Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ce.ibmcloud.com/vulnerabilities/27233 - http://www.attrition.org/pipermail/vim/2007-February/001321.html - http://www.securityfocus.com/bid/18480
CVE ID: CVE-2006-7012 State: PUBLISHED Published: 2007-02-15T02:00:00 Last Updated: 2024-08-07T20:50:05.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: scart.cgi in SCart 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter of a show_text action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435861/30/4710/threaded - https://www.exploit-db.com/exploits/1876 - http://advisories.echo.or.id/adv/adv32-K-159-2006.txt - http://securityreason.com/securityalert/2257 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26921
CVE ID: CVE-2006-7013 State: PUBLISHED Published: 2007-02-15T02:00:00 Last Updated: 2024-08-07T20:50:05.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: QueryString.php in Simple Machines Forum (SMF) 1.0.7 and earlier, and 1.1rc2 and earlier, allows remote attackers to more easily spoof the IP address and evade banning via a modified X-Forwarded-For HTTP header, which is preferred instead of other more reliable sources for the IP address. NOTE: the original researcher claims that the vendor has disputed this issue Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
iner: References: - http://securityreason.com/securityalert/2256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27082 - http://www.securityfocus.com/archive/1/435686/30/4740/threaded
CVE ID: CVE-2006-7014 State: PUBLISHED Published: 2007-02-15T02:00:00 Last Updated: 2024-08-07T20:50:05.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in BloggIT 1.01 and earlier does not properly establish a user session, which allows remote attackers to gain privileges via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/436259/30/4620/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27011 - http://securityreason.com/securityalert/2255 - http://www.securitytracker.com/id?1016246 - http://www.vupen.com/english/advisories/2006/2210 - http://secunia.com/advisories/20499
CVE ID: CVE-2006-7015 State: PUBLISHED Published: 2007-02-15T02:00:00 Last Updated: 2024-08-07T20:50:05.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin.jobline.php in Jobline 1.1.1 allows remote attackers to execute arbitrary code via a URL in the mosConfig_absolute_path parameter. NOTE: CVE disputes this issue because the script is protected against direct requests Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27125 - http://securityreason.com/securityalert/2254 - http://www.securityfocus.com/archive/1/436990/30/4440/threaded - http://www.attrition.org/pip
n.com/securityalert/2254 - http://www.securityfocus.com/archive/1/436990/30/4440/threaded - http://www.attrition.org/pipermail/vim/2007-February/001325.html
CVE ID: CVE-2006-7016 State: PUBLISHED Published: 2007-02-15T02:00:00 Last Updated: 2024-08-07T20:50:06.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpjobboard allows remote attackers to bypass authentication and gain administrator privileges via a direct request to admin.php with adminop=job-edit. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435119/30/4710/threaded - http://attrition.org/pipermail/vim/2006-June/000873.html - http://securityreason.com/securityalert/2253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26807 - http://www.osvdb.org/26561
CVE ID: CVE-2006-7017 State: PUBLISHED Published: 2007-02-15T02:00:00 Last Updated: 2024-08-07T20:50:05.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Indexu 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the admin_template_path parameter to admin/ scripts (1) app_change_email.php, (2) app_change_pwd.php, (3) app_mod_rewrite.php, (4) app_page_caching.php, (5) app_setup.php, (6) cat_add.php, (7) cat_delete.php, (8) cat_edit.php, (9) cat_path_update.php, (10) cat_search.php, (11) cat_struc.php, (12) cat_view.php, (13) cat_view_hidden.php, (14) cat_view_hierarchy.php, (15) cat_view_registered_only.ph
at_struc.php, (12) cat_view.php, (13) cat_view_hidden.php, (14) cat_view_hierarchy.php, (15) cat_view_registered_only.php, (16) checkurl_web.php, (17) db_alter.php, (18) db_alter_change.php, (19) db_backup.php, (20) db_export.php, (21) db_import.php, (22) editor_add.php, (23) editor_delete.php, (24) editor_validate.php, (25) head.php, (26) index.php, (27) inv_config.php, (28) inv_config_payment.php, (29) inv_create.php, (30) inv_delete.php, (31) inv_edit.php, (32) inv_markpaid.php, (33) inv_markunpaid.php, (34) inv_overdue.php, (35) inv_paid.php, (36) inv_send.php, (37) inv_unpaid.php, (38) lang_modify.php, (39) link_add.php, (40) link_bad.php, (41) link_bad_delete.php, (42) link_checkurl.ph
_unpaid.php, (38) lang_modify.php, (39) link_add.php, (40) link_bad.php, (41) link_bad_delete.php, (42) link_checkurl.php, (43) link_delete.php, (44) link_duplicate.php, (45) link_edit.php, (46) link_premium_listing.php, (47) link_premium_sponsored.php, (48) link_search.php, (49) link_sponsored_listing.php, (50) link_validate.php, (51) link_validate_edit.php, (52) link_view.php, (53) log_search.php, (54) mail_modify.php, (55) menu.php, (56) message_create.php, (57) message_delete.php, (58) message_edit.php, (59) message_send.php, (60) message_subscriber.php, (61) message_view.php, (62) review_validate.php, (63) review_validate_edit.php, (64) summary.php, (65) template_active.php, (66) templa
ew.php, (62) review_validate.php, (63) review_validate_edit.php, (64) summary.php, (65) template_active.php, (66) template_add_custom.php, (67) template_delete.php, (68) template_delete_file.php, (69) template_duplicate.php, (70) template_export.php, (71) template_import.php, (72) template_manager.php, (73) template_modify.php, (74) template_modify_file.php, (75) template_rename.php, (76) user_add.php, (77) user_delete.php, (78) user_edit.php, (79) user_search.php, and (80) whos.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18752 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27262 - http://archives.neohapsis.com/archives/bugtraq/
ies/18752 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27262 - http://archives.neohapsis.com/archives/bugtraq/2006-06/0318.html - http://securityreason.com/securityalert/2252 - http://www.securitytracker.com/id?1016330
CVE ID: CVE-2006-7018 State: PUBLISHED Published: 2007-02-15T02:00:00 Last Updated: 2024-08-07T20:50:05.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to execute arbitrary code via a crafted argument to the nome_evento parameter to phpwcms_code_snippets/mail_file_form.php and (2) sample_ext_php/mail_file_form.php, which is processed by the render_PHPcode function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19866 - http://www.phpwcms.de/forum/viewtopic.php?t=10958 - http://www.vupen.com/english/advisories/2006/1556 - https://exchange.xforce.ibmcloud.c
.de/forum/viewtopic.php?t=10958 - http://www.vupen.com/english/advisories/2006/1556 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26126
CVE ID: CVE-2006-7019 State: PUBLISHED Published: 2007-02-15T02:00:00 Last Updated: 2024-08-07T20:50:05.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to execute arbitrary code via crafted arguments to the (1) text_evento and (2) email_eventonome_evento parameters to phpwcms_code_snippets/mail_file_form.php and sample_ext_php/mail_file_form.php, which is processed by the render_PHPcode function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories
third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19866 - http://www.vupen.com/english/advisories/2006/1556 - http://www.phpwcms.de/forum/viewtopic.php?t=10958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26126
CVE ID: CVE-2006-7020 State: PUBLISHED Published: 2007-02-15T02:00:00 Last Updated: 2024-08-07T20:50:05.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in (1) include/inc_act/act_formmailer.php and possibly (2) sample_ext_php/mail_file_form.php in phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to modify HTTP headers and send spam e-mail via a spoofed HTTP Referer (HTTP_REFERER). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19866 - http://www.phpwcms.de/forum/viewtopic.php?t=10958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26130 - http://www.vupen.com/english/
forum/viewtopic.php?t=10958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26130 - http://www.vupen.com/english/advisories/2006/1556
CVE ID: CVE-2006-7021 State: PUBLISHED Published: 2007-02-15T02:00:00 Last Updated: 2024-08-07T20:50:05.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in manager/tools/link/dbinstall.php in Plume CMS 1.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the _PX_config[manager_path] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.hamid.ir/security/plume.txt - http://www.securiteam.com/unixfocus/5KP031FJ5A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27535 - http://www.securityfocus.com/bid/18750 - http://www.securitytracker.com/id?1016415
CVE ID: CVE-2006-7022 State: PUBLISHED Published: 2007-02-15T02:00:00 Last Updated: 2024-08-07T20:50:05.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tools module in fx-APP 0.0.8.1 allows remote attackers to misrepresent the contents of a web page via an arbitrary URL in the url parameter to a showhtml action for index.php, which causes the URL to be displayed within an iframe. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27180 - http://securityreason.com/securityalert/2251 - http://www.securityfocus.com/archive/1/436691/30/4500/threaded - http://www.securityfocus.com/bid/18361
CVE ID: CVE-2006-7023 State: PUBLISHED Published: 2007-02-15T02:00:00 Last Updated: 2024-08-07T20:50:05.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in fx-APP 0.0.8.1 allow remote attackers to inject arbitrary HTML or web script via (1) the search box, and the (2) url, (3) website, (4) comment, and (5) signature fields in the profile, and possibly (6) a menu item. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2251 - http://www.securityfocus.com/archive/1/436691/30/4500/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27167 - http://www.securityfocus
rchive/1/436691/30/4500/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27167 - http://www.securityfocus.com/bid/18361 - http://www.securityfocus.com/archive/1/469825/100/100/threaded
CVE ID: CVE-2006-7024 State: PUBLISHED Published: 2007-02-15T02:00:00 Last Updated: 2024-08-07T20:50:06.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Harpia CMS 1.0.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) func_prog parameter to (a) preload.php and (b) index.php; (2) header_prog parameter to (c) missing.php and (d) email.php, (e) files.php, (f) headlines.php, (g) search.php, (h) topics.php, and (i) users.php in _mods/; (3) theme_root parameter to (j) footer.php, (k) header.php, (l) pfooter.php, and (m) pheader.php in _inc; (4) mod_root parameter to _inc/header.php; and the (
.php, (k) header.php, (l) pfooter.php, and (m) pheader.php in _inc; (4) mod_root parameter to _inc/header.php; and the (5) mod_dir and (6) php_ext parameters to (n) _inc/web_statsConfig.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27308 - https://www.exploit-db.com/exploits/1943 - http://www.securityfocus.com/bid/18614
CVE ID: CVE-2006-7025 State: PUBLISHED Published: 2007-02-23T01:00:00 Last Updated: 2024-08-07T20:50:05.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/config.php in Bookmark4U 2.0 and 2.1 allows remote attackers to inject arbitrary SQL command via the sqlcmd parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1456 - http://www.osvdb.org/24795 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25956 - http://secunia.com/advisories/19758 - http://www.attrition.org/pipermail/vim/2007-February/001373.html - http://marc.info/?l=full-disclosure&m=114555163911635&w=2
CVE ID: CVE-2006-7026 State: PUBLISHED Published: 2007-02-23T01:00:00 Last Updated: 2024-08-07T20:50:06.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in sources/join.php in Aardvark Topsites PHP 4.2.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[path] parameter, a different vector than CVE-2006-2149. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1730 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26189
CVE ID: CVE-2006-7027 State: PUBLISHED Published: 2007-02-23T01:00:00 Last Updated: 2024-08-07T20:50:05.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Security and Acceleration (ISA) Server 2004 logs unusual ASCII characters in the Host header, including the tab, which allows remote attackers to manipulate portions of the log file and possibly leverage this for other attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/433074/30/5190/threaded - http://www.securityfocus.com/archive/1/432947/30/5190/threaded - http://www.securityfocus.com/archive/1/433350/30/5100/threaded - https://exchange.xforce.i
e/1/432947/30/5190/threaded - http://www.securityfocus.com/archive/1/433350/30/5100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26233 - http://www.securityfocus.com/archive/1/433141/30/5160/threaded
CVE ID: CVE-2006-7028 State: PUBLISHED Published: 2007-02-23T01:00:00 Last Updated: 2024-08-07T20:50:05.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Single CPU Sun systems running Solaris 7, 8, or 9, such as Netra, allows remote attackers to cause a denial of service (console hang) via a flood of small TCP/IP packets. NOTE: this issue has not been replicated by third parties. In addition, the cause is unknown, although it might be related to "jabber" and generation of a large amount of interrupts within the console, or a hardware error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435146/30/4890/threaded - http://w
Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435146/30/4890/threaded - http://www.securityfocus.com/archive/1/434920/30/4890/threaded - http://www.securityfocus.com/archive/1/434449/30/4890/threaded - http://www.securityfocus.com/archive/1/435107/30/4710/threaded
CVE ID: CVE-2006-7029 State: PUBLISHED Published: 2007-02-23T01:00:00 Last Updated: 2024-08-07T20:50:05.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a frameset with only one frame that calls resizeTo with certain arguments. NOTE: this issue might be related to CVE-2006-3637. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/434903/30/4800/threaded - http://www.securityfocus.com/archive/1/435990 - http://www.securityfocus.com/archive/1/435168/30/4680/threaded - http://www.securityfocus.com/archive/1/434742/30/48
0 - http://www.securityfocus.com/archive/1/435168/30/4680/threaded - http://www.securityfocus.com/archive/1/434742/30/4830/threaded - http://www.securityfocus.com/archive/1/435004/30/4740/threaded - http://www.securityfocus.com/archive/1/435147/30/4680/threaded
CVE ID: CVE-2006-7030 State: PUBLISHED Published: 2007-02-23T01:00:00 Last Updated: 2024-08-07T20:50:05.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via certain malformed HTML, possibly involving applet and base tags without required arguments, which triggers a null pointer dereference in mshtml.dll. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435095/30/4710/threaded - http://securityreason.com/securityalert/2286 - http://www.securityfocus.com/bid/18112 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2
com/securityalert/2286 - http://www.securityfocus.com/bid/18112 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26808 - http://www.securityfocus.com/archive/1/435129/30/4710/threaded
CVE ID: CVE-2006-7031 State: PUBLISHED Published: 2007-02-23T01:00:00 Last Updated: 2025-01-17T14:15:00.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a table element with a CSS attribute that sets the position, which triggers an "unhandled exception" in mshtml.dll. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/1775 - http://www.securityfocus.com/bid/17932
CVE ID: CVE-2006-7032 State: PUBLISHED Published: 2007-02-23T01:00:00 Last Updated: 2024-08-07T20:50:05.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in phpbb/getmsg.php in FlashBB 1.1.5 and earlier allows remote attackers to execute arbitrary code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1921 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27385 - http://www.securityfocus.com/bid/18456
CVE ID: CVE-2006-7033 State: PUBLISHED Published: 2007-02-23T01:00:00 Last Updated: 2024-08-07T20:50:05.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Super Link Exchange Script 1.0 allows remote attackers to inject arbitrary web script or HTML via IMG tags in the search box. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26721 - http://www.securityfocus.com/archive/1/435166/30/4680/threaded - http://securityreason.com/securityalert/2285
CVE ID: CVE-2006-7034 State: PUBLISHED Published: 2007-02-23T01:00:00 Last Updated: 2024-08-07T20:50:05.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in directory.php in Super Link Exchange Script 1.0 might allow remote attackers to execute arbitrary SQL queries via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435166/30/4680/threaded - http://securityreason.com/securityalert/2285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26720
CVE ID: CVE-2006-7035 State: PUBLISHED Published: 2007-02-23T01:00:00 Last Updated: 2024-08-07T20:50:05.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in make_thumbnail.php in Super Link Exchange Script 1.0 allows remote attackers to read arbitrary files via ".." sequences in the imgpath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435166/30/4680/threaded - http://securityreason.com/securityalert/2285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26722
CVE ID: CVE-2006-7036 State: PUBLISHED Published: 2007-02-23T01:00:00 Last Updated: 2024-08-07T20:50:06.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in register.php for Andys Chat 4.5 allows remote attackers to execute arbitrary code via the action parameter. NOTE: this issue was announced by an unreliable researcher, but the vendor is no longer distributing the product, so the original claims can not be evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27187 - http://securityreason.com/securityalert/2284 - http://www.securityfocus.com/archive/1/437300/30/
vulnerabilities/27187 - http://securityreason.com/securityalert/2284 - http://www.securityfocus.com/archive/1/437300/30/4350/threaded
CVE ID: CVE-2006-7037 State: PUBLISHED Published: 2007-02-23T01:00:00 Last Updated: 2024-08-07T20:50:05.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mathcad 12 through 13.1 allows local users to bypass the security features by directly accessing or editing the XML representation of the worksheet with a text editor or other program, which allows attackers to (1) bypass password protection by replacing the password field with a hash of a known password, (2) modify timestamps to avoid detection of modifications, (3) remove locks by removing the "is-locked" attribute, and (4) view locked data, which is stored in plaintext. Additional Analyst Notes: - CVE Program Container: Ref
ttribute, and (4) view locked data, which is stored in plaintext. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27118 - http://securityreason.com/securityalert/2305 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27116 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27115 - http://www.securityfocus.com/archive/1/436441/30/4560/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27117
CVE ID: CVE-2006-7038 State: PUBLISHED Published: 2007-02-23T01:00:00 Last Updated: 2024-08-07T20:50:06.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service (crash) via (1) "long command lines at port 32000" and (2) certain name service queries that are not properly handled by the SMTP service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18462 - http://www.vupen.com/english/advisories/2006/2354 - http://secunia.com/advisories/20432 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27231 - http://www.
06/2354 - http://secunia.com/advisories/20432 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27231 - http://www.atrium-software.com/download/McrReadMe_EN.html
CVE ID: CVE-2006-7039 State: PUBLISHED Published: 2007-02-23T01:00:00 Last Updated: 2024-08-07T20:50:06.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMAP4 service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service (crash) via a message with a long subject field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18462 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27229 - http://www.vupen.com/english/advisories/2006/2354 - http://secunia.com/advisories/20432 - http://www.atrium-software.com/download/McrReadMe_EN.html