Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-3717 State: PUBLISHED Published: 2006-07-19T10:00:00 Last Updated: 2024-08-07T18:39:54.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unknown impact and attack vectors, aka Oracle Vuln# (1) APPS03 and (2) APPS04 for Oracle Application Object Library; and (3) APPS20 for Oracle XML Gateway. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016529 - http://www.securityfocus.com/bid/19054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27897 - http://secunia.com/advisories/21165 - http://www.securityfocus.com/archive/1
xforce.ibmcloud.com/vulnerabilities/27897 - http://secunia.com/advisories/21165 - http://www.securityfocus.com/archive/1/440758/100/100/threaded - http://www.vupen.com/english/advisories/2006/2947 - http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html - http://www.securityfocus.com/archive/1/440758/100/100/threaded - http://www.us-cert.gov/cas/techalerts/TA06-200A.html - http://secunia.com/advisories/21111 - http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html - http://www.vupen.com/english/advisories/2006/2863
CVE ID: CVE-2006-3718 State: PUBLISHED Published: 2006-07-19T10:00:00 Last Updated: 2024-08-07T18:39:53.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle Exchange for Oracle E-Business Suite and Applications 6.2.4 have unknown impact and attack vectors, aka Oracle Vuln# (1) APPS16 and (2) APPS17. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016529 - http://www.securityfocus.com/bid/19054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27897 - http://secunia.com/advisories/21165 - http://www.securityfocus.com/archive/1/440758/100/100/threaded - http://www.vupen.com/english/ad
.com/advisories/21165 - http://www.securityfocus.com/archive/1/440758/100/100/threaded - http://www.vupen.com/english/advisories/2006/2947 - http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html - http://www.securityfocus.com/archive/1/440758/100/100/threaded - http://www.us-cert.gov/cas/techalerts/TA06-200A.html - http://secunia.com/advisories/21111 - http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html - http://www.vupen.com/english/advisories/2006/2863
CVE ID: CVE-2006-3719 State: PUBLISHED Published: 2006-07-19T10:00:00 Last Updated: 2024-08-07T18:39:53.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in CORE: Repository for Oracle Enterprise Manager 9.0.1.0 and 9.2.0.1 has unknown impact and attack vectors, aka Oracle Vuln# EM01. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016529 - http://www.securityfocus.com/bid/19054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27897 - http://secunia.com/advisories/21165 - http://www.securityfocus.com/archive/1/440758/100/100/threaded - http://www.vupen.com/english/advisories/2006/2947 - http://www.r
w.securityfocus.com/archive/1/440758/100/100/threaded - http://www.vupen.com/english/advisories/2006/2947 - http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html - http://www.securityfocus.com/archive/1/440758/100/100/threaded - http://www.us-cert.gov/cas/techalerts/TA06-200A.html - http://secunia.com/advisories/21111 - http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html - http://www.vupen.com/english/advisories/2006/2863
CVE ID: CVE-2006-3720 State: PUBLISHED Published: 2006-07-19T10:00:00 Last Updated: 2024-08-07T18:39:54.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Enterprise Config Management for Oracle Enterprise Manager 10.1.0.3 has unknown impact and attack vectors, aka Oracle Vuln# EM02. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016529 - http://www.securityfocus.com/bid/19054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27897 - http://secunia.com/advisories/21165 - http://www.securityfocus.com/archive/1/440758/100/100/threaded - http://www.vupen.com/english/advisories/2006/2947 - http://www.
CVE ID: CVE-2006-3721 State: PUBLISHED Published: 2006-07-19T10:00:00 Last Updated: 2024-08-07T18:39:53.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle Management Service for Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1 have unknown impact and attack vectors, aka Oracle Vuln# EM03 and EM04. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016529 - http://www.securityfocus.com/bid/19054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27897 - http://secunia.com/advisories/21165 - http://www.securityfocus.com/archive/1/440758/100/100/threaded - http://www.vupen.com/english/adv
com/advisories/21165 - http://www.securityfocus.com/archive/1/440758/100/100/threaded - http://www.vupen.com/english/advisories/2006/2947 - http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html - http://www.securityfocus.com/archive/1/440758/100/100/threaded - http://www.us-cert.gov/cas/techalerts/TA06-200A.html - http://secunia.com/advisories/21111 - http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html - http://www.vupen.com/english/advisories/2006/2863
CVE ID: CVE-2006-3722 State: PUBLISHED Published: 2006-07-19T10:00:00 Last Updated: 2024-08-07T18:39:54.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.4 Bundle #16, 8.8 Bundle #10, and 8.9 Bundle #3 has unknown impact and attack vectors, aka Oracle Vuln# PSE01. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016529 - http://www.securityfocus.com/bid/19054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27897 - http://secunia.com/advisories/21165 - http://www.securityfocus.com/archive/1/440758/100/100/threaded - http://www.
897 - http://secunia.com/advisories/21165 - http://www.securityfocus.com/archive/1/440758/100/100/threaded - http://www.vupen.com/english/advisories/2006/2947 - http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html - http://www.securityfocus.com/archive/1/440758/100/100/threaded - http://www.us-cert.gov/cas/techalerts/TA06-200A.html - http://secunia.com/advisories/21111 - http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html - http://www.vupen.com/english/advisories/2006/2863
CVE ID: CVE-2006-3723 State: PUBLISHED Published: 2006-07-19T10:00:00 Last Updated: 2024-08-07T18:39:54.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.8 with Enforcer Portal Pack Bundle #10 and 8.9 Bundle #3 has unknown impact and attack vectors, aka Oracle Vuln# PSE02. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016529 - http://www.securityfocus.com/bid/19054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27897 - http://secunia.com/advisories/21165 - http://www.securityfocus.com/archive/1/440758/100/100/threaded - ht
lities/27897 - http://secunia.com/advisories/21165 - http://www.securityfocus.com/archive/1/440758/100/100/threaded - http://www.vupen.com/english/advisories/2006/2947 - http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html - http://www.securityfocus.com/archive/1/440758/100/100/threaded - http://www.us-cert.gov/cas/techalerts/TA06-200A.html - http://secunia.com/advisories/21111 - http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html - http://www.vupen.com/english/advisories/2006/2863
CVE ID: CVE-2006-3724 State: PUBLISHED Published: 2006-07-19T10:00:00 Last Updated: 2024-08-07T18:39:53.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in JD Edwards HTML Server for Oracle OneWorld Tools EnterpriseOne Tools 8.95 and 8.96 has unknown impact and attack vectors, aka Oracle Vuln# JDE01. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016529 - http://www.securityfocus.com/bid/19054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27897 - http://secunia.com/advisories/21165 - http://www.securityfocus.com/archive/1/440758/100/100/threaded - http://www.vupen.com/english/advisories/2006/29
21165 - http://www.securityfocus.com/archive/1/440758/100/100/threaded - http://www.vupen.com/english/advisories/2006/2947 - http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html - http://www.securityfocus.com/archive/1/440758/100/100/threaded - http://www.us-cert.gov/cas/techalerts/TA06-200A.html - http://secunia.com/advisories/21111 - http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html - http://www.vupen.com/english/advisories/2006/2863
CVE ID: CVE-2006-3725 State: PUBLISHED Published: 2006-07-19T21:00:00 Last Updated: 2024-08-07T18:39:53.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Norton Personal Firewall 2006 9.1.0.33 allows local users to cause a denial of service (crash) via certain RegSaveKey, RegRestoreKey and RegDeleteKey operations on the (1) HKLM\SYSTEM\CurrentControlSet\Services\SNDSrvc and (2) HKLM\SYSTEM\CurrentControlSet\Services\SymEvent registry keys. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1241 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27764 - http://www.matousec.com/info/advisories/Norton-Insufficient-protectio
change.xforce.ibmcloud.com/vulnerabilities/27764 - http://www.matousec.com/info/advisories/Norton-Insufficient-protection-of-Norton-service-registry-keys.php - http://www.securityfocus.com/bid/18995 - http://www.securityfocus.com/archive/1/440110/100/0/threaded
CVE ID: CVE-2006-3726 State: PUBLISHED Published: 2006-07-19T21:00:00 Last Updated: 2024-08-07T18:39:53.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in FileCOPA FTP Server before 1.01 released on 18th July 2006, allows remote authenticated attackers to execute arbitrary code via a long argument to the LIST command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27817 - http://secunia.com/advisories/21108 - http://www.osvdb.org/27389 - http://www.appsec.ch/docs/2006-07-19-fileCopa.txt - http://www.vupen.com/english/advisories/2006/2870 - http://www.securityfocus.com/bid/19065
CVE ID: CVE-2006-3727 State: PUBLISHED Published: 2006-07-19T21:00:00 Last Updated: 2024-08-07T18:39:54.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Eskolar CMS 0.9.0.0 allow remote attackers to execute arbitrary SQL commands via the (1) gr_1_id, (2) gr_2_id, (3) gr_3_id, and (4) doc_id parameters in (a) index.php; the (5) uid and (6) pwd parameters in (b) php/esa.php; and possibly other vectors related to files in php/lib/ including (c) del.php, (d) download_backup.php, (e) navig.php, (f) restore.php, (g) set_12.php, (h) set_14.php, and (i) upd_doc.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.e
php, (h) set_14.php, and (i) upd_doc.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2032 - http://www.osvdb.org/27399 - http://www.securityfocus.com/bid/19045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27808 - http://secunia.com/advisories/21101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27809 - http://www.vupen.com/english/advisories/2006/2869 - http://www.osvdb.org/27396 - http://www.osvdb.org/27392 - http://www.osvdb.org/27395 - http://www.osvdb.org/27393 - http://www.osvdb.org/27397 - http://www.osvdb.org/27391 - http://www.osvdb.org/27398 - http://www.osvdb.org/27394
CVE ID: CVE-2006-3728 State: PUBLISHED Published: 2006-07-19T21:00:00 Last Updated: 2024-08-07T18:39:54.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the kernel in Solaris 10 with patch 118822-29 (118844-29 on x86) and without patch 118833-11 (118855-08) allows remote authenticated users to cause a denial of service via unspecified vectors that lead to "kernel data structure corruption" that can trigger a system panic, application failure, or "data corruption." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19064 - http://www.vupen.com/english/advisories/2006/2872 - http://securitytracker.com/id
tp://www.securityfocus.com/bid/19064 - http://www.vupen.com/english/advisories/2006/2872 - http://securitytracker.com/id?1016535 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102344-1 - http://secunia.com/advisories/21109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27801
CVE ID: CVE-2006-3729 State: PUBLISHED Published: 2006-07-19T23:00:00 Last Updated: 2024-08-07T18:39:54.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: DataSourceControl in Internet Explorer 6 on Windows XP SP2 with Office installed allows remote attackers to cause a denial of service (crash) via a large negative integer argument to the getDataMemberName method of a OWC11.DataSourceControl.11 object, which leads to an integer overflow and a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2883 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27803 - http://browserfun.blogspot.com/2006/07/mobb
ies/2006/2883 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27803 - http://browserfun.blogspot.com/2006/07/mobb-19-datasourcecontrol.html - http://www.osvdb.org/27111 - http://www.securityfocus.com/bid/19069
CVE ID: CVE-2006-3730 State: PUBLISHED Published: 2006-07-19T23:00:00 Last Updated: 2024-08-07T18:39:54.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a 0x7fffffff argument to the setSlice method on a WebViewFolderIcon ActiveX object, which leads to an invalid memory copy. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016941 - http://www.us-cert.gov/cas/techalerts/TA06-283A.html - http://www.us-cert.gov/cas/techalerts/TA06-270A.html - https://docs.microsoft.com/en-us/s
as/techalerts/TA06-283A.html - http://www.us-cert.gov/cas/techalerts/TA06-270A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-057 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.kb.cert.org/vuls/id/753044 - http://www.securityfocus.com/archive/1/447174/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A339 - http://isc.sans.org/diary.php?storyid=1742 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27804 - http://www.securityfocus.com/archive/1/447383/100/100/threaded - http://www.securityfocus.com/archive/1/447426/100/0/threaded - http://riosec.com/msie-setslice-vuln
/100/100/threaded - http://www.securityfocus.com/archive/1/447426/100/0/threaded - http://riosec.com/msie-setslice-vuln - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.osvdb.org/27110 - http://www.securityfocus.com/bid/19030 - http://www.vupen.com/english/advisories/2006/2882 - http://browserfun.blogspot.com/2006/07/mobb-18-webviewfoldericon-setslice.html - https://www.exploit-db.com/exploits/2440 - http://www.securityfocus.com/archive/1/447490/100/0/threaded - http://secunia.com/advisories/22159
CVE ID: CVE-2006-3731 State: PUBLISHED Published: 2006-07-19T23:00:00 Last Updated: 2024-08-07T18:39:54.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 1.5.0.4 and earlier allows remote user-assisted attackers to cause a denial of service (crash) via a form with a multipart/form-data encoding and a user-uploaded file. NOTE: a third party has claimed that this issue might be related to the LiveHTTPHeaders extension. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/440119/100/100/threaded - http://www.securityfocus.com/archive/1/440506/100/0/threaded
CVE ID: CVE-2006-3732 State: PUBLISHED Published: 2006-07-19T23:00:00 Last Updated: 2024-08-07T18:39:53.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1 ships with an Oracle database that contains several default accounts and passwords, which allows attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19071 - http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml - http://secunia.com/advisories/21118 - http://www.vupen.com/english/advisories/2006/2887 - https://exchange.xforce.ibmcloud.com/vulnerabilit
advisories/21118 - http://www.vupen.com/english/advisories/2006/2887 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27810 - http://securitytracker.com/id?1016537 - http://www.securityfocus.com/bid/19073
CVE ID: CVE-2006-3733 State: PUBLISHED Published: 2006-07-19T23:00:00 Last Updated: 2024-08-07T18:39:53.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allows remote attackers to gain privileges as the CS-MARS administrator and execute arbitrary Java code via an invokeOp action in the BSHDeployer jboss.scripts service name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19071 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27811 - http://www.cisc
- http://www.securityfocus.com/bid/19071 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27811 - http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml - http://secunia.com/advisories/21118 - http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0424.html - http://www.vupen.com/english/advisories/2006/2887 - http://www.securityfocus.com/bid/19075 - http://www.securityfocus.com/archive/1/440641/100/100/threaded - http://www.osvdb.org/27419 - http://securitytracker.com/id?1016537
CVE ID: CVE-2006-3734 State: PUBLISHED Published: 2006-07-19T23:00:00 Last Updated: 2024-08-07T18:39:54.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Command Line Interface (CLI) for Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allow local CS-MARS administrators to execute arbitrary commands as root. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19071 - http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml - http://secunia.com/advisories/21118 - http://www.vupen.com/english/advisories/2006/2887 - http://www.securityfocus.com/bid/1907
secunia.com/advisories/21118 - http://www.vupen.com/english/advisories/2006/2887 - http://www.securityfocus.com/bid/19077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27812 - http://securitytracker.com/id?1016537
CVE ID: CVE-2006-3735 State: PUBLISHED Published: 2006-07-19T23:00:00 Last Updated: 2024-08-07T18:39:54.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Mail2Forum (module for phpBB) 1.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the m2f_root_path parameter to (1) m2f/m2f_phpbb204.php, (2) m2f/m2f_forum.php, (3) m2f/m2f_mailinglist.php or (4) m2f/m2f_cron.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19038 - http://www.osvdb.org/27355 - https://www.exploit-db.com/exploits/2019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27
www.osvdb.org/27355 - https://www.exploit-db.com/exploits/2019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27788 - http://www.osvdb.org/27354 - http://www.osvdb.org/27356 - http://www.vupen.com/english/advisories/2006/2847 - http://secunia.com/advisories/21083 - http://www.osvdb.org/27357
CVE ID: CVE-2006-3736 State: PUBLISHED Published: 2006-07-19T23:00:00 Last Updated: 2024-08-07T18:39:53.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in core/videodb.class.xml.php in the VideoDB component for Mambo 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19049 - http://www.vupen.com/english/advisories/2006/2845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27778 - https://www.exploit-db.com/exploits/2020 - http://secunia.com/advisories/21082
CVE ID: CVE-2006-3737 State: PUBLISHED Published: 2006-07-19T23:00:00 Last Updated: 2024-08-07T18:39:53.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in filemanager/filemanager.php in the control panel in SWsoft Plesk 8.0 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28596 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27770 - http://www.securityfocus.com/archive/1/440292/100/0/threaded - http://www.securityfocus.com/bid/19017 - http://securityreason.com/securityalert/1250
CVE ID: CVE-2006-3738 State: PUBLISHED Published: 2006-09-28T18:00:00 Last Updated: 2024-08-07T18:39:54.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2006:172 - http://secunia.com/advisories/22212 - http://www.vupen.com/english/advisories/2006/4750 - http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html - http://secunia.com/advisories/2
visories/2006/4750 - http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html - http://secunia.com/advisories/23915 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 - http://securitytracker.com/id?1016943 - http://secunia.com/advisories/23038 - http://www.trustix.org/errata/2006/0054 - http://www.debian.org/security/2006/dsa-1195 - http://secunia.com/advisories/23309 - http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html - http://www.vupen.com/english/advisories/2006/4401 - http://www.ubuntu.com/usn/usn-353-1 - http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227 - http://secunia.com/advisories/22116 - https://www2.i
eforge.net/project/shownotes.php?release_id=461863&group_id=69227 - http://secunia.com/advisories/22116 - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm - http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml - http://www.kb.cert.org/vuls/id/547300 - http://secunia.com/advisories/22166 - http://www.redhat.com/support/errata/RHSA-2006-0695.html - http://secunia.com/advisories/23340 - http://www.vupen.com/english/advisories/2006/4314 - http://secunia.com/advisories/22385 - http://www.novell.com/linux/security/advisories/2006_24_sr.html - http://secunia.com/advisories/22758 - http://secunia.com/advisories/224