Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
t/1533 - http://securitytracker.com/id?1016813 - http://www.securityfocus.com/archive/1/445523/100/0/threaded - http://www.securityfocus.com/bid/19886 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28892 - http://secunia.com/advisories/21826 - http://www.osvdb.org/28813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28813 - http://www.vupen.com/english/advisories/2006/3558
CVE ID: CVE-2006-4667 State: PUBLISHED Published: 2006-09-09T00:00:00 Last Updated: 2024-08-07T19:23:41.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in RunCMS 1.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) uid parameter in (a) class/sessions.class.php, and the (2) timezone_offset and (3) umode parameters in (b) class/xoopsuser.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1532 - http://www.securityfocus.com/archive/1/445524/100/0/threaded - http://www.osvdb.org/28616 - http://www.vupen.com/english/advisories/2006/3522 - http://www.osvdb.org/286
0/0/threaded - http://www.osvdb.org/28616 - http://www.vupen.com/english/advisories/2006/3522 - http://www.osvdb.org/28617 - http://secunia.com/advisories/21814 - http://www.securityfocus.com/bid/19913 - http://www.hackers.ir/advisories/runcms.html - http://www.runcms.org/modules/mydownloads/viewcat.php?cid=5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28806
CVE ID: CVE-2006-4668 State: PUBLISHED Published: 2006-09-09T00:00:00 Last Updated: 2024-08-07T19:23:40.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Rob Hensley AckerTodo 4.0 allows remote attackers to inject arbitrary web script or HTML via the task_id parameter in an edit_task command. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1531 - http://www.vupen.com/english/advisories/2006/3517 - http://secunia.com/advisories/21810 - http://www.securityfocus.com/archive/1/445465/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28810 - http://ww
curityfocus.com/archive/1/445465/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28810 - http://www.securityfocus.com/archive/1/447071/100/100/threaded - http://www.osvdb.org/28611 - http://www.securityfocus.com/bid/19894
CVE ID: CVE-2006-4669 State: PUBLISHED Published: 2006-09-09T00:00:00 Last Updated: 2024-08-07T19:23:41.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3516 - https://www.exploit-db.com/exploits/2329 - http://secunia.com/advisories/21825 - http://www.securityfocus.com/bid/19912 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28816
CVE ID: CVE-2006-4670 State: PUBLISHED Published: 2006-09-09T00:00:00 Last Updated: 2024-08-07T19:23:40.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in PhotoKorn Gallery 1.52 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the dir_path parameter in (1) includes/cart.inc.php or (2) extras/ext_cats.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28811 - http://www.vupen.com/english/advisories/2006/3520 - http://archives.neohapsis.com/archives/bugtraq/2006-09/0119.html - http://secunia.com/advisories/21796 - http://www.osv
http://archives.neohapsis.com/archives/bugtraq/2006-09/0119.html - http://secunia.com/advisories/21796 - http://www.osvdb.org/28601 - http://www.securityfocus.com/bid/19914 - http://www.osvdb.org/28602 - http://www.securityfocus.com/archive/1/445582/100/0/threaded - https://www.exploit-db.com/exploits/2327
CVE ID: CVE-2006-4671 State: PUBLISHED Published: 2006-09-11T16:00:00 Last Updated: 2024-08-07T19:23:40.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in headlines.php in Fantastic News 2.1.4, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[script_path] parameter, a different vector than CVE-2006-1154. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21807 - http://www.vupen.com/english/advisories/2006/3513 - http://secunia.com/advisories/23519 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31121 - https://www.exploit-db.com/exploi
ia.com/advisories/23519 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31121 - https://www.exploit-db.com/exploits/3027 - http://www.securityfocus.com/bid/21796
CVE ID: CVE-2006-4672 State: PUBLISHED Published: 2006-09-11T16:00:00 Last Updated: 2024-08-07T19:23:40.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in profitCode ppalCart 2.5 EE, possibly a component of PayProCart, allows remote attackers to execute arbitrary PHP code via a URL in the (1) proMod parameter to (a) index.php, or the (2) docroot parameter to (b) index.php or (c) mainpage.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3557 - http://www.securityfocus.com/archive/1/446076/100/0/threaded - http://www.securityfocus.com/bid/19881 - https://exchange.xforce.ibm
securityfocus.com/archive/1/446076/100/0/threaded - http://www.securityfocus.com/bid/19881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28781 - http://secunia.com/advisories/21868 - http://www.securityfocus.com/archive/1/445748/100/0/threaded - https://www.exploit-db.com/exploits/2316
CVE ID: CVE-2006-4673 State: PUBLISHED Published: 2006-09-11T16:00:00 Last Updated: 2024-08-07T19:23:40.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Global variable overwrite vulnerability in maincore.php in PHP-Fusion 6.01.4 and earlier uses the extract function on the superglobals, which allows remote attackers to conduct SQL injection attacks via the _SERVER[REMOTE_ADDR] parameter to news.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19908 - http://marc.info/?l=bugtraq&m=115765187519458&w=2 - http://www.vupen.com/english/advisories/2006/3523 - http://www.php-fusion.co.uk/news.php?readmore=353 - http://retrogod.alt
p://www.vupen.com/english/advisories/2006/3523 - http://www.php-fusion.co.uk/news.php?readmore=353 - http://retrogod.altervista.org/phpfusion_6-01-4_xpl.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28818 - http://secunia.com/advisories/21830
CVE ID: CVE-2006-4674 State: PUBLISHED Published: 2006-09-11T17:00:00 Last Updated: 2024-08-07T19:23:40.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in doku.php in DokuWiki before 2006-030-09c allows remote attackers to execute arbitrary PHP code via the X-FORWARDED-FOR HTTP header, which is stored in config.php. Additional Analyst Notes: - CVE Program Container: References: - http://retrogod.altervista.org/dokuwiki_2006-03-09b_cmd.html - http://securityreason.com/securityalert/1537 - http://bugs.splitbrain.org/index.php?do=details&id=906 - http://security.gentoo.org/glsa/glsa-200609-10.xml - http://secunia.com/advisories/21936 -
ndex.php?do=details&id=906 - http://security.gentoo.org/glsa/glsa-200609-10.xml - http://secunia.com/advisories/21936 - http://www.securityfocus.com/archive/1/445516/100/0/threaded - http://secunia.com/advisories/21819
CVE ID: CVE-2006-4675 State: PUBLISHED Published: 2006-09-11T17:00:00 Last Updated: 2024-08-07T19:23:41.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows remote attackers to upload executable files into the data/media folder via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://retrogod.altervista.org/dokuwiki_2006-03-09b_cmd.html - http://securityreason.com/securityalert/1537 - http://security.gentoo.org/glsa/glsa-200609-10.xml - http://secunia.com/advisories/21936 - http://www.securityfocus.com/archive/1/445516/100/0/threaded - http://se
-10.xml - http://secunia.com/advisories/21936 - http://www.securityfocus.com/archive/1/445516/100/0/threaded - http://secunia.com/advisories/21819
CVE ID: CVE-2006-4676 State: PUBLISHED Published: 2006-09-11T17:00:00 Last Updated: 2024-08-07T19:23:40.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: TIBCO RendezVous 7.4.11 and earlier logs base64-encoded usernames and passwords in rvrd.db, which allows local users to obtain sensitive information by decoding the log file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21748 - http://www.securityfocus.com/bid/19883 - http://www.vupen.com/english/advisories/2006/3497 - https://www.exploit-db.com/exploits/2284
CVE ID: CVE-2006-4677 State: PUBLISHED Published: 2006-09-11T17:00:00 Last Updated: 2024-08-07T19:23:40.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in contrib/yabbse/poc.php in phpopenchat before 3.0.2 allows remote attackers to execute arbitrary PHP code via the sourcedir parameter. NOTE: this issue was disputed by a third-party researcher who stated that the _REQUEST parameters were dynamically unset at the beginning of the file. Another researcher noted, and CVE agrees, that the unset PHP function can be bypassed (CVE-2006-3017). If this issue is due to a vulnerability in PHP, then it should be excluded from CVE Additional Analys
d (CVE-2006-3017). If this issue is due to a vulnerability in PHP, then it should be excluded from CVE Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/445580/100/0/threaded - http://phpopenchat.org/index.php - http://www.securityfocus.com/archive/1/445522/100/0/threaded - http://www.securityfocus.com/archive/1/445384/100/0/threaded
CVE ID: CVE-2006-4678 State: PUBLISHED Published: 2006-09-11T17:00:00 Last Updated: 2024-08-07T19:23:40.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in News Evolution 3.0.3 allows remote attackers to execute arbitrary PHP code via the _NE[AbsPath] parameter in (1) install.php and (2) migrateNE2toNE3.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/445576/100/0/threaded - http://securityreason.com/securityalert/1536 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28803
CVE ID: CVE-2006-4679 State: PUBLISHED Published: 2006-09-11T17:00:00 Last Updated: 2024-08-07T19:23:41.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: DokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers to obtain sensitive information by calling doku.php with the X-DOKUWIKI-DO HTTP header set to "debug". Additional Analyst Notes: - CVE Program Container: References: - http://retrogod.altervista.org/dokuwiki_2006-03-09b_cmd.html - http://securityreason.com/securityalert/1537 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28819 - http://security.gentoo.org/glsa/glsa-200609-10.xml - http://secunia.com/advisories/21936 - http:/
ulnerabilities/28819 - http://security.gentoo.org/glsa/glsa-200609-10.xml - http://secunia.com/advisories/21936 - http://www.securityfocus.com/archive/1/445516/100/0/threaded
CVE ID: CVE-2006-4680 State: PUBLISHED Published: 2006-09-11T17:00:00 Last Updated: 2024-08-07T19:23:40.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Remote UI in Canon imageRUNNER includes usernames and passwords when exporting an address book, which allows context-dependent attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/445532/100/0/threaded - http://www.vupen.com/english/advisories/2006/3501 - http://www.securityfocus.com/archive/1/445302/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28795 - http://www.securityfocus.com/bid/19865 - http://secuni
ed - https://exchange.xforce.ibmcloud.com/vulnerabilities/28795 - http://www.securityfocus.com/bid/19865 - http://secunia.com/advisories/21788 - http://securityreason.com/securityalert/1538
CVE ID: CVE-2006-4681 State: PUBLISHED Published: 2006-09-11T17:00:00 Last Updated: 2024-08-07T19:23:41.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Redirect.bat in IBM Director before 5.10 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28836 - ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers_pdf/dir5.10_docs_relnotes.pdf - http://securitytracker.com/id?1016815 - http://www.vupen.com/english/advisories/2006/3532 - http://secunia.com/advisories/21802 - http://www.security
?1016815 - http://www.vupen.com/english/advisories/2006/3532 - http://secunia.com/advisories/21802 - http://www.securityfocus.com/bid/19898 - https://www.exploit-db.com/exploits/2320
CVE ID: CVE-2006-4682 State: PUBLISHED Published: 2006-09-11T17:00:00 Last Updated: 2024-08-07T19:23:41.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in IBM Director before 5.10 allow remote attackers to cause a denial of service (crash) via unspecified vectors involving (1) malformed WMI CIM server requests and (2) malformed packets. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers_pdf/dir5.10_docs_relnotes.pdf - ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers_pdf/dir5.10_docs_relnotes.pdf - http://www.vupen.com/english/advisories/2006/3532 - ftp://ftp.software.ibm.com/pc/p
vers_pdf/dir5.10_docs_relnotes.pdf - http://www.vupen.com/english/advisories/2006/3532 - ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers_pdf/dir5.10_docs_relnotes.pdf - http://secunia.com/advisories/21802 - http://www.securityfocus.com/bid/19915
CVE ID: CVE-2006-4683 State: PUBLISHED Published: 2006-09-11T17:00:00 Last Updated: 2024-08-07T19:23:40.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Director before 5.10 allows remote attackers to obtain sensitive information from HTTP headers via HTTP TRACE. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers_pdf/dir5.10_docs_relnotes.pdf - http://www.vupen.com/english/advisories/2006/3532 - http://secunia.com/advisories/21802 - http://www.securityfocus.com/bid/19915
CVE ID: CVE-2006-4684 State: PUBLISHED Published: 2006-09-19T18:00:00 Last Updated: 2024-08-07T19:23:41.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: The docutils module in Zope (Zope2) 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText (reST) markup, which allows remote attackers to read arbitrary files via a csv_table directive, a different vulnerability than CVE-2006-3458. Additional Analyst Notes: - CVE Program Container: References: - http://mail.zope.org/pipermail/zope-announce/2006-August/002005.html - http://www.vupen.com/english/advisories/2006/3653 - http://secunia.com/advisories/21953 - http://www.securityfocus.co
- http://www.vupen.com/english/advisories/2006/3653 - http://secunia.com/advisories/21953 - http://www.securityfocus.com/bid/20022 - http://www.zope.org/Products/Zope/Hotfix-2006-08-21/Hotfix-20060821/README.txt - http://www.debian.org/security/2006/dsa-1176 - http://secunia.com/advisories/21947
CVE ID: CVE-2006-4685 State: PUBLISHED Published: 2006-10-10T22:00:00 Last Updated: 2024-08-07T19:23:41.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redirects, which allows remote user-assisted attackers to access content from other domains. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22333 - http://www.kb.cert.org/vuls/id/547212 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-061 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ov
y-updates/securitybulletins/2006/ms06-061 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A221 - http://www.securityfocus.com/bid/20339 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://securitytracker.com/id?1017033 - http://www.osvdb.org/29425 - http://www.vupen.com/english/advisories/2006/3980
CVE ID: CVE-2006-4686 State: PUBLISHED Published: 2006-10-10T22:00:00 Last Updated: 2024-08-07T19:23:40.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted Web page. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22333 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-061 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.kb.cert.org/vuls/id/562788 - https://oval.c
- http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.kb.cert.org/vuls/id/562788 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A285 - http://www.osvdb.org/29426 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://securitytracker.com/id?1017033 - http://www.vupen.com/english/advisories/2006/3980 - http://www.securityfocus.com/bid/20338
CVE ID: CVE-2006-4687 State: PUBLISHED Published: 2006-11-14T21:00:00 Last Updated: 2024-08-07T19:23:41.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via crafted layout combinations involving DIV tags and HTML CSS float properties that trigger memory corruption, aka "HTML Rendering Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA06-318A.html - http://www.zerodayinitiative.com/advisories/ZDI-06-041.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A456
/advisories/ZDI-06-041.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A456 - http://www.osvdb.org/31323 - http://www.kb.cert.org/vuls/id/197852 - http://securitytracker.com/id?1017223 - http://www.vupen.com/english/advisories/2006/4505 - http://www.securityfocus.com/archive/1/451590/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29199 - http://www.securityfocus.com/bid/21020 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067
CVE ID: CVE-2006-4688 State: PUBLISHED Published: 2006-11-14T22:00:00 Last Updated: 2024-08-07T19:23:40.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via crafted messages, aka "Client Service for NetWare Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017224 - http://www.us-cert.gov/cas/techalerts/TA06-318A.html - http://www.securityfocus.com/bid/21023 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms
l - http://www.securityfocus.com/bid/21023 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-066 - http://www.vupen.com/english/advisories/2006/4504 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A404 - http://www.securityfocus.com/archive/1/451844/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29952 - http://secunia.com/advisories/22866
CVE ID: CVE-2006-4689 State: PUBLISHED Published: 2006-11-14T22:00:00 Last Updated: 2024-08-07T19:23:40.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the driver for the Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to cause a denial of service (hang and reboot) via has unknown attack vectors, aka "NetWare Driver Denial of Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017224 - http://www.us-cert.gov/cas/techalerts/TA06-318A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/
p://www.us-cert.gov/cas/techalerts/TA06-318A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-066 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A413 - http://www.vupen.com/english/advisories/2006/4504 - http://www.securityfocus.com/bid/20984 - http://www.securityfocus.com/archive/1/451844/100/0/threaded - http://secunia.com/advisories/22866
CVE ID: CVE-2006-4690 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-4691 State: PUBLISHED Published: 2006-11-14T21:00:00 Last Updated: 2024-08-07T19:23:40.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to execute arbitrary code via NetrJoinDomain2 RPC messages with a long hostname. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA06-318A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A607 - http://www.securityfocus.com/bid/20985 - https://exchange.xforce.ibm
arch/definition/oval%3Aorg.mitre.oval%3Adef%3A607 - http://www.securityfocus.com/bid/20985 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29948 - http://secunia.com/advisories/22883 - http://www.kb.cert.org/vuls/id/778036 - http://securitytracker.com/id?1017221 - http://www.securityfocus.com/archive/1/451588/100/0/threaded - http://research.eeye.com/html/advisories/published/AD20061114.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-070 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A908 - http://www.vupen.com/english/advisories/2006/4508
CVE ID: CVE-2006-4692 State: PUBLISHED Published: 2006-10-10T22:00:00 Last Updated: 2024-10-15T14:16:30.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted attackers to execute arbitrary commands via a crafted file with a "/" (slash) character in the filename of the Command Line property, followed by a valid file extension, which causes the command before the slash to be executed, aka "Object Packager Dialogue Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment