Savant Web Server stores user credentials in plaintext in the SavantUsers registry key, which allows local users to gain privileges. Date published : 2005-09-08 http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=84 http://secunia.com/advisories/16666
The Fetch.FetchContact.1 ActiveX control (Fetch.dll) for Rediff Bol 7.0 allows remote attackers to read the Windows Address Book via the FullAddressBook method. Date published : 2005-09-08 http://www.infogreg.com/security/im/rediff-bol-7-exposes-wab.html http://secunia.com/advisories/16685
Free SMTP Server 2.2 allows remote attackers to use the server as an open mail relay (spam proxy). Date published : 2005-09-08 http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=87 http://secunia.com/advisories/16698
Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including (1) ALZip 5.51 through 6.11, (2) Servant Salamander 2.0 and 2.5 Beta 1, (3) WinHKI 1.66...
Cross-site scripting (XSS) vulnerability in Unclassified NewsBoard 1.5.3 allows remote attackers to inject arbitrary web script or HTML via the description field. Date published : 2005-09-08 http://www.securityfocus.com/bid/14748 http://marc.info/?l=bugtraq&m=112605049014473&w=2
CRLF injection vulnerability in thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1 allows remote attackers to use the script as a mail relay (spam proxy) via CRLF sequences in the (1) name or (2) email...
Multiple cross-site scripting (XSS) vulnerabilities in GuppY 4.5.3a and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the pg parameter to printfaq.php, or the (2) Referer or (3) User-Agent...
Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a denial of service (ABEND) via an incorrect password length, as exploited by the "worm.rbot.ccc"...
smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the (1) smb4k.tmp or (2) sudoers temporary files. Date published : 2005-09-08 http://www.securityfocus.com/bid/14756 http://smb4k.berlios.de/
SlimFTPd 3.17 allows remote attackers to cause a denial of service (crash) via certain (1) USER and (2) PASS commands, possibly due to a buffer overflow or off-by-one error. Date published : 2005-09-08 http://www.critical.lt/?vulnerabilities/8...
Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to (1) read portions of source code via the -f option to Dig (dig_device.cgi), (2) determine file existence via...
Directory traversal vulnerability in img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter. Date published : 2005-09-08...
img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter. Date published : 2005-09-08 http://www.securityfocus.com/bid/14712 http://marc.info/?l=bugtraq&m=112560044813390&w=2
PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to execute arbitrary PHP code via the nls[file][vx][vxsfx] parameter. Date published : 2005-09-08 http://www.securityfocus.com/bid/14709 http://marc.info/?l=bugtraq&m=112552342004406&w=2