Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-2875 State: PUBLISHED Published: 2005-09-13T04:00:00 Last Updated: 2024-08-07T22:53:29.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Py2Play allows remote attackers to execute arbitrary Python code via pickled objects, which Py2Play unpickles and executes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16855 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=326976 - http://www.debian.org/security/2005/dsa-856 - http://www.securityfocus.com/bid/14864 - http://secunia.com/advisories/17106 - http://soya.literati.org/ - http://www.gentoo.org/security/en/glsa/glsa-200509-09.xml - https://bugs.gentoo.org/show_bug.c
tp://soya.literati.org/ - http://www.gentoo.org/security/en/glsa/glsa-200509-09.xml - https://bugs.gentoo.org/show_bug.cgi?id=103524
CVE ID: CVE-2005-2876 State: PUBLISHED Published: 2005-09-13T04:00:00 Last Updated: 2024-08-07T22:53:28.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r (remount) option, which causes the file system to be remounted with just the read-only flag, which effectively clears the nosuid, nodev, and other flags. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101960-1 - http://secunia.com/advisories/17133 - http://www.securityfocus.com/
.sun.com/search/document.do?assetkey=1-26-101960-1 - http://secunia.com/advisories/17133 - http://www.securityfocus.com/archive/1/419774/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/22241 - http://www.osvdb.org/19369 - http://www.debian.org/security/2005/dsa-823 - http://www.novell.com/linux/security/advisories/2005_21_sr.html - http://secunia.com/advisories/16785 - http://marc.info/?l=bugtraq&m=112690609622266&w=2 - http://secunia.com/advisories/16988 - http://www.debian.org/security/2005/dsa-825 - http://secunia.com/advisories/17154 - http://www.ubuntu.com/usn/usn-184-1 - http://support.avaya.com/elmodocs2/security/ASA-2006-014.htm - http://secunia.com/advisories/1
buntu.com/usn/usn-184-1 - http://support.avaya.com/elmodocs2/security/ASA-2006-014.htm - http://secunia.com/advisories/18502 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10921 - http://secunia.com/advisories/17027 - http://marc.info/?l=bugtraq&m=112656096125857&w=2 - http://secunia.com/advisories/17004 - http://www.securityfocus.com/bid/14816
CVE ID: CVE-2005-2877 State: PUBLISHED Published: 2005-09-16T04:00:00 Last Updated: 2024-08-07T22:53:29.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers. Additional Analyst Notes: - CVE Program Container: References: - http://twiki.org/cgi-bin/view/Codev/SecurityAlertExecuteCommandsWithRev - http://marc.info/?l=bugtraq&m=112680475417550&w=2 - http://www.kb.cert.org/vuls/id/757181 - http://www.securityfocus.com/bid/14834
CVE ID: CVE-2005-2878 State: PUBLISHED Published: 2005-09-13T04:00:00 Last Updated: 2024-08-07T22:53:29.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to execute arbitrary code via format string specifiers in the SEARCH command. Additional Analyst Notes: - CVE Program Container: References: - http://savannah.gnu.org/patch/index.php?func=detailitem&item_id=4407 - http://secunia.com/advisories/17020 - http://www.gentoo.org/security/en/glsa/glsa-200509-10.xml - http://secunia.com/advisories/16783 - http://www.idefense.com/application/poi/display?id=303&type=vulner
200509-10.xml - http://secunia.com/advisories/16783 - http://www.idefense.com/application/poi/display?id=303&type=vulnerabilities&flashstatus=true - http://www.rosiello.org/archivio/imap4d_FreeBSD_exploit.c - http://www.debian.org/security/2005/dsa-841 - http://marc.info/?l=bugtraq&m=112785181316043&w=2 - http://www.securityfocus.com/bid/14794
CVE ID: CVE-2005-2879 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:29.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advansysperu Software USB Lock Auto-Protect (AP) 1.5 uses a weak encryption scheme to encrypt passwords, which allows local users to gain sensitive information and bypass USB interface protection. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112606328118852&w=2 - http://www.shadock.net/secubox/.data/adv_usblock/
CVE ID: CVE-2005-2880 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:28.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via the (1) login field in login.php or (2) LocationID parameter to week.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22175 - http://www.securityfocus.com/bid/14763 - http://marc.info/?l=bugtraq&m=112605610624004&w=2 - http://secunia.com/advisories/16721/ - http://rgod.altervista.org/phpccal.htm
rc.info/?l=bugtraq&m=112605610624004&w=2 - http://secunia.com/advisories/16721/ - http://rgod.altervista.org/phpccal.html
CVE ID: CVE-2005-2881 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:28.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpCommunityCalendar 4.0.3 allows remote attackers to bypass authentication and gain unauthorized access via a direct request to the admin directory. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112605610624004&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22182 - http://rgod.altervista.org/phpccal.html
CVE ID: CVE-2005-2882 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:29.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the LocationID parameter to (1) thankyou.php or (2) day.php, font parameter to (3) calDaily.php, (4) calMonthly.php, (5) calMonthlyP.php, (6) calWeekly.php, (7) calWeeklyP.php, (8) calYearly.php, (9) calYearlyP.php, (10) day.php, or (11) week.php, or (12) CeTi, (13) Contact, (14) Description, (15) ShowAddress parameter to event.php, and other attack
(11) week.php, or (12) CeTi, (13) Contact, (14) Description, (15) ShowAddress parameter to event.php, and other attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112605610624004&w=2 - http://www.securityfocus.com/bid/14767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22176 - http://secunia.com/advisories/16721/ - http://rgod.altervista.org/phpccal.html
CVE ID: CVE-2005-2883 State: REJECTED Published: 2005-09-14T04:00:00 Last Updated: 2005-09-27T09:00:00 Description: No description available.
CVE ID: CVE-2005-2884 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:29.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in events.php in Land Down Under (LDU) 801 and earlier allows remote attackers to inject arbitrary web script or HTML via the Description field in an event. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112604873103252&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22195 - http://www.securityfocus.com/bid/14746 - http://secunia.com/advisories/16710/
CVE ID: CVE-2005-2885 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:28.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Downloads page in MAXdev MD-Pro 1.0.73, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which could allow remote attackers to bypass file extension checks and execute arbitrary commands by uploading a file with a different extension, as demonstrated using .inc files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14750 - http://secunia.com/advisories/16731/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22199 - ht
s.com/bid/14750 - http://secunia.com/advisories/16731/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22199 - http://marc.info/?l=bugtraq&m=112603835317458&w=2
CVE ID: CVE-2005-2886 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:29.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.73, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via (1) the print parameter to the print module, the sitename parameter to (2) bb_smilies or (3) bbcode_ref module, or (4) the hlpfile parameter to openwindow.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16731/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22200 - http://rgod.altervista.org/maxdev
a.com/advisories/16731/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22200 - http://rgod.altervista.org/maxdev1073.html - http://marc.info/?l=bugtraq&m=112603835317458&w=2 - http://www.securityfocus.com/bid/14751
CVE ID: CVE-2005-2887 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:29.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: MAXdev MD-Pro 1.0.73, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to (1) wiki.php, (2) AutoTheme directory, (3) Blocks directory, (4) admin.php, (5) pnadmin.php, or (6) Topics directory, which reveal the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16731/ - http://rgod.altervista.org/maxdev1073.html - http://marc.info/?l=bugtraq&m=112603835317458&w=2 - https://exchange.xforce.ibmcloud.com/
tervista.org/maxdev1073.html - http://marc.info/?l=bugtraq&m=112603835317458&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22201
CVE ID: CVE-2005-2888 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:29.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) Preview Release 2 allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter to misc.php or (2) Content-Disposition field in the HTTP header to newreply.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112611068702781&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22192 - http://secunia.com/advisories/16738/
CVE ID: CVE-2005-2889 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:29.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check Point NGX R60 does not properly verify packets against the predefined service group "CIFS" rule, which allows remote attackers to bypass intended restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/508209 - http://marc.info/?l=bugtraq&m=112611529724821&w=2
CVE ID: CVE-2005-2890 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:29.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: SecureOL VE2 1.05.1008 does not properly restrict public access to physical memory, which allows local users to bypass intended restrictions and gain access to the secured environment via direct access to the PhysicalMemory device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22205 - http://secunia.com/advisories/16739/ - http://marc.info/?l=bugtraq&m=112610983428771&w=2 - http://cybermessageboard.xeran.com/secureo
a.com/advisories/16739/ - http://marc.info/?l=bugtraq&m=112610983428771&w=2 - http://cybermessageboard.xeran.com/secureol/viewtopic.php?t=26
CVE ID: CVE-2005-2891 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:29.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebArchiveX.dll 5.5.0.76 installed before September 6th, 2005 is marked safe for scripting by default, which allows remote attackers to read or write to arbitrary files via the (1) MakeArchive or (2) MakeArchiveStr methods. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22188 - http://www.securitytracker.com/alerts/2005/Sep/1014867.html - http://secunia.com/advisories/16722/ - http://www.securityfocus.com/bid/14760 - http://marc.info/?l=bugtraq&m=1126113880
http://secunia.com/advisories/16722/ - http://www.securityfocus.com/bid/14760 - http://marc.info/?l=bugtraq&m=112611388014937&w=2 - http://security-assessment.com/Advisories/WebArchiveX_-_Unsafe_Methods_Vulnerability.pdf
CVE ID: CVE-2005-2892 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:29.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to read arbitrary files via ".." sequences and "%00" (trailing null byte) in the u parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/alerts/2005/Sep/1014861.html - http://marc.info/?l=bugtraq&m=112611338417979&w=2 - http://www.securityfocus.com/bid/14765 - http://secunia.com/advisories/16711/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22185
CVE ID: CVE-2005-2893 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:29.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via the username (u parameter), which is directly injected into a file that is later executed upon login. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/alerts/2005/Sep/1014861.html - http://marc.info/?l=bugtraq&m=112611338417979&w=2 - http://secunia.com/advisories/16711/ - https://exchange.xforce.ibmcloud.com/vulnerabilitie
gtraq&m=112611338417979&w=2 - http://secunia.com/advisories/16711/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22187
CVE ID: CVE-2005-2894 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:29.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the user registration in PBLang 4.65, and possibly earlier versions, allows remote attackers to inject arbitrary web script or PHP via the location field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14766 - http://marc.info/?l=bugtraq&m=112611338417979&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22190
CVE ID: CVE-2005-2895 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:29.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to obtain sensitive information via a %00 (a null byte) in the u parameter, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/alerts/2005/Sep/1014861.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/22191 - http://marc.info/?l=bugtraq&m=112611338417979&w=2
CVE ID: CVE-2005-2896 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:29.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_userpw parameter to startup.php, (2) cat, (3) id, or (4) stof parameter to news.php, or (5) id parameter to print.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112611504519410&w=2 - http://secunia.com/advisories/16727/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22179 - http://www.securityfocus.com/bid/14776
CVE ID: CVE-2005-2897 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:29.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: WEB//NEWS 1.4 allows remote attackers to obtain sensitive information via a direct request to files in the actions directory, which reveal the path in an error message, as demonstrated using cat.add.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112611504519410&w=2 - http://secunia.com/advisories/16727/
CVE ID: CVE-2005-2898 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:30.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: NOTE: this issue has been disputed by the vendor. FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when "Use secure mode" is disabled, uses a weak encryption scheme to store the user's password in the configuration settings file, which allows local users to obtain sensitive information. NOTE: the vendor has disputed the issue, stating that "the problem is not a vulnerability at all, but in fact a fundamental issue of every single program that can store passwords transparently. Additional Analyst Notes: - CVE Progra
fundamental issue of every single program that can store passwords transparently. Additional Analyst Notes: - CVE Program Container: References: - http://filezilla.sourceforge.net/forum/viewtopic.php?t=1328 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22135 - http://www.securityfocus.com/bid/14730 - http://marc.info/?l=bugtraq&m=112577523810442&w=2 - http://marc.info/?l=bugtraq&m=112605448327521&w=2
CVE ID: CVE-2005-2899 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:30.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in details.php in CjTagBoard 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) date, (2) time, (3) name, (4) ip, (5) agent, or (6) msg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112629507412619&w=2
CVE ID: CVE-2005-2900 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:29.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in top.php in CjLinkOut 1.0 allows remote attackers to inject arbitrary web script or HTML via the 123 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112629507412619&w=2
CVE ID: CVE-2005-2901 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:29.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-site scripting (XSS) vulnerabilities in CjWeb2Mail 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) message, or (3) ip parameter to thankyou.php or (4) emsg parameter to web2mail.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112629507412619&w=2
CVE ID: CVE-2005-2902 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:29.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in class-1 Forum Software 0.24.4 allows remote attackers to execute arbitrary SQL commands and bypass the file extension check via SQL code in the file extension of an uploaded file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14774 - http://secunia.com/advisories/16762/ - http://www.rgod.altervista.org/class1.html - http://marc.info/?l=bugtraq&m=112629627512785&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22209
CVE ID: CVE-2005-2903 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:29.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in NOD32 2.5 with nod32.002 1.033 build 1127, with active scanning enabled, allows remote attackers to execute arbitrary code via an ARJ archive containing a file with a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14773 - http://secunia.com/secunia_research/2005-40/advisory/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22203 - http://secunia.com/advisories/16604/ - http://marc.info/?l=bugtraq&m=112621063025054&w=2
CVE ID: CVE-2005-2904 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:29.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zebedee 2.4.1, when "allowed redirection port" is not set, allows remote attackers to cause a denial of service (application crash) via a zero in the port number of the protocol option header, which triggers an assert error in the makeConnection function in zebedee.c. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16788/ - http://www.securityfocus.com/bid/14796 - http://marc.info/?l=bugtraq&m=112629543605488&w=2 - http://www.gentoo.org/security/en/glsa/glsa-200509-14.xml
CVE ID: CVE-2005-2912 State: PUBLISHED Published: 2005-09-14T04:00:00Z Last Updated: 2024-09-16T19:52:00.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys WRT54G router allows remote attackers to cause a denial of service (CPU consumption and server hang) via an HTTP POST request with a negative Content-Length value. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=308&type=vulnerabilities
CVE ID: CVE-2005-2913 State: REJECTED Published: 2005-09-14T04:00:00 Last Updated: 2005-11-02T10:00:00 Description: No description available.
CVE ID: CVE-2005-2914 State: PUBLISHED Published: 2005-09-14T04:00:00Z Last Updated: 2024-09-16T22:56:41.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other versions, does not use an authentication initialization function, which allows remote attackers to obtain encrypted configuration information and, if the key is known, modify the configuration. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=304&type=vulnerabilities
CVE ID: CVE-2005-2915 State: PUBLISHED Published: 2005-09-14T04:00:00 Last Updated: 2024-08-07T22:53:29.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other versions, uses weak encryption (XOR encoding with a fixed byte mask) for configuration information, which could allow attackers to decrypt the information and possibly re-encrypt it in conjunction with CVE-2005-2914. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=304&type=vulnerabilities