Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
33/100/0/threaded - http://secunia.com/advisories/21529 - http://www.zerodayinitiative.com/advisories/ZDI-06-025.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10745 - http://secunia.com/advisories/21216 - http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml - http://www.redhat.com/support/errata/RHSA-2006-0594.html - http://secunia.com/advisories/21336 - http://www.redhat.com/support/errata/RHSA-2006-0610.html - http://www.kb.cert.org/vuls/id/670060 - http://rhn.redhat.com/errata/RHSA-2006-0609.html - http://secunia.com/advisories/22210 - http://securitytracker.com/id?1016586 - http://secunia.com/advisories/19873 - http://secunia.com/advis
dvisories/22210 - http://securitytracker.com/id?1016586 - http://secunia.com/advisories/19873 - http://secunia.com/advisories/21262 - http://www.mozilla.org/security/announce/2006/mfsa2006-45.html - http://secunia.com/advisories/21532 - http://secunia.com/advisories/21270 - http://www.vupen.com/english/advisories/2008/0083 - https://usn.ubuntu.com/327-1/ - http://secunia.com/advisories/21361 - http://secunia.com/advisories/21631 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://secunia.com/advisories/21246 - http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html - http://secunia.com/advisories/21229 - http://securitytracker.com/id?1016587 - http://www.
ories/2006_48_seamonkey.html - http://secunia.com/advisories/21229 - http://securitytracker.com/id?1016587 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.redhat.com/support/errata/RHSA-2006-0611.html - https://issues.rpath.com/browse/RPL-536 - http://secunia.com/advisories/22066 - http://secunia.com/advisories/21269 - http://secunia.com/advisories/21343 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 - http://www.securityfocus.com/bid/19192 - http://www.ubuntu.com/usn/usn-354-1 - ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc
CVE ID: CVE-2006-3678 State: PUBLISHED Published: 2006-07-26T23:00:00 Last Updated: 2024-08-07T18:39:53.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: TippingPoint IPS running the TippingPoint Operating System (TOS) before 2.2.4.6519 allows remote attackers to "force the device into layer 2 fallback (L2FB)", causing a denial of service (page fault), via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.3com.com/securityalert/alerts/3COM-06-003.html - http://www.vupen.com/english/advisories/2006/2956 - http://securityreason.com/securityalert/1286 - http://www.securityfocus.com/bid/19125 - http://securitytracker.com/id?1016562 - ht
urityreason.com/securityalert/1286 - http://www.securityfocus.com/bid/19125 - http://securitytracker.com/id?1016562 - http://www.securityfocus.com/archive/1/440944/100/0/threaded - http://secunia.com/advisories/21154 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27934
CVE ID: CVE-2006-3679 State: PUBLISHED Published: 2006-07-18T21:00:00 Last Updated: 2024-08-07T18:39:53.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: FatWire Content Server 5.5.0 allows remote attackers to bypass access restrictions and obtain administrative privileges via unspecified attack vectors in the authentication process. Additional Analyst Notes: - CVE Program Container: References: - http://www.s21sec.com/avisos/s21sec-032-en.txt - http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0242.html - http://www.securityfocus.com/bid/18958 - http://www.vupen.com/english/advisories/2006/2771 - http://secunia.com/advisories/21020 - https://exchange.xforce.ibmclou
ttp://www.vupen.com/english/advisories/2006/2771 - http://secunia.com/advisories/21020 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27702 - http://www.osvdb.org/27092 - http://www.securityfocus.com/archive/1/439896/100/0/threaded
CVE ID: CVE-2006-3680 State: PUBLISHED Published: 2006-07-18T21:00:00 Last Updated: 2024-08-07T18:39:53.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in photocycle in Photocycle 1.0 allows remote attackers to inject arbitrary web script or HTML via the phpage parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/439968/100/0/threaded - http://www.osvdb.org/27093 - http://www.vupen.com/english/advisories/2006/2805 - http://www.securityfocus.com/archive/1/440078/100/100/threaded - http://www.securityfocus.com/bid/18964 - http://securitytracker.com/id?1016492 - https://exchang
0078/100/100/threaded - http://www.securityfocus.com/bid/18964 - http://securitytracker.com/id?1016492 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27715 - http://secunia.com/advisories/21054
CVE ID: CVE-2006-3681 State: PUBLISHED Published: 2006-07-18T21:00:00 Last Updated: 2024-08-07T18:39:53.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in awstats.pl in AWStats 6.5 build 1.857 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) refererpagesfilter, (2) refererpagesfilterex, (3) urlfilterex, (4) urlfilter, (5) hostfilter, or (6) hostfilterex parameters, a different set of vectors than CVE-2006-1945. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25879 - http://pridels0.blogspot.com/2006/04/awstats-65x-multi
s: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25879 - http://pridels0.blogspot.com/2006/04/awstats-65x-multiple-vuln.html - http://www.ubuntu.com/usn/usn-360-1 - http://www.vupen.com/english/advisories/2006/1421 - http://secunia.com/advisories/22306 - http://secunia.com/advisories/19725
CVE ID: CVE-2006-3682 State: PUBLISHED Published: 2006-07-18T21:00:00 Last Updated: 2024-08-07T18:39:53.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attackers to obtain the installation path via the (1) year, (2) pluginmode or (3) month parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/04/awstats-65x-multiple-vuln.html - http://www.ubuntu.com/usn/usn-360-1 - http://www.vupen.com/english/advisories/2006/1421 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25880 - http://secunia.com/advisories/22306 - http://secunia.com/advisories/19725
CVE ID: CVE-2006-3683 State: PUBLISHED Published: 2006-07-18T21:00:00 Last Updated: 2024-08-07T18:39:53.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26503 - http://packetstormsecurity.org/0606-exploits/flipper.txt - http://marc.info/?l=bugtraq&m=115031160401269&w=2 - http://www.securityfocus.com/archive/1/439971/100/0/threaded - http://securitytracker.com/id?1016489 - https://exchange.xforce.ibmcloud.com/vulnerabili
chive/1/439971/100/0/threaded - http://securitytracker.com/id?1016489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27203 - http://www.vupen.com/english/advisories/2006/2353 - http://www.securityfocus.com/bid/18461 - http://secunia.com/advisories/20632
CVE ID: CVE-2006-3684 State: PUBLISHED Published: 2006-07-18T21:00:00 Last Updated: 2024-08-07T18:39:53.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in calendar.php in SoftComplex PHP Event Calendar 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_calendar parameter, which overwrites the $path_to_calendar variable from an extract function call. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21074 - http://www.solpotcrew.org/adv/solpot-adv-01.txt - http://secunia.com/advisories/21417 - http://www.securityfocus.com/archive/1/440265/100/0/threaded - http:/
adv-01.txt - http://secunia.com/advisories/21417 - http://www.securityfocus.com/archive/1/440265/100/0/threaded - http://www.vupen.com/english/advisories/2006/2848 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27766 - http://www.securityfocus.com/bid/18965
CVE ID: CVE-2006-3685 State: PUBLISHED Published: 2006-07-18T21:00:00 Last Updated: 2024-08-07T18:39:53.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in CzarNews 1.12 through 1.14 allows remote attackers to execute arbitrary PHP code via a URL in the tpath parameter to cn_config.php. NOTE: the news.php vector is already covered by CVE-2005-0859. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2806 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27733 - https://www.exploit-db.com/exploits/2009 - http://secunia.com/advisories/21038
CVE ID: CVE-2006-3686 State: PUBLISHED Published: 2006-07-18T21:00:00 Last Updated: 2024-08-07T18:39:53.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in [SYSEXE]SMPUTIL.EXE in HP OpenVMS 7.3-2 allows local users and "remote users" to cause a denial of service (crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19008 - http://secunia.com/advisories/21067 - http://securitytracker.com/id?1016509 - ftp://ftp.itrc.hp.com/openvms_patches/alpha/V7.3-2/VMS732_MP-V0100.txt - http://www.vupen.com/english/advisories/2006/2830
CVE ID: CVE-2006-3687 State: PUBLISHED Published: 2006-07-18T21:00:00 Last Updated: 2024-08-07T18:39:53.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadband Router, DI-624, D-Link DI-784, WBR-1310 Wireless G Router, WBR-2310 RangeBooster G Router, and EBR-2310 Ethernet Broadband Router allows remote attackers to execute arbitrary code via a long M-SEARCH request to UDP port 1900. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0363.html - http://www.securityfocus.com/archive/1/440298/100/0/thread
ves.neohapsis.com/archives/fulldisclosure/2006-07/0363.html - http://www.securityfocus.com/archive/1/440298/100/0/threaded - http://www.securityfocus.com/archive/1/440852/100/100/threaded - http://www.eeye.com/html/research/advisories/AD20060714.html - http://secunia.com/advisories/21081 - http://www.osvdb.org/27333 - http://www.vupen.com/english/advisories/2006/2829 - http://www.kb.cert.org/vuls/id/971705 - http://www.securityfocus.com/bid/19006 - http://securitytracker.com/id?1016511 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27755
CVE ID: CVE-2006-3688 State: PUBLISHED Published: 2006-07-18T21:00:00 Last Updated: 2024-08-07T18:39:53.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Room.php in Francisco Charrua Photo-Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016505 - http://www.securityfocus.com/bid/19020 - http://www.securityfocus.com/archive/1/440124/100/100/threaded - http://secunia.com/advisories/21084 - http://www.vupen.com/english/advisories/2006/2834
CVE ID: CVE-2006-3689 State: PUBLISHED Published: 2006-07-18T21:00:00 Last Updated: 2024-08-07T18:39:53.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in user-func.php in Codeworks Gnomedia SubberZ[Lite] allows remote attackers to execute arbitrary PHP code via a URL in the myadmindir parameter. NOTE: this issue has been disputed by a third party that claims that " the myadmindir variable is set before any GET variables are processed. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27748 - http://www.securityfocus.com/archive/1/440864/100/100/threaded - http://www.se
orce.ibmcloud.com/vulnerabilities/27748 - http://www.securityfocus.com/archive/1/440864/100/100/threaded - http://www.securityfocus.com/archive/1/440139/100/0/threaded - http://www.osvdb.org/28592 - http://securityreason.com/securityalert/1246 - http://www.securityfocus.com/bid/18990
CVE ID: CVE-2006-3690 State: PUBLISHED Published: 2006-07-18T21:00:00 Last Updated: 2024-08-07T18:39:53.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter to (1) components/com_minibb.php or (2) components/minibb/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016507 - https://www.exploit-db.com/exploits/2030 - http://securityreason.com/securityalert/1245 - http://advisories.echo.or.id/adv/adv39-matdhule-2006.txt - http://www.securityfocus.com/ar
ason.com/securityalert/1245 - http://advisories.echo.or.id/adv/adv39-matdhule-2006.txt - http://www.securityfocus.com/archive/1/440132/100/0/threaded - http://www.securityfocus.com/bid/18998 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27749 - http://www.osvdb.org/28594
CVE ID: CVE-2006-3691 State: PUBLISHED Published: 2006-07-18T21:00:00 Last Updated: 2024-08-07T18:39:53.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in VBZooM 1.11 and earlier allow remote attackers to execute arbitrary SQL commands via the UserID parameter to (1) ignore-pm.php, (2) sendmail.php, (3) reply.php or (4) sub-join.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/491770/100/0/threaded - http://www.securityfocus.com/archive/1/440133/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42254 - http://www.osvdb.org/28254 - http://securityreason.com/se
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42254 - http://www.osvdb.org/28254 - http://securityreason.com/securityalert/1244 - http://www.securityfocus.com/bid/18937 - http://www.securityfocus.com/archive/1/440141/100/0/threaded - http://www.securityfocus.com/archive/1/440145/100/0/threaded - http://www.securityfocus.com/archive/1/440114/100/0/threaded
CVE ID: CVE-2006-3692 State: PUBLISHED Published: 2006-07-18T21:00:00 Last Updated: 2024-08-07T18:39:53.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in enduser/listmessenger.php in ListMessenger 0.9.3 allows remote attackers to execute arbitrary PHP code via a URL in the lm_path parameter. NOTE: the vendor has disputed this issue to SecurityTracker, stating that the $lm_path variable is set to a constant value. As of 20060726, CVE concurs with the vendor based on SecurityTracker's post-disclosure analysis Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/440291/100/0/threaded - ht
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/440291/100/0/threaded - http://securityreason.com/securityalert/1243 - http://www.securityfocus.com/bid/19014 - http://www.attrition.org/pipermail/vim/2006-July/000946.html - http://www.osvdb.org/28289 - http://securitytracker.com/id?1016530
CVE ID: CVE-2006-3693 State: PUBLISHED Published: 2006-07-19T01:00:00 Last Updated: 2024-08-07T18:39:53.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with escaped backticks (\`) in an argument to the (1) mount-loop (mount-loop.c) or (2) umount-loop (umount-loop.c) command, which is not filtered in a system function call. Additional Analyst Notes: - CVE Program Container: References: - http://xavier.tigerteam.se/exploits/rocksumountdirty.py - https://exchange.xforce.ibmcloud.com/vulnerabilities/27758 - http://www.securityfocus.com/bid/19003 - http://xavier.tigerteam.se/advisories/TSEAD
bmcloud.com/vulnerabilities/27758 - http://www.securityfocus.com/bid/19003 - http://xavier.tigerteam.se/advisories/TSEAD-200606-6.txt - http://securityreason.com/securityalert/1242 - http://secunia.com/advisories/21065 - http://www.securityfocus.com/archive/1/440126/100/0/threaded - http://www.vupen.com/english/advisories/2006/2833 - http://xavier.tigerteam.se/exploits/rocksmountdirty.sh
CVE ID: CVE-2006-3694 State: PUBLISHED Published: 2006-07-19T01:00:00 Last Updated: 2024-08-07T18:39:53.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) the alias function and (2) "directory operations". Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P - http://www.securityfocus.com/bid/18944 - http://secunia.com/advisories/21657 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9983 - http://secunia.com/advi
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9983 - http://secunia.com/advisories/21749 - http://jvn.jp/jp/JVN%2313947696/index.html - http://secunia.com/advisories/21009 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:134 - http://secunia.com/advisories/21598 - http://secunia.com/advisories/21233 - http://www.vupen.com/english/advisories/2006/2760 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27725 - http://www.osvdb.org/27144 - http://www.osvdb.org/27145 - http://www.ubuntu.com/usn/usn-325-1 - http://www.debian.org/security/2006/dsa-1157 - http://secunia.com/advisories/21337 - http://lists.freebsd.org/pipermail/freebsd-sec
debian.org/security/2006/dsa-1157 - http://secunia.com/advisories/21337 - http://lists.freebsd.org/pipermail/freebsd-security/2006-July/003907.html - http://www.novell.com/linux/security/advisories/2006_21_sr.html - http://secunia.com/advisories/21272 - http://secunia.com/advisories/21236 - http://www.debian.org/security/2006/dsa-1139 - http://www.redhat.com/support/errata/RHSA-2006-0604.html - http://jvn.jp/jp/JVN%2383768862/index.html - http://lists.freebsd.org/pipermail/freebsd-security/2006-July/003915.html
CVE ID: CVE-2006-3695 State: PUBLISHED Published: 2006-07-19T01:00:00 Last Updated: 2024-08-07T18:39:53.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27706 - http://www.vupen.com/english/advisorie
ainer: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27706 - http://www.vupen.com/english/advisories/2006/2729 - http://secunia.com/advisories/20958 - http://securitytracker.com/id?1016457 - http://www.securityfocus.com/bid/18323 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27708 - http://www.debian.org/security/2006/dsa-1152 - http://secunia.com/advisories/21534 - http://trac.edgewall.org/wiki/ChangeLog
CVE ID: CVE-2006-3696 State: PUBLISHED Published: 2006-07-19T01:00:00 Last Updated: 2024-08-07T18:39:53.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: filtnt.sys in Outpost Firewall Pro before 3.51.759.6511 (462) allows local users to cause a denial of service (crash) via long arguments to mshta.exe. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21095 - http://www.securityfocus.com/bid/19026 - http://www.securityfocus.com/archive/1/440427 - http://securityreason.com/securityalert/1247 - http://www.vupen.com/english/advisories/2006/2853 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27840
CVE ID: CVE-2006-3697 State: PUBLISHED Published: 2006-07-19T01:00:00 Last Updated: 2024-08-07T18:39:53.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Agnitum Outpost Firewall Pro 3.51.759.6511 (462), as used in (1) Lavasoft Personal Firewall 1.0.543.5722 (433) and (2) Novell BorderManager Novell Client Firewall 2.0, does not properly restrict user activities in application windows that run in a LocalSystem context, which allows local users to gain privileges and execute commands (a) via the "open folder" option when no instance of explorer.exe is running, possibly related to the ShellExecute API function; or (b) by overwriting a batch file through the "Save Configuration As
possibly related to the ShellExecute API function; or (b) by overwriting a batch file through the "Save Configuration As" option. NOTE: this might be a vulnerability in Microsoft Windows and explorer.exe instead of the firewall. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21089 - http://www.osvdb.org/27349 - http://www.securityfocus.com/bid/19018 - http://www.securityfocus.com/archive/1/440426/100/0/threaded - http://www.vupen.com/english/advisories/2007/0144 - http://www.securityfocus.com/bid/19024 - http://www.vupen.com/english/advisories/2006/2851 - http://www.vupen.com/english/advisories/2006/2852 - http://www.ben.goulding.com.au/secad.h
nglish/advisories/2006/2851 - http://www.vupen.com/english/advisories/2006/2852 - http://www.ben.goulding.com.au/secad.html - http://secunia.com/advisories/21088 - https://secure-support.novell.com/KanisaPlatform/Publishing/903/3762108_f.SAL_Public.html
CVE ID: CVE-2006-3698 State: PUBLISHED Published: 2006-07-19T10:00:00 Last Updated: 2024-08-07T18:39:53.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB01 for Change Data Capture (CDC) component and (2) DB03 for Data Pump Metadata API. NOTE: as of 20060719, Oracle has not disputed a claim by a reliable researcher that DB01 is related to multiple SQL injection vulnerabilities in SYS.DBMS_CDC_IMPDP using the (a) IMPORT_CHANGE_SET, (b) IMPORT_CHANGE_TABLE, (c) IMPORT_CHANGE_COLUMN, (d) IMPORT_SUBSCRIBER, (e) IMPORT_SUBSCRIBED_TABLE, (f) IMPORT_SUBSCRIBE
IMPORT_CHANGE_TABLE, (c) IMPORT_CHANGE_COLUMN, (d) IMPORT_SUBSCRIBER, (e) IMPORT_SUBSCRIBED_TABLE, (f) IMPORT_SUBSCRIBED_COLUMN, (g) VALIDATE_IMPORT, (h) VALIDATE_CHANGE_SET, (i) VALIDATE_CHANGE_TABLE, and (j) VALIDATE_SUBSCRIPTION procedures, and that DB03 is for SQL injection in the MAIN procedure for SYS.KUPW$WORKER. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016529 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047994.html - http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_cdc_impdp.html - http://www.securityfocus.com/archive/1/440439/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerab
mpdp.html - http://www.securityfocus.com/archive/1/440439/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27889 - http://www.securityfocus.com/bid/19054 - http://www.red-database-security.com/advisory/oracle_sql_injection_kupw%24worker.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27897 - http://secunia.com/advisories/21165 - http://www.securityfocus.com/archive/1/440758/100/100/threaded - http://www.vupen.com/english/advisories/2006/2947 - http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html - http://www.securityfocus.com/archive/1/440758/100/100/threaded - http://www.us-cert.gov/cas/techalerts/TA06-200A.html - http://www.securityfocus.