Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-1834 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:29.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a stylesheet attribute, which pass a length check. NOTE: a sign extension problem makes the attack easier with shorter strings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17513 - http://securitytracker.com/id?1015912 - http://marc.info/?l=full-disclosure&m=114493114031891&w=2 - http://www.opera.com/docs/changelogs/windows/854/ - https://exchange.xforce.ibmclou
l-disclosure&m=114493114031891&w=2 - http://www.opera.com/docs/changelogs/windows/854/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/25829 - http://www.securityfocus.com/archive/1/430876/100/0/threaded - http://security.gentoo.org/glsa/glsa-200606-01.xml - http://www.vupen.com/english/advisories/2006/1354 - http://www.sec-consult.com/259.html - http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html - http://secunia.com/advisories/20117
CVE ID: CVE-2006-1835 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:29.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in yearcal.php in Calendarix allows remote attackers to inject arbitrary web script or HTML via the ycyear parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17562 - http://secunia.com/advisories/19710 - http://securityreason.com/securityalert/727 - http://www.securityfocus.com/archive/1/431122/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25874 - http://securitytracker.com/id?1015954 - http://www.vupen.co
https://exchange.xforce.ibmcloud.com/vulnerabilities/25874 - http://securitytracker.com/id?1015954 - http://www.vupen.com/english/advisories/2006/1376
CVE ID: CVE-2006-1836 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:29.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/100 - http://www.securityfocus.com/bid/17571 - http://www.vupen.com/english/advisories/2006/1386 - http://www.securityfocus.com/archive/1/431318/100/0/threaded - http://securitytracker.com/id?1015953 - htt
s/2006/1386 - http://www.securityfocus.com/archive/1/431318/100/0/threaded - http://securitytracker.com/id?1015953 - http://securityresponse.symantec.com/avcenter/security/Content/2006.04.17b.html - http://secunia.com/advisories/19682 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25839
CVE ID: CVE-2006-1837 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:28.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in archiv2.php in Fuju News 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17572 - https://www.exploit-db.com/exploits/1682 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25897 - http://www.vupen.com/english/advisories/2006/1374 - http://secunia.com/advisories/19677
CVE ID: CVE-2006-1838 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:29.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: edit_kategorie.php in Fuju News 1.0 allows remote attackers to bypass authentication by setting the authorized cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17572 - https://www.exploit-db.com/exploits/1682 - http://www.vupen.com/english/advisories/2006/1374 - http://secunia.com/advisories/19677
CVE ID: CVE-2006-1839 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:29.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when register_globals is enabled, allows remote attackers to execute arbitrary code via an FTP URL in the data_dir parameter, which satisfies the file_exists function call. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1382 - http://secunia.com/advisories/19661 - http://retrogod.altervista.org/phpalbum_0323_incl_xpl.html - http://www.securityfocus.com/bid/17526 - https://exchange.xforce.
/retrogod.altervista.org/phpalbum_0323_incl_xpl.html - http://www.securityfocus.com/bid/17526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25846 - http://www.osvdb.org/24741 - http://www.securityfocus.com/archive/1/431067/100/0/threaded
CVE ID: CVE-2006-1840 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:28.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in Empire Server before 4.3.1 allow attackers to cause a denial of service (crash) via the (1) load, (2) spy and (3) bomb functions. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=410001&group_id=24031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25863 - http://www.vupen.com/english/advisories/2006/1380 - http://www.securityfocus.com/bid/17585 - http://www.osvdb.org/24700 - http://secunia.com/advisories/19
ories/2006/1380 - http://www.securityfocus.com/bid/17585 - http://www.osvdb.org/24700 - http://secunia.com/advisories/19674
CVE ID: CVE-2006-1841 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:29.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in boastMachine (bMachine) 2.7, and possibly other versions before 2.9b, allows remote attackers to inject arbitrary web script or HTML via the key parameter, as used by the search field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19711 - http://www.securityfocus.com/archive/1/431120/100/0/threaded - http://www.vupen.com/english/advisories/2006/1375 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25914 - http://www
p://www.vupen.com/english/advisories/2006/1375 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25914 - http://www.securityfocus.com/bid/17550
CVE ID: CVE-2006-1842 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:29.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in global.php in ShoutBOOK 1.1 allows remote attackers to inject arbitrary web script or HTML via the (1) NAME and (2) COMMENTS parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431130/100/0/threaded - http://www.securityfocus.com/bid/17548 - http://secunia.com/advisories/19704 - http://www.vupen.com/english/advisories/2006/1385 - http://securitytracker.com/id?1015958 - https://exchange.xforce.ibmcloud.com/vulnerabilities
lish/advisories/2006/1385 - http://securitytracker.com/id?1015958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25862
CVE ID: CVE-2006-1843 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:29.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in global.php in ShoutBOOK 1.1 allows remote attackers to inject arbitrary web script or HTML via the (1) LOCATION and (2) URL parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19704 - http://www.vupen.com/english/advisories/2006/1385 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25862
CVE ID: CVE-2006-1844 State: PUBLISHED Published: 2006-04-19T16:00:00Z Last Updated: 2024-09-16T16:19:03.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356939 - http://www.osvdb.org/23922 - http://secunia.com/advisories/19170
CVE ID: CVE-2006-1845 State: REJECTED Published: 2006-04-19T16:00:00 Last Updated: 2006-04-26T09:00:00 Description: No description available.
CVE ID: CVE-2006-1846 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:29.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote attackers to inject arbitrary HTML and web script via the ublock parameter, which is saved in the user's personal menu. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. In addition, it is unclear whether this issue is a vulnerability, since it is related to the user's personal menu, which presumably is not modifiable by others. Additional Analyst Notes: - CVE
t is related to the user's personal menu, which presumably is not modifiable by others. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18972 - http://www.vupen.com/english/advisories/2006/0687 - http://www.osvdb.org/23431 - http://www.securityfocus.com/bid/16774
CVE ID: CVE-2006-1847 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:29.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote attackers to execute arbitrary SQL commands via the user_id parameter in the Your_Home functionality. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18972 - http://www.vupen.com/english/advisories/2006/0687 - http://www.securityfocus.com/bid/16774 - https://exchange.xforce.ibmc
ttp://www.vupen.com/english/advisories/2006/0687 - http://www.securityfocus.com/bid/16774 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44730 - http://www.osvdb.org/23432
CVE ID: CVE-2006-1848 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:29.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in stats_view.php in LinPHA 1.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) date_from, (2) date_to, and (3) date parameter. Additional Analyst Notes: - CVE Program Container: References: - http://d4igoro.blogspot.com/2006/04/linpha-xss-vulnerabilities.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25916 - http://www.vupen.com/english/advisories/2006/1396 - http://www.securityfocus.com/archive/1/431242/100/0/threaded - http://secuni
ww.vupen.com/english/advisories/2006/1396 - http://www.securityfocus.com/archive/1/431242/100/0/threaded - http://secunia.com/advisories/19679 - http://www.securityfocus.com/bid/17581
CVE ID: CVE-2006-1849 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:29.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in members_only/index.cgi in xFlow 5.46.11 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) position and (2) id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17614 - http://pridels0.blogspot.com/2006/04/xflow-v5x-multiple-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25853 - http://www.vupen.com/english/advisories/2006/1412 - http://secunia.com/advisories/19707
CVE ID: CVE-2006-1850 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:29.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in xFlow 5.46.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) level, (2) position, (3) id, and (4) action parameters to members_only/index.cgi, and the (5) page parameter to customer_area/index.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25854 - http://www.securityfocus.com/bid/17614 - http://pridels0.blogspot.com/2006/04/xflow-v5x-multiple-vuln.html - http:
854 - http://www.securityfocus.com/bid/17614 - http://pridels0.blogspot.com/2006/04/xflow-v5x-multiple-vuln.html - http://www.vupen.com/english/advisories/2006/1412 - http://secunia.com/advisories/19707
CVE ID: CVE-2006-1851 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:29.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: xFlow 5.46.11 and earlier allows remote attackers to determine the installation path of the application via the (1) action parameter to members_only/index.cgi and (2) page parameter customer_area/index.cgi, probably due to invalid values. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17614 - http://pridels0.blogspot.com/2006/04/xflow-v5x-multiple-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25855
CVE ID: CVE-2006-1852 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:28.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cname parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/04/article-publisher-pro-sql-inj.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25898 - http://www.osvdb.org/24730
CVE ID: CVE-2006-1853 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:29.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ModernBill 4.3.2 and earlier allow remote attackers or administrators to execute arbitrary SQL commands via the (1) id parameter in (a) user.php, or (2) where and (3) order parameters to (b) admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25926 - http://www.securityfocus.com/bid/17596 - http://www.vupen.com/english/advisories/2006/1415 - http://pridels0.blogspot.com/2006/04/modernbill-multiple-sql-inj-vuln
ttp://www.vupen.com/english/advisories/2006/1415 - http://pridels0.blogspot.com/2006/04/modernbill-multiple-sql-inj-vuln.html - http://secunia.com/advisories/19641
CVE ID: CVE-2006-1854 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:28.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in BluePay Manager 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML during a login action via the (1) Account Name and (2) Username field. NOTE: the vendor has disputed this vulnerability, saying that "it does not exist currently in the Bluepay 2.0 product," and older versions might not have been affected either. As of 20060512, CVE has not formally investigated this dispute Additional Analyst Notes: - CVE Program Container: References: - http://p
CVE has not formally investigated this dispute Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/04/bluepay-manager-v20-script-insertion.html
CVE ID: CVE-2006-1855 State: PUBLISHED Published: 2006-05-18T19:00:00 Last Updated: 2024-08-07T17:27:29.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: choose_new_parent in Linux kernel before 2.6.11.12 includes certain debugging code, which allows local users to cause a denial of service (panic) by causing certain circumstances involving termination of a parent process. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm - http://www.redhat.com/support/errata/RHSA-2006-0493.html - http://www.novell.com/linux/security/advisories/2006_42_kernel.html - http://secunia.com/advisories/20716 - https://bugzill
p://www.novell.com/linux/security/advisories/2006_42_kernel.html - http://secunia.com/advisories/20716 - https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=127302 - http://secunia.com/advisories/21745 - http://www.ubuntu.com/usn/usn-302-1 - http://secunia.com/advisories/20237 - http://secunia.com/advisories/22093 - http://www.debian.org/security/2006/dsa-1184 - http://secunia.com/advisories/21179 - http://www.securityfocus.com/bid/18099 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11235
CVE ID: CVE-2006-1856 State: PUBLISHED Published: 2006-05-19T23:00:00 Last Updated: 2024-08-07T17:27:28.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain modifications to the Linux kernel 2.6.16 and earlier do not add the appropriate Linux Security Modules (LSM) file_permission hooks to the (1) readv and (2) writev functions, which might allow attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm - http://www.redhat.com/support/errata/RHSA-2006-0493.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9927 - h
ta/RHSA-2006-0493.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9927 - http://lists.jammed.com/linux-security-module/2005/09/0019.html - http://secunia.com/advisories/20716 - http://secunia.com/advisories/21745 - http://www.ubuntu.com/usn/usn-302-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:123 - http://www.ussg.iu.edu/hypermail/linux/kernel/0604.3/0777.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=191524 - http://www.osvdb.org/25747 - http://secunia.com/advisories/21045 - http://secunia.com/advisories/20237 - http://secunia.com/advisories/22093 - http://www.debian.org/security/2006/dsa-1184 - http://www.securit
visories/20237 - http://secunia.com/advisories/22093 - http://www.debian.org/security/2006/dsa-1184 - http://www.securityfocus.com/bid/18105
CVE ID: CVE-2006-1857 State: PUBLISHED Published: 2006-05-22T16:00:00 Last Updated: 2024-08-07T17:27:29.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malformed HB-ACK chunk. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2006_42_kernel.html - http://www.vupen.com/english/advisories/2006/2554 - http://secunia.com/advisories/20716 - http://www.vupen.com/english/advisories/2006/1893 - http://secunia.com/advisories/21476 - http://www.novell.com/linux/secur
p://www.vupen.com/english/advisories/2006/1893 - http://secunia.com/advisories/21476 - http://www.novell.com/linux/security/advisories/2006_47_kernel.html - http://www.osvdb.org/25695 - http://www.securityfocus.com/bid/18085 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:150 - http://www.ubuntu.com/usn/usn-302-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:123 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10622 - http://www.debian.org/security/2006/dsa-1097 - http://www.redhat.com/support/errata/RHSA-2006-0575.html - http://secunia.com/advisories/20185 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.17 - ht
-2006-0575.html - http://secunia.com/advisories/20185 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.17 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26584 - http://www.debian.org/security/2006/dsa-1103 - http://secunia.com/advisories/21465 - http://secunia.com/advisories/21498 - http://secunia.com/advisories/21045 - http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm - http://secunia.com/advisories/22417 - http://secunia.com/advisories/20671 - http://secunia.com/advisories/21179 - http://secunia.com/advisories/20914
CVE ID: CVE-2006-1858 State: PUBLISHED Published: 2006-05-22T16:00:00 Last Updated: 2024-08-07T17:27:29.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a chunk length that is inconsistent with the actual length of provided parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2006_42_kernel.html - http://www.vupen.com/english/advisories/2006/2554 - http://www.redhat.com/support/errata/RHSA-2006-0617.html - http://secunia.com/advisories/20716 - http://www.vupen.com/engli
p://www.redhat.com/support/errata/RHSA-2006-0617.html - http://secunia.com/advisories/20716 - http://www.vupen.com/english/advisories/2006/1893 - http://secunia.com/advisories/21605 - http://secunia.com/advisories/21476 - http://www.novell.com/linux/security/advisories/2006_47_kernel.html - http://www.securityfocus.com/bid/18085 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:150 - http://www.ubuntu.com/usn/usn-302-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:123 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26585 - http://www.debian.org/security/2006/dsa-1097 - http://secunia.com/advisories/20185 - http://secunia.com/advisories/22174 - http://kernel
n.org/security/2006/dsa-1097 - http://secunia.com/advisories/20185 - http://secunia.com/advisories/22174 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.17 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9510 - http://www.debian.org/security/2006/dsa-1103 - http://secunia.com/advisories/21498 - http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm - http://secunia.com/advisories/21045 - http://www.osvdb.org/25696 - http://secunia.com/advisories/20671 - http://secunia.com/advisories/21179 - http://secunia.com/advisories/20914
CVE ID: CVE-2006-1859 State: PUBLISHED Published: 2006-05-12T01:00:00 Last Updated: 2024-08-07T17:27:29.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in __setlease in fs/locks.c in Linux kernel before 2.6.16.16 allows attackers to cause a denial of service (memory consumption) via unspecified actions related to an "uninitialised return value," aka "slab leak." Additional Analyst Notes: - CVE Program Container: References: - http://www.trustix.org/errata/2006/0028 - http://www.novell.com/linux/security/advisories/2006_42_kernel.html - http://secunia.com/advisories/20716 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26438 - http://www.ubuntu.com/usn/usn-3