Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-1695 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) rss_url parameter to magpie_slashbox.php, or the url parameter to (2) magpie_simple.php or (3) magpie_debug.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111670482500552&w=2 - http://marc.info/?l=bugtraq&m=111670506926649&w=2 - http://news.postnuke.com/modules.php?op=modload&name=News&file=arti
http://marc.info/?l=bugtraq&m=111670506926649&w=2 - http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2691
CVE ID: CVE-2005-1696 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.750 and 0.760RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) skin or (2) paletteid parameter to demo.php in the Xanthia module, or (3) the serverName parameter to config.php in the Multisites (aka NS-Multisites) module. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111670506926649&w=2 - http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2691
CVE ID: CVE-2005-1697 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allows remote attackers to obtain sensitive information via a direct request to simple_smarty.php, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111670482500552&w=2
CVE ID: CVE-2005-1698 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostNuke 0.750 and 0.760RC3 allows remote attackers to obtain sensitive information via a direct request to (1) theme.php or (2) Xanthia.php in the Xanthia module, (3) user.php, (4) thelang.php, (5) text.php, (6) html.php, (7) menu.php, (8) finclude.php, or (9) button.php in the pnblocks directory in the Blocks module, (10) config.php in the NS-Multisites (aka Multisites) module, or (11) xmlrpc.php, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=
eals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111670506926649&w=2
CVE ID: CVE-2005-1699 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pnadminapi.php in the Xanthia module in PostNuke 0.760-RC3 allows remote administrators to read arbitrary files via a .. (dot dot) in the skin parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111670586322172&w=2
CVE ID: CVE-2005-1700 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pnadmin.php in the Xanthia module in PostNuke 0.760-RC3 allows remote administrators to execute arbitrary SQL commands via the riga[0] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111670586322172&w=2
CVE ID: CVE-2005-1701 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PortailPHP 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to the (1) News, (2) File, (3) Liens, or (4) Faq modules. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13708 - http://securitytracker.com/id?1014036 - http://marc.info/?l=bugtraq&m=111686643823025&w=2
CVE ID: CVE-2005-1702 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Warrior Kings: Battles 1.23 and earlier and Warrior Kings 1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a nickname. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014040 - http://aluigi.altervista.org/adv/warkings-adv.txt - http://www.securityfocus.com/bid/13711 - http://securitytracker.com/id?1014041 - http://marc.info/?l=bugtraq&m=111686776303832&w=2 - http://secunia.com/advisories/15482
CVE ID: CVE-2005-1703 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Warrior Kings: Battles 1.23 and earlier allows remote attackers to cause a denial of service (server crash) via a partial join packet that triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014040 - http://aluigi.altervista.org/adv/warkings-adv.txt - http://www.securityfocus.com/bid/13712 - http://securitytracker.com/id?1014041 - http://marc.info/?l=bugtraq&m=111686776303832&w=2 - http://secunia.com/advisories/15482
CVE ID: CVE-2005-1704 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13697 - http://secunia.com/advisories/17072 - http://secunia.com/advisories/21122 - http://www.trustix.org/errata/2005/0025/ - htt
tp://secunia.com/advisories/17072 - http://secunia.com/advisories/21122 - http://www.trustix.org/errata/2005/0025/ - http://support.avaya.com/elmodocs2/security/ASA-2006-178.htm - http://support.avaya.com/elmodocs2/security/ASA-2005-222.pdf - http://www.redhat.com/support/errata/RHSA-2006-0368.html - http://www.securityfocus.com/archive/1/464745/100/0/threaded - http://secunia.com/advisories/18506 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001060 - http://www.redhat.com/support/errata/RHSA-2005-709.html - http://www.vupen.com/english/advisories/2007/1267 - http://secunia.com/advisories/21262 - http://www.redhat.com/support/errata/RHSA-2005-673.html - http://www.mandriva.com/
http://secunia.com/advisories/21262 - http://www.redhat.com/support/errata/RHSA-2005-673.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:215 - http://secunia.com/advisories/17001 - http://support.avaya.com/elmodocs2/security/ASA-2006-015.htm - http://www.redhat.com/support/errata/RHSA-2006-0354.html - http://www.redhat.com/support/errata/RHSA-2005-801.html - http://www.redhat.com/support/errata/RHSA-2005-763.html - http://secunia.com/advisories/24788 - https://usn.ubuntu.com/136-1/ - http://security.gentoo.org/glsa/glsa-200505-15.xml - http://www.gentoo.org/security/en/glsa/glsa-200506-01.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%
rg/security/en/glsa/glsa-200506-01.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9071 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:095 - http://secunia.com/advisories/15527 - http://secunia.com/advisories/17257 - http://secunia.com/advisories/17135 - http://secunia.com/advisories/17356 - http://securitytracker.com/id?1016544 - http://secunia.com/advisories/17718 - http://bugs.gentoo.org/show_bug.cgi?id=91398 - http://www.vmware.com/support/vi3/doc/esx-55052-patch.html - http://www.osvdb.org/16757 - http://secunia.com/advisories/21717 - http://www.redhat.com/support/errata/RHSA-2005-659.html - ftp://patches.sgi.com/support/free/s
ia.com/advisories/21717 - http://www.redhat.com/support/errata/RHSA-2005-659.html - ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc
CVE ID: CVE-2005-1705 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17072 - http://secunia.com/advisories/18506 - http://www.redhat.com/support/errata/RHSA-2005-709.html - http://support.avaya.com/elmodocs2/security/ASA-2006-015.htm - http://www.redhat.com/support/errata/RHSA-2005-801.html - http://bugs.gentoo.org/show_bug.cgi?i
urity/ASA-2006-015.htm - http://www.redhat.com/support/errata/RHSA-2005-801.html - http://bugs.gentoo.org/show_bug.cgi?id=88398 - http://security.gentoo.org/glsa/glsa-200505-15.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11072 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:095 - http://secunia.com/advisories/17356
CVE ID: CVE-2005-1706 State: PUBLISHED Published: 2005-05-24T04:00:00Z Last Updated: 2024-09-17T03:52:46.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in MailScanner 4.41.3 and earlier, related to "incomplete reporting of viruses in zip files," allows remote attackers to bypass virus detection. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014024 - http://www.sng.ecs.soton.ac.uk/mailscanner/ChangeLog
CVE ID: CVE-2005-1707 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fn_show_postinst function in Gentoo webapp-config before 1.10-r14 allows local users to overwrite arbitrary files via a symlink attack on the postinst.txt temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/0809 - http://www.zataz.net/adviso/webapp-config-05182005.txt - http://www.osvdb.org/16746 - http://securitytracker.com/id?1014027 - http://bugs.gentoo.org/show_bug.cgi?id=91785 - http://secunia.com/advisories/15445 - http://www.securityfocus.com/
027 - http://bugs.gentoo.org/show_bug.cgi?id=91785 - http://secunia.com/advisories/15445 - http://www.securityfocus.com/bid/13780 - http://www.gentoo.org/security/en/glsa/glsa-200506-13.xml
CVE ID: CVE-2005-1708 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15452 - http://marc.info/?l=bugtraq&m=111695726810435&w=2 - http://www.bluecoat.com/support/knowledge/advisory_reporter_711_vulnerabilities.html - http://www.osvdb.org/16763 - http://www.securityfocus.com/bid/13723 - http://www.vupen.c
rter_711_vulnerabilities.html - http://www.osvdb.org/16763 - http://www.securityfocus.com/bid/13723 - http://www.vupen.com/english/advisories/2005/0589
CVE ID: CVE-2005-1709 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Blue Coat Reporter before 7.1.2 allows remote unauthenticated attackers to add a license. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15452 - http://www.securityfocus.com/bid/13725 - http://www.bluecoat.com/support/knowledge/advisory_reporter_711_vulnerabilities.html - http://www.osvdb.org/16764 - http://www.vupen.com/english/advisories/2005/0589
CVE ID: CVE-2005-1710 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Blue Coat Reporter before 7.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) the username in an Add User window or (2) the license key (volatile.license_to_add parameter) in the Licensing page. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16765 - http://secunia.com/advisories/15452 - http://marc.info/?l=bugtraq&m=111695726810435&w=2 - http://www.bluecoat.com/support/knowledge/advisory_reporter_711_vulnerabil
/marc.info/?l=bugtraq&m=111695726810435&w=2 - http://www.bluecoat.com/support/knowledge/advisory_reporter_711_vulnerabilities.html - http://www.osvdb.org/16766 - http://www.vupen.com/english/advisories/2005/0589
CVE ID: CVE-2005-1711 State: PUBLISHED Published: 2005-05-24T04:00:00Z Last Updated: 2024-09-16T17:33:14.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gibraltar Firewall 2.2 and earlier, when using the ClamAV update to 0.81 for Squid, uses a defunct ClamAV method to scan memory for viruses, which does not return an error code and prevents viruses from being detected. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014030
CVE ID: CVE-2005-1712 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Serendipity 0.8, when used with multiple authors, allows unprivileged authors to upload arbitrary media files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15405 - http://www.osvdb.org/16659 - http://sourceforge.net/project/shownotes.php?release_id=328092
CVE ID: CVE-2005-1713 State: PUBLISHED Published: 2005-05-24T04:00:00Z Last Updated: 2024-09-17T02:27:02.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Serendipity 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) templatedropdown and (2) shoutbox plugins. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=328092 - http://secunia.com/advisories/15405 - http://www.osvdb.org/16661 - http://www.osvdb.org/16660
CVE ID: CVE-2005-1714 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in NetWin SurgeMail 3.0c2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/0576 - http://secunia.com/advisories/15425
CVE ID: CVE-2005-1715 State: PUBLISHED Published: 2005-05-24T04:00:00Z Last Updated: 2024-09-16T18:34:44.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php for TOPo 2.2 (2.2.178) allows remote attackers to inject arbitrary web script or HTML via the (1) m, (2) s, (3) ID, or (4) t parameters, or the (5) field name, (6) Your Web field, or (7) email field in the comments section. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15325 - http://www.securityfocus.com/bid/13701 - http://www.securityfocus.com/bid/13700 - http://www.osvdb.org/16699 - http://securitytracker.com/id?1014016 -
id/13701 - http://www.securityfocus.com/bid/13700 - http://www.osvdb.org/16699 - http://securitytracker.com/id?1014016 - http://lostmon.blogspot.com/2005/05/topo-22-multiple-variable-fields-xss.html
CVE ID: CVE-2005-1716 State: PUBLISHED Published: 2005-05-24T04:00:00Z Last Updated: 2024-09-17T01:35:44.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOPo 2.2 (2.2.178) stores data files in the data directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as client IP addresses. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15325 - http://www.osvdb.org/16700 - http://securitytracker.com/id?1014016 - http://lostmon.blogspot.com/2005/05/topo-22-multiple-variable-fields-xss.html
CVE ID: CVE-2005-1717 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZyXEL Prestige 650R-31 router running ZyNOS FW v3.40(KO.1) allows remote attackers to cause a denial of service (CPU consumption and network loss) via crafted fragmented IP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16779 - http://secunia.com/advisories/15463 - http://www.securityfocus.com/bid/13703 - http://www.infobyte.com.ar/adv/ISR-10.html
CVE ID: CVE-2005-1718 State: PUBLISHED Published: 2005-05-24T04:00:00Z Last Updated: 2024-09-16T19:46:05.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in LS Games War Times 1.03 and earlier allows remote attackers to cause a denial of service (server crash) via a long nickname. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/wartimesboom-adv.txt - http://secunia.com/advisories/15363 - http://securitytracker.com/id?1013981 - http://www.osvdb.org/16619
CVE ID: CVE-2005-1719 State: PUBLISHED Published: 2005-05-24T04:00:00Z Last Updated: 2024-09-16T18:34:22.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in ALWIL avast! antivirus 4 (4.6.6230) and earlier, when running on Windows NT 4.0, does not properly detect certain viruses. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013991 - http://www.avast.com/eng/av4_revision_history.html
CVE ID: CVE-2005-1720 State: PUBLISHED Published: 2005-06-14T04:00:00Z Last Updated: 2024-09-17T03:17:57.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: AFP Server for Mac OS X 10.4.1, when using an ACL enabled volume, does not properly remove an ACL when a file is copied to a directory that does not use ACLs, which will override the POSIX file permissions for that ACL. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html
CVE ID: CVE-2005-1721 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T21:59:24.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the legacy client support for AFP Server for Mac OS X 10.4.1 allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html - http://securitytracker.com/id?1014138
CVE ID: CVE-2005-1722 State: PUBLISHED Published: 2005-06-14T04:00:00Z Last Updated: 2024-09-16T18:18:43.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the CoreGraphics Window Server for Mac OS X 10.4.x up to 10.4.1 allows local users to inject arbitrary commands into root sessions. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html
CVE ID: CVE-2005-1723 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T21:59:24.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: LaunchServices in Apple Mac OS X 10.4.x up to 10.4.1 does not properly mark file extensions and MIME types as unsafe if an Apple Uniform Type Identifier (UTI) is not created when the type is added to the database of unsafe types, which could allow attackers to bypass intended restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html - http://securitytracker.com/id?1014141
CVE ID: CVE-2005-1724 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T21:59:24.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: NFS on Apple Mac OS X 10.4.x up to 10.4.1 does not properly obey the -network or -mask flags for a filesystem and exports it to everyone, which allows remote attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html - http://securitytracker.com/id?1014142
CVE ID: CVE-2005-1725 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T21:59:24.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: launchd 106 in Apple Mac OS X 10.4.x up to 10.4.1 allows local users to overwrite arbitrary files via a symlink attack on the socket file in an insecure temporary directory. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111833509424379&w=2 - http://www.suresec.org/advisories/adv3.pdf - http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html
CVE ID: CVE-2005-1726 State: PUBLISHED Published: 2006-08-05T01:00:00 Last Updated: 2024-08-07T21:59:24.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CoreGraphics Window Server in Mac OS X 10.4.1 allows local users with console access to gain privileges by "launching commands into root sessions." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/0712 - http://docs.info.apple.com/article.html?artnum=301742 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20954 - http://www.osvdb.org/17266 - http://securitytracker.com/id?1014144 - http://lists.apple.com/archives/Security-announce/2005/Jun/msg00000.html - ht
- http://securitytracker.com/id?1014144 - http://lists.apple.com/archives/Security-announce/2005/Jun/msg00000.html - http://www.securityfocus.com/bid/13899 - http://secunia.com/advisories/15481
CVE ID: CVE-2005-1727 State: PUBLISHED Published: 2005-06-14T04:00:00Z Last Updated: 2024-09-16T23:15:32.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Mac OS X 10.4.x up to 10.4.1 sets insecure world- and group-writable permissions for the (1) system cache folder and (2) Dashboard system widgets, which allows local users to conduct unauthorized file operations via "file race conditions." Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html
CVE ID: CVE-2005-1728 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T21:59:24.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: MCX Client for Apple Mac OS X 10.4.x up to 10.4.1 insecurely logs Portable Home Directory credentials, which allows local users to obtain the credentials. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html - http://securitytracker.com/id?1014148