Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- http://secunia.com/advisories/21379 - http://www.securityfocus.com/bid/19378 - http://www.securityfocus.com/bid/19380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28258 - http://secunia.com/advisories/21364 - http://www.vupen.com/english/advisories/2006/3174 - http://www.vupen.com/english/advisories/2006/3176 - http://sourceforge.net/project/shownotes.php?release_id=437760&group_id=172286
CVE ID: CVE-2006-4057 State: PUBLISHED Published: 2006-08-10T00:00:00 Last Updated: 2024-08-07T18:57:46.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the preview_create function in gui.cpp in Mitch Murray Eremove 1.4 allows remote attackers to cause a denial of service (application crash), and possibly execute arbitrary code, via a large email attachment. Additional Analyst Notes: - CVE Program Container: References: - http://advisories.echo.or.id/adv/adv42-theday-2006.txt - http://www.securityfocus.com/bid/19352 - http://securityreason.com/securityalert/1368 - http://securitytracker.com/id?1016640 - http://www.securityfocus.com/archive/1/442220/100/0/thr
com/securityalert/1368 - http://securitytracker.com/id?1016640 - http://www.securityfocus.com/archive/1/442220/100/0/threaded
CVE ID: CVE-2006-4058 State: PUBLISHED Published: 2006-08-10T00:00:00 Last Updated: 2024-08-07T18:57:44.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in archive.php in Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyw parameter when performing a search. NOTE: some details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3186 - http://www.securityfocus.com/archive/1/442456/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28266 - http://secunia.com/advisories/21
/1/442456/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28266 - http://secunia.com/advisories/21390 - http://securityreason.com/securityalert/1358 - http://securitytracker.com/id?1016651 - http://www.osvdb.org/27823
CVE ID: CVE-2006-4059 State: PUBLISHED Published: 2006-08-10T00:00:00 Last Updated: 2024-08-07T18:57:46.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in USOLVED NEWSolved Lite 1.9.2, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) newsscript_lyt.php, (2) newsticker/newsscript_get.php, (3) inc/output/news_theme1.php, (4) inc/output/news_theme2.php, or (5) inc/output/news_theme3.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27839 - http://www.bb-pcsecurity.de/sicherheit_286.htm - http://securityreason.com/securit
ences: - http://www.osvdb.org/27839 - http://www.bb-pcsecurity.de/sicherheit_286.htm - http://securityreason.com/securityalert/1366 - http://secunia.com/advisories/21395 - http://www.osvdb.org/27840 - http://www.osvdb.org/27836 - https://www.exploit-db.com/exploits/2135 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28262 - http://www.securityfocus.com/bid/19379 - http://www.vupen.com/english/advisories/2006/3200 - http://www.osvdb.org/27837 - http://www.osvdb.org/27838 - http://www.securityfocus.com/archive/1/442434/100/0/threaded - http://www.usolved.net/site/index.php
CVE ID: CVE-2006-4060 State: PUBLISHED Published: 2006-08-10T00:00:00 Last Updated: 2024-08-07T18:57:44.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in calendar.php in Visual Events Calendar 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cfg_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2141 - http://securityreason.com/securityalert/1364 - http://www.vupen.com/english/advisories/2006/3201 - http://www.securityfocus.com/bid/19395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28267 - http://securitytracker.com/id?1016646 - http://
bid/19395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28267 - http://securitytracker.com/id?1016646 - http://secunia.com/advisories/21391 - http://www.securityfocus.com/archive/1/442468/100/0/threaded
CVE ID: CVE-2006-4061 State: PUBLISHED Published: 2006-08-10T00:00:00 Last Updated: 2024-08-07T18:57:44.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Thomas Pequet phpPrintAnalyzer 1.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rep_par_rapport_racine parameter. NOTE: this issue has been disputed by third party researchers, stating that the rep_par_rapport_racine variable is initialized before use Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016652 - http://archives.neohapsis.com/archives/bugtraq/2006-08/030
tainer: References: - http://securitytracker.com/id?1016652 - http://archives.neohapsis.com/archives/bugtraq/2006-08/0305.html - http://www.securityfocus.com/bid/19397 - http://www.osvdb.org/29133 - http://www.securityfocus.com/archive/1/442492/100/0/threaded
CVE ID: CVE-2006-4062 State: PUBLISHED Published: 2006-08-10T00:00:00 Last Updated: 2024-08-07T18:57:45.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in usr/extensions/get_tree.inc.php in Dmitry Sheiko SAPID Shop 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[root_path] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3198 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28255 - http://secunia.com/advisories/21414 - https://www.exploit-db.com/exploits/2131
CVE ID: CVE-2006-4063 State: PUBLISHED Published: 2006-08-10T00:00:00 Last Updated: 2024-08-07T18:57:46.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Csaba Godor SAPID Blog Beta 2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) root_path parameter to (a) usr/extensions/get_blog_infochannel.inc.php, (b) usr/extensions/get_blog_meta_info.inc.php, or (c) usr/extensions/get_infochannel.inc.php; or the (2) GLOBALS[root_path] parameter to (d) usr/extensions/get_tree.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilitie
hp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28251 - https://www.exploit-db.com/exploits/2129 - http://www.vupen.com/english/advisories/2006/3196
CVE ID: CVE-2006-4064 State: PUBLISHED Published: 2006-08-10T00:00:00 Last Updated: 2024-08-07T18:57:45.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in YenerTurk Haber Script 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: it was later reported reported that 2.0 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19393 - http://www.securityfocus.com/archive/1/447653/100/0/threaded - http://www.securityfocus.com/bid/20333 - http://www.vupen.com/english/advisories/2006/3189 - https://www.exploit-db.com/exploits/2138
urityfocus.com/bid/20333 - http://www.vupen.com/english/advisories/2006/3189 - https://www.exploit-db.com/exploits/2138 - http://www.osvdb.org/27825 - http://secunia.com/advisories/21397 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28269
CVE ID: CVE-2006-4065 State: PUBLISHED Published: 2006-08-10T00:00:00 Last Updated: 2024-08-07T18:57:45.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko SAPID Gallery 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) root_path parameter to (a) usr/extensions/get_calendar.inc.php or the (2) GLOBALS[root_path] parameter to (b) usr/extensions/get_tree.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28254 - http://www.vupen.com/english/advisories/2006/319
its/2130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28254 - http://www.vupen.com/english/advisories/2006/3197 - http://secunia.com/advisories/21413
CVE ID: CVE-2006-4066 State: PUBLISHED Published: 2006-08-10T00:00:00 Last Updated: 2024-08-07T18:57:45.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Graphical Device Interface Plus library (gdiplus.dll) in Microsoft Windows XP SP2 allows context-dependent attackers to cause a denial of service (application crash) via certain images that trigger a divide-by-zero error, as demonstrated by a (1) .ico file, (2) .png file that crashes MSN Messenger, and (3) .jpg file that crashes Internet Explorer. NOTE: another researcher has not been able to reproduce this issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/
is issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3114 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28183 - http://www.securityfocus.com/archive/1/441875/100/0/threaded - http://www.securityfocus.com/bid/19301 - http://www.securityfocus.com/bid/19221 - http://www.securityfocus.com/archive/1/441548/100/100/threaded - http://www.securityfocus.com/archive/1/441723/100/100/threaded
CVE ID: CVE-2006-4067 State: PUBLISHED Published: 2006-08-10T00:00:00 Last Updated: 2024-08-07T18:57:46.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cake/libs/error.php in CakePHP before 1.1.7.3363 allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in a 404 ("Not Found") error page. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19372 - http://secunia.com/advisories/21383 - http://cakeforge.org/frs/shownotes.php?release_id=124 - http://www.vupen.com/english/advi
secunia.com/advisories/21383 - http://cakeforge.org/frs/shownotes.php?release_id=124 - http://www.vupen.com/english/advisories/2006/3172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28256
CVE ID: CVE-2006-4068 State: PUBLISHED Published: 2006-08-10T00:00:00 Last Updated: 2024-08-07T18:57:46.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pswd.js script relies on the client to calculate whether a username and password match hard-coded hashed values for a server, and uses a hashing scheme that creates a large number of collisions, which makes it easier for remote attackers to conduct offline brute force attacks. NOTE: this script might also allow attackers to generate the server-side "secret" URL without determining the original password, but this possibility was not discussed by the original researcher. Additional Analyst Notes: - CVE Program Container: Ref
ut this possibility was not discussed by the original researcher. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19333 - http://securityreason.com/securityalert/1362 - http://www.securityfocus.com/archive/1/442120
CVE ID: CVE-2006-4069 State: PUBLISHED Published: 2006-08-10T00:00:00 Last Updated: 2024-08-07T18:57:45.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Elaine Aquino Online Zone Journals (OZJournals) 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) m and (2) c parameters in index.php, (3) a search action, and (4) a "submit comment" action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19311 - http://www.securityfocus.com/archive/1/442035/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28188 - http://www.vupen.com/engli
hive/1/442035/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28188 - http://www.vupen.com/english/advisories/2006/3142 - http://www.youfucktard.com/blog/2006/08/02/ozjournal-v15-xss/ - http://secunia.com/advisories/21311
CVE ID: CVE-2006-4070 State: PUBLISHED Published: 2006-08-10T00:00:00 Last Updated: 2024-08-07T18:57:46.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Imendio Planner 0.13 allows user-assisted attackers to execute arbitrary code via format string specifiers in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1361 - http://www.securityfocus.com/archive/1/442439/100/0/threaded - http://www.securityfocus.com/bid/19307
CVE ID: CVE-2006-4071 State: PUBLISHED Published: 2006-08-10T01:00:00 Last Updated: 2024-08-07T18:57:45.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP, Server 2003, and possibly other versions, allows user-assisted attackers to cause a denial of service (application crash) via a crafted WMF file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28281 - http://www.securityfocus.com/archive/1/456585/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048530.html -
focus.com/archive/1/456585/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048530.html - http://www.securityfocus.com/bid/19365 - https://www.exploit-db.com/exploits/3111 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048547.html - http://www.vupen.com/english/advisories/2006/3180 - http://secunia.com/advisories/21377 - http://determina.blogspot.com/2007/01/whats-wrong-with-wmf.html - http://securityreason.com/securityalert/1353 - http://www.securityfocus.com/bid/21992 - http://www.securityfocus.com/archive/1/442426/100/0/threaded - http://www.securityfocus.com/archive/1/442420/100/0/threaded
CVE ID: CVE-2006-4072 State: PUBLISHED Published: 2006-08-11T01:00:00 Last Updated: 2024-08-07T18:57:44.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Club-Nuke [XP] 2.0 LCID 2048 allow remote attackers to execute arbitrary SQL commands via the (1) haber_id parameter to haber_detay.asp, and allow remote authenticated users to execute arbitrary SQL commands via the (2) menu_id parameter to menu.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3228 - http://www.securityfocus.com/bid/19442 - https://www.exploit-db.com/exploits/2150 - https://exchange.xforce.ibmcloud.com/v
tp://www.securityfocus.com/bid/19442 - https://www.exploit-db.com/exploits/2150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28291 - http://secunia.com/advisories/21431
CVE ID: CVE-2006-4073 State: PUBLISHED Published: 2006-08-11T01:00:00 Last Updated: 2024-08-07T18:57:46.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Fabian Hainz phpCC Beta 4.2 allow remote attackers to execute arbitrary PHP code via a URL in the base_dir parameter to (1) login.php, (2) reactivate.php, or (3) register.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/442428/100/0/threaded - http://www.solpotcrew.org/adv/solpot-adv-05.txt - https://www.exploit-db.com/exploits/2134 - http://www.securityfocus.com/bid/19376 - http://www.vupen.com/english/advisories/
s://www.exploit-db.com/exploits/2134 - http://www.securityfocus.com/bid/19376 - http://www.vupen.com/english/advisories/2006/3199 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28259
CVE ID: CVE-2006-4074 State: PUBLISHED Published: 2006-08-11T01:00:00 Last Updated: 2024-08-07T18:57:46.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib/tpl/default/main.php in the JD-Wiki Component (com_jd-wiki) 1.0.2 and earlier for Joomla!, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21389 - http://www.vupen.com/english/advisories/2006/3192 - http://www.securityfocus.com/bid/19373 - https://www.exploit-db.com/exploits/2125 - http://www.joom
visories/2006/3192 - http://www.securityfocus.com/bid/19373 - https://www.exploit-db.com/exploits/2125 - http://www.joomladeveloping.org/component/option%2Ccom_jd-wp/Itemid%2C29/p%2C33/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/28253
CVE ID: CVE-2006-4075 State: PUBLISHED Published: 2006-08-11T01:00:00 Last Updated: 2024-08-07T18:57:45.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Wim Fleischhauer docpile: wim's edition (docpile:we) 0.2.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the INIT_PATH parameter to (1) lib/folder.class.php, (2) lib/email.inc.php, (3) lib/document.class.php or (4) lib/auth.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3222 - http://www.osvdb.org/27862 - http://www.securityfocus.com/archive/1/442584/100/0/threaded - http
/advisories/2006/3222 - http://www.osvdb.org/27862 - http://www.securityfocus.com/archive/1/442584/100/0/threaded - https://www.exploit-db.com/exploits/2146 - http://www.osvdb.org/27859 - http://securityreason.com/securityalert/1367 - http://www.securityfocus.com/bid/19428 - http://www.osvdb.org/27861 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28273 - http://securitytracker.com/id?1016669 - http://www.osvdb.org/27860 - http://secunia.com/advisories/21412
CVE ID: CVE-2006-4076 State: PUBLISHED Published: 2006-08-11T01:00:00 Last Updated: 2024-08-07T18:57:45.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Wim Fleischhauer docpile: wim's edition (docpile:we) 0.2.2 allow remote attackers to execute arbitrary PHP code via a URL in the INIT_PATH parameter to (1) lib/access.inc.php, (2) lib/folders.inc.php, (3) lib/init.inc.php or (4) lib/templates.inc.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27864 - http://www.vupen.com/eng
. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27864 - http://www.vupen.com/english/advisories/2006/3222 - http://www.osvdb.org/27865 - http://www.osvdb.org/27866 - http://www.osvdb.org/27863 - http://secunia.com/advisories/21412
CVE ID: CVE-2006-4077 State: PUBLISHED Published: 2006-08-11T01:00:00 Last Updated: 2024-08-07T18:57:45.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in CheckUpload.php in Vincenzo Valvano Comet WebFileManager (CWFM) 0.9.1, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the Language parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19433 - http://secunia.com/advisories/21432 - http://www.bb-pcsecurity.de/Websecurity/301/org/Cwfm-0.9.1_%28Language%29_Remote_File_Inclusion.htm - http://www.vupen.com/english/advisories/2006/3221 - http://
01/org/Cwfm-0.9.1_%28Language%29_Remote_File_Inclusion.htm - http://www.vupen.com/english/advisories/2006/3221 - http://www.securityfocus.com/archive/1/442714/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28292
CVE ID: CVE-2006-4078 State: PUBLISHED Published: 2006-08-11T01:00:00 Last Updated: 2024-08-07T18:57:45.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: pm.php (aka the PM system) in DeluxeBB 1.08, and possibly earlier, allows remote attackers to bypass authentication by providing an arbitrary username in the membercookie cookie parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28270 - http://www.osvdb.org/27834 - http://securityreason.com/securityalert/1381 - http://www.securityfocus.com/archive/1/442464/100/0/threaded - http://www.vupen.com/english/advisories/2006/3188 - http://secunia.com/advisor
cus.com/archive/1/442464/100/0/threaded - http://www.vupen.com/english/advisories/2006/3188 - http://secunia.com/advisories/21387 - http://www.securityfocus.com/bid/19418
CVE ID: CVE-2006-4079 State: PUBLISHED Published: 2006-08-11T01:00:00 Last Updated: 2024-08-07T18:57:45.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in newpost.php in DeluxeBB 1.08, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the subject parameter (aka the topic title field). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28272 - http://securityreason.com/securityalert/1381 - http://www.securityfocus.com/archive/1/442464/100/0/threaded - http://www.osvdb.org/27833
CVE ID: CVE-2006-4080 State: PUBLISHED Published: 2006-08-11T01:00:00 Last Updated: 2024-08-07T18:57:45.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: DeluxeBB 1.08, and possibly earlier, uses cookies that include the MD5 hash of a password, which allows remote attackers to gain privileges by sniffing or cross-site scripting (XSS) and conduct password guessing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1381 - http://www.securityfocus.com/archive/1/442464/100/0/threaded
CVE ID: CVE-2006-4081 State: PUBLISHED Published: 2006-08-11T10:00:00 Last Updated: 2024-08-07T18:57:44.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote attackers to execute commands via shell metacharacters ("|" pipe symbol) in the file parameter. NOTE: the attack can be extended to arbitrary commands by the presence of CVE-2006-4000. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21258 - http://www.securityfocus.com/bid/19276 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28234 - http://www.securityfocus.com/archive/1/442132/1
bid/19276 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28234 - http://www.securityfocus.com/archive/1/442132/100/0/threaded - http://www.securityfocus.com/archive/1/442249/100/0/threaded - http://securityreason.com/securityalert/1363 - http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0110.html
CVE ID: CVE-2006-4082 State: PUBLISHED Published: 2006-08-11T10:00:00 Last Updated: 2024-08-07T18:57:45.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barracuda Spam Firewall (BSF), possibly 3.3.03.053, contains a hardcoded password for the admin account for logins from 127.0.0.1 (localhost), which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21258 - http://www.securityfocus.com/bid/19276 - http://www.securityfocus.com/archive/1/442249/100/0/threaded - http://securityreason.com/securityalert/1363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28235 - http://www.osvdb.org/29780 -
ason.com/securityalert/1363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28235 - http://www.osvdb.org/29780 - http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0110.html - http://www.kb.cert.org/vuls/id/199348