Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-5900 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:04:55.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the incubator/tests/Zend/Http/_files/testRedirections.php sample code in Zend Framework Preview 0.2.0 allows remote attackers to inject arbitrary web script or HTML via arbitrary parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1863 - http://www.securityfocus.com/archive/1/450707/100/0/threaded - http://www.armorize.com/resources/vulnerDetail.php?cve_name=Armorize-ADV-2006-0009
CVE ID: CVE-2006-5901 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:04:55.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hawking Technology wireless router WR254-CA uses a hardcoded IP address among the set of DNS server IP addresses, which could allow remote attackers to cause a denial of service or hijack the router by attacking or spoofing the server at the hardcoded address. NOTE: it could be argued that this issue reflects an inherent limitation of DNS itself, so perhaps it should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1860 - http://www.securityfocus.c
Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1860 - http://www.securityfocus.com/archive/1/450138/100/100/threaded
CVE ID: CVE-2006-5902 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:04:55.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: viksoe GMail Drive shell extension allows remote attackers to perform virtual filesystem actions via e-mail messages with certain subject lines, as demonstrated by (1) a GMAILFS: [13;a;1] message with a new filename and a file attachment, which injects a new file into the filesystem; (2) a GMAILFS: [13;a;1] message with an existing filename and a file attachment, which overwrites existing file content; and (3) a GMAILFS: [14;a;1] message, which creates a folder. Additional Analyst Notes: - CVE Program Container: References: -
) a GMAILFS: [14;a;1] message, which creates a folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/450683/100/0/threaded
CVE ID: CVE-2006-5903 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:04:55.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rahul Jonna Gmail File Space (GSpace) allows remote attackers to perform virtual filesystem actions via e-mail messages with certain subject lines, as demonstrated by (1) a GSPACE "2174|1|1|1|gs:/ d$" message, which injects a new file into the filesystem; and (2) a GSPACE "|-135|1|1|0|gs:/ d$" message, which creates a folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/450683/100/0/threaded
CVE ID: CVE-2006-5904 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:04:55.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in MWChat Pro 7.0 allow remote attackers to execute arbitrary PHP code via a URL in the CONFIG[MWCHAT_Libs] parameter to (1) about.php, (2) buddy.php, (3) chat.php, (4) dialog.php, (5) head.php, (6) help.php, (7) index.php, and (8) license.php, different vectors than CVE-2005-1869. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/450693/100/0/threaded - http://securityreason.com/securityalert/1849
CVE ID: CVE-2006-5905 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:04:55.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Directory Pro allows remote attackers to (1) backup the database and obtain the backup via a direct request to admin/backup_db.php or (2) modify configuration via a direct request to admin/options.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30009 - https://www.exploit-db.com/exploits/8878 - http://securityreason.com/securityalert/1859 - http://secunia.com/advisories/35327 - http://www.securityfocus.com/archive/1/450556/100/0/threaded
CVE ID: CVE-2006-5906 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:12:30.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules/bannieres/bannieres.php in Jean-Christophe Ramos SCRIPT BANNIERES (aka ban 0.1 and PLS-Bannieres 1.21) allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter. NOTE: the issue is disputed by other researchers, who observe that $chemin is defined before use Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20772 - http://www.securityfocus.com/archive/1/450297/100/200/threaded - http://www.securityfo
www.securityfocus.com/bid/20772 - http://www.securityfocus.com/archive/1/450297/100/200/threaded - http://www.securityfocus.com/archive/1/449955/100/200/threaded - http://www.securityfocus.com/archive/1/449927/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29856 - http://www.securityfocus.com/archive/1/449910/100/200/threaded
CVE ID: CVE-2006-5907 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:12:30.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules/bannieres/bannieres.php in Jean-Christophe Ramos SCRIPT BANNIERES (aka ban 0.1 and PLS-Bannieres 1.21) allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/449955/100/200/threaded - http://www.securityfocus.com/bid/20779 - http://www.attrition.org/pipermail/vim/2006-November/001124.html
CVE ID: CVE-2006-5908 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:12:30.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the login_user function in yans.func.php in Lucas Rodriguez San Pedro Yet Another News System (YANS) 0.2b allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30119 - http://securityreason.com/securityalert/1866 - http://archives.neohapsis.com/archives/bugtraq/2006-11/0121.html - http://www.securityfocus.com/bid/20963
CVE ID: CVE-2006-5909 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:12:30.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: generaloptions.php in Paul Tarjan Stanford Conference And Research Forum (SCARF) before 20070227 does not require the admin privilege, which allows remote attackers to reconfigure the application or its user accounts. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30037 - http://www.vupen.com/english/advisories/2007/0760 - http://www.securityfocus.com/archive/1/460196/100/0/threaded - http://sourceforge.net/project/shownotes.php?group_id=177652&release_id=4
ityfocus.com/archive/1/460196/100/0/threaded - http://sourceforge.net/project/shownotes.php?group_id=177652&release_id=489633 - http://secunia.com/advisories/24311 - http://www.securityfocus.com/archive/1/450679/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32700 - http://www.securityfocus.com/bid/20934
CVE ID: CVE-2006-5910 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:12:30.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 20061110 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) bugreporter/thankyou.php and (2) feedback/thankyou.php in implementation/management/priv/. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4776 - http://www.securityfocus.com/bid/20519 - http://code.campware.org/projects/campsite/changeset/6119 - http://code.campware.org/projects
urityfocus.com/bid/20519 - http://code.campware.org/projects/campsite/changeset/6119 - http://code.campware.org/projects/campsite/ticket/2363 - http://code.campware.org/projects/campsite/changeset/6118
CVE ID: CVE-2006-5911 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:12:30.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) Alias.php, (2) Article.php, (3) ArticleAttachment.php, (4) ArticleComment.php, (5) ArticleData.php, (6) ArticleImage.php, (7) ArticleIndex.php, (8) ArticlePublish.php, (9) ArticleTopic.php, (10) ArticleType.php, (11) ArticleTypeField.php, (12) Attachment.php, (13) Country.php, (14) DatabaseObject.php, (15) Event.php, (16) IPAccess.php, (17) Im
ypeField.php, (12) Attachment.php, (13) Country.php, (14) DatabaseObject.php, (15) Event.php, (16) IPAccess.php, (17) Image.php, (18) Issue.php, (19) IssuePublish.php, (20) Language.php, (21) Log.php, (22) LoginAttempts.php, (23) Publication.php, (24) Section.php, (25) ShortURL.php, (26) Subscription.php, (27) SubscriptionDefaultTime.php, (28) SubscriptionSection.php, (29) SystemPref.php, (30) Template.php, (31) TimeUnit.php, (32) Topic.php, (33) UrlType.php, (34) User.php, and (35) UserType.php in implementation/management/classes/; (36) configuration.php and (37) db_connect.php in implementation/management/; and (38) LocalizerConfig.php and (39) LocalizerLanguage.php in implementation/mana
ct.php in implementation/management/; and (38) LocalizerConfig.php and (39) LocalizerLanguage.php in implementation/management/priv/localizer/. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/34217 - http://www.osvdb.org/34215 - http://www.osvdb.org/34189 - http://www.osvdb.org/34214 - http://sourceforge.net/project/shownotes.php?release_id=459574&group_id=66936 - http://www.osvdb.org/34198 - http://www.osvdb.org/34195 - http://www.osvdb.org/34205 - http://www.osvdb.org/34187 - http://www.osvdb.org/34208 - http://www.osvdb.org/34216 - http://code.campware.org/projects/campsite/ticket/2349 - http://www.osvdb.org/34224 - http://code.campware.org/projects/c
ttp://code.campware.org/projects/campsite/ticket/2349 - http://www.osvdb.org/34224 - http://code.campware.org/projects/campsite/query?milestone=2.6.2 - http://www.osvdb.org/34197 - http://www.osvdb.org/34221 - http://www.osvdb.org/34213 - http://www.osvdb.org/34209 - http://www.osvdb.org/34211 - http://www.osvdb.org/34191 - http://code.campware.org/projects/campsite/changeset/6057 - http://www.osvdb.org/34225 - http://www.osvdb.org/34203 - http://www.osvdb.org/34200 - http://www.osvdb.org/34222 - http://www.osvdb.org/34223 - http://www.osvdb.org/34218 - http://www.osvdb.org/34206 - http://www.osvdb.org/34199 - http://www.osvdb.org/34196 - http://www.osvdb.org/34219 - http://www.osvdb.org/342
/34206 - http://www.osvdb.org/34199 - http://www.osvdb.org/34196 - http://www.osvdb.org/34219 - http://www.osvdb.org/34201 - http://www.securityfocus.com/bid/23874 - http://www.osvdb.org/34192 - http://www.osvdb.org/34210 - http://www.osvdb.org/34188 - http://www.osvdb.org/34204 - http://www.osvdb.org/34202 - http://www.osvdb.org/34190 - http://code.campware.org/projects/campsite/changeset/6058 - http://www.osvdb.org/34220 - http://www.osvdb.org/34207 - http://www.osvdb.org/34193 - http://www.osvdb.org/34194 - http://www.osvdb.org/34212
CVE ID: CVE-2006-5912 State: PUBLISHED Published: 2006-11-15T15:00:00Z Last Updated: 2024-09-16T18:04:11.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Campware Campsite before 2.6.2 has unknown impact and attack vectors, related to a "Security fix for you-know-what," possibly related to encrypted passwords. Additional Analyst Notes: - CVE Program Container: References: - http://code.campware.org/projects/campsite/ticket/2344 - http://sourceforge.net/project/shownotes.php?release_id=459574&group_id=66936 - http://code.campware.org/projects/campsite/query?milestone=2.6.2 - http://code.campware.org/projects/campsite/changeset/6042 - http://code.cam
rg/projects/campsite/query?milestone=2.6.2 - http://code.campware.org/projects/campsite/changeset/6042 - http://code.campware.org/projects/campsite/changeset/6041
CVE ID: CVE-2006-5913 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:12:30.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 allows remote attackers to (1) cause a security certificate from a secure web site to appear invalid via a link to res://ieframe.dll/sslnavcancel.htm with the target site in the anchor identifier, which displays the site's URL in the address bar but causes Internet Explorer to report that the certificate is invalid, or (2) trigger a "The webpage no longer exists" report via a link to res://ieframe.dll/http_410.htm, a variant of CVE-2006-5805. Additional Analyst Notes: - CVE Program Container: Refe
k to res://ieframe.dll/http_410.htm, a variant of CVE-2006-5805. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/450825/100/0/threaded - http://www.blogger.com/comment.g?blogID=15069726&postID=116257593427394541
CVE ID: CVE-2006-5914 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:12:30.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ls.php in SAMEDIA LandShop allows remote attackers to execute arbitrary SQL commands via the infield parameter. NOTE: the start, search_order, search_type, and search_area parameters are already covered by CVE-2005-4018. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/451059/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30164 - http://www.vupen.com/english/advisories/2006/4450 - http://secunia.com/advisories/22784 - h
.com/vulnerabilities/30164 - http://www.vupen.com/english/advisories/2006/4450 - http://secunia.com/advisories/22784 - http://securityreason.com/securityalert/1864 - http://www.securityfocus.com/bid/20989
CVE ID: CVE-2006-5915 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:12:30.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ls.php in SAMEDIA LandShop allow remote attackers to inject arbitrary web script or HTML via the (1) start, (2) CAT_ID, (3) keyword, (4) search_area, (5) search_type, (6) infield, or (7) search_order parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/451059/100/0/threaded - http://www.vupen.com/english/advisories/2006/4450 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30163 - http://secunia.com/adviso
om/english/advisories/2006/4450 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30163 - http://secunia.com/advisories/22784 - http://securityreason.com/securityalert/1864 - http://www.securityfocus.com/bid/20989
CVE ID: CVE-2006-5916 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:12:30.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intego VirusBarrier X4 allows context-dependent attackers to bypass virus protection by quickly injecting many infected files into the filesystem, which prevents VirusBarrier from processing all the files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20983 - http://www.digitalmunition.com/DMA%5B2006-1031a%5D.txt - http://securitytracker.com/id?1017202 - http://archives.neohapsis.com/archives/fulldisclosure/2006-11/0141.html - https://exchange.xforce.ibmcloud.com/vulnerabilit
p://archives.neohapsis.com/archives/fulldisclosure/2006-11/0141.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30127
CVE ID: CVE-2006-5917 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:12:30.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in OmniStar Article Manager allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter in (a) articles/comments.php and (b) articles/article.php, and the (2) page_id parameter in (c) articles/pages.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/451045/100/0/threaded - http://www.securityfocus.com/bid/20990 - http://securityreason.com/securityalert/1865 - http://s-a-p.ca/index.php?page=OurAdvisorie
securityfocus.com/bid/20990 - http://securityreason.com/securityalert/1865 - http://s-a-p.ca/index.php?page=OurAdvisories&id=10 - http://secunia.com/advisories/22794 - http://securitytracker.com/id?1017208 - http://www.vupen.com/english/advisories/2006/4449 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30166
CVE ID: CVE-2006-5918 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:12:30.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in RapidKill (aka PHP Rapid Kill) 5.7 Pro, and certain other versions, allows remote attackers to upload and execute arbitrary PHP scripts via the "Link to Download" field. NOTE: it is possible that the field value is restricted to files on specific public web sites. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1862 - http://www.securityfocus.com/bid/20896 - http://www.securityfocus.com/archive/1/450681/100/0/threaded
CVE ID: CVE-2006-5919 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:12:30.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/e_data/visEdit_control.class.php in ActiveCampaign KnowledgeBuilder 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the visEdit_root parameter, a different vector than CVE-2003-1131. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/450944/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30134 - http://www.securityfocus.com/bid/20857 - http://www.securityfocus.com/bid/20020 - http:/
oud.com/vulnerabilities/30134 - http://www.securityfocus.com/bid/20857 - http://www.securityfocus.com/bid/20020 - http://securityreason.com/securityalert/1861 - https://www.exploit-db.com/exploits/2364
CVE ID: CVE-2006-5920 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:12:30.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in common.php in Yuuki Yoshizawa Exporia 0.3.0 allows remote attackers to execute arbitrary PHP code via a URL in the lan parameter. NOTE: SecurityFocus disputes this issue, saying "further analysis reveals that the application is not vulnerable." NOTE: this issue may overlap CVE-2006-5113 Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20205 - http://www.securityfocus.com/archive/1/450024/100/200/threaded - https://exchange.xforce.ibmclo
ityfocus.com/bid/20205 - http://www.securityfocus.com/archive/1/450024/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29895 - http://securityreason.com/securityalert/1858
CVE ID: CVE-2006-5921 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:12:30.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in add_comment.php in Wheatblog (wB) allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) WWW, and (3) Comment fields. NOTE: this issue may overlap CVE-2006-5195. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20306 - http://www.securityfocus.com/archive/1/451062/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30161 - http://securityreason.com/securityalert/1867 - http://se
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30161 - http://securityreason.com/securityalert/1867 - http://secunia.com/advisories/22783
CVE ID: CVE-2006-5922 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:12:30.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Wheatblog (wB) allows remote attackers to obtain sensitive information via certain values of the postPtr[] and next parameters, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/451062/100/0/threaded - http://securityreason.com/securityalert/1867 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30162
CVE ID: CVE-2006-5923 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:12:30.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Chris Mac gtcatalog (aka GimeScripts Shopping Catalog) 0.9.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the custom parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20979 - http://www.securityfocus.com/archive/1/452114/100/200/threaded - https://www.exploit-db.com/exploits/2745
CVE ID: CVE-2006-5924 State: PUBLISHED Published: 2006-11-15T15:00:00Z Last Updated: 2024-09-17T00:41:19.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Efficient IP iPmanager (IPm) 2.3 allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter. NOTE: the provenance of this information is unknown; details are obtained from third party sources. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20952
CVE ID: CVE-2006-5925 State: PUBLISHED Published: 2006-11-15T19:00:00 Last Updated: 2024-08-07T20:12:30.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017233 - http://secunia.com/advisories/22920 - http://www.redhat.com/support/errata/RHSA-2006-0742.html - http://secunia.com/advisories/22923 - http://security.gentoo.org/glsa/glsa-200612-16.xml - http://secunia.com/advisori
- http://secunia.com/advisories/22923 - http://security.gentoo.org/glsa/glsa-200612-16.xml - http://secunia.com/advisories/22905 - http://www.trustix.org/errata/2007/0005 - http://www.securityfocus.com/archive/1/451870/100/200/threaded - http://secunia.com/advisories/23467 - http://secunia.com/advisories/24005 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11213 - http://secunia.com/advisories/23188 - http://www.debian.org/security/2006/dsa-1240 - http://secunia.com/advisories/23234 - http://www.debian.org/security/2006/dsa-1228 - http://securitytracker.com/id?1017232 - http://www.novell.com/linux/security/advisories/2006_27_sr.html - https://exchang