2005:049', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:049'}, {'name': '12660', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12660'}, {'name': 'CLA-2005:933', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000933'}, {'name': 'RHSA-2005:215', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-215.html'}, {'name': 'SUSE-SA:2005:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_36_sudo.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0208?


Explain the CVE ID: What does the identifier CVE-2005-0209 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0209.

Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via crafted IP packet fragments.


Provide references for further information: Can you share references or external links related to CVE-2005-0209?

{'name': '20050315 [USN-95-1] Linux kernel vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111091402626556&w=2'}, {'name': 'RHSA-2005:366', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-366.html'}, {'name': 'SUSE-SA:2005:018', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_18_kernel.html'}, {'name': 'oval:org.mitre.oval:def:11855', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11855'}, {'name': '12598', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12598'}, {'name': 'RHSA-2005:420', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-420.html'}, {'name': 'CLA-2005:945', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0209?


Explain the CVE ID: What does the identifier CVE-2005-0210 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0210.

Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service (memory consumption) via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice.


Provide references for further information: Can you share references or external links related to CVE-2005-0210?

{'name': '20050315 [USN-95-1] Linux kernel vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111091402626556&w=2'}, {'name': 'RHSA-2005:663', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2005-663.html'}, {'name': '12816', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12816'}, {'name': 'SUSE-SA:2005:018', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_18_kernel.html'}, {'name': '14295', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14295'}, {'name': 'MDKSA-2005:218', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:218'}, {'name': '17002', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17002'}, {'name': '17826', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17826'}, {'name': 'RHSA-2005:366', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2005-366.html'}, {'name': 'MDKSA-2005:219', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:219'}, {'name': 'ADV-2005-1878', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/1878'}, {'name': '14966', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/14966'}, {'name': 'oval:org.mitre.oval:def:10275', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10275'}, {'name': 'CLA-2005:945', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0210?


Explain the CVE ID: What does the identifier CVE-2005-0211 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0211.

Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0211?

{'name': '1013045', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013045'}, {'name': '13319', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/13319'}, {'name': 'VU#886006', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/886006'}, {'name': '14076', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14076'}, {'name': 'FLSA-2006:152809', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://fedoranews.org/updates/FEDORA--.shtml'}, {'name': '12432', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12432'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-wccp_buffer_overflow.patch'}, {'name': 'RHSA-2005:061', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-061.html'}, {'name': 'oval:org.mitre.oval:def:9573', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9573'}, {'name': 'MDKSA-2005:034', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:034'}, {'name': 'DSA-667', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-667'}, {'name': '20050207 [USN-77-1] Squid vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110780531820947&w=2'}, {'name': 'SUSE-SA:2005:006', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_06_squid.html'}, {'name': 'RHSA-2005:060', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-060.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-wccp_buffer_overflow'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0211?


Explain the CVE ID: What does the identifier CVE-2005-0212 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0212.

The Amp II engine as used by Gore: Ultimate Soldier 1.50 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero byte UDP packet.


Provide references for further information: Can you share references or external links related to CVE-2005-0212?

{'name': 'amp-3d-socket-dos(18789)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18789'}, {'name': '20050106 Socket unreacheable in Amp II engine', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110503597505648&w=2'}, {'name': '12192', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12192'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/amp2zero-adv.txt'}, {'name': '13754', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13754'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0212?


Explain the CVE ID: What does the identifier CVE-2005-0213 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0213.

Directory traversal vulnerability in WinHKI 1.4d allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a zip file.


Provide references for further information: Can you share references or external links related to CVE-2005-0213?

{'name': '12176', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12176'}, {'name': '20050106 WinAc AND WinHKI ZIP File Directory Transversal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110505334903257&w=2'}, {'name': '13738', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13738'}, {'name': 'winhki-zip-directory-traversal(18798)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18798'}, {'name': '1012798', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012798'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0213?


Explain the CVE ID: What does the identifier CVE-2005-0214 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0214.

Directory traversal vulnerability in Simple PHP Blog (SPHPBlog) 0.3.7c allows remote attackers to read or create arbitrary files via a .. (dot dot) in the entry parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0214?

{'name': '20050107 Simple PHP Blog directory traversal vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2005-01/0210.html'}, {'name': '20050107 Simple PHP Blog directory traversal vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110512850603989&w=2'}, {'name': 'sphp-dotdot-directory-traversal(18802)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18802'}, {'name': '12193', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12193'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0214?


Explain the CVE ID: What does the identifier CVE-2005-0215 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0215.

Mozilla 1.6 and possibly other versions allows remote attackers to cause a denial of service (application crash) via a XBM (X BitMap) file with a large (1) height or (2) width value.


Provide references for further information: Can you share references or external links related to CVE-2005-0215?

{'name': '20050107 Mozilla XBM Image Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110512665029209&w=2'}, {'name': 'mozilla-xbm-dos(18803)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18803'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0215?


Explain the CVE ID: What does the identifier CVE-2005-0216 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0216.

Cross-site scripting (XSS) vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly other versions, allows remote attackers to inject arbitrary web script and HTML via the userid parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0216?

{'name': '13782', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13782'}, {'name': '20050108 Security Advisory: Woltlab Burning Board Lite formmail.php XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110537385427004&w=2'}, {'name': '12199', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12199'}, {'name': 'wbb-formmail-userid-xss(18814)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18814'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0216?


Explain the CVE ID: What does the identifier CVE-2005-0217 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0217.

SQL injection vulnerability in index.php in Invision Community Blog allows remote attackers to execute arbitrary SQL commands via the eid parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0217?

{'name': 'icb-sql-injection(18815)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18815'}, {'name': '12205', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12205'}, {'name': '12817', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/12817'}, {'name': '20050109 SQL Injection Vulnerability in Invision Community Blog', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110538277223800&w=2'}, {'name': '13783', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13783'}, {'name': '1012831', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012831'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0217?


Explain the CVE ID: What does the identifier CVE-2005-0218 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0218.

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: (RFC 2397) URL.


Provide references for further information: Can you share references or external links related to CVE-2005-0218?

{'name': '20050114 Re: Multi-vendor AV gateway image inspection bypass vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/lists/fulldisclosure/2005/Jan/0537.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=300116'}, {'name': '20050110 Multi-vendor AV gateway image inspection bypass vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/lists/fulldisclosure/2005/Jan/0332.html'}, {'name': 'GLSA-200501-46', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-46.xml'}, {'name': '13900', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13900/'}, {'name': 'MDKSA-2005:025', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:025'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0218?


Explain the CVE ID: What does the identifier CVE-2005-0219 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0219.

Multiple cross-site scripting (XSS) vulnerabilities in Gallery 1.3.4-pl1 allow remote attackers to inject arbitrary web script or HTML via (1) the index field in add_comment.php, (2) set_albumName, (3) slide_index, (4) slide_full, (5) slide_loop, (6) slide_pause, (7) slide_dir fields in slideshow_low.php, or (8) username field in search.php.


Provide references for further information: Can you share references or external links related to CVE-2005-0219?

{'name': '20050117 Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110608459222364&w=2'}, {'name': 'gallery-multiple-scripts-xss(43473)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/43473'}, {'name': '20050117 Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://theinsider.deep-ice.com/texts/advisory69.txt'}, {'name': 'gallery-multiple-xss(18938)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18938'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0219?


Explain the CVE ID: What does the identifier CVE-2005-0220 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0220.

Cross-site scripting vulnerability in login.php in Gallery 1.4.4-pl2 allows remote attackers to inject arbitrary web script or HTML via the username field.


Provide references for further information: Can you share references or external links related to CVE-2005-0220?

{'name': 'GLSA-200501-45', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-45.xml'}, {'name': '20050117 Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110608459222364&w=2'}, {'name': '20050117 Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://theinsider.deep-ice.com/texts/advisory69.txt'}, {'name': 'gallery-multiple-xss(18938)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18938'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147'}, {'name': '13887', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13887/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0220?


Explain the CVE ID: What does the identifier CVE-2005-0221 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0221.

Cross-site scripting (XSS) vulnerability in login.php in Gallery 2.0 Alpha allows remote attackers to inject arbitrary web script or HTML via the g2_form[subject] field.


Provide references for further information: Can you share references or external links related to CVE-2005-0221?

{'name': '20050117 Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110608459222364&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://theinsider.deep-ice.com/texts/advisory69.txt'}, {'name': 'gallery-g2formsubject-xss(43472)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/43472'}, {'name': 'gallery-multiple-xss(18938)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18938'}, {'name': '20050117 [VulnWatch] Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0221?


Explain the CVE ID: What does the identifier CVE-2005-0222 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0222.

main.php in Gallery 2.0 Alpha allows remote attackers to gain sensitive information by changing the value of g2_subView parameter, which reveals the path in an error message.


Provide references for further information: Can you share references or external links related to CVE-2005-0222?

{'name': '20050117 Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110608459222364&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://theinsider.deep-ice.com/texts/advisory69.txt'}, {'name': 'gallery-mainphp-obtain-information(18940)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18940'}, {'name': '20050117 [VulnWatch] Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0222?


Explain the CVE ID: What does the identifier CVE-2005-0223 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0223.

The Software Development Kit (SDK) and Run Time Environment (RTE) 1.4.1 and 1.4.2 for Tru64 UNIX allows remote attackers to cause a denial of service (Java Virtual Machine hang) via object deserialization.


Provide references for further information: Can you share references or external links related to CVE-2005-0223?

{'name': 'SSRT4875', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=110719624029320&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0223?


Explain the CVE ID: What does the identifier CVE-2005-0224 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0224.

Unknown vulnerability in HP-UX B.11.04 running Virtualvault 4.5 through 4.7, when running the TGA daemon, allows remote attackers to cause a denial of service via certain network traffic.


Provide references for further information: Can you share references or external links related to CVE-2005-0224?

{'name': '14082', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14082/'}, {'name': 'SSRT5900', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=110726808700080&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0224?


Explain the CVE ID: What does the identifier CVE-2005-0225 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0225.

firehol.sh in FireHOL before 1.224 creates temporary files with predictable file names, which could allow local users to overwrite arbitrary files via a symlink attack.


Provide references for further information: Can you share references or external links related to CVE-2005-0225?

{'name': 'GLSA-200502-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-01.xml'}, {'name': '14102', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14102'}, {'name': '13970', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13970'}, {'name': '12336', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12336'}, {'name': '1012969', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012969'}, {'name': 'firehol-symlink(19032)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19032'}, {'name': '13137', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/13137'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.sourceforge.net/viewcvs.py/firehol/firehol/firehol.sh'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0225?


Explain the CVE ID: What does the identifier CVE-2005-0226 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0226.

Format string vulnerability in the Log_Resolver function in log.c for ngIRCd 0.8.2 and earlier, when compiled with IDENT, logging to SYSLOG, and with DEBUG enabled, allows remote attackers to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2005-0226?

{'name': '20050203 ngIRCd <= v0.8.2 Format String Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110746413108183&w=2'}, {'name': '14114', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14114/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nosystem.com.ar/advisories/advisory-11.txt'}, {'name': '12434', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12434'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0226?


Explain the CVE ID: What does the identifier CVE-2005-0227 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0227.

PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows local users to load arbitrary shared libraries and execute code via the LOAD extension.


Provide references for further information: Can you share references or external links related to CVE-2005-0227?

{'name': '200502-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200502-08.xml'}, {'name': '2005-0003', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2005/0003/'}, {'name': 'DSA-668', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-668'}, {'name': '[pgsql-announce] 20050201 PostgreSQL Security Release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://archives.postgresql.org/pgsql-announce/2005-02/msg00000.php'}, {'name': '12411', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12411'}, {'name': 'MDKSA-2005:040', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:040'}, {'name': '[pgsql-bugs] 20050121 Privilege escalation via LOAD', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://archives.postgresql.org/pgsql-bugs/2005-01/msg00269.php'}, {'name': 'oval:org.mitre.oval:def:10234', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10234'}, {'name': 'RHSA-2005:138', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-138.html'}, {'name': '12948', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12948'}, {'name': 'RHSA-2005:150', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-150.html'}, {'name': '20050201 [USN-71-1] PostgreSQL vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110726899107148&w=2'}, {'name': 'SUSE-SA:2005:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_36_sudo.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0227?


Explain the CVE ID: What does the identifier CVE-2005-0228 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0228.


Provide references for further information: Can you share references or external links related to CVE-2005-0228?


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0228?


Explain the CVE ID: What does the identifier CVE-2005-0229 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0229.

CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers to steal credit card information via a direct request to newfile.txt.


Provide references for further information: Can you share references or external links related to CVE-2005-0229?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.citrusdb.org/forums/viewtopic.php?t=49'}, {'name': '1013040', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013040'}, {'name': 'citrus-information-disclosure(19145)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19145'}, {'name': '12402', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12402'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.redteam-pentesting.de/advisories/rt-sa-2005-001.txt'}, {'name': '20050212 Credit Card data disclosure in CitrusDB', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=110824766519417&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0229?


Explain the CVE ID: What does the identifier CVE-2005-0230 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0230.

Firefox 1.0 does not prevent the user from dragging an executable file to the desktop when it has an image/gif content type but has a dangerous extension such as .bat or .exe, which allows remote attackers to bypass the intended restriction and execute arbitrary commands via malformed GIF files that can still be parsed by the Windows batch file parser, aka "firedragging."


Provide references for further information: Can you share references or external links related to CVE-2005-0230?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/mfsa2005-25.html'}, {'name': 'oval:org.mitre.oval:def:100033', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100033'}, {'name': '19823', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19823'}, {'name': '20050207 Firedragging [Firefox 1.0]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110780995232064&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.mikx.de/firedragging/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=279945'}, {'name': 'GLSA-200503-30', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml'}, {'name': 'GLSA-200503-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml'}, {'name': 'SUSE-SA:2006:022', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006_04_25.html'}, {'name': '12468', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12468'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0230?


Explain the CVE ID: What does the identifier CVE-2005-0231 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0231.

Firefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or data: URL to a tab, which allows remote attackers to bypass the security model, aka "firetabbing."


Provide references for further information: Can you share references or external links related to CVE-2005-0231?

{'name': 'SUSE-SA:2005:016', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=280056'}, {'name': 'oval:org.mitre.oval:def:10079', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10079'}, {'name': '20050207 Firetabbing [Firefox 1.0]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110781134617144&w=2'}, {'name': 'oval:org.mitre.oval:def:100032', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100032'}, {'name': 'mozilla-firefox-tab-gain-access(19264)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19264'}, {'name': 'RHSA-2005:176', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-176.html'}, {'name': 'RHSA-2005:384', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-384.html'}, {'name': 'GLSA-200503-30', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/mfsa2005-26.html'}, {'name': 'GLSA-200503-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.mikx.de/firetabbing/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0231?


Explain the CVE ID: What does the identifier CVE-2005-0232 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0232.

Firefox 1.0 allows remote attackers to modify Boolean configuration parameters for the about:config site by using a plugin such as Flash, and the -moz-opacity filter, to display the about:config site then cause the user to double-click at a certain screen position, aka "Fireflashing."


Provide references for further information: Can you share references or external links related to CVE-2005-0232?

{'name': '20050207 Fireflashing [Firefox 1.0]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110781055630856&w=2'}, {'name': 'RHSA-2005:323', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-323.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/mfsa2005-27.html'}, {'name': 'SUSE-SA:2005:016', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html'}, {'name': 'mozilla-firefox-aboutconfig-modify(19266)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19266'}, {'name': 'RHSA-2005:176', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-176.html'}, {'name': 'RHSA-2005:384', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-384.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=280664'}, {'name': 'oval:org.mitre.oval:def:10967', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10967'}, {'name': 'GLSA-200503-30', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml'}, {'name': 'GLSA-200503-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.mikx.de/fireflashing/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0232?


Explain the CVE ID: What does the identifier CVE-2005-0233 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0233.

The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.


Provide references for further information: Can you share references or external links related to CVE-2005-0233?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.shmoo.com/idn/homograph.txt'}, {'name': 'multiple-browsers-idn-spoof(19236)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19236'}, {'name': '20050206 state of homograph attacks', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.shmoo.com/idn'}, {'name': 'SUSE-SA:2005:016', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html'}, {'name': 'oval:org.mitre.oval:def:11229', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11229'}, {'name': 'oval:org.mitre.oval:def:100029', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100029'}, {'name': 'RHSA-2005:176', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-176.html'}, {'name': 'RHSA-2005:384', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-384.html'}, {'name': 'GLSA-200503-30', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml'}, {'name': 'GLSA-200503-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml'}, {'name': '20050208 International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110782704923280&w=2'}, {'name': '12461', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12461'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/mfsa2005-29.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0233?


Explain the CVE ID: What does the identifier CVE-2005-0234 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0234.

The International Domain Name (IDN) support in Safari 1.2.5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.


Provide references for further information: Can you share references or external links related to CVE-2005-0234?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.shmoo.com/idn/homograph.txt'}, {'name': 'multiple-browsers-idn-spoof(19236)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19236'}, {'name': '20050206 state of homograph attacks', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.shmoo.com/idn'}, {'name': 'APPLE-SA-2005-03-21', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html'}, {'name': '20050208 International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110782704923280&w=2'}, {'name': '12461', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12461'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0234?


Explain the CVE ID: What does the identifier CVE-2005-0235 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0235.

The International Domain Name (IDN) support in Opera 7.54 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.


Provide references for further information: Can you share references or external links related to CVE-2005-0235?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.shmoo.com/idn/homograph.txt'}, {'name': 'multiple-browsers-idn-spoof(19236)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19236'}, {'name': '20050206 state of homograph attacks', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.shmoo.com/idn'}, {'name': 'SUSE-SA:2005:031', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_31_opera.html'}, {'name': '20050208 International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110782704923280&w=2'}, {'name': '12461', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12461'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0235?


Explain the CVE ID: What does the identifier CVE-2005-0236 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0236.

The International Domain Name (IDN) support in Omniweb 5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.


Provide references for further information: Can you share references or external links related to CVE-2005-0236?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.shmoo.com/idn/homograph.txt'}, {'name': 'multiple-browsers-idn-spoof(19236)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19236'}, {'name': '20050206 state of homograph attacks', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.shmoo.com/idn'}, {'name': '20050208 International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110782704923280&w=2'}, {'name': '12461', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12461'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0236?


Explain the CVE ID: What does the identifier CVE-2005-0237 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0237.

The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.


Provide references for further information: Can you share references or external links related to CVE-2005-0237?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.shmoo.com/idn/homograph.txt'}, {'name': 'multiple-browsers-idn-spoof(19236)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19236'}, {'name': '20050206 state of homograph attacks', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20050316-2.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.shmoo.com/idn'}, {'name': '20050206 Re: state of homograph attacks', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031460.html'}, {'name': 'FLSA:178606', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/427976/100/0/threaded'}, {'name': 'MDKSA-2005:058', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:058'}, {'name': '14162', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14162'}, {'name': 'RHSA-2005:325', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-325.html'}, {'name': 'oval:org.mitre.oval:def:10671', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10671'}, {'name': '12461', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12461'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0237?


Explain the CVE ID: What does the identifier CVE-2005-0238 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0238.

The International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.


Provide references for further information: Can you share references or external links related to CVE-2005-0238?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.shmoo.com/idn/homograph.txt'}, {'name': 'multiple-browsers-idn-spoof(19236)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19236'}, {'name': '20050206 state of homograph attacks', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.shmoo.com/idn'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/beta/show_bug.cgi?id=147399'}, {'name': '12461', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12461'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0238?


Explain the CVE ID: What does the identifier CVE-2005-0239 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0239.

viewcert.php in the S/MIME plugin 0.4 and 0.5 for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the cert parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0239?

{'name': 'squirrelmail-smime-command-execution(19242)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19242'}, {'name': 'VU#502328', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/502328'}, {'name': '20050207 SquirrelMail S/MIME Plugin Command Injection Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=191&type=vulnerabilities&flashstatus=false'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squirrelmail.org/plugin_view.php?id=54'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0239?


Explain the CVE ID: What does the identifier CVE-2005-0240 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0240.

Format string vulnerability in chdev on IBM AIX 5.2 allows local users to execute arbitrary code via format string specifiers in a command line argument, which is not properly handled when printing an error message.


Provide references for further information: Can you share references or external links related to CVE-2005-0240?

{'name': 'IY67455', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=isg1IY67455'}, {'name': '20050207 IBM AIX chdev Local Format String Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?type=vulnerabilities'}, {'name': 'aix-chdev-format-string(19244)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19244'}, {'name': 'IY67654', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=isg1IY67654'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0240?


Explain the CVE ID: What does the identifier CVE-2005-0241 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0241.

The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote attackers to poison the cache or bypass access controls based on header size.


Provide references for further information: Can you share references or external links related to CVE-2005-0241?

{'name': '14091', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14091'}, {'name': 'VU#823350', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/823350'}, {'name': '12412', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12412'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/bugs/show_bug.cgi?id=1216'}, {'name': 'oval:org.mitre.oval:def:10998', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10998'}, {'name': 'FLSA-2006:152809', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://fedoranews.org/updates/FEDORA--.shtml'}, {'name': 'RHSA-2005:061', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-061.html'}, {'name': 'squid-http-cache-poisoning(19060)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19060'}, {'name': 'CLA-2005:931', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-oversize_reply_headers'}, {'name': 'SUSE-SA:2005:006', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_06_squid.html'}, {'name': 'RHSA-2005:060', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-060.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-oversize_reply_headers.patch'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0241?


Explain the CVE ID: What does the identifier CVE-2005-0242 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0242.

The Audio Setup Wizard (asw.dll) in Yahoo! Messenger 6.0.0.1750, and possibly other versions, allows attackers to arbitrary code by placing a malicious ping.exe program into the Messenger program directory, which is installed with weak default permissions.


Provide references for further information: Can you share references or external links related to CVE-2005-0242?

{'name': '11815', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11815'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2004-6/advisory/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://messenger.yahoo.com/security/update6.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0242?


Explain the CVE ID: What does the identifier CVE-2005-0243 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0243.

Yahoo! Messenger 6.0.0.1750, and possibly other versions before 6.0.0.1921, does not properly display long filenames in file dialog boxes, which could allow remote attackers to trick users into downloading and executing programs via file names containing a large number of spaces and multiple file extensions.


Provide references for further information: Can you share references or external links related to CVE-2005-0243?

{'name': '13712', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13712'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2005-2/advisory/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0243?


Explain the CVE ID: What does the identifier CVE-2005-0244 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0244.

PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command.


Provide references for further information: Can you share references or external links related to CVE-2005-0244?

{'name': 'oval:org.mitre.oval:def:10927', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10927'}, {'name': 'MDKSA-2005:040', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:040'}, {'name': '20050210 [USN-79-1] PostgreSQL vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110806034116082&w=2'}, {'name': 'RHSA-2005:138', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-138.html'}, {'name': '[pgsql-hackers] 20050127 Permissions on aggregate component functions', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://archives.postgresql.org/pgsql-hackers/2005-01/msg00922.php'}, {'name': '12948', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12948'}, {'name': '12417', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12417'}, {'name': 'postgresql-security-bypass(19184)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19184'}, {'name': 'SUSE-SA:2005:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_36_sudo.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0244?


Explain the CVE ID: What does the identifier CVE-2005-0245 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0245.

Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.


Provide references for further information: Can you share references or external links related to CVE-2005-0245?

{'name': 'postgresql-cursor-bo(19188)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19188'}, {'name': '[pgsql-committers] 20050207 pgsql: Prevent 4 more buffer overruns in the PL/PgSQL parser.', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://archives.postgresql.org/pgsql-committers/2005-02/msg00049.php'}, {'name': 'MDKSA-2005:040', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:040'}, {'name': '20050210 [USN-79-1] PostgreSQL vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110806034116082&w=2'}, {'name': 'oval:org.mitre.oval:def:10175', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10175'}, {'name': '[pgsql-patches] 20050120 Re: WIP: pl/pgsql cleanup', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://archives.postgresql.org/pgsql-patches/2005-01/msg00216.php'}, {'name': 'RHSA-2005:138', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-138.html'}, {'name': '12948', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12948'}, {'name': 'RHSA-2005:150', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-150.html'}, {'name': '[pgsql-committers] 20050121 pgsql: Prevent overrunning a heap-allocated buffer is more than 1024', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://archives.postgresql.org/pgsql-committers/2005-01/msg00298.php'}, {'name': '12417', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12417'}, {'name': 'DSA-683', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-683'}, {'name': 'SUSE-SA:2005:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_36_sudo.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0245?


Explain the CVE ID: What does the identifier CVE-2005-0246 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0246.

The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service (crash) via crafted arrays.


Provide references for further information: Can you share references or external links related to CVE-2005-0246?

{'name': '[pgsql-committers] 20050127 pgsql: Fix security and 64-bit issues in contrib/intagg.', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://archives.postgresql.org/pgsql-committers/2005-01/msg00401.php'}, {'name': 'MDKSA-2005:040', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:040'}, {'name': '20050210 [USN-79-1] PostgreSQL vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110806034116082&w=2'}, {'name': 'postgresql-contribintagg-dos(19185)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19185'}, {'name': 'RHSA-2005:138', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-138.html'}, {'name': '12948', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12948'}, {'name': 'oval:org.mitre.oval:def:10148', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10148'}, {'name': '12417', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12417'}, {'name': 'SUSE-SA:2005:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_36_sudo.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0246?


Explain the CVE ID: What does the identifier CVE-2005-0247 mean in the context of cybersecurity?