CVE-2005-1670

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Unknown vulnerability in Extreme BlackDiamond 10808 and 8800 switches running ExtremeWare XOS 11.1 before 11.1.3.3, 11.0 before 11.0.2.4, and 10.x allows remote authenticated users to execute arbitrary commands.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/15438Third Party Advisory
http://www.extremenetworks.com/services/documentation/FieldNotices_FN0215-Security_Alert_EXOS.aspVendor Advisory
http://www.kb.cert.org/vuls/id/937838Patch, Third Party Advisory, US Government Resource
http://www.vupen.com/english/advisories/2005/0572Permissions Required, Third Party Advisory
http://secunia.com/advisories/15438Third Party Advisory
http://www.extremenetworks.com/services/documentation/FieldNotices_FN0215-Security_Alert_EXOS.aspVendor Advisory
http://www.kb.cert.org/vuls/id/937838Patch, Third Party Advisory, US Government Resource
http://www.vupen.com/english/advisories/2005/0572Permissions Required, Third Party Advisory

Timeline

Published: May 19, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-16712.1The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and writes all output to a single ypager.log file, CVE-2005-16724.3Multiple cross-site scripting (XSS) vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web script or HTML via th CVE-2005-16737.5Multiple SQL injection vulnerabilities in Help Center Live allow remote attackers to execute arbitrary SQL commands via the (1) id parameter CVE-2005-16746.5Cross-Site Request Forgery (CSRF) vulnerability in Help Center Live allows remote attackers to perform actions as the administrator via a li CVE-2005-16754.6Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 installs the client install CVE-2005-16766.8Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a b CVE-2005-16777.5Unknown vulnerability in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 al CVE-2005-16782.6Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display f CVE-2005-16795.1Stack-based buffer overflow in the error directive in picasm 1.12b and earlier allows attackers to execute arbitrary code via a long error m CVE-2005-16807.5D-Link DSL-502T, DSL-504T, DSL-562T, and DSL-G604T, when /cgi-bin/firmwarecfg is executed, allows remote attackers to bypass authentication CVE-2005-16817.5PHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier versions, allows remote attackers to execute arbi CVE-2005-16822.1JavaMail API, as used by Solstice Internet Mail Server POP3 2.0, does not properly validate the message number in the MimeMessage constructo