CVE-2005-0019

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Unknown vulnerability in hztty 2.0 and earlier allows local users to execute arbitrary commands.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/14236
http://securitytracker.com/id?1013154
http://www.debian.org/security/2005/dsa-675Patch, Vendor Advisory
http://www.securityfocus.com/bid/12518Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19297
http://secunia.com/advisories/14236
http://securitytracker.com/id?1013154
http://www.debian.org/security/2005/dsa-675Patch, Vendor Advisory
http://www.securityfocus.com/bid/12518Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19297

Timeline

Published: Apr 27, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-00207.2Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code.CVE-2005-00217.2Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 compone CVE-2005-00224.6Buffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained from Samba code, and as called by the auth_sp CVE-2005-00232.1gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NO CVE-2005-00335.0Buffer overflow in the code for recursion and glue fetching in BIND 8.4.4 and 8.4.5 allows remote attackers to cause a denial of service (cr CVE-2005-00344.3An "incorrect assumption" in the authvalidated validator function in BIND 9.3.0, when DNSSEC is enabled, allows remote attackers to cause a CVE-2005-00355.1The Acrobat web control in Adobe Acrobat and Acrobat Reader 7.0 and earlier, when used with Internet Explorer, allows remote attackers to de CVE-2005-00365.0The DNS implementation in DeleGate 8.10.2 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with CVE-2005-00375.0The DNS implementation of DNRD before 2.10 allows remote attackers to cause a denial of service via a compressed DNS packet with a label len CVE-2005-00385.0The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with CVE-2005-00396.4Certain configurations of IPsec, when using Encapsulating Security Payload (ESP) in tunnel mode, integrity protection at a higher layer, or CVE-2005-00404.3Multiple cross-site scripting (XSS) vulnerabilities in DotNetNuke before 3.0.12 allow remote attackers to inject arbitrary web script or HTM