Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-1312 State: PUBLISHED Published: 2005-04-27T04:00:00 Last Updated: 2024-08-07T21:44:06.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Yappa-NG before 2.3.2 allows remote attackers to execute arbitrary PHP code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15107 - http://www.osvdb.org/15829 - http://sourceforge.net/project/shownotes.php?release_id=323206 - http://www.securityfocus.com/bid/13371
CVE ID: CVE-2005-1313 State: PUBLISHED Published: 2005-04-27T04:00:00 Last Updated: 2024-08-07T21:44:06.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Horde Passwd module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15075 - http://lists.horde.org/archives/sork/Week-of-Mon-20050418/002147.html - http://cvs.horde.org/diff.php/passwd/docs/CHANGES?r1=1.1.1.1.2.28&r2=1.1.1.1.2.33&ty=h
CVE ID: CVE-2005-1314 State: PUBLISHED Published: 2005-04-27T04:00:00 Last Updated: 2024-08-07T21:44:06.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Horde Kronolith module before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15080 - http://lists.horde.org/archives/kronolith/Week-of-Mon-20050418/005347.html - http://cvs.horde.org/diff.php/kronolith/docs/CHANGES?r1=1.69.2.39&r2=1.69.2.41&ty=h
CVE ID: CVE-2005-1315 State: PUBLISHED Published: 2005-04-27T04:00:00 Last Updated: 2024-08-07T21:44:06.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Horde Turba module before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15074 - http://lists.horde.org/archives/turba/Week-of-Mon-20050418/004182.html - http://cvs.horde.org/diff.php/turba/docs/CHANGES?r1=1.61.2.74&r2=1.61.2.77&ty=h
CVE ID: CVE-2005-1316 State: PUBLISHED Published: 2005-04-27T04:00:00 Last Updated: 2024-08-07T21:44:06.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Horde Accounts module before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15081 - http://lists.horde.org/archives/sork/Week-of-Mon-20050418/002146.html - http://cvs.horde.org/diff.php/accounts/docs/CHANGES?r1=1.1.1.1.2.15&r2=1.1.1.1.2.18&ty=h
CVE ID: CVE-2005-1317 State: PUBLISHED Published: 2005-04-27T04:00:00 Last Updated: 2024-08-07T21:44:06.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Horde Chora module before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15083 - http://lists.horde.org/archives/chora/Week-of-Mon-20050418/004050.html - http://cvs.horde.org/diff.php/chora/docs/CHANGES?r1=1.45.2.34&r2=1.45.2.37&ty=h
CVE ID: CVE-2005-1318 State: PUBLISHED Published: 2005-04-27T04:00:00 Last Updated: 2024-08-07T21:44:06.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Horde Forwards E-Mail Forwarding Manager before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. Additional Analyst Notes: - CVE Program Container: References: - http://lists.horde.org/archives/sork/Week-of-Mon-20050418/002145.html - http://secunia.com/advisories/15082 - http://cvs.horde.org/diff.php/forwards/docs/CHANGES?r1=1.1.1.1.2.20&r2=1.1.1.1.2.23&ty=h
CVE ID: CVE-2005-1319 State: PUBLISHED Published: 2005-04-27T04:00:00 Last Updated: 2024-08-07T21:44:06.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Horde IMP Webmail client before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15080 - http://lists.horde.org/archives/imp/Week-of-Mon-20050418/041912.html - http://cvs.horde.org/diff.php/imp/docs/CHANGES?r1=1.389.2.119&r2=1.389.2.125&ty=h
CVE ID: CVE-2005-1320 State: PUBLISHED Published: 2005-04-27T04:00:00 Last Updated: 2024-08-07T21:44:06.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Horde Mnemo Note Manager before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. Additional Analyst Notes: - CVE Program Container: References: - http://lists.horde.org/archives/mnemo/Week-of-Mon-20050418/000166.html - http://secunia.com/advisories/15078 - http://cvs.horde.org/diff.php/mnemo/docs/CHANGES?r1=1.4.2.31&r2=1.4.2.33&ty=h
CVE ID: CVE-2005-1321 State: PUBLISHED Published: 2005-04-27T04:00:00 Last Updated: 2024-08-07T21:44:06.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Horde Vacation module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15073 - http://lists.horde.org/archives/sork/Week-of-Mon-20050418/002148.html - http://cvs.horde.org/diff.php/vacation/docs/CHANGES?r1=1.1.1.1.2.21&r2=1.1.1.1.2.26&ty=h
CVE ID: CVE-2005-1322 State: PUBLISHED Published: 2005-04-27T04:00:00 Last Updated: 2024-08-07T21:44:06.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Horde Nag Task List Manager before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. Additional Analyst Notes: - CVE Program Container: References: - http://lists.horde.org/archives/nag/Week-of-Mon-20050418/000756.html - http://secunia.com/advisories/15079 - http://cvs.horde.org/diff.php/nag/docs/CHANGES?r1=1.54.2.33&r2=1.54.2.35&ty=h
CVE ID: CVE-2005-1323 State: PUBLISHED Published: 2005-04-27T04:00:00 Last Updated: 2024-08-07T21:44:06.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in NetFtpd for NetTerm 5.1.1 and earlier allows remote attackers to execute arbitrary code via a long USER command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15140 - http://www.securityfocus.com/archive/1/396959 - http://www.securityfocus.com/bid/13396 - http://www.vupen.com/english/advisories/2005/0407 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20285 - http://www.osvdb.org/15865 - http://www.securenetterm.com/html/what_s_new.html
CVE ID: CVE-2005-1324 State: PUBLISHED Published: 2005-04-27T04:00:00 Last Updated: 2024-08-07T21:44:06.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php for phpMyVisites allow remote attackers to inject arbitrary web script or HTML via the (1) part, (2) per, or (3) site parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20255 - http://www.osvdb.org/15789 - http://secunia.com/advisories/15084 - http://www.vupen.com/english/advisories/2005/0378
CVE ID: CVE-2005-1325 State: PUBLISHED Published: 2005-04-27T04:00:00 Last Updated: 2024-08-07T21:44:06.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: set_lang.php in phpMyVisites 1.3 allows remote attackers to read and include arbitrary files via the mylang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111454298603060&w=2 - http://cvs.sourceforge.net/viewcvs.py/phpmyvisites/phpmyvisites/include/set_lang.php?r1=1.5&r2=1.6 - http://www.securityfocus.com/bid/13370
CVE ID: CVE-2005-1326 State: PUBLISHED Published: 2005-04-27T04:00:00 Last Updated: 2024-08-07T21:44:06.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in VooDoo cIRCle BOTNET before 1.0.33 allows remote authenticated attackers to cause a denial of service (client crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15830 - http://secunia.com/advisories/15110 - http://sourceforge.net/project/shownotes.php?release_id=323254
CVE ID: CVE-2005-1327 State: PUBLISHED Published: 2005-04-27T04:00:00Z Last Updated: 2024-09-17T02:11:30.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pms.php for Woltlab Burning Board 2.3.1 PL2 and earlier allows remote attackers to inject arbitrary web script or HTML via the folderid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13353 - http://www.securityfocus.com/archive/1/396858
CVE ID: CVE-2005-1328 State: PUBLISHED Published: 2005-04-27T04:00:00 Last Updated: 2024-08-07T21:44:06.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: OneWorldStore allows remote attackers to cause a denial of service (application crash) via a direct request to owConnections/chksettings.asp. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013782 - http://www.securityfocus.com/bid/13322 - http://www.osvdb.org/15724 - http://secunia.com/advisories/15057 - http://www.oneworldstore.com/support_security_issue_updates.asp#April_20_2005_Lostmon - http://lostmon.blogspot.com/2005/04/oneworldstore-critical-failure.html
CVE ID: CVE-2005-1329 State: PUBLISHED Published: 2005-04-27T04:00:00 Last Updated: 2024-08-07T21:44:06.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: owOfflineCC.asp in OneWorldStore allows remote attackers to obtain sensitive information by modifying the idOrder parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013796 - http://www.securityfocus.com/bid/13361 - http://secunia.com/advisories/15104 - http://www.osvdb.org/15781 - http://www.oneworldstore.com/support_security_issue_updates.asp#April_24_2005_Lostmon - http://lostmon.blogspot.com/2005/04/oneworldstore-user-information.html
CVE ID: CVE-2005-1330 State: PUBLISHED Published: 2005-05-04T04:00:00 Last Updated: 2024-08-07T21:44:06.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: AppKit in Mac OS X 10.3.9 allows attackers to cause a denial of service (Cocoa application crash) via a malformed TIFF image that causes the NXSeek to use an incorrect offset, leading to an unhandled exception. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
CVE ID: CVE-2005-1331 State: PUBLISHED Published: 2005-05-04T04:00:00 Last Updated: 2024-08-07T21:44:06.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is different than the actual code that would be run, which could allow remote attackers to trick users into executing malicious code via certain URI characters such as NULL, control characters, and homographs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13480 - http://secunia.com/advisories/15227 - http://www.vupen.com/english/advisories/200
tp://www.securityfocus.com/bid/13480 - http://secunia.com/advisories/15227 - http://www.vupen.com/english/advisories/2005/0455 - http://remahl.se/david/vuln/010/ - http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
CVE ID: CVE-2005-1332 State: PUBLISHED Published: 2005-05-04T04:00:00 Last Updated: 2024-08-07T21:44:06.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bluetooth-enabled systems in Mac OS X 10.3.9 enables the Bluetooth file exchange service by default, which allows remote attackers to access files without the user being notified, and local users to access files via the default directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA05-136A.html - http://www.kb.cert.org/vuls/id/258390 - http://lists.apple.com/archives/security-announce/2005/May/msg00001.html - http://docs.info.apple.com/article.html?artnum=301381 - ht
apple.com/archives/security-announce/2005/May/msg00001.html - http://docs.info.apple.com/article.html?artnum=301381 - http://www.digitalmunition.com/DMA%5B2005-0502a%5D.txt
CVE ID: CVE-2005-1333 State: PUBLISHED Published: 2005-05-04T04:00:00 Last Updated: 2024-08-07T21:44:06.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Bluetooth file and object exchange (OBEX) services in Mac OS X 10.3.9 allows remote attackers to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13491 - http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html - http://lists.apple.com/archives/security-announce/2005/May/msg00001.html - http://www.digitalmunition.com/DMA%5B2005-0502a%5D.txt
CVE ID: CVE-2005-1334 State: REJECTED Published: 2005-06-03T04:00:00 Last Updated: 2005-11-02T10:00:00 Description: No description available.
CVE ID: CVE-2005-1335 State: PUBLISHED Published: 2005-05-04T04:00:00 Last Updated: 2024-08-07T21:44:06.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Mac OS X 10.3.9 allows local users to gain privileges via (1) chfn, (2) chpass, and (3) chsh, which "use external helper programs in an insecure manner." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA05-136A.html - http://www.kb.cert.org/vuls/id/331694 - http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
CVE ID: CVE-2005-1336 State: PUBLISHED Published: 2005-05-04T04:00:00 Last Updated: 2024-08-07T21:44:06.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Foundation framework for Mac OS X 10.3.9 allows local users to execute arbitrary code via a long environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582934 - http://www.us-cert.gov/cas/techalerts/TA05-136A.html - http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
CVE ID: CVE-2005-1337 State: PUBLISHED Published: 2005-05-04T04:00:00 Last Updated: 2024-08-07T21:44:06.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Help Viewer 2.0.7 and 3.0.0 in Mac OS X 10.3.9 allows remote attackers to read and execute arbitrary scrpts with less restrictive privileges via a help:// URI. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/May/msg00001.html - http://remahl.se/david/vuln/004/
CVE ID: CVE-2005-1338 State: PUBLISHED Published: 2005-05-04T04:00:00Z Last Updated: 2024-09-16T19:04:29.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mac OS X 10.3.9, when using an LDAP server that does not use ldap_extended_operation, may store initial LDAP passwords for new accounts in plaintext. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
CVE ID: CVE-2005-1339 State: PUBLISHED Published: 2005-05-04T04:00:00Z Last Updated: 2024-09-16T18:18:05.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: lukemftpd in Mac OS X 10.3.9 allows remote authenticated users to escape the chroot environment by logging in with their full name. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
CVE ID: CVE-2005-1340 State: PUBLISHED Published: 2005-05-04T04:00:00Z Last Updated: 2024-09-16T20:12:02.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP proxy service in Server Admin for Mac OS X 10.3.9 does not restrict access when it is enabled, which allows remote attackers to use the proxy. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
CVE ID: CVE-2005-1341 State: PUBLISHED Published: 2005-05-04T04:00:00 Last Updated: 2024-08-07T21:44:06.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Terminal 1.4.4 allows attackers to execute arbitrary commands via terminal escape sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13480 - http://secunia.com/advisories/15227 - http://www.vupen.com/english/advisories/2005/0455 - http://securitytracker.com/id?1013882 - http://lists.apple.com/archives/security-announce/2005/May/msg00001.html - http://www.kb.cert.org/vuls/id/994510 - http://www.osvdb.org/16083 - http://remahl.se/david/vuln/012/
CVE ID: CVE-2005-1342 State: PUBLISHED Published: 2005-05-04T04:00:00 Last Updated: 2024-08-07T21:44:06.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://remahl.se/david/vuln/011/ - http://www.securityfocus.com/bid/13480 - http://www.us-cert.gov/cas/techalerts/TA05-136A.html - http://www.osvdb.org/16084 - http://secunia.com/advisories/15227 - http://www.kb.cert.org/vuls/id/356070 - http://www.vupen.com/english/advisories/2005/0455 -
unia.com/advisories/15227 - http://www.kb.cert.org/vuls/id/356070 - http://www.vupen.com/english/advisories/2005/0455 - http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
CVE ID: CVE-2005-1343 State: PUBLISHED Published: 2005-05-04T04:00:00 Last Updated: 2024-08-07T21:44:06.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the VPN daemon (vpnd) for Mac OS X before 10.3.9 allows local users to execute arbitrary code via a long -i (Server_id) argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/706838 - http://www.us-cert.gov/cas/techalerts/TA05-136A.html - http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html - http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
CVE ID: CVE-2005-1344 State: PUBLISHED Published: 2005-04-27T04:00:00 Last Updated: 2024-08-07T21:44:06.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is executed from a CGI program. Therefore this may not be a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/May/msg00001.html - http://www.lucaercoli.
ntainer: References: - http://lists.apple.com/archives/security-announce/2005/May/msg00001.html - http://www.lucaercoli.it/advs/htdigest.txt - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://www.osvdb.org/12848 - http://www.securiteam.com/unixfocus/5EP061FEKC.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html - http://www.securityfocus.com/bid/13537
CVE ID: CVE-2005-1345 State: PUBLISHED Published: 2005-04-28T04:00:00 Last Updated: 2024-08-07T21:44:06.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator. Additional Analyst Notes: - CVE Program Container: References: - http://fedoranews.org/updates/FEDORA--.shtml - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000948 - http://www.squid-cache.org/bugs/show_bug.cgi?id=1255 - http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-acl_error - htt
cache.org/bugs/show_bug.cgi?id=1255 - http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-acl_error - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10513 - http://www.redhat.com/support/errata/RHSA-2005-415.html - http://www.debian.org/security/2005/dsa-721
CVE ID: CVE-2005-1346 State: PUBLISHED Published: 2005-04-28T04:00:00 Last Updated: 2024-08-07T21:44:06.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27, SAV/Filter for Domino NT 3.1.1.87, and Mail Security for Exchange 4.5.4.743, when running on Windows, allows remote attackers to cause a denial of service (component crash) and avoid detection via a crafted RAR file. Additional Analyst Notes: - CVE Program Container: References: - http://securityresponse.symantec.com/avcenter/security/Content/2005.04.
st Notes: - CVE Program Container: References: - http://securityresponse.symantec.com/avcenter/security/Content/2005.04.27.html
CVE ID: CVE-2005-1347 State: PUBLISHED Published: 2005-04-28T04:00:00 Last Updated: 2024-08-07T21:44:06.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: ** UNVERIFIABLE ** NOTE: this issue describes a problem that can not be independently verified as of 20050421. Adobe Acrobat reader (AcroRd32.exe) 6.0 and earlier allows remote attackers to cause a denial of service ("Invalid-ID-Handle-Error" error) and modify memory beginning at a particular address, possibly allowing the execution of arbitrary code, via a crafted PDF file. NOTE: the vendor has stated that the reporter refused to provide sufficient details to confirm the issue. In addition, due to the lack of details in the o
he reporter refused to provide sufficient details to confirm the issue. In addition, due to the lack of details in the original advisory, an independent verification is not possible. Finally, the reliability of the original reporter is unknown. This item has only been assigned a CVE identifier for tracking purposes, and to serve as a concrete example of the newly defined UNVERIFIABLE and PRERELEASE content decisions in CVE, which must be discussed by the Editorial Board. Without additional details or independent verification by reliable sources, it is highly likely that this item will be REJECTED. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/b
s item will be REJECTED. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13265 - http://www.osvdb.org/15850 - http://securitytracker.com/id?1013774 - http://www.alphahackers.com/advisories/acrobat6.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/20216
CVE ID: CVE-2005-1348 State: PUBLISHED Published: 2005-04-28T04:00:00 Last Updated: 2024-08-07T21:44:06.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to execute arbitrary code via a long HTTP Authorization header. Additional Analyst Notes: - CVE Program Container: References: - http://www.x0n3-h4ck.org/upload/x0n3-h4ck_mailenable_https.pl - http://www.osvdb.org/15737 - http://securitytracker.com/id?1013786 - http://marc.info/?l=bugtraq&m=111445834220015&w=2