Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-0036 State: PUBLISHED Published: 2006-01-23T22:00:00 Last Updated: 2024-08-07T16:18:20.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: ip_nat_pptp in the PPTP NAT helper (netfilter/ip_nat_helper_pptp.c) in Linux kernel 2.6.14, and other versions, allows remote attackers to cause a denial of service (memory corruption or crash) via an inbound PPTP_IN_CALL_REQUEST packet that causes a null pointer to be used in an offset calculation. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0220 - http://www.securityfocus.com/bid/16414 - http://securityreason.com/securityalert/388 - http://www.trustix.org/erra
220 - http://www.securityfocus.com/bid/16414 - http://securityreason.com/securityalert/388 - http://www.trustix.org/errata/2006/0004 - http://secunia.com/advisories/18482 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24203 - http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=15db34702cfafd24acc60295cf14861e497502ab
CVE ID: CVE-2006-0037 State: PUBLISHED Published: 2006-01-23T22:00:00 Last Updated: 2024-08-07T16:18:20.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: ip_nat_pptp in the PPTP NAT helper (netfilter/ip_nat_helper_pptp.c) in Linux kernel 2.6.14, and other versions, allows local users to cause a denial of service (memory corruption or crash) via a crafted outbound packet that causes an incorrect offset to be calculated from pointer arithmetic when non-linear SKBs (socket buffers) are used. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0220 - http://www.securityfocus.com/bid/16414 - http://securityreason.com/security
www.vupen.com/english/advisories/2006/0220 - http://www.securityfocus.com/bid/16414 - http://securityreason.com/securityalert/388 - http://www.trustix.org/errata/2006/0004 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24204 - http://secunia.com/advisories/18482 - http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=03b9feca89366952ae5dfe4ad8107b1ece50b710
CVE ID: CVE-2006-0038 State: PUBLISHED Published: 2006-03-22T20:00:00 Last Updated: 2024-08-07T16:18:20.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the do_replace function in netfilter for Linux before 2.6.16-rc3, when using "virtualization solutions" such as OpenVZ, allows local users with CAP_NET_ADMIN rights to cause a buffer overflow in the copy_from_user function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25400 - http://www.vupen.com/english/advisories/2006/2554 - http://secunia.com/advisories/20716 - http://www.vupen.com/english/advisories/2006/1046 - https://bugzilla.red
06/2554 - http://secunia.com/advisories/20716 - http://www.vupen.com/english/advisories/2006/1046 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=186295 - http://www.ubuntu.com/usn/usn-302-1 - http://www.debian.org/security/2006/dsa-1097 - http://www.redhat.com/support/errata/RHSA-2006-0575.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10945 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ee4bb818ae35f68d1f848eae0a7b150a38eb4168 - http://www.debian.org/security/2006/dsa-1103 - http://secunia.com/advisories/21465 - http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm - http://secunia.com/advis
//secunia.com/advisories/21465 - http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm - http://secunia.com/advisories/22417 - http://secunia.com/advisories/19330 - http://www.securityfocus.com/bid/17178 - http://secunia.com/advisories/20671 - http://secunia.com/advisories/20914
CVE ID: CVE-2006-0039 State: PUBLISHED Published: 2006-05-19T22:00:00 Last Updated: 2024-08-07T16:18:20.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local users with CAP_NET_ADMIN capabilities to read kernel memory by triggering the race condition in a way that produces a size value that is inconsistent with allocated memory, which leads to a buffer over-read in IPT_ENTRY_ITERATE. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2554 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=27229
english/advisories/2006/2554 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2722971cbe831117686039d5c334f2c0f560be13 - http://www.vupen.com/english/advisories/2006/1893 - http://secunia.com/advisories/21476 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26583 - http://secunia.com/advisories/22292 - http://www.redhat.com/support/errata/RHSA-2006-0689.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10309 - http://www.debian.org/security/2006/dsa-1097 - http://secunia.com/advisories/20185 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.17 - http://www.ubuntu.com/usn/usn-311-1 - http://www.deb
185 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.17 - http://www.ubuntu.com/usn/usn-311-1 - http://www.debian.org/security/2006/dsa-1103 - http://www.osvdb.org/25697 - http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=191698 - http://secunia.com/advisories/22945 - http://secunia.com/advisories/20991 - http://secunia.com/advisories/20671 - http://bugs.gentoo.org/show_bug.cgi?id=133465 - http://www.securityfocus.com/bid/18113 - http://secunia.com/advisories/20914
CVE ID: CVE-2006-0040 State: PUBLISHED Published: 2006-03-10T01:00:00 Last Updated: 2024-08-07T16:18:20.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNOME Evolution 2.4.2.1 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a text e-mail with a large number of URLs, possibly due to unknown problems in gtkhtml. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25050 - http://www.securityfocus.com/bid/16899 - http://www.securityfocus.com/archive/1/426452/100/0/threaded - http://secunia.com/advisories/19094
CVE ID: CVE-2006-0041 State: REJECTED Published: 2017-05-26T21:00:00 Last Updated: 2017-05-26T20:57:01 Description: No description available.
CVE ID: CVE-2006-0042 State: PUBLISHED Published: 2006-02-18T21:00:00 Last Updated: 2024-08-07T16:18:20.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in (1) apreq_parse_headers and (2) apreq_parse_urlencoded functions in Apache2::Request (Libapreq2) before 2.07 allows remote attackers to cause a denial of service (CPU consumption) via unknown attack vectors that result in quadratic computational complexity. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19658 - http://svn.apache.org/viewcvs.cgi/httpd/apreq/tags/v2_07/CHANGES?rev=376998&view=markup - http://www.debian.org/security/2006/dsa-1000 - http:
viewcvs.cgi/httpd/apreq/tags/v2_07/CHANGES?rev=376998&view=markup - http://www.debian.org/security/2006/dsa-1000 - http://secunia.com/advisories/19139 - http://secunia.com/advisories/18846 - http://www.vupen.com/english/advisories/2006/0645 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24917 - http://securityreason.com/securityalert/737 - http://www.securityfocus.com/bid/16710 - http://www.gentoo.org/security/en/glsa/glsa-200604-08.xml
CVE ID: CVE-2006-0043 State: PUBLISHED Published: 2006-01-31T02:00:00 Last Updated: 2024-08-07T16:18:20.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the realpath function in nfs-server rpc.mountd, as used in SUSE Linux 9.1 through 10.0, allows local users to execute arbitrary code via unspecified vectors involving mount requests and symlinks. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0348 - http://lists.suse.com/archive/suse-security-announce/2006-Jan/0007.html - http://secunia.com/advisories/18614 - http://secunia.com/advisories/18638 - http://www.debian.org/security/2006/dsa-975 - http
/secunia.com/advisories/18614 - http://secunia.com/advisories/18638 - http://www.debian.org/security/2006/dsa-975 - http://www.securityfocus.com/bid/16388 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=350020 - http://secunia.com/advisories/18889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24347
CVE ID: CVE-2006-0044 State: PUBLISHED Published: 2006-01-18T02:00:00 Last Updated: 2024-08-07T16:18:20.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in context.py in Albatross web application toolkit before 1.33 allows remote attackers to execute arbitrary commands via unspecified vectors involving template files and the "handling of submitted form fields". Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2006/dsa-942 - http://www.vupen.com/english/advisories/2006/0196 - http://www.osvdb.org/22451 - http://secunia.com/advisories/18496 - http://secunia.com/advisories/18457 - http://www.object-craft.com
svdb.org/22451 - http://secunia.com/advisories/18496 - http://secunia.com/advisories/18457 - http://www.object-craft.com.au/projects/albatross/news.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24130 - http://www.securityfocus.com/bid/16252 - http://security.debian.org/pool/updates/main/a/albatross/albatross_1.20-2.diff.gz
CVE ID: CVE-2006-0045 State: PUBLISHED Published: 2006-01-20T21:00:00 Last Updated: 2024-08-07T16:18:20.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22690 - http://secunia.com/advisories/18545 - http://www.debian.org/security/2006/dsa-949 - http://www.securityfocus.com/bid/16337 - http://www.vupen.com/english/advisories/2006/0303 - http://secunia.com/advisories/18573 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24262
CVE ID: CVE-2006-0046 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:18:20.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: squid_redirect script in adzapper before 2006-01-29 allows remote attackers to cause a denial of service (CPU consumption) via a URL with a large number of trailing / (forward slashes), which might produce inefficient regular expressions. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0491 - http://secunia.com/advisories/18771 - http://adzapper.sourceforge.net/cvslog.html - http://secunia.com/advisories/18777 - http://www.securityfocus.com/bid/16558 - http://www.de
urceforge.net/cvslog.html - http://secunia.com/advisories/18777 - http://www.securityfocus.com/bid/16558 - http://www.debian.org/security/2006/dsa-966 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24640 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=350308 - http://bugs.debian.org/cgi-bin/bugreport.cgi/squid_redirect.diff?bug=350308%3Bmsg=5%3Batt=1 - http://www.osvdb.org/22900
CVE ID: CVE-2006-0047 State: PUBLISHED Published: 2006-03-07T11:00:00 Last Updated: 2024-08-07T16:18:20.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service (server crash) via crafted packets with negative compressed size values. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16975 - http://www.gentoo.org/security/en/glsa/glsa-200603-11.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2006:053 - http://www.securityfocus.com/archive/1/426866/100/0/threaded - http://secunia.com/advisories/19253 - http://www.debian.org/security/2006
ityfocus.com/archive/1/426866/100/0/threaded - http://secunia.com/advisories/19253 - http://www.debian.org/security/2006/dsa-994 - http://secunia.com/advisories/19227 - http://www.vupen.com/english/advisories/2006/0838 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=355211 - http://secunia.com/advisories/19120 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25166
CVE ID: CVE-2006-0048 State: PUBLISHED Published: 2006-04-26T00:00:00 Last Updated: 2024-08-07T16:18:20.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service (segmentation fault) via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length. NOTE: this issue might be a buffer overflow or overread. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26090 - http://www.securityfocus.com/bid/17665 - http://www.vupen.com/english/advisories/2006/1466 - http://sourceforge.net/mailarchive/forum.
urityfocus.com/bid/17665 - http://www.vupen.com/english/advisories/2006/1466 - http://sourceforge.net/mailarchive/forum.php?thread_id=9989610&forum_id=37151
CVE ID: CVE-2006-0049 State: PUBLISHED Published: 2006-03-13T21:00:00 Last Updated: 2024-08-07T16:18:20.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a control packet, which causes the check for concatenated signatures to report that the signature is valid, a different vulnerability than CVE-2006-0455. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/264-1/ - http://secunia.com/advisories/19249 - http://www.vupen.com/english/advisories/2006/0915 - http://www.redhat.co
/264-1/ - http://secunia.com/advisories/19249 - http://www.vupen.com/english/advisories/2006/0915 - http://www.redhat.com/support/errata/RHSA-2006-0266.html - ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U - http://lists.gnupg.org/pipermail/gnupg-announce/2006q1/000216.html - http://securityreason.com/securityalert/450 - http://secunia.com/advisories/19232 - http://www.osvdb.org/23790 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.476477 - http://secunia.com/advisories/19173 - http://www.securityfocus.com/archive/1/433931/100/0/threaded - http://www.securityfocus.com/bid/17058 - http://securityreason.com/securityalert/568
m/archive/1/433931/100/0/threaded - http://www.securityfocus.com/bid/17058 - http://securityreason.com/securityalert/568 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10063 - http://secunia.com/advisories/19287 - http://www.trustix.org/errata/2006/0014 - http://securitytracker.com/id?1015749 - http://secunia.com/advisories/19532 - http://lists.suse.de/archive/suse-security-announce/2006-Mar/0003.html - http://www.gentoo.org/security/en/glsa/glsa-200603-08.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/25184 - http://secunia.com/advisories/19234 - http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00021.html - http://secuni
unia.com/advisories/19234 - http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00021.html - http://secunia.com/advisories/19197 - http://secunia.com/advisories/19244 - http://secunia.com/advisories/19203 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:055 - http://www.securityfocus.com/archive/1/427324/100/0/threaded - http://secunia.com/advisories/19231 - http://www.debian.org/security/2006/dsa-993
CVE ID: CVE-2006-0050 State: PUBLISHED Published: 2006-03-23T11:00:00 Last Updated: 2024-08-07T16:18:20.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: snmptrapfmt in Debian 3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2006/dsa-1013 - http://www.securityfocus.com/bid/17182 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25442 - http://secunia.com/advisories/19318
CVE ID: CVE-2006-0051 State: PUBLISHED Published: 2006-04-05T10:00:00 Last Updated: 2024-08-07T16:18:20.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is "fetching remote playlists", which triggers the overflow in the http_peek function. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/268-1/ - http://www.vupen.com/english/advisories/2006/1229 - http://www.kde.org/info/security/advisory-20060404-1.txt - http://secunia.com/advisories/19557 - http://www.securityfo
- http://www.kde.org/info/security/advisory-20060404-1.txt - http://secunia.com/advisories/19557 - http://www.securityfocus.com/bid/17372 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:065 - http://www.debian.org/security/2006/dsa-1023 - http://securitytracker.com/id?1015863 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25631 - http://www.gentoo.org/security/en/glsa/glsa-200604-04.xml - http://www.novell.com/linux/security/advisories/2006_08_sr.html - http://secunia.com/advisories/19549 - http://secunia.com/advisories/19542 - http://secunia.com/advisories/19525 - http://secunia.com/advisories/19540 - http://www.securityfocus.com/archive/1/430319/100/0/threaded - http:
ories/19525 - http://secunia.com/advisories/19540 - http://www.securityfocus.com/archive/1/430319/100/0/threaded - http://secunia.com/advisories/19571
CVE ID: CVE-2006-0052 State: PUBLISHED Published: 2006-03-31T11:00:00 Last Updated: 2024-08-07T16:18:20.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service (mailing list delivery failure) via a multipart MIME message with a single part that has two blank lines between the first boundary and the end boundary. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19522 - http://secunia.com/advisories/20782 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mi
ies/19522 - http://secunia.com/advisories/20782 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9475 - http://www.securityfocus.com/bid/17311 - http://secunia.com/advisories/20624 - ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc - http://www.debian.org/security/2006/dsa-1027 - http://www.redhat.com/support/errata/RHSA-2006-0486.html - http://www.novell.com/linux/security/advisories/2006_08_sr.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:061 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=358892 - http://securitytracker.com/id?1015851 - http://secunia.com/advisories/19545 - http://secunia.com/advisorie
?bug=358892 - http://securitytracker.com/id?1015851 - http://secunia.com/advisories/19545 - http://secunia.com/advisories/19571 - https://usn.ubuntu.com/267-1/ - http://www.osvdb.org/24367
CVE ID: CVE-2006-0053 State: PUBLISHED Published: 2006-04-10T18:00:00 Last Updated: 2024-08-07T16:18:20.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Imager (libimager-perl) before 0.50 allows user-assisted attackers to cause a denial of service (segmentation fault) by writing a 2- or 4-channel JPEG image (or a 2-channel TGA image) to a scalar, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2006/dsa-1028 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=359661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25717 - http://www.securityfocus.com/bid/17415 - http://secunia.com/a
tps://exchange.xforce.ibmcloud.com/vulnerabilities/25717 - http://www.securityfocus.com/bid/17415 - http://secunia.com/advisories/19577 - http://www.vupen.com/english/advisories/2006/1294 - http://rt.cpan.org/Public/Bug/Display.html?id=18397 - http://secunia.com/advisories/19575
CVE ID: CVE-2006-0054 State: PUBLISHED Published: 2006-01-11T21:00:00 Last Updated: 2025-01-16T19:53:05.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service (firewall crash) via ICMP IP fragments that match a reset, reject or unreach action, which leads to an access of an uninitialized pointer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.osvdb.org/22319 - http://www.securityfocus.com/bid/16209 - http://secunia.com/advisories/18378 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24073 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/a
advisories/18378 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24073 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:04.ipfw.asc - http://securitytracker.com/id?1015477
CVE ID: CVE-2006-0055 State: PUBLISHED Published: 2006-01-11T21:00:00 Last Updated: 2024-08-07T16:18:20.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ispell_op function in ee on FreeBSD 4.10 to 6.0 uses predictable filenames and does not confirm which file is being written, which allows local users to overwrite arbitrary files via a symlink attack when ee invokes ispell. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16207 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:02.ee.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/24074 - http://securitytracker.com/id?1015469 - http://www.osvdb.org/
tps://exchange.xforce.ibmcloud.com/vulnerabilities/24074 - http://securitytracker.com/id?1015469 - http://www.osvdb.org/22320 - http://secunia.com/advisories/18404
CVE ID: CVE-2006-0056 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:18:20.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted passwords, which lead to a double free of a pointer that was created by the pam_get_item function. NOTE: this issue only occurs in certain configurations in which there are multiple PAM modules, PAM-MySQL is not evaluated first, and there are no requisite modules b
urations in which there are multiple PAM modules, PAM-MySQL is not evaluated first, and there are no requisite modules before PAM-MySQL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16564 - http://www.kb.cert.org/vuls/id/693909 - http://www.osvdb.org/22994 - http://jvn.jp/cert/JVNVU%23693909/index.html - http://securitytracker.com/id?1015603 - http://www.vupen.com/english/advisories/2006/0490 - http://www.osvdb.org/22995 - http://secunia.com/advisories/18598 - http://sourceforge.net/forum/forum.php?forum_id=499394 - http://www.gentoo.org/security/en/glsa/glsa-200606-18.xml - http://secunia.com/advisories/20690