CVE-2005-2961

Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remote servers to execute arbitrary code via a search response with a crafted string in the HREF field of an <A> tag.

• http://secunia.com/advisories/17021/Vendor Advisory
• http://secunia.com/advisories/17035
• http://www.debian.org/security/2005/dsa-834Patch, Vendor Advisory
• http://www.securityfocus.com/bid/14993
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22491
• http://secunia.com/advisories/17021/Vendor Advisory
• http://secunia.com/advisories/17035
• http://www.debian.org/security/2005/dsa-834Patch, Vendor Advisory
• http://www.securityfocus.com/bid/14993
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22491

Published

Oct 5, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-2955config.inc.php in ATutor 1.5.1, and possibly earlier version…
• CVE-2005-2956ATutor 1.5.1, and possibly earlier versions, stores temporar…
• CVE-2005-2957Stack-based buffer overflow in AVIRA Desktop for Windows 1.0…
• CVE-2005-2958Multiple format string vulnerabilities in the GNOME Data Acc…
• CVE-2005-2959Incomplete blacklist vulnerability in sudo 1.6.8 and earlier…
• CVE-2005-2960cfengine 1.6.5 and 2.1.16 allows local users to overwrite ar…
• CVE-2005-2962The post-installation script for ntlmaps before 0.9.9 sets w…
• CVE-2005-2963The mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apach…
• CVE-2005-2964Stack-based buffer overflow in AbiWord before 2.2.10 allows …
• CVE-2005-2965Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2005-2966The Python SVG import plugin (diasvg_import.py) for DIA 0.94…
• CVE-2005-2967Format string vulnerability in input_cdda.c in xine-lib 1-be…