Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-3330 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:08.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22874 - http://secunia.com/advisories/17887 - http://marc.info/?l=bugtraq&m=113028858316430&w=2 - https://
lnerabilities/22874 - http://secunia.com/advisories/17887 - http://marc.info/?l=bugtraq&m=113028858316430&w=2 - https://svn.ampache.org/branches/3.3.1/docs/CHANGELOG - http://secunia.com/advisories/17455 - http://www.osvdb.org/20316 - http://securityreason.com/securityalert/117 - http://www.securityfocus.com/bid/15213 - http://sourceforge.net/project/shownotes.php?release_id=375385 - http://securitytracker.com/id?1015104 - http://marc.info/?l=bugtraq&m=113062897231412&w=2 - http://www.vupen.com/english/advisories/2005/2727 - http://sourceforge.net/project/shownotes.php?release_id=368750 - http://www.vupen.com/english/advisories/2005/2335 - http://secunia.com/advisories/17330 - http://secunia
ase_id=368750 - http://www.vupen.com/english/advisories/2005/2335 - http://secunia.com/advisories/17330 - http://secunia.com/advisories/17779 - http://www.vupen.com/english/advisories/2005/2202
CVE ID: CVE-2005-3331 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:07.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: viewpatch in mgdiff 1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22846 - http://www.securityfocus.com/bid/15180 - http://secunia.com/advisories/17299 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=335188
CVE ID: CVE-2005-3332 State: PUBLISHED Published: 2005-10-27T04:00:00Z Last Updated: 2024-09-16T17:43:35.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in admin/define.inc.php in Belchior Foundry vCard 2.9 allows remote attackers to execute arbitrary PHP code via the match parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15207
CVE ID: CVE-2005-3333 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:08.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in eBASEweb 3.0 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15171 - http://secunia.com/advisories/17301 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22834 - http://www.osvdb.org/20249 - http://securitytracker.com/id?1015089 - http://www.ebase.co.jp/company/security
CVE ID: CVE-2005-3334 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:08.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Flyspray 0.9.7 through 0.9.8 (devel) allows remote attackers to inject arbitrary web script or HTML via the (1) PHPSESSID, (2) task, (3) string, (4) type, (5) serv, (6) due, (7) dev, and (8) sort2 parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22889 - http://flyspray.rocks.cc/bts/task/703 - http://www.securityfocus.com/bid/15209 - http://secunia.com/advisories/18606 - http://www.debian.org
s.cc/bts/task/703 - http://www.securityfocus.com/bid/15209 - http://secunia.com/advisories/18606 - http://www.debian.org/security/2006/dsa-953 - http://secunia.com/advisories/17316 - http://www.osvdb.org/20326 - http://lostmon.blogspot.com/2005/10/flyspray-bug-killer-multiple-variable.html
CVE ID: CVE-2005-3335 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:08.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the t_core_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.mantisbt.org/changelog_page.php - http://www.debian.org/security/2005/dsa-905 - http://securityreason.com/securityalert/121 - http://www.vupen.com/english/advisories/2005/2221 - http://secunia.com/advisories/16506 - http://secunia.com/a
ert/121 - http://www.vupen.com/english/advisories/2005/2221 - http://secunia.com/advisories/16506 - http://secunia.com/advisories/17654 - http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml - http://secunia.com/secunia_research/2005-46/advisory/ - http://secunia.com/advisories/17362 - http://www.securityfocus.com/bid/15212 - http://secunia.com/advisories/16818 - http://securitytracker.com/id?1015110 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22886 - http://www.securityfocus.com/bid/15227
CVE ID: CVE-2005-3336 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:08.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.mantisbt.org/changelog_page.php - http://www.debian.org/security/2005/dsa-905 - http://sourceforge.net/project/shownotes.php?release_id=362673 - http://www.osvdb.org/20324 - http://www.vupen.com/english/advisories/2005/2221 - http://secunia.com/advisories/16506 - http://secunia.com/advisories/17654 - http://www.gento
lish/advisories/2005/2221 - http://secunia.com/advisories/16506 - http://secunia.com/advisories/17654 - http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml - http://secunia.com/advisories/17362 - http://secunia.com/advisories/16818 - http://www.securityfocus.com/bid/15227
CVE ID: CVE-2005-3337 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:08.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Mantis before 0.19.3 allow remote attackers to inject arbitrary web script or HTML via (1) unknown vectors involving Javascript and (2) mantis/view_all_set.php. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.mantisbt.org/changelog_page.php - http://sourceforge.net/project/shownotes.php?release_id=362673 - http://www.osvdb.org/20321 - http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml - http://secunia.com/advisories/17362
CVE ID: CVE-2005-3338 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:08.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display the real email addresses of users. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.mantisbt.org/changelog_page.php - http://www.debian.org/security/2005/dsa-905 - http://secunia.com/advisories/16506 - http://secunia.com/advisories/17654 - http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml - http://secunia.com/advisories/17362 - http://www.securityfocus.com/bid/15227
CVE ID: CVE-2005-3339 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:10:08.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.mantisbt.org/changelog_page.php - http://www.debian.org/security/2005/dsa-905 - http://secunia.com/advisories/16506 - http://secunia.com/advisories/17654 - http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml - http://secunia.com/advisories/17362 - http://www.securityfocus.com/bid/15227
CVE ID: CVE-2005-3340 State: PUBLISHED Published: 2006-01-19T01:00:00 Last Updated: 2024-08-07T23:10:08.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tuxpaint-import.sh script in Tux Paint (tuxpaint) 0.9.14 and earlier creates temporary files insecurely, with unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16250 - http://www.debian.org/security/2005/dsa-941 - http://secunia.com/advisories/18474 - http://www.vupen.com/english/advisories/2006/0193 - http://secunia.com/advisories/18476 - http://www.osvdb.org/22453 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24128 - https://usn.u
visories/18476 - http://www.osvdb.org/22453 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24128 - https://usn.ubuntu.com/243-1/ - http://secunia.com/advisories/18475
CVE ID: CVE-2005-3341 State: PUBLISHED Published: 2005-12-27T23:00:00 Last Updated: 2024-08-07T23:10:08.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: DHIS tools DNS package (dhis-tools-dns) before 5.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files created by (1) register-q.sh and (2) register-p.sh. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-928 - http://www.osvdb.org/21934 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23859 - http://www.securityfocus.com/bid/16065 - http://secunia.com/advisories/18228 - http://secunia.com/advisories/18227 - http://www.osvdb.org/21
ocus.com/bid/16065 - http://secunia.com/advisories/18228 - http://secunia.com/advisories/18227 - http://www.osvdb.org/21935
CVE ID: CVE-2005-3342 State: PUBLISHED Published: 2006-02-14T20:00:00 Last Updated: 2024-08-07T23:10:08.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files in (1) lib/toascii.nw and (2) shell/roff.mm. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200602-14.xml - http://secunia.com/advisories/18812 - http://www.ubuntu.com/usn/usn-254-1 - http://www.vupen.com/english/advisories/2006/0547 - http://secunia.com/advisories/18809 - http://secunia.com/advisories/18967 - http://secunia.com/advisories/19027 - http://ww
p://secunia.com/advisories/18809 - http://secunia.com/advisories/18967 - http://secunia.com/advisories/19027 - http://www.debian.org/security/2006/dsa-968 - http://www.securityfocus.com/bid/16610
CVE ID: CVE-2005-3343 State: PUBLISHED Published: 2005-12-27T23:00:00 Last Updated: 2024-08-07T23:10:08.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: tkdiff before 4.1.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=380030&group_id=64960 - http://www.securityfocus.com/bid/16064 - http://www.debian.org/security/2005/dsa-927 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23858 - http://secunia.com/advisories/18083 - http://www.osvdb.org/21933 - http://secunia.com/advisories/18215 - http://www.mandriva.com/s
unia.com/advisories/18083 - http://www.osvdb.org/21933 - http://secunia.com/advisories/18215 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:001 - http://securitytracker.com/id?1015421
CVE ID: CVE-2005-3344 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-07T23:10:08.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default installation of Horde 3.0.4 contains an administrative account with a blank password, which allows remote attackers to gain access. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24576 - http://www.securityfocus.com/bid/15337/ - http://www.networkscanning.com/Horde-Default-Admin-Password-Vulnerability-VSS_20171.html - http://www.osvdb.org/24117 - http://www.debian.org/security/2005/dsa-884
CVE ID: CVE-2005-3345 State: PUBLISHED Published: 2005-12-28T22:00:00 Last Updated: 2024-08-07T23:10:08.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: rssh 2.0.0 through 2.2.3 allows local users to bypass access restrictions and gain root privileges by using the rssh_chroot_helper command to chroot to an external directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200512-15.xml - http://securityreason.com/securityalert/308 - http://secunia.com/advisories/18237 - http://www.pizzashack.org/rssh/security.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/23854 - http://bugs.debian.org/cgi-bin/bugrepor
sh/security.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/23854 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=344424 - http://www.securityfocus.com/bid/16050 - http://secunia.com/advisories/18224
CVE ID: CVE-2005-3346 State: PUBLISHED Published: 2005-11-20T21:00:00 Last Updated: 2024-08-07T23:10:08.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows local users to inject arbitrary environment variables, such as LD_PRELOAD, via pathname arguments of the form "$VAR/EVAR=arg", which cause the EVAR portion to be appended to a buffer returned by a getenv function call. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20720 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23091 - http://secunia.com/advisories/17967 - http://bugs.debian.org/cgi-
//exchange.xforce.ibmcloud.com/vulnerabilities/23091 - http://secunia.com/advisories/17967 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=338312 - http://www.debian.org/security/2005/dsa-918 - http://www.securityfocus.com/bid/15370 - http://secunia.com/advisories/17527 - http://pulltheplug.org/users/core/files/x_osh3.sh - http://www.vupen.com/english/advisories/2005/2378
CVE ID: CVE-2005-3347 State: PUBLISHED Published: 2005-11-18T02:00:00 Last Updated: 2024-08-07T23:10:08.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egrouwpware before 1.0.0.009, allow remote attackers to include arbitrary files via .. (dot dot) sequences in the (1) sensor_program parameter or the (2) _SERVER[HTTP_ACCEPT_LANGUAGE] parameter, which overwrites an internal variable, a variant of CVE-2003-0536. NOTE: due to a typo in an advisory, an issue in osh was inadvertently linked to this identifier; the proper identifier for the osh is
a typo in an advisory, an issue in osh was inadvertently linked to this identifier; the proper identifier for the osh issue is CVE-2005-3346. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17616 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:212 - http://www.securityfocus.com/bid/15396 - http://www.gentoo.org/security/en/glsa/glsa-200511-18.xml - http://www.securityfocus.com/bid/15414 - http://secunia.com/advisories/17698 - http://www.debian.org/security/2005/dsa-898 - http://secunia.com/advisories/17441 - http://www.securityfocus.com/archive/1/416543 - http://www.debian.org/security/2005/dsa-897 - http://secunia.com/advisories/1
//www.securityfocus.com/archive/1/416543 - http://www.debian.org/security/2005/dsa-897 - http://secunia.com/advisories/17620 - http://secunia.com/advisories/17584 - http://www.hardened-php.net/advisory_212005.81.html - http://secunia.com/advisories/17570 - http://www.debian.org/security/2005/dsa-899 - http://secunia.com/advisories/17643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23107
CVE ID: CVE-2005-3348 State: PUBLISHED Published: 2005-11-18T02:00:00 Last Updated: 2024-08-07T23:10:08.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17616 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:212 - http://www.securityfocus.com/bid/15396 - http://www.gentoo.org/security/en/glsa/glsa-200511-
ories?name=MDKSA-2005:212 - http://www.securityfocus.com/bid/15396 - http://www.gentoo.org/security/en/glsa/glsa-200511-18.xml - http://www.securityfocus.com/bid/15414 - http://secunia.com/advisories/17698 - http://www.debian.org/security/2005/dsa-898 - http://secunia.com/advisories/17441 - http://www.securityfocus.com/archive/1/416543 - http://www.debian.org/security/2005/dsa-897 - http://secunia.com/advisories/17620 - http://secunia.com/advisories/17584 - http://www.hardened-php.net/advisory_212005.81.html - http://secunia.com/advisories/17570 - http://www.debian.org/security/2005/dsa-899 - http://secunia.com/advisories/17643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23107
CVE ID: CVE-2005-3349 State: PUBLISHED Published: 2005-11-18T22:00:00 Last Updated: 2024-08-07T23:10:07.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Gnump3d before 2.9.8 allows local users to modify or delete arbitrary files via a symlink attack on the index.lok temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_28_sr.html - http://www.securityfocus.com/bid/15497 - http://secunia.com/advisories/17647 - http://www.vupen.com/english/advisories/2005/2489 - http://www.gnu.org/software/gnump3d/attacks.html#temporary-files - http://www.gentoo.org/security/en/glsa/glsa-200511-16.xml - http://ww
rg/software/gnump3d/attacks.html#temporary-files - http://www.gentoo.org/security/en/glsa/glsa-200511-16.xml - http://www.gnu.org/software/gnump3d/ChangeLog - http://secunia.com/advisories/17646 - http://secunia.com/advisories/17656 - http://www.debian.org/security/2005/dsa-901
CVE ID: CVE-2005-3350 State: PUBLISHED Published: 2005-11-04T00:00:00 Last Updated: 2024-08-07T23:10:07.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17508 - http://www.osvdb.org/20471 - http://secunia.com/advisories/17438 - http://www.securityfocus.com/archive/1/428059/30/6300/threaded - http://secunia.com/advisories/17482 - http://bugs.gentoo.org/show_bug.cgi?id=109997 - http://secunia.com/advisories/17442 - http://www.
com/advisories/17482 - http://bugs.gentoo.org/show_bug.cgi?id=109997 - http://secunia.com/advisories/17442 - http://www.securityfocus.com/bid/15299 - http://secunia.com/advisories/34872 - http://www.redhat.com/support/errata/RHSA-2005-828.html - http://secunia.com/advisories/17559 - http://www.ubuntulinux.org/usn/usn-214-1 - http://secunia.com/advisories/17488 - http://www.redhat.com/support/errata/RHSA-2009-0444.html - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00771.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=171413 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9314 - http://www.gentoo.org/security/en/glsa/
cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9314 - http://www.gentoo.org/security/en/glsa/glsa-200511-03.xml - http://sourceforge.net/project/shownotes.php?release_id=364493 - http://www.vupen.com/english/advisories/2005/2295 - http://secunia.com/advisories/17436 - http://www.debian.org/security/2005/dsa-890 - http://www.securityfocus.com/archive/1/428059/100/0/threaded - http://scary.beasts.org/security/CESA-2005-007.txt - http://securitytracker.com/id?1015149 - http://secunia.com/advisories/17462 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:207 - http://secunia.com/advisories/17497 - http://secunia.com/advisories/35164
CVE ID: CVE-2005-3351 State: PUBLISHED Published: 2005-11-20T21:00:00 Last Updated: 2024-08-07T23:10:08.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients ("To" addresses), which triggers a bus error in Perl. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23048 - http://secunia.com/advisories/17518/ - http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4570 - http://secunia.com/advisories/17666/ - http://secunia.com/advisories/17626/ - http://secunia.com/advisories/19158 - http://secunia.com/advisori
sories/17666/ - http://secunia.com/advisories/17626/ - http://secunia.com/advisories/19158 - http://secunia.com/advisories/17386/ - http://www.securityfocus.com/bid/15373 - http://lwn.net/Alerts/159300/ - http://www.gossamer-threads.com/lists/spamassassin/devel/62649 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11125 - http://www.redhat.com/support/errata/RHSA-2006-0129.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:221 - http://www.vupen.com/english/advisories/2005/2364 - http://osvdb.org/11581 - http://www.novell.com/linux/security/advisories/2005_27_sr.html - http://secunia.com/advisories/17877
CVE ID: CVE-2005-3352 State: PUBLISHED Published: 2005-12-13T20:00:00 Last Updated: 2024-08-07T23:10:08.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17319 - http://www.vupen.com/english/advisories/2006/3995 - http://secunia.com/advisories/18526 - http://secunia.com/advisories/20046 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102
om/advisories/18526 - http://secunia.com/advisories/20046 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102662-1 - http://securitytracker.com/id?1015344 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01428449 - http://www.debian.org/security/2006/dsa-1167 - http://secunia.com/advisories/18339 - http://www.securityfocus.com/archive/1/450321/100/0/threaded - http://www.vupen.com/english/advisories/2006/4300 - http://secunia.com/advisories/21744 - http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html - http://secunia.com/advisories/18340 - http://www.vupen.com/english/advisories/2008/1246/references - http://www.securityfocus.com/archive/
/advisories/18340 - http://www.vupen.com/english/advisories/2008/1246/references - http://www.securityfocus.com/archive/1/450321/100/0/threaded - http://www.securityfocus.com/archive/1/450315/100/0/threaded - http://secunia.com/advisories/20670 - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://secunia.com/advisories/23260 - http://rhn.redhat.com/errata/RHSA-2006-0159.html - http://secunia.com/advisories/18008 - http://www.novell.com/linux/security/advisories/2006_43_apache.html - http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html - http://www.vupen.com/english/advisories/2006/2423 - http://www.vupen.com/english/advisories/2008/0924/references - http://wwwne