Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-1963 State: PUBLISHED Published: 2006-04-21T10:00:00 Last Updated: 2024-08-07T17:35:30.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in main.php in PCPIN Chat 5.0.4 and earlier allows remote authenticated users to include and execute arbitrary PHP code via a ".." (dot dot) in a language cookie, as demonstrated by uploading then accessing a smiliefile image that actually contains PHP code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/436029/100/0/threaded - http://www.vupen.com/english/advisories/2006/1441 - http://securitytracker.com/id?1015968 - http://www.security
readed - http://www.vupen.com/english/advisories/2006/1441 - http://securitytracker.com/id?1015968 - http://www.securityfocus.com/archive/1/431390/100/0/threaded - http://www.securityfocus.com/bid/17632 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25962 - http://retrogod.altervista.org/pcpin_504_xpl.html - http://secunia.com/advisories/19708
CVE ID: CVE-2006-1964 State: PUBLISHED Published: 2006-04-21T10:00:00 Last Updated: 2024-08-07T17:35:30.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Haberler.asp in ASPSitem 1.83 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.nukedx.com/?getxpl=23 - http://www.securityfocus.com/bid/17616 - http://secunia.com/advisories/19693 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25932 - http://www.vupen.com/english/advisories/2006/1439 - http://www.securityfocus.com/archive/1/431469/100/0/threaded
CVE ID: CVE-2006-1965 State: PUBLISHED Published: 2006-04-21T10:00:00 Last Updated: 2024-08-07T17:35:30.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in aasi media Net Clubs Pro 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) onuser, (2) pass, (3) chatsys, (4) room, (5) username, and (6) to parameters in (a) sendim.cgi; the (7) username parameter in (b) imessage.cgi; the (8) password parameter in (c) login.cgi; and the (9) cat_id parameter in (d) viewcat.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24757 - http://pridels0.blogspot.com/2
tional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24757 - http://pridels0.blogspot.com/2006/04/net-clubs-pro-xss-vuln.html - http://www.osvdb.org/24754 - http://www.vupen.com/english/advisories/2006/1436 - http://www.securityfocus.com/bid/17622 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25957 - http://www.osvdb.org/24755 - http://www.osvdb.org/24756 - http://secunia.com/advisories/19651
CVE ID: CVE-2006-1966 State: PUBLISHED Published: 2006-04-21T10:00:00 Last Updated: 2024-08-07T17:35:30.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified Fortinet product, possibly Fortinet28, allows remote attackers to cause a denial of service via a "small synflood" to the SMTP port (TCP port 25), as demonstrated by a 10-microsecond wait between sending packets. NOTE: this issue has been disputed in followup posts that suggest that a protection feature is triggering a RST. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431404/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0
/www.securityfocus.com/archive/1/431404/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0449.html - http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0472.html
CVE ID: CVE-2006-1967 State: PUBLISHED Published: 2006-04-21T10:00:00 Last Updated: 2024-08-07T17:35:31.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in calendar/Visitor.cgi in KCScripts Calendar, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the sort_order parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25940 - http://www.vupen.com/english/advisories/2006/1440 - http://securityreason.com/securityalert/503 - http://secunia.com/advisories/19695 - http://www.securityf
ies/2006/1440 - http://securityreason.com/securityalert/503 - http://secunia.com/advisories/19695 - http://www.securityfocus.com/bid/17628 - http://www.osvdb.org/24761 - http://pridels0.blogspot.com/2006/04/portal-pack-6-xss-vuln.html
CVE ID: CVE-2006-1968 State: PUBLISHED Published: 2006-04-21T10:00:00 Last Updated: 2024-08-07T17:35:31.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in news/NsVisitor.cgi in KCScripts News Publisher, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the sort_order parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25940 - http://www.vupen.com/english/advisories/2006/1440 - http://secunia.com/advisories/19695 - http://www.securityfocus.com/bid/17628 - http://www.osvdb.org/
isories/2006/1440 - http://secunia.com/advisories/19695 - http://www.securityfocus.com/bid/17628 - http://www.osvdb.org/24762 - http://pridels0.blogspot.com/2006/04/portal-pack-6-xss-vuln.html
CVE ID: CVE-2006-1969 State: PUBLISHED Published: 2006-04-21T10:00:00 Last Updated: 2024-08-07T17:35:29.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search/search.cgi in an unspecified KCScripts script, probably Search Engine or Site Search, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25940 - http://www.vupen.com/english/advisories/2006/1440 - http://secunia.com/advisories/19695 - http://www.osvdb.org/24763
0 - http://www.vupen.com/english/advisories/2006/1440 - http://secunia.com/advisories/19695 - http://www.osvdb.org/24763 - http://www.securityfocus.com/bid/17628 - http://pridels0.blogspot.com/2006/04/portal-pack-6-xss-vuln.html
CVE ID: CVE-2006-1970 State: PUBLISHED Published: 2006-04-21T10:00:00 Last Updated: 2024-08-07T17:35:31.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in classifieds/viewcat.cgi in KCScripts Classifieds, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25940 - http://www.vupen.com/english/advisories/2006/1440 - http://www.osvdb.org/24764 - http://secunia.com/advisories/19695 - http://www.securityfocus.com/bid/17
ories/2006/1440 - http://www.osvdb.org/24764 - http://secunia.com/advisories/19695 - http://www.securityfocus.com/bid/17628 - http://pridels0.blogspot.com/2006/04/portal-pack-6-xss-vuln.html
CVE ID: CVE-2006-1971 State: PUBLISHED Published: 2006-04-21T10:00:00 Last Updated: 2024-08-07T17:35:30.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.php in KRANKIKOM ContentBoxX allows remote attackers to inject arbitrary web script or HTML via the action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/779 - http://www.osvdb.org/24768 - http://www.vupen.com/english/advisories/2006/1438 - http://www.securityfocus.com/archive/1/431386/100/0/threaded - http://secunia.com/advisories/19733 - http://www.securityfocus.com/bid/17612 - http://securityreason.com/secu
threaded - http://secunia.com/advisories/19733 - http://www.securityfocus.com/bid/17612 - http://securityreason.com/securityalert/740 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25952
CVE ID: CVE-2006-1972 State: PUBLISHED Published: 2006-04-21T10:00:00 Last Updated: 2024-08-07T17:35:30.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EasyGallery.php in Wingnut EasyGallery allows remote attackers to inject arbitrary web script or HTML via the ordner parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431430/100/0/threaded - http://secunia.com/advisories/19713 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25943 - http://advisory.patriotichackers.com/index.php?itemid=5 - http://www.vupen.com/english/advisories/2006/1437 - http://www.securityfocu
ry.patriotichackers.com/index.php?itemid=5 - http://www.vupen.com/english/advisories/2006/1437 - http://www.securityfocus.com/bid/17624 - http://securityreason.com/securityalert/746
CVE ID: CVE-2006-1973 State: PUBLISHED Published: 2006-04-21T10:00:00 Last Updated: 2024-08-07T17:35:30.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Linksys RT31P2 VoIP router allow remote attackers to cause a denial of service via malformed Session Initiation Protocol (SIP) messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17631 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25915 - http://www.vupen.com/english/advisories/2006/1443 - http://www.osvdb.org/24810 - http://www.kb.cert.org/vuls/id/MIMG-6GMMW4 - http://secunia.com/advisories/19722 - http://www.kb.cert.org/v
.org/24810 - http://www.kb.cert.org/vuls/id/MIMG-6GMMW4 - http://secunia.com/advisories/19722 - http://www.kb.cert.org/vuls/id/621566
CVE ID: CVE-2006-1974 State: PUBLISHED Published: 2006-04-21T10:00:00Z Last Updated: 2024-09-16T19:25:55.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in MyBB (MyBulletinBoard) before 1.04 allows remote attackers to execute arbitrary SQL commands via the referrer parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16443/exploit - http://www.securityfocus.com/bid/16443
CVE ID: CVE-2006-1975 State: PUBLISHED Published: 2006-04-21T10:00:00 Last Updated: 2024-08-07T17:35:31.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in guestbook_newentry.php in PHP-Gastebuch 1.61 allows remote attackers to inject arbitrary web script or HTML via the Kommentar field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19810 - http://osvdb.org/ref/23/23962-gastebuch.txt - http://www.osvdb.org/23962
CVE ID: CVE-2006-1976 State: PUBLISHED Published: 2006-04-21T10:00:00Z Last Updated: 2024-09-16T16:19:02.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in addRequest.php in Prayer Request Board (PRB) Beta 1 before 20060320 allows remote attackers to inject arbitrary web script or HTML via the Request field. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23958 - http://osvdb.org/ref/23/23958-prb.txt
CVE ID: CVE-2006-1977 State: PUBLISHED Published: 2006-04-21T22:00:00 Last Updated: 2024-08-07T17:35:31.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in FlexBB 0.5.7 BETA and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) message parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1393 - http://securityreason.com/securityalert/777 - http://www.securityfocus.com/archive/1/431071/100/0/threaded - http://securitytracker.com/id?1015946 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25868
CVE ID: CVE-2006-1978 State: PUBLISHED Published: 2006-04-21T22:00:00 Last Updated: 2024-08-07T17:35:30.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbb_username COOKIE parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015949 - http://www.securityfocus.com/archive/1/431156/100/0/threaded - http://www.securityfocus.com/bid/17568 - https://www.exploit-db.com/exploits/1686
CVE ID: CVE-2006-1979 State: PUBLISHED Published: 2006-04-21T22:00:00 Last Updated: 2024-08-07T17:35:31.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mwguest.php in Manic Web MWGuest 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the homepage parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/747 - http://evuln.com/vulns/122/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25674 - http://www.securityfocus.com/archive/1/431507/100/0/threaded - http://www.securityfocus.com/bid/17630
CVE ID: CVE-2006-1980 State: PUBLISHED Published: 2006-04-21T22:00:00 Last Updated: 2024-08-07T17:35:31.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the (1) query string, (2) SID parameter, or (3) ilang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/04/w2b-online-banking-vuln.html - http://www.vupen.com/english/advisories/2006/1445 - http://www.osvdb.org/24759 - http://secunia.com/advisories/19717 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25947 - http://www.securityfocus
p://secunia.com/advisories/19717 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25947 - http://www.securityfocus.com/bid/17626
CVE ID: CVE-2006-1981 State: PUBLISHED Published: 2006-04-21T22:00:00 Last Updated: 2024-08-07T17:35:31.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Java InputMethods on Mac OS X 10.4.5 may cause InputMethods to send input events for secure fields to the wrong text field, which might reveal the password to others who can view the screen. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26167 - http://www.vupen.com/english/advisories/2006/1398 - http://docs.info.apple.com/article.html?artnum=303658
CVE ID: CVE-2006-1982 State: PUBLISHED Published: 2006-04-21T22:00:00 Last Updated: 2024-08-07T17:35:31.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6, as used in applications that use ImageIO or AppKit, allows remote attackers to execute arbitrary code via crafted TIFF images. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17951 - http://www.vupen.com/english/advisories/2006/1779 - http://www.us-cert.gov/cas/techalerts/TA06-132A.html - http://docs.info.apple.com/article.html?artnum=303411 - http://www.security-protocols.com/modules.php?name
6-132A.html - http://docs.info.apple.com/article.html?artnum=303411 - http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233 - http://www.security-protocols.com/sp-x24-advisory.php - http://lists.apple.com/archives/security-announce/2006/May/msg00003.html - http://www.vupen.com/english/advisories/2006/1452 - http://www.securityfocus.com/bid/17634 - http://secunia.com/advisories/20077 - http://www.osvdb.org/31837 - http://secunia.com/advisories/19686
CVE ID: CVE-2006-1983 State: PUBLISHED Published: 2006-04-21T22:00:00 Last Updated: 2024-08-07T17:35:31.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) PredictorVSetField function for TIFF or (2) CFAllocatorAllocate function for GIF, as used in applications that use ImageIO or AppKit. NOTE: the BMP vector has been re-assigned to CVE-2006-2238 because it affects a separate product family. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17951 - http://www.vupen.co
ional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17951 - http://www.vupen.com/english/advisories/2006/1779 - http://www.us-cert.gov/cas/techalerts/TA06-132A.html - http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233 - http://securitytracker.com/id?1016067 - http://www.osvdb.org/24821 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25949 - http://lists.apple.com/archives/security-announce/2006/May/msg00003.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25951 - http://www.vupen.com/english/advisories/2006/1452 - http://www.securityfocus.com/bid/17634 - http://www.osvdb.org/24822 - http://secunia.com/advis
sh/advisories/2006/1452 - http://www.securityfocus.com/bid/17634 - http://www.osvdb.org/24822 - http://secunia.com/advisories/20077 - http://www.security-protocols.com/sp-x28-advisory.php - http://secunia.com/advisories/19686 - http://www.security-protocols.com/sp-x30-advisory.php
CVE ID: CVE-2006-1984 State: PUBLISHED Published: 2006-04-21T22:00:00 Last Updated: 2024-08-07T17:35:30.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the _cg_TIFFSetField function in Mac OS X 10.4.6 and earlier, as used in applications that use ImageIO or AppKit, allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image that triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17951 - http://www.vupen.com/english/advisories/2006/1779 - http://www.us-cert.gov/cas/techalerts/TA06-132A.html - http://www.security-protocols.com/modules.ph
visories/2006/1779 - http://www.us-cert.gov/cas/techalerts/TA06-132A.html - http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233 - http://lists.apple.com/archives/security-announce/2006/May/msg00003.html - http://www.security-protocols.com/sp-x29-advisory.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/25950 - http://www.vupen.com/english/advisories/2006/1452 - http://www.securityfocus.com/bid/17634 - http://secunia.com/advisories/20077 - http://secunia.com/advisories/19686
CVE ID: CVE-2006-1985 State: PUBLISHED Published: 2006-04-21T22:00:00 Last Updated: 2024-08-07T17:35:31.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary code via a crafted archive (such as ZIP) that contains long path names, which triggers an error in the BOMStackPop function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17951 - http://www.osvdb.org/24819 - http://www.vupen.com/english/advisories/2006/1779 - http://www.security-protocols.com/sp-x25-advisory.php -
.org/24819 - http://www.vupen.com/english/advisories/2006/1779 - http://www.security-protocols.com/sp-x25-advisory.php - http://www.us-cert.gov/cas/techalerts/TA06-132A.html - http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233 - http://securitytracker.com/id?1016082 - http://lists.apple.com/archives/security-announce/2006/May/msg00003.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25945 - http://www.vupen.com/english/advisories/2006/1452 - http://www.securityfocus.com/bid/17634 - http://secunia.com/advisories/20077 - http://secunia.com/advisories/19686
CVE ID: CVE-2006-1986 State: PUBLISHED Published: 2006-04-21T22:00:00 Last Updated: 2024-08-07T17:35:31.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via a large CELLSPACING attribute in a TABLE tag, which triggers an error in KWQListIteratorImpl::KWQListIteratorImpl. Additional Analyst Notes: - CVE Program Container: References: - http://security-protocols.com/poc/sp-x26-1.html - http://www.security-protocols.com/sp-x26-advisory.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/25946 - http://www.vupen.com/english/advisories/2006/1452 - http://www.securityfocus.com/bi
ibmcloud.com/vulnerabilities/25946 - http://www.vupen.com/english/advisories/2006/1452 - http://www.securityfocus.com/bid/17634 - http://www.osvdb.org/24823 - http://secunia.com/advisories/19686
CVE ID: CVE-2006-1987 State: PUBLISHED Published: 2006-04-21T22:00:00 Last Updated: 2024-08-07T17:35:30.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via an invalid FRAME tag, possibly due to (1) multiple SCROLLING attributes with no values, or (2) a SRC attribute with no value. NOTE: due to lack of diagnosis by the researcher, it is unclear which vector is responsible. Additional Analyst Notes: - CVE Program Container: References: - http://security-protocols.com/poc/sp-x26-4.html - http://www.security-protocols.com/sp-x26-advisory.php - https://exchange.xforce.ibmcloud.com/vul
com/poc/sp-x26-4.html - http://www.security-protocols.com/sp-x26-advisory.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/25946 - http://www.vupen.com/english/advisories/2006/1452 - http://www.securityfocus.com/bid/17634 - http://secunia.com/advisories/19686
CVE ID: CVE-2006-1988 State: PUBLISHED Published: 2006-04-21T22:00:00 Last Updated: 2024-08-07T17:35:31.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebTextRenderer(WebInternal) _CG_drawRun:style:geometry: function in Apple Safari 2.0.3 allows remote attackers to cause a denial of service (application crash) via an HTML LI tag with a large VALUE attribute (list item number), which triggers a null dereference in QPainter::drawText, probably due to a failed memory allocation that uses the VALUE. Additional Analyst Notes: - CVE Program Container: References: - http://www.security-protocols.com/sp-x26-advisory.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/2594
ces: - http://www.security-protocols.com/sp-x26-advisory.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/25946 - http://www.vupen.com/english/advisories/2006/1452 - http://security-protocols.com/poc/sp-x26-2.html - http://www.securityfocus.com/bid/17634 - http://www.osvdb.org/24823 - http://secunia.com/advisories/19686
CVE ID: CVE-2006-1989 State: PUBLISHED Published: 2006-05-01T19:00:00 Last Updated: 2024-08-07T17:35:29.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html - http://secunia.com/advisories/20159 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:080 - http://www.kb.cert.org/vuls/id/599220 - http://secunia.com/advisories/19963 - http://www.vupen.com/english