CVE-2005-0391

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers to modify arbitrary files.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

No affected versions have been published.

Timeline

Published
May 2, 2005
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2005

CVE-2005-03927.2ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands.CVE-2005-03937.2The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack CVE-2005-03962.1Desktop Communication Protocol (DCOP) daemon, aka dcopserver, in KDE before 3.4 allows local users to cause a denial of service (dcopserver CVE-2005-03977.5Format string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote attackers to cause a denCVE-2005-03985.0The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.CVE-2005-03995.1Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other apCVE-2005-04002.1The ext2_make_empty function call in the Linux kernel before 2.6.11.6 does not properly initialize memory when creating a block for a new diCVE-2005-04015.1FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop eCVE-2005-04022.6Firefox before 1.0.2 allows remote attackers to execute arbitrary code by tricking a user into saving a page as a Firefox sidebar panel, theCVE-2005-04037.2init_dev in tty_io.c in the Red Hat backport of NPTL to Red Hat Enterprise Linux 3 does not properly clear controlling tty's in multi-threadCVE-2005-04045.0KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypteCVE-2005-04065.5A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an in
CVE-2005-0391: Medium severity, CVSS 5.0 | Vulnix