Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-0859 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in CzarNews 1.13b allows remote attackers to execute arbitrary PHP code via the tpath parameter to (1) headlines.php or (2) news.php. NOTE: some sources have reported the "dir" parameter as being affected; however, this is likely a cut-and-paste error from the wrong section of the original vulnerability report. Also, the news.php version was later reported to be in 1.12 through 1.14. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12857 -
through 1.14. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12857 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19765 - http://securitytracker.com/id?1013486 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27733 - http://secunia.com/advisories/14670 - http://www.securityfocus.com/bid/18411 - http://www.osvdb.org/14925 - https://www.exploit-db.com/exploits/2009 - http://www.osvdb.org/14926
CVE ID: CVE-2005-0860 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in TRG News Script 3.0 allows remote attackers to execute arbitrary PHP code via the dir parameter to (1) article.php, (2) authorall.php, (3) comment.php, (4) display.php, or (5) displayall.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12855 - http://securitytracker.com/id?1013487 - http://secunia.com/advisories/14669
CVE ID: CVE-2005-0861 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in DeleGate before 8.11.1 may allow attackers to cause a denial of service or execute arbitrary code, possibly due to "overflows on arrays." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14649 - http://www.delegate.org/mail-lists/delegate-en/2840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19775
CVE ID: CVE-2005-0862 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter to (1) poc_loginform.php or (2) phpbb/poc.php, the poc_root_path parameter to (3) phpbb/poc.php, (4) phpnuke/ENGLISH_poc.php, (5) phpnuke/poc.php, or (6) yabbse/poc.php, or (7) the sourcedir parameter to yabbse/poc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/14809 - http://www.albanianhaxorz.org/advisory/phpopenc
tes: - CVE Program Container: References: - http://www.osvdb.org/14809 - http://www.albanianhaxorz.org/advisory/phpopenchaten.txt - http://www.securityfocus.com/archive/1/465237/100/0/threaded - http://www.zone-h.org/advisories/read/id=7310 - http://www.osvdb.org/14808 - http://securitytracker.com/id?1013434 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19721 - http://www.osvdb.org/14807 - http://www.securityfocus.com/bid/12817 - http://secunia.com/advisories/14600
CVE ID: CVE-2005-0863 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHPOpenChat v3.x allows remote attackers to inject arbitrary web script or HTML via (1) the chatter parameter to regulars.php or (2) the chatter, chatter1, chatter2, chatter3, or chatter4 parameters to register.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/lists/bugtraq/2005/Mar/0331.html - http://secunia.com/advisories/14651 - http://www.securityfocus.com/bid/12841 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19748
CVE ID: CVE-2005-0864 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Boa web server, as used in Samsung ADSL Modem SMDK8947v1.2 and possibly other products, allows remote attackers to read arbitrary files via a full pathname in the HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12864 - http://exploitlabs.com/files/advisories/EXPL-A-2005-002-samsung-adsl.txt - http://zone-h.org/en/advisories/read/id=7339/
CVE ID: CVE-2005-0865 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-07T21:28:28.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung ADSL Modem SMDK8947v1.2 uses default passwords for the (1) root, (2) admin, or (3) user users, which allows remote attackers to gain privileges via Telnet or an HTTP request to adsl.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://exploitlabs.com/files/advisories/EXPL-A-2005-002-samsung-adsl.txt - http://www.securityfocus.com/bid/12864 - http://zone-h.org/en/advisories/read/id=7339/ - http://securitytracker.com/id?1013615
CVE ID: CVE-2005-0866 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:28.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: cdrecord before 4:2.0, when DEBUG is enabled, allows local users to overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/100-1/ - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=291376
CVE ID: CVE-2005-0867 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:29.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Linux kernel 2.6 allows local users to overwrite kernel memory by writing to a sysfs file. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-366.html - http://www.novell.com/linux/security/advisories/2005_18_kernel.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10867 - http://www.securityfocus.com/archive/1/427980/100/0/threaded
CVE ID: CVE-2005-0868 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:28.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: AS/400 Telnet 5250 terminal emulation clients, as implemented by (1) IBM client access, (2) Bosanova, (3) PowerTerm, (4) Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO (Start PC Organizer) command followed by STRPCCMD (Start PC command), as demonstrated by creating a backdoor account using REXEC. Additional Analyst Notes: - CVE Program Container: References: - http://www.venera.com/downloads/Attack_5250_terminal_emulations_from_iSeries_server.pdf - http://ma
ainer: References: - http://www.venera.com/downloads/Attack_5250_terminal_emulations_from_iSeries_server.pdf - http://marc.info/?l=bugtraq&m=111160242803070&w=2
CVE ID: CVE-2005-0869 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:28.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpSysInfo 2.3 allows remote attackers to obtain sensitive information via a direct request to (1) class.OpenBSD.inc.php, (2) class.NetBSD.inc.php, (3) class.FreeBSD.inc.php, (4) class.Darwin.inc.php, (5) XPath.class.php, (6) system_header.php, or (7) system_footer.php, which reveal the path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19808 - http://secunia.com/advisories/14690/ - http://marc.info/?l=bugtraq&m=111161017209422&w=2
CVE ID: CVE-2005-0870 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:28.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) sensor_program parameter to index.php, (2) text[language], (3) text[template], or (4) hide_picklist parameter to system_footer.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17616 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:212 - http://www.securityfocus.com/bid/15414 - http://secu
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:212 - http://www.securityfocus.com/bid/15414 - http://secunia.com/advisories/14690/ - http://www.debian.org/security/2005/dsa-898 - http://marc.info/?l=bugtraq&m=111161017209422&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19807 - http://www.securityfocus.com/archive/1/416543 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=301118 - http://www.securityfocus.com/bid/12887 - http://www.debian.org/security/2005/dsa-897 - http://www.debian.org/security/2005/dsa-724 - http://www.debian.org/security/2005/dsa-899 - http://secunia.com/advisories/17643
CVE ID: CVE-2005-0871 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:28.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: calendar_scheduler.php in Topic Calendar 1.0.1 module for phpBB, when running on a Microsoft IIS server, allows remote attackers to obtain sensitive information via invalid parameters, which reveal the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19824 - http://marc.info/?l=bugtraq&m=111168190630576&w=2 - http://secunia.com/advisories/14659 - http://securitytracker.com/id?1013554
CVE ID: CVE-2005-0872 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:28.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in calendar_scheduler.php in the Topic Calendar 1.0.1 module for phpBB allows remote attackers to inject arbitrary web script or HTML via the start parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19821 - http://marc.info/?l=bugtraq&m=111168190630576&w=2 - http://secunia.com/advisories/14659 - http://securitytracker.com/id?1013554
CVE ID: CVE-2005-0873 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:28.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in test.jsp in Oracle Reports Server 10g (9.0.4.3.3) allow remote attackers to inject arbitrary web script or HTML via the (1) desname or (2) repprod parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12892 - http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html - http://marc.info/?l=bugtraq&m=111168323804203&w=2 - http://www.us-cert.gov/cas/techalerts/TA05-292A.html - http://www.securityfocus.com/bi
l=bugtraq&m=111168323804203&w=2 - http://www.us-cert.gov/cas/techalerts/TA05-292A.html - http://www.securityfocus.com/bid/15134 - http://www.kb.cert.org/vuls/id/210524 - http://www.oracle.com/technology/deploy/security/pdf/public_vuln_to_advisory_mapping.html - http://secunia.com/advisories/17250
CVE ID: CVE-2005-0874 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:28.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the (1) AIM, (2) MSN, (3) RSS, and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial of service (application crash) via a long string in an HTTP 1.1 response header. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15004 - http://securitytracker.com/id?1013557 - http://secunia.com/advisories/14689 - http://marc.info/?l=bugtraq&m=111171416802350&w=2
CVE ID: CVE-2005-0875 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:28.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Yahoo plug-in for Trillian 2.0, 3.0, and 3.1 allow remote web servers to cause a denial of service (application crash) via a long string in an HTTP 1.1 response header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14689 - http://marc.info/?l=bugtraq&m=111171416802350&w=2
CVE ID: CVE-2005-0876 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:28.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one buffer overflow in Dnsmasq before 2.21 may allow attackers to execute arbitrary code via the DHCP lease file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19825 - http://secunia.com/advisories/14691 - http://www.thekelleys.org.uk/dnsmasq/CHANGELOG - http://www.securityfocus.com/bid/12897
CVE ID: CVE-2005-0877 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:29.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19826 - http://secunia.com/advisories/14691 - http://www.thekelleys.org.uk/dnsmasq/CHANGELOG - http://www.securityfocus.com/bid/12897
CVE ID: CVE-2005-0878 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:29.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MercuryBoard before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the title field of a PM (private message). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19797 - http://www.securityfocus.com/bid/12872 - http://secunia.com/advisories/14679
CVE ID: CVE-2005-0879 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:28.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in (1) content.php and (2) index.php for Vortex Portal allows remote attackers to execute arbitrary PHP code via a URL in the act parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/14959 - http://securitytracker.com/id?1013545 - http://www.securityfocus.com/bid/12878 - http://www.osvdb.org/14958 - http://archives.neohapsis.com/archives/bugtraq/2005-03/0405.html - http://secunia.com/advisories/14707 - https://exchange.xforce.ibmcloud.com/vulnera
/archives/bugtraq/2005-03/0405.html - http://secunia.com/advisories/14707 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19809
CVE ID: CVE-2005-0880 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:29.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: content.php in Vortex Portal allows remote attackers to obtain sensitive information via an invalid act parameter, which leaks the full pathname in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2005-03/0405.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19811
CVE ID: CVE-2005-0881 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:28.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in articles.newcomment for Interspire ArticleLive 2005 allows remote attackers to inject arbitrary web script or HTML via the Articleld parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19817 - http://www.securityfocus.com/archive/1/394069 - http://secunia.com/advisories/14708 - http://marc.info/?l=bugtraq&m=112483966331737&w=2 - http://www.securityfocus.com/bid/12879
CVE ID: CVE-2005-0882 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:28.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admincore.php in BirdBlog before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) userpw parameters. Additional Analyst Notes: - CVE Program Container: References: - http://birdblog.sourceforge.net/ChangeLog - http://cvs.sourceforge.net/viewcvs.py/birdblog/birdblog/admin/admincore.php?r1=1.4&r2=1.5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19799 - http://www.securityfocus.com/bid/12880 - http://securitytracker.com/id?1013548 - http://secunia.c
ulnerabilities/19799 - http://www.securityfocus.com/bid/12880 - http://securitytracker.com/id?1013548 - http://secunia.com/advisories/14676
CVE ID: CVE-2005-0883 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:28.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in base.php for DigitalHive 2.0 allow remote attackers to inject arbitrary web script or HTML via (1) the mt parameter to the membres.php page or (2) the -afs-1- query string to the msg.php page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12883 - http://secunia.com/advisories/14702 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19803 - http://securitytracker.com/id?1013516
CVE ID: CVE-2005-0884 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:28.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: DigitalHive 2.0 allows remote attackers to re-install the product by directly accessing the install script. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19802
CVE ID: CVE-2005-0885 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:28.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in XMB Forum 1.9.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Mood or (2) "Send To" fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12886 - http://securitytracker.com/id?1013515 - https://docs.xmbforum2.com/index.php?title=Security_Issue_History
CVE ID: CVE-2005-0886 State: PUBLISHED Published: 2005-03-26T05:00:00Z Last Updated: 2024-09-17T01:51:22.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Invision Power Board 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP POST request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12888
CVE ID: CVE-2005-0887 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:28.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction variable in (1) functions.inc.php or (2) main.php, which causes code to be injected into an eval statement. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19806 - http://securitytracker.com/id?1013559 - http://sourceforge.net/project/shownotes.php?release_id=315144
CVE ID: CVE-2005-0888 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:29.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in functions.inc.php for Double Choco Latte 0.9.4.3 allow remote attackers to inject arbitrary web script or HTML via the (1) class or (2) method name. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19805 - http://sourceforge.net/project/shownotes.php?release_id=315160 - http://secunia.com/advisories/14688 - http://securitytracker.com/id?1013559
CVE ID: CVE-2005-0889 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:28.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php for Dream4 Koobi CMS 4.2.3 allows remote attackers to inject arbitrary web script or HTML via the area parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12895 - http://securitytracker.com/id?1013558
CVE ID: CVE-2005-0890 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:29.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Dream4 Koobi CMS 4.2.3 allows remote attackers to execute arbitrary SQL commands via the area parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12896 - http://securitytracker.com/id?1013558 - http://secunia.com/advisories/14696
CVE ID: CVE-2005-0891 State: PUBLISHED Published: 2005-04-01T05:00:00 Last Updated: 2024-08-07T21:28:29.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12950 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000958 - http://www.redhat.com/support/errata/RHSA-2005-343.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:214 - http://www.securityfocus.com/archive/1/419771/100/0/threaded - http://www.redhat.com/support/e
ies?name=MDKSA-2005:214 - http://www.securityfocus.com/archive/1/419771/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2005-344.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9710 - http://secunia.com/advisories/17657
CVE ID: CVE-2005-0892 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in smail 3.2.0.120 allows remote attackers or local users to execute arbitrary code via a long string in the MAIL FROM command and possibly other SMTP commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-722 - http://marc.info/?l=bugtraq&m=111177045217717&w=2
CVE ID: CVE-2005-0893 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: modes.c in smail 3.2.0.120 implements signal handlers with certain unsafe library calls, which may allow attackers to execute arbitrary code via signal handler race conditions, possibly using xmalloc. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111177045217717&w=2
CVE ID: CVE-2005-0894 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:28.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenmosixCollector and OpenMosixView in OpenMosixView 1.5 allow local users to overwrite or delete arbitrary files via a symlink attack on (1) temporary files in the openmosixcollector directory or (2) nodes.tmp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12902 - http://secunia.com/advisories/14693 - http://marc.info/?l=bugtraq&m=111176899423078&w=2