Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2005-0967
Gaim 1.2.0 allows remote attackers to cause a denial of service (application crash) via a malformed file transfer request to a Jabber user, which leads to an out-of-bounds read.
Affected Products: n/a
References: [{'name': 'MDKSA-2005:071', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:071'}, {'name': 'FLSA:158543', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/426078/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/tracker/?func=detail&aid=1172115&group_id=235&atid=100235'}, {'name': 'oval:org.mitre.oval:def:9657', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9657'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gaim.sourceforge.net/security/?id=15'}, {'name': '14815', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14815'}, {'name': 'RHSA-2005:365', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-365.html'}, {'name': '13004', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13004'}, {'name': 'SUSE-SA:2005:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_36_sudo.html'}, {'name': '1013645', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013645'}]
CVE State: PUBLISHED
Explain CVE-2005-0968
Computer Associates (CA) eTrust Intrusion Detection 3.0 allows remote attackers to cause a denial of service via large size values that are not properly validated before calling the CPImportKey function in the Crypto API.
Affected Products: n/a
References: [{'name': '20050405 Computer Associates eTrust Intrusion Detection System CPImportKey DoS Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=223&type=vulnerabilities'}]
CVE State: PUBLISHED
Explain CVE-2005-0969
Heap-based buffer overflow in the syscall emulation functionality in Mac OS X before 10.3.9 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via crafted parameters.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2005-04-15', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html'}]
CVE State: PUBLISHED
Explain CVE-2005-0970
Mac OS X 10.3.9 and earlier allows users to install, create, and execute setuid/setgid scripts, contrary to the intended design, which may allow attackers to conduct unauthorized activities with escalated privileges via vulnerable scripts.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2005-04-15', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html'}]
CVE State: PUBLISHED
Explain CVE-2005-0971
Stack-based buffer overflow in the semop system call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments.
Affected Products: n/a
References: [{'name': 'VU#212190', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/212190'}, {'name': 'APPLE-SA-2005-04-15', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html'}]
CVE State: PUBLISHED
Explain CVE-2005-0972
Integer overflow in the searchfs system call in Mac OS X 10.3.9 and earlier allows local users to execute arbitrary code via crafted parameters.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2005-04-15', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html'}, {'name': 'VU#185702', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/185702'}]
CVE State: PUBLISHED
Explain CVE-2005-0973
Unknown vulnerability in the setsockopt system call in Mac OS X 10.3.9 and earlier allows local users to cause a denial of service (memory exhaustion) via crafted arguments.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2005-04-15', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html'}]
CVE State: PUBLISHED
Explain CVE-2005-0974
Unknown vulnerability in the nfs_mount call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments.
Affected Products: n/a
References: [{'name': 'VU#713614', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/713614'}, {'name': 'APPLE-SA-2005-04-15', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html'}, {'name': 'APPLE-SA-2005-05-19', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/May/msg00004.html'}]
CVE State: PUBLISHED
Explain CVE-2005-0975
Integer signedness error in the parse_machfile function in the mach-o loader (mach_loader.c) for the Darwin Kernel as used in Mac OS X 10.3.7, and other versions before 10.3.9, allows local users to cause a denial of service (CPU consumption) via a crafted mach-o header.
Affected Products: n/a
References: [{'name': '1013735', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013735'}, {'name': 'APPLE-SA-2005-04-15', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html'}, {'name': '1012941', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012941'}, {'tags': ['x_refsource_MISC'], 'url': 'http://felinemenace.org/advisories/macosx.txt'}, {'name': 'macos-machloader-dos(18979)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18979'}, {'name': 'ADV-2005-0041', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0041'}, {'name': '20050119 Darwin Kernel Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110616533903671&w=2'}, {'name': '13902', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13902'}, {'name': 'P-185', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-185.shtml'}, {'name': '12314', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12314'}]
CVE State: PUBLISHED
Explain CVE-2005-0976
AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XMLHttpRequest Javascript component, as demonstrated using automatically mounted disk images and file:// URLs.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2005-04-15', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://remahl.se/david/vuln/001/'}]
CVE State: PUBLISHED
Explain CVE-2005-0977
The shmem_nopage function in shmem.c for the tmpfs driver in Linux kernel 2.6 does not properly verify the address argument, which allows local users to cause a denial of service (kernel crash) via an invalid address.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:10400', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10400'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://linux.bkbits.net:8080/linux-2.6/cset%40420551fbRlv9-QG6Gw9Lw_bKVfPSsg'}, {'name': 'RHSA-2005:366', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-366.html'}, {'name': 'USN-103-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/103-1/'}, {'name': '12970', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12970'}, {'name': 'FLSA:157459-3', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/427980/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://lkml.org/lkml/2005/2/5/111'}]
CVE State: PUBLISHED
Explain CVE-2005-0978
Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote attackers to upload arbitrary files via a .. (dot dot) in a PUSH command.
Affected Products: n/a
References: [{'name': "20050401 DMA[2005-0401a] - 'IVT BlueSoleil Directory Transversal'", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111238511206503&w=2'}, {'name': '14790', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14790/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalmunition.com/DMA%5B2005-0401a%5D.txt'}, {'name': 'bluesoleil-object-push-directory-traversal(19930)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19930'}, {'name': '12961', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12961'}]
CVE State: PUBLISHED
Explain CVE-2005-0979
Multiple buffer overflows in RUMBA 7.3 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via crafted values in a profile file, as demonstrated using a long SysName field.
Affected Products: n/a
References: [{'name': '20050401 Buffer Overflow within the RUMBA product', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111238364916500&w=2'}, {'name': '12965', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12965'}, {'name': 'rumba-profile-values-bo(19934)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19934'}]
CVE State: PUBLISHED
Explain CVE-2005-0980
PHP remote file inclusion vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary PHP code by modifying the view parameter to reference a URL on a remote web server that contains the code.
Affected Products: n/a
References: [{'name': '14802', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14802'}, {'name': '20050402 AlstraSoft EPay Pro v2.0 has file include and multiple xss', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111247198021626&w=2'}, {'name': '12973', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12973'}]
CVE State: PUBLISHED
Explain CVE-2005-0981
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Pro 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) payment or (2) send parameter.
Affected Products: n/a
References: [{'name': '14802', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14802'}, {'name': '20050402 AlstraSoft EPay Pro v2.0 has file include and multiple xss', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111247198021626&w=2'}, {'name': '12974', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12974'}]
CVE State: PUBLISHED
Explain CVE-2005-0982
Multiple cross-site scripting (XSS) vulnerabilities in Yet Another Forum.net 0.9.9 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) location, or (3) Subject field.
Affected Products: n/a
References: [{'name': '1013632', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013632'}, {'name': '20050402 Yet Another Forum.net XSS vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111247338301262&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-0983
Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data.
Affected Products: n/a
References: [{'name': '14811', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14811'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/q3msgboom-adv.txt'}, {'name': '12976', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12976'}, {'name': '20050402 In-game players kicking in the Quake 3 engine', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111246796918067&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bani.anime.net/banimod/forums/viewtopic.php?p=27322'}]
CVE State: PUBLISHED
Explain CVE-2005-0984
Buffer overflow in the G_Printf function in Star Wars Jedi Knight: Jedi Academy 1.011 and earlier allows remote attackers to execute arbitrary code via a long message using commands such as (1) say and (2) tell.
Affected Products: n/a
References: [{'name': '12977', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12977'}, {'name': '14809', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14809'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/jamsgbof-adv.txt'}, {'name': '20050402 In-game server buffer-overflow in Jedi Academy 1.011', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111246855213653&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-0985
Unspecified vulnerability in the Mac OS X kernel before 10.3.8 allows local users to cause a denial of service (temporary hang) via unspecified attack vectors related to the fan control unit (FCU) driver.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=301324'}]
CVE State: PUBLISHED
Explain CVE-2005-0986
NLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other versions allows remote attackers to cause a denial of service (deep recursion and nHTTP.exe process crash) via a long GET request containing UNICODE decimal value 430 characters, which causes the stack to be exhausted.  NOTE: IBM has reported that it is unable to replicate this issue.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg21202446'}, {'name': '14858', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14858'}, {'name': '20050406 IBM Lotus Domino Server Web Service DoS Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=224&type=vulnerabilities'}, {'tags': ['x_refsource_MISC'], 'url': 'http://news.zdnet.co.uk/software/applications/0%2C39020384%2C39194293%2C00.htm'}, {'name': 'ADV-2005-0322', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0322'}]
CVE State: PUBLISHED
Explain CVE-2005-0987
Unknown vulnerability in IRC Services NickServ LISTLINKS before 5.0.50 allows remote attackers to obtain the links of a nick.
Affected Products: n/a
References: [{'name': '1013622', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013622'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ircservices.esper.net/Changes.txt'}]
CVE State: PUBLISHED
Explain CVE-2005-0988
Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2006-08-01', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html'}, {'name': '22033', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/22033'}, {'name': 'ADV-2006-3101', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/3101'}, {'name': '21253', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21253'}, {'name': 'DSA-752', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-752'}, {'name': '101816', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101816-1'}, {'name': 'RHSA-2005:357', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2005-357.html'}, {'name': '19289', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/19289'}, {'name': 'TA06-214A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-214A.html'}, {'name': '12996', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12996'}, {'name': '15487', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15487'}, {'name': 'oval:org.mitre.oval:def:765', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A765'}, {'name': 'oval:org.mitre.oval:def:10242', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10242'}, {'name': 'oval:org.mitre.oval:def:1169', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1169'}, {'name': 'SCOSA-2005.58', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt'}, {'name': '18100', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18100'}, {'name': 'SSA:2006-262', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852'}, {'name': '20050404 gzip TOCTOU file-permissions vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/394965'}]
CVE State: PUBLISHED
Explain CVE-2005-0989
The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:100025', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100025'}, {'name': 'RHSA-2005:386', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-386.html'}, {'name': '12988', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12988'}, {'name': 'SCOSA-2005.49', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt'}, {'name': '14820', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14820'}, {'name': '19823', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19823'}, {'name': '15495', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/15495'}, {'name': '1013635', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013635'}, {'name': 'RHSA-2005:601', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-601.html'}, {'name': 'GLSA-200504-18', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml'}, {'name': '1013643', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013643'}, {'name': 'oval:org.mitre.oval:def:11706', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11706'}, {'name': 'RHSA-2005:384', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-384.html'}, {'name': 'RHSA-2005:383', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-383.html'}, {'name': 'SUSE-SA:2006:022', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006_04_25.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=288688'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/mfsa2005-33.html'}, {'name': '14821', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14821'}]
CVE State: PUBLISHED
Explain CVE-2005-0990
unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:9613', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9613'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.ubuntu.com/show_bug.cgi?id=8459'}, {'name': 'sharutils-temp-file-symlink(19957)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19957'}, {'name': '12981', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12981'}, {'name': 'USN-104-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/104-1/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=302412'}, {'name': 'RHSA-2005:377', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-377.html'}]
CVE State: PUBLISHED
Explain CVE-2005-0991
RC.BOOT in IBM AIX 5.1, 5.2, and 5.3 does not "use a secure location for temporary files," which allows local users to have an unknown impact, probably by overwriting files.
Affected Products: n/a
References: [{'name': 'IY59205', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY59205&apar=only'}, {'name': 'IY59206', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY59206&apar=only'}, {'name': '12992', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12992'}, {'name': 'IY59207', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY59207&apar=only'}]
CVE State: PUBLISHED
Explain CVE-2005-0992
Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin before 2.6.2-rc1 allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter.
Affected Products: n/a
References: [{'name': '20050404 phpMyAdmin Cross-site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111264361622660&w=2'}, {'name': '12982', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12982'}, {'name': '14799', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14799'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.arrelnet.com/advisories/adv20050403.html'}, {'name': 'phpmyadmin-convcharset-xss(19940)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19940'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-3'}, {'name': 'GLSA-200504-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200504-08.xml'}]
CVE State: PUBLISHED
Explain CVE-2005-0993
Buffer overflow in nwprint in SCO OpenServer 5.0.7 allows local users to execute arbitrary code via a long command line argument.
Affected Products: n/a
References: [{'name': '12986', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12986'}, {'name': '20050404 possible privilege escalation on Sco OpenServer 5.0.7', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111263251718491&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-0994
Multiple SQL injection vulnerabilities in ProductCart 2.7 allow remote attackers to execute arbitrary SQL commands via (1) the Category or resultCnt parameters to advSearch_h.asp, and possibly (2) the offset parameter to tarinasworld_butterflyjournal.asp. NOTE: it is possible that item (2) is the result of a typo or editing error from the original research report.
Affected Products: n/a
References: [{'name': '15263', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15263'}, {'name': '14833', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14833'}, {'name': '15265', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15265'}, {'name': '12990', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12990'}, {'tags': ['x_refsource_MISC'], 'url': 'http://digitalparadox.org/advisories/prodcart.txt'}]
CVE State: PUBLISHED
Explain CVE-2005-0995
Multiple cross-site scripting (XSS) vulnerabilities in ProductCart 2.7 allow remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter to advSearch_h.asp, (2) the redirectUrl parameter to NewCust.asp, (3) the country parameter to storelocator_submit.asp, or (4) the error parameter to techErr.asp. NOTE: it has been reported that storelocator_submit.asp does not exist in ProductCart.
Affected Products: n/a
References: [{'name': '15264', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15264'}, {'name': '15267', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15267'}, {'name': '14833', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14833'}, {'name': '12990', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12990'}, {'name': '15268', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15268'}, {'tags': ['x_refsource_MISC'], 'url': 'http://digitalparadox.org/advisories/prodcart.txt'}, {'name': '15266', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15266'}]
CVE State: PUBLISHED
Explain CVE-2005-0996
Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the email or url parameters in the Add function, (2) the min parameter in the viewsdownload function, or (3) the min parameter in the search function.
Affected Products: n/a
References: [{'name': '20050403 [SECURITYREASON.COM] phpnuke 7.6 Multiple vulnerabilities in Downloads Module cXIb8O3.13', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111289685724764&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-0997
Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 7.6 allow remote attackers to execute arbitrary SQL commands via (1) the email or url parameters in the Add function, (2) the url parameter in the modifylinkrequestS function, (3) the orderby or min parameters in the viewlink function, (4) the orderby, min, or show parameters in the search function, or (5) the ratenum parameter in the MostPopular function.
Affected Products: n/a
References: [{'name': '20050403 [SECURITYREASON.COM] phpnuke 7.6 Multiple vulnerabilities in Web_Links Module cXIb8O3.14', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111289685724764&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-0998
The Web_Links module for PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via an invalid show parameter, which triggers a division by zero PHP error that leaks the full pathname of the server.
Affected Products: n/a
References: [{'name': '20050403 [SECURITYREASON.COM] phpnuke 7.6 Multiple vulnerabilities in Web_Links Module cXIb8O3.14', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111289685724764&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-0999
SQL injection vulnerability in the Top module for PHP-Nuke 6.x through 7.6 allows remote attackers to execute arbitrary SQL commands via the querylang parameter.
Affected Products: n/a
References: [{'name': '20050406 [waraxe-2005-SA#041] - Critical Sql Injection in PhpNuke 6.x-7.6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111281649616901&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.waraxe.us/advisory-41.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1000
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the bid parameter to the EmailStats op in banners.pgp, (2) the ratenum parameter in the TopRated and MostPopular actions in the Web_Links module, (3) the ttitle parameter in the viewlinkdetails, viewlinkeditorial, viewlinkcomments, and ratelink actions in the Web_Links module, or (4) the username parameter in the Your_Account module.
Affected Products: n/a
References: [{'name': '20050404 [SECURITYREASON.COM] PhpNuke 7.6=>x Multiple vulnerabilities cXIb8O3.12', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2005-04/0037.html'}, {'name': '20050403 Full path disclosure and XSS in PHPNuke', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111263454308478&w=2'}, {'name': 'phpnuke-modulesphp-xss(19952)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19952'}]
CVE State: PUBLISHED
Explain CVE-2005-1001
PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to (1) the Surveys module with the file parameter set to comments or (2) 3D-Fantasy/theme.php, which leaks the full pathname of the web server in a PHP error message.
Affected Products: n/a
References: [{'name': '20050404 [SECURITYREASON.COM] PhpNuke 7.6=>x Multiple vulnerabilities cXIb8O3.12', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2005-04/0037.html'}, {'name': 'phpnuke-modulesphp-path-disclosure(19953)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19953'}]
CVE State: PUBLISHED
Explain CVE-2005-1002
logwebftbs2000.exe in Logics Software File Transfer (LOG-FT) allows remote attackers to read arbitrary files via modified (1) VAR_FT_LANG and (2) VAR_FT_TMPL parameters.
Affected Products: n/a
References: [{'name': '12998', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12998'}, {'name': '20050405 Logics Software BS2000 Host to Web Client ALL PLATFORMS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111271950916436&w=2'}, {'name': '14851', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14851'}]
CVE State: PUBLISHED
Explain CVE-2005-1003
Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote attackers to include arbitrary PHP files via .. (dot dot) sequences in the modID parameter.
Affected Products: n/a
References: [{'name': '20050404 Authenticaion bypass, Directory transversal and XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111264602406090&w=2'}, {'name': '1013640', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013640'}, {'name': 'payprocart-dotdot-directory-traversal(19954)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19954'}, {'name': '14832', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14832'}]
CVE State: PUBLISHED
Explain CVE-2005-1004
Cross-site scripting (XSS) vulnerability in usrdetails.php in ProfitCode PayProCart 3.0 allows remote attackers to inject arbitrary web script or HTML via the sgnuptype parameter.
Affected Products: n/a
References: [{'name': 'Payprocart-usrdetails-xss(19955)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19955'}, {'name': '20050404 Authenticaion bypass, Directory transversal and XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111264602406090&w=2'}, {'name': '1013640', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013640'}, {'name': '14832', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14832'}]
CVE State: PUBLISHED
Explain CVE-2005-1005
ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as demonstrated via a direct request to adminshop/index.php with hex-encoded .. sequences in the ftoedit parameter.
Affected Products: n/a
References: [{'name': '20050404 Authenticaion bypass, Directory transversal and XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111264602406090&w=2'}, {'name': '1013640', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013640'}, {'name': '14832', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14832'}, {'name': 'payprocart-index-bypass-authentication(19956)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19956'}]
CVE State: PUBLISHED
Explain CVE-2005-1006
Multiple cross-site scripting (XSS) vulnerabilities in SonicWALL SOHO 5.1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) the user login name, which is not filtered when the administrator views the log file.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.oliverkarow.de/research/SonicWall.txt'}, {'name': '14823', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14823'}, {'name': 'sonicwall-username-code-execution(19960)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19960'}, {'name': '15261', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15261'}, {'name': '20050404 SonicWALL SOHO/10 - XSS vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2005-04/0041.html'}, {'name': '12984', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12984'}, {'name': 'sonicwall-http-get-requests-xss(19958)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19958'}, {'name': '1013638', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013638'}, {'name': '15262', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15262'}]
CVE State: PUBLISHED
Explain CVE-2005-1007
Unknown vulnerability in the LIST functionality in CommuniGate Pro before 4.3c3 allows remote attackers to cause a denial of service (server crash) via certain multipart messages.
Affected Products: n/a
References: [{'name': '14604', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14604'}, {'name': '15257', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15257'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.stalker.com/CommuniGatePro/History.html'}, {'name': 'communigatepro-list-dos(19961)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19961'}]
CVE State: PUBLISHED
Explain CVE-2005-1008
Cross-site scripting (XSS) vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via a "javascript:" URL in an IMG tag.
Affected Products: n/a
References: [{'name': '1013614', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013614'}, {'name': '12958', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12958'}]
CVE State: PUBLISHED
Explain CVE-2005-1009
Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or (2) local users to execute arbitrary code via a long Name entry in the configure.cfg file.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.class101.org/netv-remhbof.pdf'}, {'name': '14814', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14814'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hat-squad.com/en/000165.html'}, {'name': '20050401 [Hat-Squad Advisory] Bakbone NetVault Heap overflow Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/394801'}, {'name': '1013625', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013625'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hat-squad.com/en/000164.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.class101.org/netv-locsbof.pdf'}, {'name': '12967', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12967'}, {'name': 'netvault-configurecfg-bo(19932)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19932'}]
CVE State: PUBLISHED
Explain CVE-2005-1010
Cross-site scripting (XSS) vulnerability in Comersus Cart 6 allows remote attackers to inject arbitrary web script or HTML via the account username.
Affected Products: n/a
References: [{'name': '1013634', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013634'}, {'name': 'comersus-username-xss(19962)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19962'}, {'name': '13000', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13000'}, {'name': '14825', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14825'}]
CVE State: PUBLISHED
Explain CVE-2005-1011
SQL injection vulnerability in content.asp in SiteEnable allows remote attackers to execute arbitrary SQL commands via the sortby parameter.
Affected Products: n/a
References: [{'name': '1013631', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013631'}, {'name': '12985', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12985'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zone-h.com/en/advisories/read/id=7367/'}]
CVE State: PUBLISHED
Explain CVE-2005-1012
Cross-site scripting (XSS) vulnerability in Iatek SiteEnable allows remote attackers to inject arbitrary web script or HTML via (1) the contenttype parameter to content.asp, (2) the title, or (3) the description.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.zone-h.com/en/advisories/read/id=7367/'}, {'name': '1013631', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013631'}, {'name': 'portalapp-contentasp-xss(19891)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19891'}]
CVE State: PUBLISHED
Explain CVE-2005-1013
The SMTP service in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to cause a denial of service (server crash) via an EHLO command with a Unicode string.
Affected Products: n/a
References: [{'name': '12994', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12994'}, {'name': 'mailenable-smtp-dos(19948)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19948'}, {'name': '1013637', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013637'}, {'name': 'mailenable-ehlo-dos(19973)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19973'}, {'name': '15232', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15232'}, {'name': '20050405 MailEnable Smtpd remote Dos [x0n3-h4ck]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111273637518494&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mailenable.com/hotfix/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/windowsntfocus/5HP031PFFG.html'}, {'name': '14812', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14812'}]
CVE State: PUBLISHED
Explain CVE-2005-1014
Buffer overflow in the IMAP service for MailEnable Enterprise 1.04 and earlier and Professional 1.54 allows remote attackers to execute arbitrary code via a long AUTHENTICATE command.
Affected Products: n/a
References: [{'name': '1013637', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013637'}, {'name': 'mailenable-imap-dos(19947)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19947'}, {'name': '20050405 MailEnable Imapd remote BoF + Exploit [x0n3-h4ck]', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2005-April/033123.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mailenable.com/hotfix/'}, {'name': '12995', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12995'}, {'name': '14812', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14812'}]
CVE State: PUBLISHED
Explain CVE-2005-1015
Buffer overflow in MailEnable Imapd (MEIMAP.exe) allows remote attackers to execute arbitrary code via a long LOGIN command.
Affected Products: n/a
References: [{'name': '20050406 Re: MailEnable Imapd remote BoF + Exploit [x0n3-h4ck]', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2005-April/033144.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1016
Cross-site scripting (XSS) vulnerability in links_add_form.asp for MaxWebPortal 1.33 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URL in a banner URL.
Affected Products: n/a
References: [{'name': '1013617', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013617'}, {'name': '14752', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14752'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hackerscenter.com/archive/view.asp?id=1807'}, {'name': '12968', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12968'}, {'name': 'maxwebportal-linksaddform-xss(19929)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19929'}]
CVE State: PUBLISHED
Explain CVE-2005-1017
SQL injection vulnerability in the Update_Events function in events_functions.asp in MaxWebPortal 1.33 and earlier allows remote attackers to execute arbitrary SQL commands via the EVENT_ID parameter, as demonstrated using events.asp.
Affected Products: n/a
References: [{'name': '1013617', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013617'}, {'name': 'maxwebportal-eventsfunctions-sql-injection(19928)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19928'}, {'name': '14752', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14752'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hackerscenter.com/archive/view.asp?id=1807'}, {'name': '12968', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12968'}]
CVE State: PUBLISHED
Explain CVE-2005-1018
Buffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup allows remote authenticated users to cause a denial of service or execute arbitrary code via an agent request to TCP port 6050 with a large argument before the option field.
Affected Products: n/a
References: [{'name': '20050414 Computer Associates BrightStor ARCserve Backup and BrightStor Enterprise Backup UniversalAgent buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111351851802682&w=2'}, {'name': '13102', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13102'}, {'name': '20050217 RE: BrightStor ARCserve Backup buffer overflow PoC (fixes available)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/390760'}, {'name': '20050411 Computer Associates BrightStor ARCserve Backup UniversalAgent Buffer Overflow', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=232&type=vulnerabilities'}]
CVE State: PUBLISHED
Explain CVE-2005-1019
Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://security-tmp.h14.ru/exploits/23laeon.c.txt'}, {'name': '20050404 Local buffer overflow  on Aeon<=0.2a', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111262942708249&w=2'}, {'name': 'aeon-getconfig-bo(19951)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19951'}]
CVE State: PUBLISHED