Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2006-1052
The selinux_ptrace logic in hooks.c in SELinux for Linux 2.6.6 allows local users with ptrace permissions to change the tracer SID to an SID of another process.
Affected Products: n/a
References: [{'name': '[git-commits-head] 20060311 [PATCH] selinux: tracer SID fix', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=git-commits-head&m=114210002712363&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://selinuxnews.org/wp/index.php/2006/03/13/security-ptrace-bug-cve-2006-1052/'}, {'name': 'USN-281-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/281-1/'}, {'name': '25232', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/25232'}, {'name': '[selinux] 20060313 [SECURITY] SELinux ptrace bug (CVE-2006-1052)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=selinux&m=114226465106131&w=2'}, {'name': 'RHSA-2006:0575', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2006-0575.html'}, {'name': '19955', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19955'}, {'name': '17830', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17830'}, {'name': '21465', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21465'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm'}, {'name': '22417', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/22417'}, {'name': 'MDKSA-2006:086', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:086'}, {'name': 'oval:org.mitre.oval:def:10102', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10102'}, {'name': '22093', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/22093'}, {'name': '20157', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20157'}, {'name': 'DSA-1184', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1184'}]
CVE State: PUBLISHED
Explain CVE-2006-1055
The fill_write_buffer function in sysfs/file.c in Linux kernel 2.6.12 up to versions before 2.6.17-rc1 does not zero terminate a buffer when a length of PAGE_SIZE or more is requested, which might allow local users to cause a denial of service (crash) by causing an out-of-bounds read.
Affected Products: n/a
References: [{'name': '17402', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17402'}, {'name': '19735', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19735'}, {'name': '20716', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20716'}, {'name': 'USN-281-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/281-1/'}, {'name': 'FEDORA-2006-423', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lwn.net/Alerts/180820/'}, {'name': '19495', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19495'}, {'name': 'USN-302-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-302-1'}, {'name': 'SUSE-SA:2006:028', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006-05-31.html'}, {'name': '19955', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19955'}, {'name': 'ADV-2006-1475', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1475'}, {'name': 'ADV-2006-1273', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1273'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6e0dd741a89be35defa05bd79f4211c5a2762825'}, {'name': '20398', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20398'}, {'name': '24443', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24443'}, {'name': '2006-0020', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2006/0020'}, {'name': 'linux-fillwritebuffer-dos(25693)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25693'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=6e0dd741a89be35defa05bd79f4211c5a2762825%3Bhp=597a7679dd83691be2f3a53e1f3f915b4a7f6eba'}]
CVE State: PUBLISHED
Explain CVE-2006-1057
Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file.
Affected Products: n/a
References: [{'name': 'gdm-slavec-symlink(26092)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/26092'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188303'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.gnome.org/viewcvs/gdm2/daemon/slave.c?r1=1.260&r2=1.261'}, {'name': 'ADV-2006-1465', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1465'}, {'name': 'MDKSA-2006:083', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:083'}, {'name': 'DSA-1040', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1040'}, {'name': '17635', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17635'}, {'name': 'RHSA-2007:0286', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2007-0286.html'}, {'name': 'oval:org.mitre.oval:def:10092', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10092'}, {'name': 'FEDORA-2006-338', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-announce-list/2006-April/msg00160.html'}, {'name': 'USN-278-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/278-1/'}]
CVE State: PUBLISHED
Explain CVE-2006-1058
BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.
Affected Products: n/a
References: [{'name': '25098', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/25098'}, {'name': '17330', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17330'}, {'name': 'oval:org.mitre.oval:def:9483', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9483'}, {'name': '19477', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19477'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.busybox.net/view.php?id=604'}, {'name': '25848', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/25848'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2007-250.htm'}, {'name': 'RHSA-2007:0244', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2007-0244.html'}, {'name': 'busybox-passwd-weak-security(25569)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25569'}]
CVE State: PUBLISHED
Explain CVE-2006-1059
The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the password and spoof the server in the domain.
Affected Products: n/a
References: [{'name': '19468', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19468'}, {'name': 'FEDORA-2006-259', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00114.html'}, {'name': '24263', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24263'}, {'name': '17314', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17314'}, {'name': '2006-0018', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2006/0018'}, {'name': '19455', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19455'}, {'name': '19539', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19539'}, {'name': 'ADV-2006-1179', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1179'}, {'name': '1015850', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015850'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://us1.samba.org/samba/security/CAN-2006-1059.html'}, {'name': '20060330 [SECURITY] Samba 3.0.21-3.0.21c: Exposure of machine account credentials in winbindd log files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429370/100/0/threaded'}, {'name': 'samba-logfile-account-cleartext(25575)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25575'}]
CVE State: PUBLISHED
Explain CVE-2006-1060
Heap-based buffer overflow in zgv before 5.8 and xzgv before 0.8 might allow user-assisted attackers to execute arbitrary code via a JPEG image with more than 3 output components, such as a CMYK or YCCK color space, which causes less memory to be allocated than required.
Affected Products: n/a
References: [{'name': '17409', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17409'}, {'name': '19572', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19572'}, {'name': '19779', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19779'}, {'name': '19790', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19790'}, {'name': 'ADV-2006-1288', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1288'}, {'name': '19757', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19757'}, {'name': 'SUSE-SR:2006:008', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006_08_sr.html'}, {'name': 'xzgv-jpeg-bo(25718)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25718'}, {'name': 'DSA-1037', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1037'}, {'name': '19731', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19731'}, {'name': '756', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/756'}, {'name': '19571', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19571'}, {'name': 'DSA-1038', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1038'}]
CVE State: PUBLISHED
Explain CVE-2006-1061
Heap-based buffer overflow in cURL and libcURL 7.15.0 through 7.15.2 allows remote attackers to execute arbitrary commands via a TFTP URL (tftp://) with a valid hostname and a long path.
Affected Products: n/a
References: [{'name': 'FEDORA-2006-189', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00048.html'}, {'name': '19371', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19371'}, {'name': 'GLSA-200603-19', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200603-19.xml'}, {'name': 'ADV-2006-1008', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1008'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://curl.haxx.se/docs/adv_20060320.html'}, {'name': '19335', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19335'}, {'name': '17154', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17154'}, {'name': '23982', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23982'}, {'name': '20060320 [SSAG#001] :: cURL tftp:// URL Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1326.html'}, {'name': '2006-0016', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2006/0016'}, {'name': '19271', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19271'}, {'name': 'curl-tftp-bo(25318)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25318'}, {'name': '19344', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19344'}]
CVE State: PUBLISHED
Explain CVE-2006-1062
Unspecified vulnerability in lurker.cgi for Lurker 2.0 and earlier allows attackers to read arbitrary files via unknown vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=399034&group_id=8168'}, {'name': '23694', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23694'}, {'name': '19145', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19145'}, {'name': 'DSA-999', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-999'}, {'name': '17003', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17003'}, {'name': 'ADV-2006-0850', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0850'}, {'name': '[Lurker-users] 20060302 Serious security vulnerabilities found', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://terpstra.ca/lurker/message/20060302.130003.4c5c2680.en.html'}, {'name': 'lurker-lurker-information-disclosure(25149)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25149'}, {'name': '19136', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19136'}]
CVE State: PUBLISHED
Explain CVE-2006-1063
Unspecified vulnerability in Lurker 2.0 and earlier allows remote attackers to create or overwrite files in any writable directory that is named "mbox".
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=399034&group_id=8168'}, {'name': 'lurker-mbox-error(25153)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25153'}, {'name': '19145', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19145'}, {'name': 'DSA-999', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-999'}, {'name': '23695', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23695'}, {'name': '17003', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17003'}, {'name': 'ADV-2006-0850', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0850'}, {'name': '[Lurker-users] 20060302 Serious security vulnerabilities found', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://terpstra.ca/lurker/message/20060302.130003.4c5c2680.en.html'}, {'name': '19136', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19136'}]
CVE State: PUBLISHED
Explain CVE-2006-1064
Multiple cross-site scripting (XSS) vulnerabilities in Lurker 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
Affected Products: n/a
References: [{'name': 'lurker-unspecified-xss(25154)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25154'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=399034&group_id=8168'}, {'name': '19145', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19145'}, {'name': 'DSA-999', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-999'}, {'name': '17003', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17003'}, {'name': 'ADV-2006-0850', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0850'}, {'name': '[Lurker-users] 20060302 Serious security vulnerabilities found', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://terpstra.ca/lurker/message/20060302.130003.4c5c2680.en.html'}, {'name': '19136', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19136'}, {'name': '23696', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23696'}]
CVE State: PUBLISHED
Explain CVE-2006-1065
SQL injection vulnerability in search.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to execute arbitrary SQL commands via the forums[] parameter.
Affected Products: n/a
References: [{'name': 'mybb-search-sql-injection(25018)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25018'}, {'name': '19061', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19061'}, {'name': '20060302 MyBB 1.0.4 New SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426631/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2006-1066
Linux kernel 2.6.16-rc2 and earlier, when running on x86_64 systems with preemption enabled, allows local users to cause a denial of service (oops) via multiple ptrace tasks that perform single steps, which can cause corruption of the DEBUG_STACK stack during the do_debug function call.
Affected Products: n/a
References: [{'name': 'USN-281-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/281-1/'}, {'name': 'MDKSA-2006:151', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:151'}, {'name': '21614', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21614'}, {'name': '19955', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19955'}, {'name': '17216', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17216'}, {'name': '24098', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24098'}, {'name': 'DSA-1017', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1017'}, {'name': '19374', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19374'}, {'name': '[linux-kernel] 20060207 [PATCH] arch/x86_64/kernel/traps.c PTRACE_SINGLESTEP oops', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=linux-kernel&m=113932292516359&w=2'}]
CVE State: PUBLISHED
Explain CVE-2006-1067
Linksys WRT54G routers version 5 (running VXWorks) allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via (1) a DCC SEND with a single long argument, or (2) a DCC SEND with IP, port, and filesize arguments with a 0 value.
Affected Products: n/a
References: [{'name': 'multiple-vendor-dccsend-dos(25230)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25230'}, {'name': '20060306 Re: linksys router + irc DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426863/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hm2k.org/news/1141413208.html'}, {'name': '20060304 Various router DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426756/100/0/threaded'}, {'name': '20060303 linksys router + irc DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426761/100/0/threaded'}, {'name': '16954', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16954'}, {'name': '20060306 RE: linksys router + irc DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426934/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2006-1068
Netgear 614 and 624 routers, possibly running VXWorks, allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via (1) a DCC SEND with a single long argument, or (2) a DCC SEND with IP, port, and filesize arguments with a 0 value.
Affected Products: n/a
References: [{'name': 'multiple-vendor-dccsend-dos(25230)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25230'}, {'name': '20060306 Re: linksys router + irc DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426863/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hm2k.org/news/1141413208.html'}, {'name': '20060304 Various router DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426756/100/0/threaded'}, {'name': '20060303 linksys router + irc DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426761/100/0/threaded'}, {'name': '16954', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16954'}, {'name': '20060306 RE: linksys router + irc DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426934/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2006-1069
Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 before 1.3.9sr5, and possibly earlier versions allows attackers to gain privileges as arbitrary users via unknown vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.geeklog.net/article.php/geeklog-1.4.0sr2'}, {'name': '17010', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17010'}, {'name': 'ADV-2006-0851', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0851'}]
CVE State: PUBLISHED
Explain CVE-2006-1070
Cross-site scripting (XSS) vulnerability in dv_gbook.php in DVguestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via the f parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://biyosecurity.be/bugs/dvguestbook.txt'}, {'name': '19098', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19098'}, {'name': '16968', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16968'}, {'name': 'ADV-2006-0842', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0842'}, {'name': '20060309 DVguestbook 1.0 And 1.2.2 Cross Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427214/100/0/threaded'}, {'name': 'dvguestbook-index-dvgbook-xss(25049)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25049'}]
CVE State: PUBLISHED
Explain CVE-2006-1071
Cross-site scripting (XSS) vulnerability in index.php in DVguestbook 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://biyosecurity.be/bugs/dvguestbook.txt'}, {'name': 'ADV-2006-0843', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0843'}, {'name': '16968', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16968'}, {'name': '19099', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19099'}, {'name': '20060309 DVguestbook 1.0 And 1.2.2 Cross Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427214/100/0/threaded'}, {'name': 'dvguestbook-index-dvgbook-xss(25049)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25049'}]
CVE State: PUBLISHED
Explain CVE-2006-1072
Cross-site scripting (XSS) vulnerability in Daverave Simplog 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a blog post.
Affected Products: n/a
References: [{'name': 'simplog-post-xss(25066)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25066'}, {'name': '20060304 Simplog <= 1.0.2 Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426769/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://notlegal.ws/simplogsploit.txt'}, {'name': '16965', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16965'}]
CVE State: PUBLISHED
Explain CVE-2006-1073
Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows remote attackers to include or read arbitrary .txt files via the (1) act and (2) blogid parameters.
Affected Products: n/a
References: [{'name': 'simplog-index-traverse-directories(25067)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25067'}, {'name': 'ADV-2006-0839', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0839'}, {'name': '542', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/542'}, {'name': '20060304 Simplog <= 1.0.2 Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426769/100/0/threaded'}, {'name': '19115', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19115'}, {'tags': ['x_refsource_MISC'], 'url': 'http://notlegal.ws/simplogsploit.txt'}, {'name': '16965', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16965'}]
CVE State: PUBLISHED
Explain CVE-2006-1074
Jason Boettcher Liero Xtreme 0.62b and earlier allow remote attackers to cause a denial of service (application crash or hang) via a long argument to the connect command.
Affected Products: n/a
References: [{'name': 'ADV-2006-0849', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0849'}, {'name': '20060306 Multiple vulnerabilities in Liero Xtreme 0.62b', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426864/100/0/threaded'}, {'name': '19079', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19079'}, {'name': '16992', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16992'}, {'name': 'liero-connect-dos(25185)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25185'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/lieroxxx-adv.txt'}]
CVE State: PUBLISHED
Explain CVE-2006-1075
Format string vulnerability in the visualization function in Jason Boettcher Liero Xtreme 0.62b and earlier allows remote attackers to execute arbitrary code via format string specifiers in (1) a nickname, (2) a dedicated server name, or (3) a mapname in a level (aka .lxl) file.
Affected Products: n/a
References: [{'name': '16990', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16990'}, {'name': 'ADV-2006-0849', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0849'}, {'name': '549', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/549'}, {'name': '20060306 Multiple vulnerabilities in Liero Xtreme 0.62b', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426864/100/0/threaded'}, {'name': '19079', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19079'}, {'name': 'liero-visualization-format-string(25187)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25187'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/lieroxxx-adv.txt'}]
CVE State: PUBLISHED
Explain CVE-2006-1076
SQL injection vulnerability in index.php, possibly during a showtopic operation, in Invision Power Board (IPB) 2.1.5 allows remote attackers to execute arbitrary SQL commands via the st parameter.
Affected Products: n/a
References: [{'name': 'invision-index-sql-injection(25254)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25254'}, {'name': '20060306 SQL injection in Invision Power Board v2.1.5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426875/100/0/threaded'}, {'name': '16971', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16971'}, {'name': '20060405 Re: SQL injection in Invision Power Board v2.1.5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/430357/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2006-1077
Multiple cross-site scripting (XSS) vulnerabilities in the commentary in Evo-Dev evoBlog allow remote attackers to inject arbitrary web script or HTML via (1) the name parameter and (2) other unspecified parameters.
Affected Products: n/a
References: [{'name': '16983', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16983'}, {'name': '20060306 evoBlog Remote Name tag Script injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426826/100/0/threaded'}, {'name': '20060423 Re: evoBlog Remote Name tag Script injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431869/100/0/threaded'}, {'name': '544', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/544'}, {'name': '23826', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23826'}]
CVE State: PUBLISHED
Explain CVE-2006-1078
Multiple buffer overflows in htpasswd, as used in Acme thttpd 2.25b, and possibly other products such as Apache, might allow local users to gain privileges via (1) a long command line argument and (2) a long line in a file.  NOTE: since htpasswd is normally installed as a non-setuid program, and the exploit is through command line options, perhaps this issue should not be included in CVE.  However, if there are some typical or recommended configurations that use htpasswd with sudo privileges, or common products that access htpasswd remotely, then perhaps it should be included.
Affected Products: n/a
References: [{'name': '20070102 Apache 1.3.37 htpasswd buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051562.html'}, {'name': '20060305 htpasswd bufferoverflow and command execution in thttpd-2.25b.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426823/100/0/threaded'}, {'name': '[thttpd] 20060305 Re: htpasswd.c security issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=thttpd&m=114154083000296&w=2'}, {'name': '20041029 Re: local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/bugtraq/2004/Oct/0359.html'}, {'name': '16972', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16972'}, {'tags': ['x_refsource_MISC'], 'url': 'http://issues.apache.org/bugzilla/show_bug.cgi?id=41279'}, {'name': '[thttpd] 20060305 htpasswd.c security issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=thttpd&m=114153031201867&w=2'}, {'name': 'thttpd-command-file-bo(25216)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25216'}, {'name': '20040916 FlowSecurity.org: Local Stack Overflow on htpasswd apache 1.3.31 advsory.', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0547.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://issues.apache.org/bugzilla/show_bug.cgi?id=31975'}, {'name': '20041029 Apache 1.3.33 local buffer overflow in apache 1.3.31 not fixed in .33?', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://www.security-express.com/archives/fulldisclosure/2004-10/1117.html'}, {'name': 'apache-htpasswd-strcpy-bo(31236)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31236'}]
CVE State: PUBLISHED
Explain CVE-2006-1079
htpasswd, as used in Acme thttpd 2.25b and possibly other products such as Apache, might allow local users to gain privileges via shell metacharacters in a command line argument, which is used in a call to the system function.  NOTE: since htpasswd is normally installed as a non-setuid program, and the exploit is through command line options, perhaps this issue should not be included in CVE.  However, if there are some typical or recommended configurations that use htpasswd with sudo privileges, or common products that access htpasswd remotely, then perhaps it should be included.
Affected Products: n/a
References: [{'name': '20060305 htpasswd bufferoverflow and command execution in thttpd-2.25b.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426823/100/0/threaded'}, {'name': '[thttpd] 20060305 Re: htpasswd.c security issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=thttpd&m=114154083000296&w=2'}, {'name': 'thttpd-command-line-bo(25217)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25217'}, {'name': '16972', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16972'}, {'name': '23828', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23828'}, {'name': '[thttpd] 20060305 htpasswd.c security issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=thttpd&m=114153031201867&w=2'}]
CVE State: PUBLISHED
Explain CVE-2006-1080
Cross-site scripting (XSS) vulnerability in login.php in Game-Panel 2.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter, possibly requiring a URL encoded value.
Affected Products: n/a
References: [{'name': '20060304 Game-Panel <= 2.1.6 XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426825/100/0/threaded'}, {'name': 'gamepanel-login-xss(25144)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25144'}, {'name': 'ADV-2006-0864', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0864'}, {'tags': ['x_refsource_MISC'], 'url': 'http://notlegal.ws/gamepanel.txt'}, {'name': '16979', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16979'}, {'name': '19143', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19143'}]
CVE State: PUBLISHED
Explain CVE-2006-1081
SQL injection vulnerability in forgotten_password.php in Jonathan Beckett PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL commands via the email parameter.
Affected Products: n/a
References: [{'name': 'nexus-forgottenpassword-sql-injection(25017)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25017'}, {'name': 'ADV-2006-0809', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0809'}, {'name': '536', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/536'}, {'name': '19089', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19089'}, {'tags': ['x_refsource_MISC'], 'url': 'http://hamid.ir/security/nexus.txt'}, {'name': '20060302 PluggedOut Nexus SQL injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426575/100/0/threaded'}, {'name': '16915', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16915'}, {'name': '1015715', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015715'}]
CVE State: PUBLISHED
Explain CVE-2006-1082
Multiple cross-site scripting (XSS) vulnerabilities in phpArcadeScript 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the gamename parameter in tellafriend.php, (2) the login_status parameter in loginbox.php, (3) the submissionstatus parameter in index.php, the (4) cell_title_background_color and (5) browse_cat_name parameters in browse.php, the (6) gamefile parameter in displaygame.php, and (7) possibly other parameters in unspecified PHP scripts.
Affected Products: n/a
References: [{'name': '533', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/533'}, {'name': '20060304 phpArcadeScript XSS Injections', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426755/100/0/threaded'}, {'name': '19124', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19124'}, {'name': 'ADV-2006-0821', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0821'}, {'name': '16957', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16957'}]
CVE State: PUBLISHED
Explain CVE-2006-1083
Multiple directory traversal vulnerabilities in PHP-Stats 0.1.9.1 and earlier allow remote attackers to read and possibly execute arbitrary files via a .. (dot dot) in the (1) option[language] and (2) option[template] parameters, and (3) possibly other parameters, to (a) admin.php and (b) other unspecified scripts.  NOTE: the admin.php/option[language] vector can be used by remote unauthenticated attackers to include arbitrary files in conjunction with CVE-2006-1085.
Affected Products: n/a
References: [{'name': 'ADV-2006-0822', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0822'}, {'name': '20060322 Re: PHP-Stats <= 0.1.9.1 remote commands execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428614/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://retrogod.altervista.org/php_stats_0191_adv.html'}, {'name': '20060304 PHP-Stats <= 0.1.9.1 remote commands execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426762/100/0/threaded'}, {'name': '20060327 Re: PHP-Stats <= 0.1.9.1 remote commands execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429145/100/0/threaded'}, {'name': '19116', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19116'}, {'name': '16963', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16963'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.phpstats.net/forum/viewtopic.php?t=140'}]
CVE State: PUBLISHED
Explain CVE-2006-1084
Multiple SQL injection vulnerabilities in PHP-Stats 0.1.9.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the option[prefix] parameter in admin.php and other unspecified PHP scripts, and (2) the PC_REMOTE_ADDR HTTP header to click.php.
Affected Products: n/a
References: [{'name': 'ADV-2006-0822', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0822'}, {'name': '20060322 Re: PHP-Stats <= 0.1.9.1 remote commands execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428614/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://retrogod.altervista.org/php_stats_0191_adv.html'}, {'name': '20060304 PHP-Stats <= 0.1.9.1 remote commands execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426762/100/0/threaded'}, {'name': '20060327 Re: PHP-Stats <= 0.1.9.1 remote commands execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429145/100/0/threaded'}, {'name': '19116', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19116'}, {'name': '16963', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16963'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.phpstats.net/forum/viewtopic.php?t=140'}]
CVE State: PUBLISHED
Explain CVE-2006-1085
admin.php in PHP-Stats 0.1.9.1 and earlier allows remote attackers to bypass authentication, gain administrator privileges, and execute arbitrary PHP code by modifying the option[admin_pass] parameter and setting the pass_cookie to the MD5 hash of the specified password.
Affected Products: n/a
References: [{'name': 'ADV-2006-0822', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0822'}, {'name': '20060322 Re: PHP-Stats <= 0.1.9.1 remote commands execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428614/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://retrogod.altervista.org/php_stats_0191_adv.html'}, {'name': '20060304 PHP-Stats <= 0.1.9.1 remote commands execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426762/100/0/threaded'}, {'name': '20060327 Re: PHP-Stats <= 0.1.9.1 remote commands execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429145/100/0/threaded'}, {'name': '19116', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19116'}, {'name': '16963', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16963'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.phpstats.net/forum/viewtopic.php?t=140'}]
CVE State: PUBLISHED
Explain CVE-2006-1087
Direct static code injection vulnerability in the modify_config action in admin.php for PHP-Stats 0.1.9.1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via the option_new[compatibility_mode] parameter, which is not filtered before being stored in config.php.  NOTE: this vulnerability can be exploited by remote unauthenticated attackers in conjunction with the option[admin_pass] authentication bypass vulnerability.
Affected Products: n/a
References: [{'name': 'ADV-2006-0822', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0822'}, {'name': '20060322 Re: PHP-Stats <= 0.1.9.1 remote commands execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428614/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://retrogod.altervista.org/php_stats_0191_adv.html'}, {'name': '20060304 PHP-Stats <= 0.1.9.1 remote commands execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426762/100/0/threaded'}, {'name': '20060327 Re: PHP-Stats <= 0.1.9.1 remote commands execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429145/100/0/threaded'}, {'name': '19116', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19116'}, {'name': '16963', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16963'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.phpstats.net/forum/viewtopic.php?t=140'}]
CVE State: PUBLISHED
Explain CVE-2006-1088
PHP-Stats 0.1.9.1 and earlier allows remote attackers to obtain potentially sensitive information via a direct request to checktables.php, which lists the database table_prefix.
Affected Products: n/a
References: [{'name': 'ADV-2006-0822', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0822'}, {'name': '20060322 Re: PHP-Stats <= 0.1.9.1 remote commands execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428614/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://retrogod.altervista.org/php_stats_0191_adv.html'}, {'name': '20060304 PHP-Stats <= 0.1.9.1 remote commands execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426762/100/0/threaded'}, {'name': '20060327 Re: PHP-Stats <= 0.1.9.1 remote commands execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429145/100/0/threaded'}, {'name': '19116', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19116'}, {'name': '16963', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16963'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.phpstats.net/forum/viewtopic.php?t=140'}]
CVE State: PUBLISHED