CVE-2005-3135

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in Virtools Web Player 3.0.0.100 and earlier allows remote attackers to execute arbitrary code via a long filename.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://aluigi.altervista.org/adv/virtbugs-adv.txtExploit, Patch, Vendor Advisory
http://marc.info/?l=bugtraq&m=112811771331997&w=2
http://secunia.com/advisories/17034/Patch, Vendor Advisory
http://securitytracker.com/id?1014993
http://www.securityfocus.com/bid/14990Exploit
http://aluigi.altervista.org/adv/virtbugs-adv.txtExploit, Patch, Vendor Advisory
http://marc.info/?l=bugtraq&m=112811771331997&w=2
http://secunia.com/advisories/17034/Patch, Vendor Advisory
http://securitytracker.com/id?1014993
http://www.securityfocus.com/bid/14990Exploit

Timeline

Published: Oct 4, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-31365.0Directory traversal vulnerability in Virtools Web Player 3.0.0.100 and earlier allows remote attackers to overwrite arbitrary files via a ..CVE-2005-31372.1The (1) cfmailfilter and (2) cfcron.in files for cfengine 1.6.5 allow local users to overwrite arbitrary files via a symlink attack on tempo CVE-2005-31385.0Bugzilla 2.18rc1 through 2.18.3, 2.19 through 2.20rc2, and 2.21 allows remote attackers to obtain sensitive information such as the list of CVE-2005-31395.0Bugzilla 2.19.1 through 2.20rc2 and 2.21, with user matching turned on in substring mode, allows attackers to list all users whose names mat CVE-2005-31407.5Procom NetFORCE 800 4.02 M10 Build 20 and possibly other versions sends the NIS password map (passwd.nis) as a file attachment in diagnostic CVE-2005-31415.0Cerulean Studios Trillian 3.0 allows remote attackers to cause a denial of service (crash) via a reverse direct connection from a different CVE-2005-314210.0Heap-based buffer overflow in Kaspersky Antivirus (KAV) 5.0 and Kaspersky Personal Security Suite 1.1 allows remote attackers to execute arb CVE-2005-31435.0Unspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to cause a denial of service (crash) via IMAP c CVE-2005-31445.0httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service via long HTTP headers.CVE-2005-31455.0httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service (resource consumption) by connecting to sblim-CVE-2005-31462.1StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files.CVE-2005-31472.1StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sensitive information.