Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
=2 - http://aluigi.altervista.org/adv/rakzero-adv.txt - http://secunia.com/advisories/15597 - http://securitytracker.com/id?1014111
CVE ID: CVE-2005-1900 State: PUBLISHED Published: 2005-06-08T04:00:00 Last Updated: 2024-08-07T22:06:57.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sawmill before 7.1.6 allows remote attackers to bypass authentication and (1) gain administrative privileges or (2) add a license. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/17100 - http://securitytracker.com/id?1014106 - http://www.networksecurity.fi/advisories/sawmill-admin.html - http://www.osvdb.org/17101 - http://secunia.com/advisories/15499 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20879 - http://www.sawmill.net/version_history7.html - https://exchange.xforce.ibmclo
force.ibmcloud.com/vulnerabilities/20879 - http://www.sawmill.net/version_history7.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/20880
CVE ID: CVE-2005-1901 State: PUBLISHED Published: 2005-06-08T04:00:00 Last Updated: 2024-08-07T22:06:57.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Sawmill before 7.1.6 allow remote attackers to inject arbitrary web script or HTML via (1) the username in the Add User window or (2) the license key in the Licensing page. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/17102 - http://www.osvdb.org/17103 - http://securitytracker.com/id?1014106 - http://www.networksecurity.fi/advisories/sawmill-admin.html - http://secunia.com/advisories/15499 - http://www.sawmill.net/version_history7.h
urity.fi/advisories/sawmill-admin.html - http://secunia.com/advisories/15499 - http://www.sawmill.net/version_history7.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/20881
CVE ID: CVE-2005-1902 State: PUBLISHED Published: 2005-06-08T04:00:00 Last Updated: 2024-08-07T22:06:57.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated users to read other users' mail and perform operations on arbitrary directories via .. sequences in the (1) SELECT, (2) CREATE, (3) DELETE, and (4) RENAME commands. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014095 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20860 - http://www.vupen.com/english/advisories/2005/0680 - http://secunia.com/advisories/15573
oud.com/vulnerabilities/20860 - http://www.vupen.com/english/advisories/2005/0680 - http://secunia.com/advisories/15573 - http://www.osvdb.org/16989 - http://www.security.org.sg/vuln/spa-promail4.html
CVE ID: CVE-2005-1903 State: PUBLISHED Published: 2005-06-08T04:00:00 Last Updated: 2024-08-07T22:06:57.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated users to execute arbitrary code via a long CREATE command. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014095 - http://www.vupen.com/english/advisories/2005/0680 - http://secunia.com/advisories/15573 - http://www.osvdb.org/16990 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20862 - http://www.security.org.sg/vuln/spa-promail4.html
CVE ID: CVE-2005-1904 State: PUBLISHED Published: 2005-06-08T04:00:00Z Last Updated: 2024-09-17T02:37:31.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.asp in JiRo's Upload System (JUS) 1 allows remote attackers to execute arbitrary SQL commands via the password parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16969 - http://securitytracker.com/id?1014086 - http://www.under9round.com/jus.txt - http://secunia.com/advisories/15564
CVE ID: CVE-2005-1905 State: PUBLISHED Published: 2005-06-08T04:00:00 Last Updated: 2024-08-07T22:06:57.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: The klif.sys driver in Kaspersky Labs Anti-Virus 5.0.227, 5.0.228, and 5.0.335 on Windows 2000 allows local users to gain privileges by modifying certain critical code addresses that are later accessed by privileged programs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13878 - http://marc.info/?l=bugtraq&m=111817777430401&w=2
CVE ID: CVE-2005-1906 State: PUBLISHED Published: 2005-06-08T04:00:00 Last Updated: 2024-08-07T22:06:57.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.asp in livingmailing 1.3 allows remote attackers to execute arbitrary SQL commands via the password. NOTE: there is little public information about this product and its vendor, and the original researcher announcement is no longer available. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014087 - http://www.vupen.com/english/advisories/2005/0678 - http://www.under9round.com/lmg.txt
CVE ID: CVE-2005-1907 State: PUBLISHED Published: 2005-06-08T04:00:00 Last Updated: 2024-08-07T22:06:57.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ISA Firewall service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (Wspsrv.exe crash) via a large amount of SecureNAT network traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.networksecurity.fi/advisories/windows-isa-firewall.html - http://www.osvdb.org/17031 - http://securitytracker.com/id?1014113 - http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B894864 - http://www.niscc.gov.uk/niscc/docs/br-2005060
- http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B894864 - http://www.niscc.gov.uk/niscc/docs/br-20050602-00456.html?lang=en - http://www.securityfocus.com/bid/13846
CVE ID: CVE-2005-1908 State: PUBLISHED Published: 2005-06-08T04:00:00Z Last Updated: 2024-09-16T18:03:35.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Perception LiteWeb allows remote attackers to bypass access controls for files via an extra leading / (slash) or leading \ (backslash) in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014096 - http://secunia.com/advisories/15592 - http://www.osvdb.org/17084
CVE ID: CVE-2005-1909 State: PUBLISHED Published: 2005-06-08T04:00:00Z Last Updated: 2024-09-16T19:51:31.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server control panel in 602LAN SUITE 2004 allows remote attackers to make it more difficult for the administrator to read portions of log files via a "</pre><!-" sequence in an HTTP GET request in the logon, possibly due to a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014105 - http://rgod.altervista.org/602_en.html
CVE ID: CVE-2005-1910 State: PUBLISHED Published: 2005-06-08T04:00:00 Last Updated: 2024-08-07T22:06:57.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.asp for WWWeb Concepts Events System 1.0 allows remote attackers to execute arbitrary SQL commands via the password. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15595 - http://securitytracker.com/id?1014104 - http://www.under9round.com/wecs.txt
CVE ID: CVE-2005-1911 State: PUBLISHED Published: 2005-06-08T04:00:00Z Last Updated: 2024-09-17T03:59:11.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fetchnews NNTP client in leafnode 1.11.2 and earlier can hang while waiting for input that never arrives, which allows remote NNTP servers to cause a denial of service (news loss). Additional Analyst Notes: - CVE Program Container: References: - http://leafnode.sourceforge.net/leafnode-SA-2005-02.txt
CVE ID: CVE-2005-1912 State: REJECTED Published: 2005-07-07T04:00:00 Last Updated: 2005-11-02T10:00:00 Description: No description available.
CVE ID: CVE-2005-1913 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:06:57.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel 2.6 before 2.6.12.1 allows local users to cause a denial of service (kernel panic) via a non group-leader thread executing a different program than was pending in itimer, which causes the signal to be delivered to the old group-leader task, which does not exist. Additional Analyst Notes: - CVE Program Container: References: - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.1 - http://secunia.com/advisories/15786/ - http://www.ubuntu.com/usn/usn-178-1 - https://exchange.xforce.ibmcloud.com/vulnerabilit
/secunia.com/advisories/15786/ - http://www.ubuntu.com/usn/usn-178-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21138 - http://www.securityfocus.com/bid/14054
CVE ID: CVE-2005-1914 State: PUBLISHED Published: 2005-07-17T04:00:00Z Last Updated: 2024-09-16T23:35:53.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: CenterICQ 4.20.0 and earlier creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack on the gg.token.PID temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.zataz.net/adviso/centericq-06152005.txt - http://www.debian.org/security/2005/dsa-754 - http://www.securityfocus.com/bid/14144
CVE ID: CVE-2005-1915 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:06:57.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: The log4sh_readProperties function in log4sh 1.2.5 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable log4sh.$$ filenames. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/034873.html - http://www.zataz.net/adviso/log4sh-06092005.txt - http://bugs.gentoo.org/show_bug.cgi?id=94069 - http://www.securityfocus.com/bid/14140 - http://www.vupen.com/english/advisories/2005/0957 - http://archives.neohapsis.com/arch
www.securityfocus.com/bid/14140 - http://www.vupen.com/english/advisories/2005/0957 - http://archives.neohapsis.com/archives/vulnwatch/2005-q3/0001.html - http://secunia.com/advisories/15899
CVE ID: CVE-2005-1916 State: PUBLISHED Published: 2005-07-06T04:00:00 Last Updated: 2024-08-07T22:06:57.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: linki.py in ekg 2005-06-05 and earlier allows local users to overwrite or create arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-760 - http://marc.info/?l=bugtraq&m=112198499417250&w=2 - http://marc.info/?l=bugtraq&m=112060146011122&w=2 - http://www.zataz.net/adviso/ekg-06062005.txt
CVE ID: CVE-2005-1917 State: PUBLISHED Published: 2005-07-05T04:00:00Z Last Updated: 2024-09-16T21:07:49.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: kpopper 1.0 and earlier allows local users to create and overwrite arbitrary files via a symlink attack on the .popper-new temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.zataz.net/adviso/kpopper-06152005.txt
CVE ID: CVE-2005-1918 State: PUBLISHED Published: 2006-02-21T19:00:00 Last Updated: 2024-08-07T22:06:57.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/". Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9946 - http://www.securityfocus.com/bid/5834 - http://www.novell.com/linux/securi
finition/oval%3Aorg.mitre.oval%3Adef%3A9946 - http://www.securityfocus.com/bid/5834 - http://www.novell.com/linux/security/advisories/2006_05_sr.html - http://securitytracker.com/id?1015655 - http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm - http://secunia.com/advisories/18988 - http://secunia.com/advisories/19130 - http://www.redhat.com/support/errata/RHSA-2006-0195.html - http://secunia.com/advisories/20397 - http://www.securityfocus.com/archive/1/430297/100/0/threaded - ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140589 - http://secunia.com/advisories/19183
CVE ID: CVE-2005-1919 State: REJECTED Published: 2006-02-17T19:00:00Z Last Updated: 2024-09-16T20:02:37.814Z Description: No description available.
CVE ID: CVE-2005-1920 State: PUBLISHED Published: 2005-07-26T04:00:00 Last Updated: 2024-08-07T22:06:57.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and possibly remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://www.securityfocus.com/bid/14297 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9434 - http://
us.com/bid/14297 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9434 - http://www.debian.org/security/2005/dsa-804 - http://securitytracker.com/id?1014512 - http://www.securityfocus.com/archive/1/427976/100/0/threaded - http://marc.info/?l=bugtraq&m=112171434023679&w=2 - http://www.kde.org/info/security/advisory-20050718-1.txt - http://security.gentoo.org/glsa/glsa-200611-21.xml - http://secunia.com/advisories/16099 - http://secunia.com/advisories/23099 - http://www.redhat.com/support/errata/RHSA-2005-612.html
CVE ID: CVE-2005-1921 State: PUBLISHED Published: 2005-07-01T04:00:00 Last Updated: 2024-08-07T22:06:57.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7) phpWebSite, (8) Ampache, and others, allows remote attackers to execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement. Additional Analyst Notes: - CVE Program Container: References: - https://oval
ed before being used in an eval statement. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A350 - http://www.debian.org/security/2005/dsa-789 - http://secunia.com/advisories/15947 - http://secunia.com/advisories/15852 - http://secunia.com/advisories/15944 - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://secunia.com/advisories/15883 - http://secunia.com/advisories/15872 - http://secunia.com/advisories/15895 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11294 - http://securitytracker.com/id?1015336 - http://www.debian.org/se
search/definition/oval%3Aorg.mitre.oval%3Adef%3A11294 - http://securitytracker.com/id?1015336 - http://www.debian.org/security/2005/dsa-746 - http://secunia.com/advisories/17674 - http://www.gulftech.org/?node=research&article_id=00087-07012005 - http://www.vupen.com/english/advisories/2005/2827 - http://secunia.com/advisories/15917 - http://www.debian.org/security/2005/dsa-747 - http://www.novell.com/linux/security/advisories/2005_41_php_pear.html - http://www.hardened-php.net/advisory-022005.php - http://www.securityfocus.com/archive/1/419064/100/0/threaded - http://marc.info/?l=bugtraq&m=112605112027335&w=2 - http://secunia.com/advisories/15957 - http://www.ampache.org/announce/3_3_1_2.ph
info/?l=bugtraq&m=112605112027335&w=2 - http://secunia.com/advisories/15957 - http://www.ampache.org/announce/3_3_1_2.php - http://secunia.com/advisories/15810 - http://security.gentoo.org/glsa/glsa-200507-01.xml - http://www.drupal.org/security/drupal-sa-2005-003/advisory.txt - http://www.securityfocus.com/bid/14088 - http://secunia.com/advisories/16693 - http://marc.info/?l=bugtraq&m=112008638320145&w=2 - http://marc.info/?l=bugtraq&m=112015336720867&w=2 - http://security.gentoo.org/glsa/glsa-200507-07.xml - http://secunia.com/advisories/15904 - http://secunia.com/advisories/15903 - http://www.novell.com/linux/security/advisories/2005_49_php.html - http://sourceforge.net/project/shownotes.
ies/15903 - http://www.novell.com/linux/security/advisories/2005_49_php.html - http://sourceforge.net/project/shownotes.php?release_id=338803 - http://secunia.com/advisories/17440 - http://secunia.com/advisories/15922 - http://secunia.com/advisories/15884 - http://secunia.com/advisories/15916 - http://www.redhat.com/support/errata/RHSA-2005-564.html - http://pear.php.net/package/XML_RPC/download/1.3.1 - http://secunia.com/advisories/16001 - http://sourceforge.net/project/showfiles.php?group_id=87163 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:109 - http://security.gentoo.org/glsa/glsa-200507-06.xml - http://www.debian.org/security/2005/dsa-745 - http://www.securityfocus.com
security.gentoo.org/glsa/glsa-200507-06.xml - http://www.debian.org/security/2005/dsa-745 - http://www.securityfocus.com/archive/1/419064/100/0/threaded - http://secunia.com/advisories/15855 - http://secunia.com/advisories/16339 - http://secunia.com/advisories/18003 - http://secunia.com/advisories/15861
CVE ID: CVE-2005-1922 State: PUBLISHED Published: 2005-06-30T04:00:00 Last Updated: 2024-08-07T22:06:57.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MS-Expand file handling in Clam AntiVirus (ClamAV) before 0.86 allows remote attackers to cause a denial of service (file descriptor and memory consumption) via a crafted file that causes repeated errors in the cli_msexpand function. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=276&type=vulnerabilities&flashstatus=true - http://sourceforge.net/project/shownotes.php?release_id=336462 - http://www.debian.org/security/2005/dsa-737
CVE ID: CVE-2005-1923 State: PUBLISHED Published: 2005-06-30T04:00:00 Last Updated: 2024-08-07T22:06:57.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a cabinet (CAB) file with the cffile_FolderOffset field set to 0xff, which causes a zero-length read. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=275&type=vulnerabilities - http://www.debian.org/security/2005/dsa-737
CVE ID: CVE-2005-1924 State: PUBLISHED Published: 2007-07-15T22:00:00 Last Updated: 2024-08-07T22:06:57.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute arbitrary commands via shell metacharacters in (1) the fpr parameter to the deleteKey function in gpg_keyring.php, as called by (a) import_key_file.php, (b) import_key_text.php, and (c) keyring_main.php; and (2) the keyserver parameter to the gpg_recv_key function in gpg_key_functions.php, as called by gpg_options.php. NOTE: this issue may overlap CVE-2007-3636. Additional Analyst Notes: - CVE Program Container: References: - ht
ons.php. NOTE: this issue may overlap CVE-2007-3636. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35364 - http://secunia.com/advisories/26035 - http://secunia.com/advisories/26424 - http://osvdb.org/37924 - http://www.securityfocus.com/bid/24874 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=331 - https://www.exploit-db.com/exploits/4173 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35355 - http://www.vupen.com/english/advisories/2007/2513 - http://osvdb.org/37923 - http://security.gentoo.org/glsa/glsa-200708-08.xml - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=3
p://security.gentoo.org/glsa/glsa-200708-08.xml - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=329 - http://www.attrition.org/pipermail/vim/2007-July/001710.html - http://www.securityfocus.com/archive/1/473370/100/0/threaded
CVE ID: CVE-2005-1925 State: PUBLISHED Published: 2005-11-18T11:00:00 Last Updated: 2024-08-07T22:06:57.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Tikiwiki before 1.9.1 allow remote attackers to read arbitrary files and execute commands via (1) the suck_url parameter to tiki-editpage.php or (2) language parameter to tiki-user_preferences.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=335&type=vulnerabilities - https://exchange.xforce.ibmcloud.com/vulnerabilities/23099 - http://www.securityfocus.com/bid/15390 - https://exchange.xforce.ibmcloud.com/vuln
.ibmcloud.com/vulnerabilities/23099 - http://www.securityfocus.com/bid/15390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23095 - http://www.securityfocus.com/bid/15392 - http://securitytracker.com/id?1015190 - http://www.idefense.com/application/poi/display?id=337&type=vulnerabilities
CVE ID: CVE-2005-1928 State: PUBLISHED Published: 2005-12-14T23:00:00 Last Updated: 2024-08-07T22:06:57.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trend Micro ServerProtect EarthAgent for Windows Management Console 5.58 and possibly earlier versions, when running with Trend Micro Control Manager 2.5 and 3.0, and Damage Cleanup Server 1.1, allows remote attackers to cause a denial of service (CPU consumption) via a flood of crafted packets with a certain "magic value" to port 5005, which also leads to a memory leak. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18038 - http://securitytracker.com/id?1015358 - http://solution
m Container: References: - http://secunia.com/advisories/18038 - http://securitytracker.com/id?1015358 - http://solutionfile.trendmicro.com/SolutionFile/25254/en/Hotfix_Readme_SPNT5_58_B1137.txt - http://kb.trendmicro.com/solutions/search/main/search/solutionDetail.asp?solutionID=25254 - http://www.securityfocus.com/bid/15868 - http://securityreason.com/securityalert/259 - http://www.osvdb.org/21773 - http://www.idefense.com/application/poi/display?id=356&type=vulnerabilities - http://www.vupen.com/english/advisories/2005/2907
CVE ID: CVE-2005-1929 State: PUBLISHED Published: 2005-12-14T21:00:00 Last Updated: 2024-08-07T22:06:57.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in (1) isaNVWRequest.dll and (2) relay.dll in Trend Micro ServerProtect Management Console 5.58 and earlier, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, allow remote attackers to execute arbitrary code via "wrapped" length values in Chunked transfer requests. NOTE: the original report suggests that the relay.dll issue is related to a problem in which a Microsoft Foundation Classes (MFC) static library returns invalid values under heavy load. As such, this might not