Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-3880 State: PUBLISHED Published: 2006-07-27T00:00:00 Last Updated: 2024-08-07T18:48:39.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of service (IP stack hang) via a continuous stream of packets on TCP port 135 that have incorrect TCP header checksums and random numbers in certain TCP header fields, as demonstrated by the Achilles Windows Attack Tool. NOTE: the researcher reports that the Microsoft Security Response Center has stated "Our investigation which has included code review, review of the TCPDump, and attempts on repro
sponse Center has stated "Our investigation which has included code review, review of the TCPDump, and attempts on reproing the issue on multiple fresh installs of various Windows Operating Systems have all resulted in non confirmation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19135 - http://www.securityfocus.com/archive/1/441007/100/0/threaded - http://securityreason.com/securityalert/1282
CVE ID: CVE-2006-3881 State: PUBLISHED Published: 2006-07-27T00:00:00 Last Updated: 2024-08-07T18:48:39.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter in a request for the top-level URI. NOTE: the id parameter in index.php, and the type and show parameters in a top action, are already covered by CVE-2006-1349; and the term parameter in a search action is already covered by CVE-2006-1806. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1284 - http://www.securi
l Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1284 - http://www.securityfocus.com/archive/1/441000/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27925
CVE ID: CVE-2006-3882 State: PUBLISHED Published: 2006-07-27T00:00:00 Last Updated: 2024-08-07T18:48:39.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shalwan MusicBox 2.3.4 and earlier allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1284 - http://www.securityfocus.com/archive/1/441000/100/0/threaded
CVE ID: CVE-2006-3883 State: PUBLISHED Published: 2006-07-27T00:00:00 Last Updated: 2024-08-07T18:48:39.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Gonafish LinksCaffe 3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the tablewidth parameter in (a) counter.php; (2) the newdays parameter in (b) links.php; and the (3) tableborder, (4) menucolor, (5) textcolor, and (6) bodycolor parameters in (c) menu.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19149 - http://secunia.com/advisories/21212 - http://www.osvdb.org/27520 - http://www.vupen
://www.securityfocus.com/bid/19149 - http://secunia.com/advisories/21212 - http://www.osvdb.org/27520 - http://www.vupen.com/english/advisories/2006/2983 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27960 - http://www.securityfocus.com/archive/1/441087/100/0/threaded - http://www.osvdb.org/27521 - http://securityreason.com/securityalert/1287 - http://securitytracker.com/id?1016584 - http://www.osvdb.org/27519
CVE ID: CVE-2006-3884 State: PUBLISHED Published: 2006-07-27T00:00:00 Last Updated: 2024-08-07T18:48:39.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) offset and (2) limit parameters, (3) newdays parameter in a new action, and the (4) link_id parameter in a deadlink action. NOTE: this issue can also be used for path disclosure by a forced SQL error, or to modify PHP files using OUTFILE. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27962 - http://www.security
- CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27962 - http://www.securityfocus.com/bid/19149 - http://www.osvdb.org/27518 - http://secunia.com/advisories/21212 - http://www.vupen.com/english/advisories/2006/2983 - http://www.securityfocus.com/archive/1/441087/100/0/threaded - http://securityreason.com/securityalert/1287 - http://securitytracker.com/id?1016584 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27961
CVE ID: CVE-2006-3885 State: PUBLISHED Published: 2006-07-27T00:00:00 Last Updated: 2024-08-07T18:48:39.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Check Point Firewall-1 R55W before HFA03 allows remote attackers to read arbitrary files via an encoded .. (dot dot) in the URL on TCP port 18264. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/441495/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27937 - http://securityreason.com/securityalert/1290 - http://www.securityfocus.com/archive/1/440990/100/0/threaded - http://www.securityfocus.com/bid/19136 - http://s
/1290 - http://www.securityfocus.com/archive/1/440990/100/0/threaded - http://www.securityfocus.com/bid/19136 - http://secunia.com/advisories/21200 - http://securitytracker.com/id?1016563 - http://www.sec-tec.co.uk/vulnerability/r55w_directory_traversal.html - http://www.vupen.com/english/advisories/2006/2965
CVE ID: CVE-2006-3886 State: PUBLISHED Published: 2006-07-27T00:00:00 Last Updated: 2024-08-07T18:48:39.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter in a viewgallery action in a request for the top-level URI. NOTE: the start parameter/search action is already covered by CVE-2006-1807, and the show parameter/top action is already covered by CVE-2006-1360. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1284 - http://www.securityfocus.com/archive/1/441000/100/0/threaded - ht
nces: - http://securityreason.com/securityalert/1284 - http://www.securityfocus.com/archive/1/441000/100/0/threaded - http://www.securityfocus.com/bid/19129 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27926
CVE ID: CVE-2006-3887 State: PUBLISHED Published: 2006-10-10T23:00:00 Last Updated: 2024-08-07T18:48:39.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in AOL You've Got Pictures (YGP) Screensaver ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3967 - http://www.kb.cert.org/vuls/id/154641 - http://www.kb.cert.org/vuls/id/MIMG-6MUUJ8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29411 - http://securitytracker.com/id?1017024 - http://www.securityfocus.com/bid/20425 - http://secunia.com/advisories/22304
CVE ID: CVE-2006-3888 State: PUBLISHED Published: 2006-10-10T23:00:00 Last Updated: 2024-08-07T18:48:39.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in AOL You've Got Pictures (YGP) Pic Downloader YGPPDownload ActiveX control (AOL.PicDownloadCtrl.1, YGPPicDownload.dll), as used in America Online 9.0 Security Edition, allows remote attackers to execute arbitrary code via a long argument to the SetAlbumName method. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3967 - http://www.securityfocus.com/bid/20472 - http://www.kb.cert.org/vuls/id/MIMG-6MUUJ8 - http://securitytracker.com/id?1017024 - http:
securityfocus.com/bid/20472 - http://www.kb.cert.org/vuls/id/MIMG-6MUUJ8 - http://securitytracker.com/id?1017024 - http://www.kb.cert.org/vuls/id/661524 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=420 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29410 - http://www.securityfocus.com/bid/20425 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29494 - http://secunia.com/advisories/22304
CVE ID: CVE-2006-3890 State: PUBLISHED Published: 2006-11-21T22:00:00 Last Updated: 2024-08-07T18:48:39.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, allows remote attackers to execute arbitrary code via a long FilePattern attribute in a WZFILEVIEW object, a different vulnerability than CVE-2006-5198. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/225217 - http://secunia.com/advisories/22891 - http://www.securityfocus.com/bid/21060 - http://www.securityfocus.com/archive/1/451566/1
/secunia.com/advisories/22891 - http://www.securityfocus.com/bid/21060 - http://www.securityfocus.com/archive/1/451566/100/0/threaded - https://www.exploit-db.com/exploits/2785 - http://www.securityfocus.com/bid/21108 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067
CVE ID: CVE-2006-3892 State: PUBLISHED Published: 2007-03-02T19:00:00 Last Updated: 2024-08-07T18:48:39.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Management Console server in EMC NetWorker (formerly Legato NetWorker) 7.3.2 before Jumbo Update 1 uses weak authentication, which allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24362 - http://osvdb.org/33853 - http://www.kb.cert.org/vuls/id/MIMG-6VMLWA - ftp://ftp.legato.com/pub/NetWorker/Updates/732JumboUpdate1/README%20732%20Jumbo%20Update%201.txt - http://www.securityfocus.com/bid/22789 - http://www.securitytracker.co
boUpdate1/README%20732%20Jumbo%20Update%201.txt - http://www.securityfocus.com/bid/22789 - http://www.securitytracker.com/id?1017724 - http://www.vupen.com/english/advisories/2007/0816 - http://www.kb.cert.org/vuls/id/498553
CVE ID: CVE-2006-3893 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T18:48:39.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the ActiveX controls in Newtone ImageKit 5 before Fix 30 and 6 before Fix 40, as used in CASIO Photo Loader software before 3.01 and possibly other software, allow remote attackers to execute arbitrary code via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4795 - http://www.securityfocus.com/bid/21375 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30680 - http://secunia.com/advisories/23286 - http://www
id/21375 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30680 - http://secunia.com/advisories/23286 - http://www.vupen.com/english/advisories/2006/4794 - http://www.kb.cert.org/vuls/id/210697
CVE ID: CVE-2006-3894 State: PUBLISHED Published: 2007-05-22T19:00:00 Last Updated: 2024-08-07T18:48:39.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RSA Crypto-C before 6.3.1 and Cert-C before 2.8 libraries, as used by RSA BSAFE, multiple Cisco products, and other products, allows remote attackers to cause a denial of service via malformed ASN.1 objects. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/cert/JVNVU%23754281/index.html - http://secunia.com/advisories/25364 - http://www.vupen.com/english/advisories/2007/1945 - http://secunia.com/advisories/25343 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
- http://secunia.com/advisories/25343 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5778 - http://www.vupen.com/english/advisories/2007/1909 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080847c5d.shtml - http://www.securityfocus.com/bid/24104 - http://www.kb.cert.org/vuls/id/754281 - http://www.vupen.com/english/advisories/2007/1908 - http://secunia.com/advisories/25399 - http://www.securitytracker.com/id?1018095 - https://secure-support.novell.com/KanisaPlatform/Publishing/97/3590033_f.SAL_Public.html - http://osvdb.org/35338 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34430
CVE ID: CVE-2006-3896 State: PUBLISHED Published: 2006-12-19T19:00:00 Last Updated: 2024-08-07T18:48:39.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NeoScale Systems CryptoStor 700 series appliance before 2.6 relies on client-side ActiveX code for smartcard authentication, which allows remote attackers to bypass smartcard authentication, and gain access if able to present a valid username and password, by disabling ActiveX. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5063 - http://secunia.com/advisories/23430 - http://www.kb.cert.org/vuls/id/339004 - http://securitytracker.com/id?1017396 - http://www.sec
ia.com/advisories/23430 - http://www.kb.cert.org/vuls/id/339004 - http://securitytracker.com/id?1017396 - http://www.securityfocus.com/bid/21652
CVE ID: CVE-2006-3897 State: PUBLISHED Published: 2006-07-27T10:00:00 Last Updated: 2024-08-07T18:48:39.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (application crash) by creating an NMSA.ASFSourceMediaDescription.1 ActiveX object with a long dispValue property. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19114 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27930 - http://www.osvdb.org/27232 - http://browserfun.blogspot.com/2006/07/mobb-23-nmsaasfsourcemediadescription.html - http://www.vupen.com
vdb.org/27232 - http://browserfun.blogspot.com/2006/07/mobb-23-nmsaasfsourcemediadescription.html - http://www.vupen.com/english/advisories/2006/2953
CVE ID: CVE-2006-3898 State: PUBLISHED Published: 2006-07-27T10:00:00 Last Updated: 2024-08-07T18:48:39.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the Click method of the Internet.HHCtrl.1 ActiveX object before initializing the URL, which triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27231 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27929 - http://www.vupen.com/english/advisories/2006/2952 - http://browserfun.blogspot.com/2006/07/mobb-22-internethhctrl-click.ht
tp://www.vupen.com/english/advisories/2006/2952 - http://browserfun.blogspot.com/2006/07/mobb-22-internethhctrl-click.html - http://www.securityfocus.com/bid/19109
CVE ID: CVE-2006-3899 State: PUBLISHED Published: 2006-07-27T10:00:00 Last Updated: 2024-08-07T18:48:39.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the stringToBinary function of the CEnroll.CEnroll.2 ActiveX object with a long second argument, which triggers an invalid memory access inside the SysAllocStringLen function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19102 - http://www.vupen.com/english/advisories/2006/2916 - http://www.osvdb.org/27230 - https://exchange.xforce.ibmcloud.co
2 - http://www.vupen.com/english/advisories/2006/2916 - http://www.osvdb.org/27230 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27884 - http://browserfun.blogspot.com/2006/07/mobb-21-cenroll-stringtobinary.html
CVE ID: CVE-2006-3900 State: PUBLISHED Published: 2006-07-27T10:00:00 Last Updated: 2024-08-07T18:48:39.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in guestbook.php in TP-Book 1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016583 - http://marc.info/?l=full-disclosure&m=115385461709949&w=2 - http://www.osvdb.org/displayvuln.php?osvdb_id=27515 - http://secunia.com/advisories/21205 - http://www.securityfocus.com/archive/1/441192/100/0/threaded - http://www.securityfocus.com/bid/19159
dvisories/21205 - http://www.securityfocus.com/archive/1/441192/100/0/threaded - http://www.securityfocus.com/bid/19159 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27964 - http://www.vupen.com/english/advisories/2006/2980
CVE ID: CVE-2006-3901 State: PUBLISHED Published: 2006-07-27T10:00:00 Last Updated: 2024-08-07T18:48:39.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Tumbleweed Email Firewall (EMF) allow remote attackers to execute arbitrary code via an email attachment with an LHA archive that contains a (1) file or (2) directory with a long LHA extended header, (3) an LHA archive in which the "temporary pathname" field for decompressed output is greater than 2 bytes, or (4) an LHA archive with a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/441497/100/0/threaded - http://secu
Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/441497/100/0/threaded - http://secunia.com/advisories/21194 - http://www.hustlelabs.com/advisories/04072006_tweed.pdf - http://www.osvdb.org/27495 - http://marc.info/?l=full-disclosure&m=115378437918939&w=2 - http://www.securityfocus.com/bid/19146 - http://www.vupen.com/english/advisories/2006/2970
CVE ID: CVE-2006-3902 State: PUBLISHED Published: 2006-07-27T22:00:00 Last Updated: 2024-08-07T18:48:39.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites 2.0.9 allows remote attackers to inject arbitrary web script or HTML via the i_cat parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21141 - http://www.vupen.com/english/advisories/2006/2913
CVE ID: CVE-2006-3903 State: PUBLISHED Published: 2006-07-27T22:00:00 Last Updated: 2024-08-07T18:48:39.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in (1) index.php and (2) admin.php in myWebland MyBloggie 2.1.3 allows remote attackers to hijack sessions and conduct cross-site scripting (XSS) attacks via a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046094.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26484 - http://www.securityfocus.com/archive/1/441356/100/0/threaded - http://www.osvdb.org/displayvuln.php?osvdb_id=26557 - http://www.osvdb.o
rityfocus.com/archive/1/441356/100/0/threaded - http://www.osvdb.org/displayvuln.php?osvdb_id=26557 - http://www.osvdb.org/displayvuln.php?osvdb_id=26558 - http://marc.info/?l=bugtraq&m=114791192612460&w=2
CVE ID: CVE-2006-3904 State: PUBLISHED Published: 2006-07-27T22:00:00 Last Updated: 2024-08-07T18:48:39.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in manager/index.php in Etomite CMS 0.6.1 and earlier, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19150 - http://www.etomite.org/forums/index.php?showtopic=5706&st=0&p=35307&#entry35307 - http://secunia.com/advisories/21167 - http://www.vupen.com/english/advisories/2006/2961 - https://www.exploit-db.com/exploits/2071 - https://ex
sories/21167 - http://www.vupen.com/english/advisories/2006/2961 - https://www.exploit-db.com/exploits/2071 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27943 - http://www.osvdb.org/27485 - http://retrogod.altervista.org/etomite_061_sql.html - http://securitytracker.com/id?1016594
CVE ID: CVE-2006-3905 State: PUBLISHED Published: 2006-07-27T22:00:00 Last Updated: 2024-08-07T18:48:39.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Webland MyBloggie 2.1.3 allows remote attackers to execute arbitrary SQL commands via the (1) post_id parameter in index.php and (2) search function. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046094.html - http://www.securityfocus.com/archive/1/441356/100/0/threaded - http://www.osvdb.org/displayvuln.php?osvdb_id=26559 - http://www.osvdb.org/displayvuln.php?osvdb_id=26560 - http://www.h4cky0u.org/advisories/HYSA-20
uln.php?osvdb_id=26559 - http://www.osvdb.org/displayvuln.php?osvdb_id=26560 - http://www.h4cky0u.org/advisories/HYSA-2006-008-mybloggie.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/26486 - http://marc.info/?l=bugtraq&m=114791192612460&w=2
CVE ID: CVE-2006-3906 State: PUBLISHED Published: 2006-07-27T22:00:00 Last Updated: 2024-08-07T18:48:39.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that this is due to a design weakness of the IKE version 1 protocol, in which case other vendors and implementations would also be affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.nta-monitor.com/pos
would also be affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.nta-monitor.com/posts/2006/07/cisco-concentrator-dos.html - http://www.securityfocus.com/bid/19176 - http://www.securityfocus.com/archive/1/441203/100/0/threaded - http://www.osvdb.org/29068 - http://archives.neohapsis.com/archives/bugtraq/2006-07/0531.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5299 - http://securitytracker.com/id?1016582 - http://securityreason.com/securityalert/1293 - http://www.cisco.com/en/US/tech/tk583/tk372/tsd_technology_security_response09186a00806f33d4.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27972
CVE ID: CVE-2006-3907 State: PUBLISHED Published: 2006-07-27T22:00:00 Last Updated: 2024-08-07T18:48:39.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SpeedStream 2624 allows remote attackers to cause a denial of service (device hang) by sending a crafted packet to the web administrative interface. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1292 - http://www.securityfocus.com/archive/1/440985/100/0/threaded - http://www.vupen.com/english/advisories/2006/2969 - http://www.digitalarmaments.com/2006310665340982.html - http://securitytracker.com/id?1016578 - http://secunia.com/advisories/21195 - https://exchan
com/2006310665340982.html - http://securitytracker.com/id?1016578 - http://secunia.com/advisories/21195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27948 - http://www.securityfocus.com/bid/19132