| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2002-1347 | 7.5 |
Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs during user name canonicalization, (2) characters that need to be escaped du
|
02-02-2024 - 03:05 | 18-12-2002 - 05:00 | |
| CVE-2004-0882 | 10.0 |
Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a small "maximum data bytes" value.
|
30-10-2018 - 16:25 | 27-01-2005 - 05:00 | |
| CVE-2004-1154 | 10.0 |
Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of securit
|
30-10-2018 - 16:25 | 10-01-2005 - 05:00 | |
| CVE-2004-1036 | 6.8 |
Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in mime.php for SquirrelMail 1.4.3a and earlier, and 1.5.1-cvs before 23rd October 2004, allows remote attackers to execute arbitrary web script or HTML.
|
11-10-2017 - 01:29 | 01-03-2005 - 05:00 | |
| CVE-2004-0884 | 7.2 |
The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to find all available SASL plug-ins, which allows local users to execute arbitrary code by modifying the SASL_PATH to point to malici
|
11-10-2017 - 01:29 | 27-01-2005 - 05:00 | |
| CVE-2004-0930 | 5.0 |
The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple * (wildcard) characters.
|
11-10-2017 - 01:29 | 27-01-2005 - 05:00 | |
| CVE-2005-0103 | 7.5 |
PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to execute arbitrary PHP code by modifying a URL parameter to reference a URL on a remote web server that contains the code.
|
11-10-2017 - 01:29 | 24-01-2005 - 05:00 | |
| CVE-2005-0075 | 5.0 |
prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers.
|
11-10-2017 - 01:29 | 29-01-2005 - 05:00 | |
| CVE-2005-0202 | 5.0 |
Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are inten
|
11-10-2017 - 01:29 | 02-05-2005 - 04:00 | |
| CVE-2005-0104 | 4.3 |
Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via certain integer variables.
|
11-10-2017 - 01:29 | 29-01-2005 - 05:00 | |
| CVE-2005-0234 | 5.0 |
The International Domain Name (IDN) support in Safari 1.2.5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character s
|
11-07-2017 - 01:32 | 02-05-2005 - 04:00 | |
| CVE-2005-0340 | 5.0 |
Integer signedness error in Apple File Service (AFP Server) allows remote attackers to cause a denial of service (application crash) via a negative UAM string length in a FPLoginExt packet.
|
11-07-2017 - 01:32 | 02-05-2005 - 04:00 | |
| CVE-2005-0712 | 4.6 |
Mac OS X before 10.3.8 users world-writable permissions for certain directories, which may allow local users to gain privileges, possibly via the receipt cache or ColorSync profiles.
|
10-09-2008 - 19:36 | 02-05-2005 - 04:00 | |
| CVE-2005-0715 | 2.1 |
AFP Server in Mac OS X before 10.3.8 uses insecure permissions for "Drop Boxes," which allows local users to read the contents of a Drop Box.
|
05-09-2008 - 20:47 | 21-03-2005 - 05:00 | |
| CVE-2005-0716 | 7.2 |
Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions, allows local users to execute arbitrary code via a long CF_CHARSET_PATH environment variable.
|
05-09-2008 - 20:47 | 21-03-2005 - 05:00 | |
| CVE-2005-0713 | 4.6 |
The Bluetooth Setup Assistant for Mac OS X before 10.3.8 can be launched without a keyboard or Bluetooth device, which allows local users to bypass access restrictions and gain privileges.
|
05-09-2008 - 20:47 | 21-03-2005 - 05:00 |