CVE-2005-0390

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in the HTTP redirection capability in conn.c for Axel before 1.0b may allow remote attackers to execute arbitrary code.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/14831Patch
http://security.gentoo.org/glsa/glsa-200504-09.xmlPatch, Vendor Advisory
http://www.debian.org/security/2005/dsa-706Patch, Vendor Advisory
http://www.mail-archive.com/debian-devel-changes%40lists.debian.org/msg118978.html
http://www.securityfocus.com/bid/13059Patch
http://secunia.com/advisories/14831Patch
http://security.gentoo.org/glsa/glsa-200504-09.xmlPatch, Vendor Advisory
http://www.debian.org/security/2005/dsa-706Patch, Vendor Advisory
http://www.mail-archive.com/debian-devel-changes%40lists.debian.org/msg118978.html
http://www.securityfocus.com/bid/13059Patch

Timeline

Published: May 2, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-03915.0geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers to modify arbitrary CVE-2005-03927.2ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands.CVE-2005-03937.2The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack CVE-2005-03962.1Desktop Communication Protocol (DCOP) daemon, aka dcopserver, in KDE before 3.4 allows local users to cause a denial of service (dcopserver CVE-2005-03977.5Format string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote attackers to cause a den CVE-2005-03985.0The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.CVE-2005-03995.1Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other ap CVE-2005-04002.1The ext2_make_empty function call in the Linux kernel before 2.6.11.6 does not properly initialize memory when creating a block for a new di CVE-2005-04015.1FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop e CVE-2005-04022.6Firefox before 1.0.2 allows remote attackers to execute arbitrary code by tricking a user into saving a page as a Firefox sidebar panel, the CVE-2005-04037.2init_dev in tty_io.c in the Red Hat backport of NPTL to Red Hat Enterprise Linux 3 does not properly clear controlling tty's in multi-thread CVE-2005-04045.0KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypte