Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-0113 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T21:05:25.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: inpview in SGI IRIX allows local users to execute arbitrary commands via the SUN_TTSESSION_CMD environment variable, which is executed by inpview without dropping privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18894 - http://securitytracker.com/id?1012894 - http://www.idefense.com/application/poi/display?id=182&type=vulnerabilities - http://secunia.com/advisories/13858 - http://www.osvdb.org/12915 - http://www.securityfocus.com/bid/12259
CVE ID: CVE-2005-0114 State: PUBLISHED Published: 2005-02-11T05:00:00 Last Updated: 2024-08-07T21:05:23.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Client 4.x before 4.5.122.000 and 5.x before 5.1.556.166 do not properly verify that the ServerPortName argument to the NtConnectPort function is a valid memory address, which allows local users to cause a denial of service (system crash) when ZoneAlarm attempts to dereference an invalid pointer. Additional Analyst Notes: - CVE Program Container: References: - http://download.zonelabs.com/bin/free/securityAlert/1
. Additional Analyst Notes: - CVE Program Container: References: - http://download.zonelabs.com/bin/free/securityAlert/19.html - http://secunia.com/advisories/14256 - http://www.securityfocus.com/bid/12531 - http://www.idefense.com/application/poi/display?id=199&type=vulnerabilities
CVE ID: CVE-2005-0115 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T21:05:23.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in DataRescue Interactive Disassembler (IDA) Pro 4.7 allows attackers to execute arbitrary code via a PE file with an Import Address Table containing a long import library name. Additional Analyst Notes: - CVE Program Container: References: - http://www.datarescue.com/ubb/ultimatebb.php?/topic/2/146.html - http://secunia.com/advisories/13980 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19042 - http://www.securityfocus.com/bid/12353 - http://www.idefense.com/application/poi/display?id=189&t
ulnerabilities/19042 - http://www.securityfocus.com/bid/12353 - http://www.idefense.com/application/poi/display?id=189&type=vulnerabilities - http://securitytracker.com/id?1012975
CVE ID: CVE-2005-0116 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T21:05:23.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir parameter to aswtats.pl. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=185&type=vulnerabilities&flashstatus=false - http://www.securityfocus.com/bid/12298 - http://packetstormsecurity.org/0501-exploits/AWStatsVulnAnalysis.pdf - http://www.kb.cert.org/vuls/id/272296 - http://www.osvdb.org/13002 - http://secunia.com/adviso
AWStatsVulnAnalysis.pdf - http://www.kb.cert.org/vuls/id/272296 - http://www.osvdb.org/13002 - http://secunia.com/advisories/13893/ - http://awstats.sourceforge.net/docs/awstats_changelog.txt
CVE ID: CVE-2005-0117 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T21:05:24.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in XShisen before 1.36 allows local users to execute arbitrary code via a long GECOS field. Additional Analyst Notes: - CVE Program Container: References: - http://www.vuxml.org/freebsd/56971fa6-641c-11d9-a097-000854d03344.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=289784
CVE ID: CVE-2005-0118 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T21:05:23.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: helvis 1.8h2_1 and earlier stores recovery files in world readable directories with world readable permissions, which allows local users to read the recovered files of other users. Additional Analyst Notes: - CVE Program Container: References: - http://www.vuxml.org/freebsd/bb99f803-5fde-11d9-b721-00065be4b5b6.html
CVE ID: CVE-2005-0119 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T21:05:23.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: helvis 1.8h2_1 and earlier allows local users to recover and read the files of other users via the elvrec setuid program. Additional Analyst Notes: - CVE Program Container: References: - http://www.vuxml.org/freebsd/bb99f803-5fde-11d9-b721-00065be4b5b6.html
CVE ID: CVE-2005-0120 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T21:05:24.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: helvis 1.8h2_1 and earlier allows local users to delete arbitrary files via the elvprsv setuid program. Additional Analyst Notes: - CVE Program Container: References: - http://people.freebsd.org/~niels/ports/korean/helvis/issues.txt
CVE ID: CVE-2005-0121 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T21:05:24.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in golddig 2.0 and earlier allow local users to execute arbitrary code via (1) a long map name command line argument or (2) a long username as recorded in the USER environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.vuxml.org/freebsd/949c470e-528f-11d9-ac20-00065be4b5b6.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19040 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19039
CVE ID: CVE-2005-0122 State: REJECTED Published: 2005-01-20T05:00:00 Last Updated: 2005-04-25T09:00:00 Description: No description available.
CVE ID: CVE-2005-0123 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-0124 State: PUBLISHED Published: 2005-01-20T05:00:00 Last Updated: 2024-08-07T21:05:23.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: The coda_pioctl function in the coda functionality (pioctl.c) for Linux kernel 2.6.9 and 2.4.x before 2.4.29 may allow local users to cause a denial of service (crash) or execute arbitrary code via negative vi.in_size or vi.out_size values, which may trigger a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://secunia.com/advisories/18684 - http://seclists.org/lists/linux-kernel/2005/Jan/1089.html - http://www.debian.org/security/2006/dsa-1082 - http:/
8684 - http://seclists.org/lists/linux-kernel/2005/Jan/1089.html - http://www.debian.org/security/2006/dsa-1082 - http://seclists.org/lists/linux-kernel/2004/Dec/3914.html - http://www.debian.org/security/2006/dsa-1070 - http://www.securityfocus.com/bid/14967 - http://securitytracker.com/id?1013018 - http://www.securityfocus.com/archive/1/428028/100/0/threaded - http://seclists.org/lists/linux-kernel/2005/Jan/2018.html - http://www.debian.org/security/2006/dsa-1067 - http://www.debian.org/security/2006/dsa-1069 - http://secunia.com/advisories/17002 - http://seclists.org/lists/linux-kernel/2005/Jan/2020.html - http://www.redhat.com/support/errata/RHSA-2005-663.html - http://www.debian.org/sec
ts/linux-kernel/2005/Jan/2020.html - http://www.redhat.com/support/errata/RHSA-2005-663.html - http://www.debian.org/security/2006/dsa-1017 - http://www.vupen.com/english/advisories/2005/1878 - http://secunia.com/advisories/20202 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11690 - http://secunia.com/advisories/19374 - http://www.redhat.com/support/errata/RHSA-2006-0191.html - http://secunia.com/advisories/20338
CVE ID: CVE-2005-0125 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T21:05:24.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "at" commands on Mac OS X 10.3.7 and earlier do not properly drop privileges, which allows local users to (1) delete arbitrary files via atrm, (2) execute arbitrary programs via the -f argument to batch, or (3) read arbitrary files via the -f argument to batch, which generates a job file that is readable by the local user. Additional Analyst Notes: - CVE Program Container: References: - http://www.digitalmunition.com/DMA%5B2005-0127a%5D.txt - http://www.kb.cert.org/vuls/id/678150 - http://lists.apple.com/archives/security-
munition.com/DMA%5B2005-0127a%5D.txt - http://www.kb.cert.org/vuls/id/678150 - http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html - http://marc.info/?l=bugtraq&m=110685027017411&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18981
CVE ID: CVE-2005-0126 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T21:05:23.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: ColorSync on Mac OS X 10.3.7 and 10.3.8 allows attackers to execute arbitrary code via malformed ICC color profiles that modify the heap. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html - http://www.kb.cert.org/vuls/id/980078 - http://securitytracker.com/id?1013000 - http://www.securityfocus.com/bid/12367 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19083
CVE ID: CVE-2005-0127 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T21:05:24.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mail in Mac OS X 10.3.7, when generating a Message-ID header, generates a GUUID that includes information that identifies the Ethernet hardware being used, which allows remote attackers to link mail messages to a particular machine. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/464662 - http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html - http://secunia.com/advisories/14005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19085 - http://securitytrack
http://secunia.com/advisories/14005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19085 - http://securitytracker.com/id?1013001
CVE ID: CVE-2005-0128 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-0129 State: PUBLISHED Published: 2005-01-22T05:00:00 Last Updated: 2024-08-07T21:05:24.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing "%" variables, which are recursively expanded by the Server::parseWildcards function when the Part Button is selected. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13919 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031033.html - http://www.kde.org/info/security/advisory-20050121-1.txt - https://exchange.xforce.ibmcloud.com/vul
anuary/031033.html - http://www.kde.org/info/security/advisory-20050121-1.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/19025 - http://www.securityfocus.com/bid/12312 - http://secunia.com/advisories/13989 - http://www.gentoo.org/security/en/glsa/glsa-200501-34.xml - http://marc.info/?l=bugtraq&m=110626383310742&w=2 - http://securitytracker.com/id?1012972
CVE ID: CVE-2005-0130 State: PUBLISHED Published: 2005-01-22T05:00:00 Last Updated: 2024-08-07T21:05:24.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in (1) channel names or (2) song names that are not properly quoted when the user runs IRC scripts. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13919 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031033.html - http://www.kde.org/info/security/advisory-20050121-1.txt - http://www.securityfocus.com/bid/12312 - http://secunia.com/advisories/1
kde.org/info/security/advisory-20050121-1.txt - http://www.securityfocus.com/bid/12312 - http://secunia.com/advisories/13989 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19008 - http://www.gentoo.org/security/en/glsa/glsa-200501-34.xml - http://marc.info/?l=bugtraq&m=110626383310742&w=2 - http://securitytracker.com/id?1012972
CVE ID: CVE-2005-0131 State: PUBLISHED Published: 2005-01-22T05:00:00 Last Updated: 2024-08-07T21:05:24.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13919 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031033.html - http://www.kde.org/info/security/advisory-20050121-1.txt - http://www.securityfocus.com/bid/12312 - http://secunia.com/ad
ttp://www.kde.org/info/security/advisory-20050121-1.txt - http://www.securityfocus.com/bid/12312 - http://secunia.com/advisories/13989 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19038 - http://www.gentoo.org/security/en/glsa/glsa-200501-34.xml - http://marc.info/?l=bugtraq&m=110626383310742&w=2 - http://securitytracker.com/id?1012972
CVE ID: CVE-2005-0133 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T21:05:24.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClamAV 0.80 and earlier allows remote attackers to cause a denial of service (clamd daemon crash) via a ZIP file with malformed headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.trustix.org/errata/2005/0003/ - http://sourceforge.net/project/shownotes.php?release_id=300116 - http://www.gentoo.org/security/en/glsa/glsa-200501-46.xml - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000928 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:025
CVE ID: CVE-2005-0134 State: PUBLISHED Published: 2005-05-18T04:00:00 Last Updated: 2024-08-07T21:05:23.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could allow attackers to hijack local sockets. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/0077 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.8/SCOSA-2005.8.txt
CVE ID: CVE-2005-0135 State: PUBLISHED Published: 2005-04-24T04:00:00 Last Updated: 2024-08-07T21:05:23.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unw_unwind_to_user function in unwind.c on Itanium (ia64) architectures in Linux kernel 2.6 allows local users to cause a denial of service (system crash). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://secunia.com/advisories/15019 - http://www.debian.org/security/2006/dsa-1082 - http://www.redhat.com/support/errata/RHSA-2005-366.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=148868 - http://www.debian.org/security/2006/dsa-1070 - http://linux.bkbi
//bugzilla.redhat.com/bugzilla/show_bug.cgi?id=148868 - http://www.debian.org/security/2006/dsa-1070 - http://linux.bkbits.net:8080/linux-2.6/cset%4041f2beablXVnAs_6fznhhITh1j5hZg - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9040 - http://www.debian.org/security/2006/dsa-1067 - http://www.debian.org/security/2006/dsa-1069 - http://www.securityfocus.com/bid/13266 - http://www.redhat.com/support/errata/RHSA-2005-293.html - http://www.redhat.com/support/errata/RHSA-2005-284.html - http://secunia.com/advisories/20202 - http://secunia.com/advisories/20338
CVE ID: CVE-2005-0136 State: PUBLISHED Published: 2006-06-01T00:00:00 Last Updated: 2024-08-07T21:05:24.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 2.6.11 on the Itanium IA64 platform has certain "ptrace corner cases" that allow local users to cause a denial of service (crash) via crafted syscalls, possibly related to MCA/INIT, a different vulnerability than CVE-2005-1761. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=155283 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11 - http://openvz.org/news/updates/kernel-022stab045.1-released - https://bugzilla.redhat.com/
ernel/v2.6/ChangeLog-2.6.11 - http://openvz.org/news/updates/kernel-022stab045.1-released - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=148862 - http://secunia.com/advisories/17002 - http://www.gelato.unsw.edu.au/archives/linux-ia64/0409/11073.html - http://www.redhat.com/support/errata/RHSA-2005-420.html - http://lists.alioth.debian.org/pipermail/kernel-svn-changes/2005-August/002597.html - http://www.redhat.com/support/errata/RHSA-2005-663.html - http://www.vupen.com/english/advisories/2005/1878 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11628
CVE ID: CVE-2005-0137 State: PUBLISHED Published: 2005-04-24T04:00:00 Last Updated: 2024-08-07T21:05:24.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.6 on Itanium (ia64) architectures allows local users to cause a denial of service via a "missing Itanium syscall table entry." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11039 - http://www.redhat.com/support/errata/RHSA-2005-293.html - http://www.redhat.com/support/errata/RHSA-2005-284.html
CVE ID: CVE-2005-0138 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T21:05:24.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not correctly allow access to anonymous clients that connect from a system whose hostname can not be determined. NOTE: while this issue occurs in a security mechanism, there is no apparent attacker role and probably does not satisfy the CVE definition of a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20050601-01-U - http://www.vupen.com/english/advisories/2005/0702 - http://secunia.co
m/support/free/security/advisories/20050601-01-U - http://www.vupen.com/english/advisories/2005/0702 - http://secunia.com/advisories/15619 - http://www.ciac.org/ciac/bulletins/p-214.shtml
CVE ID: CVE-2005-0139 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T21:05:25.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not sufficiently restrict access rights for read-mostly exports, which allows attackers to conduct unauthorized activities. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20050601-01-U - http://www.vupen.com/english/advisories/2005/0702 - http://secunia.com/advisories/15619 - http://www.ciac.org/ciac/bulletins/p-214.shtml
CVE ID: CVE-2005-0140 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T21:05:24.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in PeID allows attackers to execute arbitrary code via a PE file with an Import Address Table containing a long import library name. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19042 - http://www.securityfocus.com/bid/12355 - http://www.idefense.com/application/poi/display?id=189&type=vulnerabilities - http://secunia.com/advisories/13984
CVE ID: CVE-2005-0141 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T21:05:24.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to load local files via links "with a custom getter and toString method" that are middle-clicked by the user to be opened in a new tab. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-323.html - http://www.securityfocus.com/bid/12407 - https://bugzilla.mozilla.org/show_bug.cgi?id=249332 - http://www.redhat.com/support/errata/RHSA-2005-335.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/
249332 - http://www.redhat.com/support/errata/RHSA-2005-335.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19168 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10756 - http://www.mozilla.org/security/announce/mfsa2005-01.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100057
CVE ID: CVE-2005-0142 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T21:05:24.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permissions, which allows local users to read certain web content or attachments that belong to other users, e.g. content that is managed by helper applications such as PDF. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/mfsa2005-02.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17832 - http://www.redhat.com/support/errata/RHSA-
sa2005-02.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17832 - http://www.redhat.com/support/errata/RHSA-2005-335.html - http://secunia.com/advisories/19823 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9543 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100056 - http://www.redhat.com/support/errata/RHSA-2005-384.html - https://bugzilla.mozilla.org/show_bug.cgi?id=251297 - http://www.novell.com/linux/security/advisories/2006_04_25.html
CVE ID: CVE-2005-0143 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T21:05:24.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a trusted site, which could facilitate phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12407 - http://www.mozilla.org/security/announce/mfsa2005-03.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100055 - http://www.redhat.com/support/errata/RHSA-2005-335.html - https://oval.cisecurity.org/repository
e.oval%3Adef%3A100055 - http://www.redhat.com/support/errata/RHSA-2005-335.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19166 - http://www.redhat.com/support/errata/RHSA-2005-384.html - https://bugzilla.mozilla.org/show_bug.cgi?id=257308
CVE ID: CVE-2005-0144 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T21:05:24.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0 and Mozilla before 1.7.5 display the secure site lock icon when a view-source: URL references a secure SSL site while an insecure page is being loaded, which could facilitate phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19169 - http://www.redhat.com/support/errata/RHSA-2005-323.html - http://www.securityfocus.com/bid/12407 - http://www.redhat.com/support/errata/RHSA-2005-335.html - https://bugzilla.mozilla.org/show_bug