Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
securityfocus.com/archive/1/434007/100/0/threaded - http://www.securityfocus.com/archive/1/434402/100/0/threaded - http://www.vupen.com/english/advisories/2006/1786 - http://securityreason.com/securityalert/901 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26442 - http://www.securityfocus.com/archive/1/434415/100/0/threaded - http://secunia.com/advisories/19845 - http://www.kb.cert.org/vuls/id/477960 - http://www.securityfocus.com/archive/1/434415/30/4920/threaded - http://www.osvdb.org/25463 - http://marc.info/?l=full-disclosure&m=114764338702488&w=2 - http://secunia.com/advisories/20136 - http://www.vupen.com/english/advisories/2006/1842 - http://www.vupen.com/english/advisories/2
nia.com/advisories/20136 - http://www.vupen.com/english/advisories/2006/1842 - http://www.vupen.com/english/advisories/2006/1785 - http://www.securityfocus.com/bid/17958 - http://www.securityfocus.com/archive/1/434038/100/0/threaded
CVE ID: CVE-2006-2408 State: PUBLISHED Published: 2006-05-16T10:00:00 Last Updated: 2024-08-07T17:51:04.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Raydium before SVN revision 310 allow remote attackers to execute arbitrary code via a large packet when logged via (1) the raydium_log function in log.c or (2) the raydium_console_line_add function in console.c, possibly from a long player name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17986 - http://secunia.com/advisories/20097 - http://www.vupen.com/english/advisories/2006/1808 - http://aluigi.altervista.org/adv/raydiumx-adv.txt - http://r
20097 - http://www.vupen.com/english/advisories/2006/1808 - http://aluigi.altervista.org/adv/raydiumx-adv.txt - http://raydium.org/svn.php - http://www.securityfocus.com/archive/1/433930/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26510 - http://securityreason.com/securityalert/900
CVE ID: CVE-2006-2409 State: PUBLISHED Published: 2006-05-16T10:00:00 Last Updated: 2024-08-07T17:51:04.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the raydium_log function in console.c in Raydium before SVN revision 310 allows local users to execute arbitrary code via format string specifiers in the format parameter, which are not properly handled in a call to raydium_console_line_add. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17986 - http://secunia.com/advisories/20097 - http://www.vupen.com/english/advisories/2006/1808 - http://aluigi.altervista.org/adv/raydiumx-adv.txt - http://rayd
97 - http://www.vupen.com/english/advisories/2006/1808 - http://aluigi.altervista.org/adv/raydiumx-adv.txt - http://raydium.org/svn.php - http://www.securityfocus.com/archive/1/433930/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26514 - http://securityreason.com/securityalert/900
CVE ID: CVE-2006-2410 State: PUBLISHED Published: 2006-05-16T10:00:00 Last Updated: 2024-08-07T17:51:04.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: raydium_network_netcall_exec function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to cause a denial of service (application crash) via a packet of type 0xFF, which causes a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17986 - http://secunia.com/advisories/20097 - http://www.vupen.com/english/advisories/2006/1808 - http://aluigi.altervista.org/adv/raydiumx-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/26515 -
/1808 - http://aluigi.altervista.org/adv/raydiumx-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/26515 - http://www.securityfocus.com/archive/1/433930/100/0/threaded - http://securityreason.com/securityalert/900
CVE ID: CVE-2006-2411 State: PUBLISHED Published: 2006-05-16T10:00:00 Last Updated: 2024-08-07T17:51:04.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in raydium_network_read function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to execute arbitrary code by sending packets with long global variables to the client. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17986 - http://secunia.com/advisories/20097 - http://www.vupen.com/english/advisories/2006/1808 - http://aluigi.altervista.org/adv/raydiumx-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/26516 - http://www
p://aluigi.altervista.org/adv/raydiumx-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/26516 - http://www.securityfocus.com/archive/1/433930/100/0/threaded - http://securityreason.com/securityalert/900
CVE ID: CVE-2006-2412 State: PUBLISHED Published: 2006-05-16T10:00:00 Last Updated: 2024-08-07T17:51:04.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: The raydium_network_read function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to cause a denial of service (application crash) via a large ID, which causes an invalid memory access (buffer over-read). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17986 - http://secunia.com/advisories/20097 - http://www.vupen.com/english/advisories/2006/1808 - http://aluigi.altervista.org/adv/raydiumx-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabiliti
ories/2006/1808 - http://aluigi.altervista.org/adv/raydiumx-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/26516 - http://www.securityfocus.com/archive/1/433930/100/0/threaded - http://securityreason.com/securityalert/900
CVE ID: CVE-2006-2413 State: PUBLISHED Published: 2006-05-16T10:00:00 Last Updated: 2024-08-07T17:51:04.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNUnet before SVN revision 2781 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an empty UDP datagram, possibly involving FIONREAD errors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17980 - https://gnunet.org/svn/GNUnet/ChangeLog - http://aluigi.altervista.org/adv/gnunetzero-adv.txt - http://www.securityfocus.com/archive/1/433933/100/0/threaded - http://secunia.com/advisories/20096 - https://exchange.xforce.ibmcloud.com/vulnerab
om/archive/1/433933/100/0/threaded - http://secunia.com/advisories/20096 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26527 - http://www.vupen.com/english/advisories/2006/1799 - http://securityreason.com/securityalert/907
CVE ID: CVE-2006-2414 State: PUBLISHED Published: 2006-05-16T10:00:00 Last Updated: 2024-08-07T17:51:04.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list files and directories under the mbox parent directory and obtain mailbox names via ".." sequences in the (1) LIST or (2) DELETE IMAP command. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2006/dsa-1080 - http://www.dovecot.org/list/dovecot-news/2006-May/000006.html - http://www.vupen.com/english/advisories/2006/2013 - http://secunia.com/advisories/20315 - http://www.securityfocus.com/b
http://www.vupen.com/english/advisories/2006/2013 - http://secunia.com/advisories/20315 - http://www.securityfocus.com/bid/17961 - http://securityreason.com/securityalert/913 - http://secunia.com/advisories/20308 - http://dovecot.org/list/dovecot-cvs/2006-May/005563.html - http://www.securityfocus.com/archive/1/433878/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26536
CVE ID: CVE-2006-2415 State: PUBLISHED Published: 2006-05-16T10:00:00 Last Updated: 2024-08-07T17:51:04.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in FlexChat 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username and (2) CFTOKEN parameter in (a) index.cfm and (3) CFTOKEN and (4) CFID parameter in (b) chat.cfm. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/05/flexchat-xss.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26429 - http://secunia.com/advisories/20101 - http://www.osvdb.org/25504 - http://www.vupen.com
loud.com/vulnerabilities/26429 - http://secunia.com/advisories/20101 - http://www.osvdb.org/25504 - http://www.vupen.com/english/advisories/2006/1804 - http://securitytracker.com/id?1016104 - http://www.osvdb.org/25505
CVE ID: CVE-2006-2416 State: PUBLISHED Published: 2006-05-16T10:00:00 Last Updated: 2024-08-07T17:51:04.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie as defined in $pref['cookie_name']. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/433938/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26434 - http://www.vupen.com/english/advisories/2006/1802 - http://securityreason.com/securityalert/905 - http://secunia.com/advisories/20089 - http://www.osvdb.org/25521 - htt
2 - http://securityreason.com/securityalert/905 - http://secunia.com/advisories/20089 - http://www.osvdb.org/25521 - http://www.securityfocus.com/bid/17966
CVE ID: CVE-2006-2417 State: PUBLISHED Published: 2006-05-16T10:00:00 Last Updated: 2024-08-07T17:51:04.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.0.x before 2.8.0.4 allows remote attackers to inject arbitrary web script or HTML via the theme parameter in unknown scripts. NOTE: the lang parameter is already covered by CVE-2006-2031. Additional Analyst Notes: - CVE Program Container: References: - http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.html - http://secunia.com/advisories/20627 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26444 - http://www.securityfocus.com/bid/17973 - http:/
ies/20627 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26444 - http://www.securityfocus.com/bid/17973 - http://www.vupen.com/english/advisories/2006/1794 - http://secunia.com/advisories/20113 - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-2
CVE ID: CVE-2006-2418 State: PUBLISHED Published: 2006-05-16T10:00:00 Last Updated: 2024-08-07T17:51:04.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerabilities in certain versions of phpMyAdmin before 2.8.0.4 allow remote attackers to inject arbitrary web script or HTML via the db parameter in unknown scripts. Additional Analyst Notes: - CVE Program Container: References: - http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.html - http://secunia.com/advisories/20627 - http://www.debian.org/security/2006/dsa-1207 - http://secunia.com/advisories/22781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26441 - http://www.sec
1207 - http://secunia.com/advisories/22781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26441 - http://www.securityfocus.com/bid/17973 - http://www.vupen.com/english/advisories/2006/1794 - http://secunia.com/advisories/20113 - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-2
CVE ID: CVE-2006-2419 State: PUBLISHED Published: 2006-05-16T10:00:00 Last Updated: 2024-08-07T17:51:04.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Directory Listing Script allows remote attackers to inject arbitrary web script or HTML via the dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://kiki91.altervista.org/exploit/dir.txt - http://www.vupen.com/english/advisories/2006/1803 - http://secunia.com/advisories/20118
CVE ID: CVE-2006-2420 State: PUBLISHED Published: 2006-05-16T10:00:00 Last Updated: 2024-08-07T17:51:04.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.20rc1 through 2.20 and 2.21.1, when using RSS 1.0, allows remote attackers to conduct cross-site scripting (XSS) attacks via a title element with HTML encoded sequences such as "&gt;", which are automatically decoded by some RSS readers. NOTE: this issue is not in Bugzilla itself, but rather due to design or documentation inconsistencies within RSS, or implementation vulnerabilities in RSS readers. While this issue normally would not be included in CVE, it is being identified since the Bugzilla developers have addre
While this issue normally would not be included in CVE, it is being identified since the Bugzilla developers have addressed it. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18979 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24820 - http://marc.info/?l=bugtraq&m=112818466125484&w=2 - http://www.osvdb.org/23379 - http://www.bugzilla.org/security/2.18.4 - https://bugzilla.mozilla.org/show_bug.cgi?id=313441
CVE ID: CVE-2006-2421 State: PUBLISHED Published: 2006-05-17T10:00:00 Last Updated: 2024-08-07T17:51:04.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Pragma FortressSSH 4.0.7.20 allows remote attackers to execute arbitrary code via long SSH_MSG_KEXINIT messages, which may cause an overflow when being logged. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26498 - http://www.securityfocus.com/bid/17991 - http://www.vupen.com/english/advisories/2006/1820 - http://
erabilities/26498 - http://www.securityfocus.com/bid/17991 - http://www.vupen.com/english/advisories/2006/1820 - http://secunia.com/advisories/20114
CVE ID: CVE-2006-2422 State: PUBLISHED Published: 2006-05-17T10:00:00 Last Updated: 2024-08-07T17:51:04.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpCOIN 1.2.3 and earlier stores messages based upon e-mail addresses, which allows remote authenticated users to read messages for other users by adding the sender's e-mail address as an "additional contact". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17959 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26499 - http://secunia.com/advisories/20088 - http://forums.phpcoin.com/index.php?showtopic=5941 - http://www.vupen.com/english/advisories/2006/1788
CVE ID: CVE-2006-2423 State: PUBLISHED Published: 2006-05-17T10:00:00 Last Updated: 2024-08-07T17:51:04.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ftplogin/index.php in Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the login parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1817 - http://secunia.com/advisories/20105 - http://www.securityfocus.com/archive/1/434034/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26472 - http://securityreason.com/securityalert/687 - http://securityreason.com/securityalert
mcloud.com/vulnerabilities/26472 - http://securityreason.com/securityalert/687 - http://securityreason.com/securityalert/903 - http://www.securityfocus.com/bid/17984 - http://www.osvdb.org/25525
CVE ID: CVE-2006-2424 State: PUBLISHED Published: 2006-05-17T10:00:00 Last Updated: 2024-08-07T17:51:04.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in ezUserManager 1.6 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the ezUserManager_Path parameter to ezusermanager_pwd_forgott.php, possibly due to an issue in ezusermanager_core.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.ezusermanager.com/security.php - https://www.exploit-db.com/exploits/1795 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26470 - http://www.securityfo
://www.exploit-db.com/exploits/1795 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26470 - http://www.securityfocus.com/bid/17998 - http://www.osvdb.org/25540 - http://secunia.com/advisories/20103 - http://www.vupen.com/english/advisories/2006/1826
CVE ID: CVE-2006-2425 State: PUBLISHED Published: 2006-05-17T10:00:00 Last Updated: 2024-08-07T17:51:04.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PRV.php in PhpRemoteView, possibly 2003-10-23 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) f, (2) d, and (3) ref parameters, and the (4) "MAKE DIR" and (5) "Full file name" fields. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26473 - http://www.osvdb.org/25572 - http://secunia.com/advisories/20141 - http://www.vupen.com/english/advisories/2006/1844 - http://ww
ww.osvdb.org/25572 - http://secunia.com/advisories/20141 - http://www.vupen.com/english/advisories/2006/1844 - http://www.securityfocus.com/bid/17994 - http://soot.shabgard.org/bugs/phpremoteview.txt - http://www.securityfocus.com/archive/1/434118/100/0/threaded - http://securityreason.com/securityalert/902
CVE ID: CVE-2006-2426 State: PUBLISHED Published: 2006-05-17T10:00:00 Last Updated: 2024-08-07T17:51:04.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows remote attackers to cause a denial of service (disk consumption) by using the Font.createFont function to create temporary files of arbitrary size in the %temp% directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:137 - http://secunia.com/advisories/34632 - http://securityreason.com/securityalert/909 - http://www.illegalaccess.org/
:137 - http://secunia.com/advisories/34632 - http://securityreason.com/securityalert/909 - http://www.illegalaccess.org/exploit/FullDiskApplet.html - http://secunia.com/advisories/34675 - http://www.securityfocus.com/archive/1/434001/100/0/threaded - http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm - http://secunia.com/advisories/20132 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10609 - http://secunia.com/advisories/34489 - http://www.redhat.com/support/errata/RHSA-2009-0394.html - http://www.osvdb.org/25561 - http://secunia.com/advisories/34495 - https://rhn.redhat.com/errata/RHSA-2009-0377.html - http://www.novell.com/linux/security/
secunia.com/advisories/34495 - https://rhn.redhat.com/errata/RHSA-2009-0377.html - http://www.novell.com/linux/security/advisories/2006-06-02.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:162 - http://www.vupen.com/english/advisories/2006/1824 - http://www.redhat.com/support/errata/RHSA-2009-0392.html - http://secunia.com/advisories/34496 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26493 - http://www.ubuntu.com/usn/usn-748-1 - http://www.debian.org/security/2009/dsa-1769 - http://www.securityfocus.com/bid/17981 - http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm - http://secunia.com/advisories/20457
CVE ID: CVE-2006-2427 State: PUBLISHED Published: 2006-05-17T10:00:00 Last Updated: 2024-08-07T17:51:04.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: freshclam in (1) Clam Antivirus (ClamAV) 0.88 and (2) ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, which allows local users to read portions of arbitrary files when an error message displays the first line of the target file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26453 - http://securitytracker.com/id?1016086 - http://www.securityfocus.com/archive/1/434008/100/0/threaded - http://www.vupe
- http://securitytracker.com/id?1016086 - http://www.securityfocus.com/archive/1/434008/100/0/threaded - http://www.vupen.com/english/advisories/2006/1807 - http://secunia.com/advisories/20085 - http://securityreason.com/securityalert/912 - http://www.digitalmunition.com/DMA%5B2006-0514a%5D.txt
CVE ID: CVE-2006-2428 State: PUBLISHED Published: 2006-05-17T10:00:00 Last Updated: 2024-08-07T17:51:04.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed. NOTE: some of these details are obtained from third party information, since the raw source is vague. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20102 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26457 - http://securityreason.com/securityalert/911 - http://www.s
https://exchange.xforce.ibmcloud.com/vulnerabilities/26457 - http://securityreason.com/securityalert/911 - http://www.securityfocus.com/bid/17993 - http://www.vupen.com/english/advisories/2006/1825 - http://www.securityfocus.com/archive/1/433894/100/0/threaded
CVE ID: CVE-2006-2429 State: PUBLISHED Published: 2006-05-17T10:00:00 Last Updated: 2024-08-07T17:51:04.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM WebSphere Application Server 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5, and 6.0.2.7 has unknown impact and remote attack vectors related to "HTTP request handlers". Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?rs=0&dc=DB550&q1=PK12319&uid=swg1PK16502&loc=en_US&cs=utf-8&lang= - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012064 - http://www.osvdb.org/25373 - http://securityreason.com/securityalert/910 - http://www.vupen.com/english
id=swg24012064 - http://www.osvdb.org/25373 - http://securityreason.com/securityalert/910 - http://www.vupen.com/english/advisories/2006/1736 - http://secunia.com/advisories/20032 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html - http://www-1.ibm.com/support/docview.wss?rs=0&dc=DB550&q1=PK12319&uid=swg1PK16502&loc=en_US&cs=utf-8&lang=
CVE ID: CVE-2006-2430 State: PUBLISHED Published: 2006-05-17T10:00:00 Last Updated: 2024-08-07T17:51:04.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server 5.0.2 and earlier, 5.1.1 and earlier, and 6.0.2 up to 6.0.2.7 records user credentials in plaintext in addNode.log, which allows attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=PK16492&apar=only - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012064 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012009 - http://www-1.ibm.com/support/docview.wss?rs=0&dc=DB550&q1=PK16492&uid=swg1PK
upport/docview.wss?rs=180&uid=swg24012009 - http://www-1.ibm.com/support/docview.wss?rs=0&dc=DB550&q1=PK16492&uid=swg1PK22416&loc=en_US&cs=utf-8&lang= - http://securityreason.com/securityalert/910 - http://www.vupen.com/english/advisories/2006/1736 - http://secunia.com/advisories/20032 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24011773 - http://www.osvdb.org/25372