Summary of Historical Vulnerabilities in Apache, MySQL, Firefox (CVE-2005-1344 etc.)

Vulnerability Key Information 1. Apache Server httdigest Buffer Overflow Vulnerability (CVE-2005-1344) Vulnerability Description: In the httdigest module of the Apache2 HTTP server, improper validation of user-supplied input allows remote attackers to trigger a buffer overflow by sending an excessively long realm parameter, potentially leading to arbitrary code execution. Impact: Apache2 HTTP Server 2. MySQL Server Denial of Service Vulnerability (CVE-2005-0799) Vulnerability Description: MySQL versions 4.1.XX and 4.0.XX (Windows edition) allow remote attackers to cause a denial of service by sending requests containing reserved MS-DOS device names. Impact: MySQL Server (Windows edition) 3. Clash of Clans Game Vulnerability Vulnerability Description: Improper handling of CRLF sequences in expressions allows attackers to split HTTP responses, modify session cookies, and perform multiple attacks via HTTP headers. Impact: J-Web implementation of Clash of Clans game 4. Firefox Security Vulnerability Vulnerability Description: A specially crafted XBM file can cause a denial of service in Mozilla browsers, which attackers can trigger using malicious files. Impact: Mozilla Firefox Browser 5. LG U8120 Phone Denial of Service Vulnerability (CVE-2005-1132) Vulnerability Description: A security flaw in the LG U8120 phone allows remote attackers to cause device lockup by sending specially crafted MIDI files. Impact: LG U8120 Phone 6. Vexira Antivirus Buffer Overflow Vulnerability (CVE-2004-1327) Vulnerability Description: A buffer overflow vulnerability in Vexira Antivirus may lead to privilege escalation. Impact: Vexira Antivirus 7. XSS Vulnerability in Bajie HTTP Service (CVE-2003-1543) Vulnerability Description: Bajie HTTP service fails to properly sanitize HTML and script code, allowing remote attackers to craft links containing malicious HTML and script code. Impact: Bajie HTTP Server 8. Maelstrom Buffer Overflow Vulnerability (CVE-2003-0325) Vulnerability Description: Buffer overflow issues exist in Maelstrom versions 3.0.6 and 3.0.5, enabling local users to execute arbitrary code by supplying specially crafted parameters. Impact: Maelstrom 3.0.6 and 3.0.5 versions 9. Backdoor Vulnerability in CMOS 2.1X (CVE-2006-0325) Vulnerability Description: The source code of CMOS 2.1X contains a backdoor component that allows remote execution of arbitrary code. Impact: CMOS 2.1X 10. WinSCP Denial of Service Vulnerability Vulnerability Description: Requests containing specially crafted scpl:// or filePath:// URLs embedded within HTML tags can cause the WinSCP application to exhaust CPU and memory resources. Impact: WinSCP Application

Goal Reached Thanks to every supporter — we hit 100%!

Summary of Historical Vulnerabilities in Apache, MySQL, Firefox (CVE-2005-1344 etc.)