Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-1629 State: PUBLISHED Published: 2006-04-06T22:00:00 Last Updated: 2024-08-07T17:19:48.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25667 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:069 - http://www.vupen.com/english/advisories/2006/1261 - http://www.securityfocus.com/bid/17392 - http://openvpn.net/changelog.html - http://www.osreviews.net/reviews/security/openvpn-print
ecurityfocus.com/bid/17392 - http://openvpn.net/changelog.html - http://www.osreviews.net/reviews/security/openvpn-print - http://secunia.com/advisories/19531 - http://www.debian.org/security/2006/dsa-1045 - http://secunia.com/advisories/19598 - http://sourceforge.net/mailarchive/forum.php?thread_id=10093825&forum_id=8482 - http://secunia.com/advisories/19837 - http://www.osvdb.org/24444 - http://secunia.com/advisories/19897 - http://www.novell.com/linux/security/advisories/2006_04_28.html
CVE ID: CVE-2006-1630 State: PUBLISHED Published: 2006-04-06T22:00:00 Last Updated: 2024-08-07T17:19:48.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cli_bitset_set function in libclamav/others.c in Clam AntiVirus (ClamAV) before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19567 - http://www.securityfocus.com/bid/17951 - http://www.vupen.com/english/advisories/2006/1258 - http://www.vupen.com/english/advisories/2006/1779 - http://www.us-cert.gov/cas/techalerts/TA06-132A.html - http://sourceforge.n
www.vupen.com/english/advisories/2006/1779 - http://www.us-cert.gov/cas/techalerts/TA06-132A.html - http://sourceforge.net/project/shownotes.php?release_id=407078&group_id=86638 - http://secunia.com/advisories/19570 - http://up2date.astaro.com/2006/05/low_up2date_6202.html - http://www.osvdb.org/24459 - http://www.gentoo.org/security/en/glsa/glsa-200604-06.xml - http://secunia.com/advisories/19608 - http://secunia.com/advisories/19534 - http://secunia.com/advisories/19564 - http://secunia.com/advisories/19536 - http://lists.apple.com/archives/security-announce/2006/May/msg00003.html - http://lists.suse.com/archive/suse-security-announce/2006-Apr/0002.html - http://www.mandriva.com/security/a
0003.html - http://lists.suse.com/archive/suse-security-announce/2006-Apr/0002.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:067 - http://www.securityfocus.com/bid/17388 - http://www.debian.org/security/2006/dsa-1024 - http://secunia.com/advisories/23719 - http://secunia.com/advisories/20077 - http://www.trustix.org/errata/2006/0020 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25662
CVE ID: CVE-2006-1631 State: PUBLISHED Published: 2006-04-05T18:00:00 Last Updated: 2024-08-07T17:19:48.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the HTTP compression functionality in Cisco CSS 11500 Series Content Services switches allows remote attackers to cause a denial of service (device reload) via (1) "valid, but obsolete" or (2) "specially crafted" HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1257 - http://securitytracker.com/id?1015870 - http://www.cisco.com/warp/public/707/cisco-sa-20060405-css.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilitie
- http://www.cisco.com/warp/public/707/cisco-sa-20060405-css.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/25642 - http://secunia.com/advisories/19552 - http://www.osvdb.org/24433 - http://www.securityfocus.com/bid/17383
CVE ID: CVE-2006-1634 State: PUBLISHED Published: 2006-04-06T10:00:00 Last Updated: 2024-08-07T17:19:48.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in LucidCMS 2.0.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the command parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17360 - http://www.securityfocus.com/archive/1/429744 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25632
CVE ID: CVE-2006-1635 State: PUBLISHED Published: 2006-04-06T10:00:00 Last Updated: 2024-08-07T17:19:48.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: LucidCMS 2.0.0 RC4 allows remote attackers to obtain sensitive information via a direct request to /lucid_phplib/translator.php, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/429744 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25633
CVE ID: CVE-2006-1636 State: PUBLISHED Published: 2006-04-06T10:00:00 Last Updated: 2024-08-07T17:19:48.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in get_header.php in VWar 1.5.0 R12 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the vwar_root parameter. NOTE: this is a different vulnerability than CVE-2006-1503. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.securityfocus.com/vulnerabilities/exploits/VWar_1.5.0_R12.pl - http://www.osvdb.org/24480 - http://www.vupen.com/english/advisories/2006/1228 - http://www.securityfocus.com/archive/1/429742/100/0/threaded - htt
- http://www.vupen.com/english/advisories/2006/1228 - http://www.securityfocus.com/archive/1/429742/100/0/threaded - http://secunia.com/advisories/19524 - http://www.securityfocus.com/bid/17358
CVE ID: CVE-2006-1637 State: PUBLISHED Published: 2006-04-06T10:00:00 Last Updated: 2024-08-07T17:19:48.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in aWebBB 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) tname or (2) fpost parameters to (a) post.php; (3) fullname, (4) emailadd, (5) country, (6) sig, or (7) otherav parameters to (b) editac.php; or (8) fullname, (9) emailadd, or (10) country parameters to (c) register.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24339 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25585 - http://secunia.c
References: - http://www.osvdb.org/24339 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25585 - http://secunia.com/advisories/19486 - http://www.securityfocus.com/archive/1/431064/100/0/threaded - http://www.osvdb.org/24338 - http://evuln.com/vulns/117/summary.html - http://www.vupen.com/english/advisories/2006/1197 - http://www.securityfocus.com/bid/17352 - http://www.osvdb.org/24337
CVE ID: CVE-2006-1638 State: PUBLISHED Published: 2006-04-06T10:00:00 Last Updated: 2024-08-07T17:19:48.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in aWebBB 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) Username parameter to (a) accounts.php, (b) changep.php, (c) editac.php, (d) feedback.php, (e) fpass.php, (f) login.php, (g) post.php, (h) reply.php, or (i) reply_log.php; (2) p parameter to (j) dpost.php; (3) c parameter to (k) list.php or (l) ndis.php; or (12) q parameter to (m) search.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24348 - http://www.osvdb.org/2
hp. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24348 - http://www.osvdb.org/24351 - http://www.osvdb.org/24345 - http://www.osvdb.org/24346 - http://secunia.com/advisories/19486 - http://www.osvdb.org/24343 - http://www.securityfocus.com/archive/1/431064/100/0/threaded - http://www.osvdb.org/24342 - http://www.osvdb.org/24349 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25587 - http://www.osvdb.org/24352 - http://evuln.com/vulns/117/summary.html - http://www.vupen.com/english/advisories/2006/1197 - http://www.osvdb.org/24347 - http://www.osvdb.org/24350 - http://www.osvdb.org/24341 - http://www.securityfocus.com/bid/17352 - http://www.osvd
347 - http://www.osvdb.org/24350 - http://www.osvdb.org/24341 - http://www.securityfocus.com/bid/17352 - http://www.osvdb.org/24340 - http://www.osvdb.org/24344
CVE ID: CVE-2006-1639 State: PUBLISHED Published: 2006-04-06T10:00:00 Last Updated: 2024-08-07T17:19:48.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in wpBlog 0.4 allows remote attackers to execute arbitrary SQL commands via the postid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24385 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25628 - http://www.securityfocus.com/bid/17381 - http://www.vupen.com/english/advisories/2006/1238 - http://securitytracker.com/id?1015951 - http://evuln.com/vulns/119/summary.html - http://securityreason.com/securityalert/734 - http://secunia.co
m/id?1015951 - http://evuln.com/vulns/119/summary.html - http://securityreason.com/securityalert/734 - http://secunia.com/advisories/19538 - http://www.securityfocus.com/archive/1/431186/100/0/threaded
CVE ID: CVE-2006-1640 State: PUBLISHED Published: 2006-04-06T10:00:00 Last Updated: 2024-08-07T17:19:48.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in news.php in CzarNews 1.14 allows remote attackers to inject arbitrary web script or HTML via the email parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015957 - http://www.vupen.com/english/advisories/2006/1237 - http://evuln.com/vulns/118/summary.html - http://secunia.com/advisories/19541 - http://securityreason.com/securityalert/732 - http://www.securityfocus.com/archive/1/431132/100/0/threaded - http://www.osvdb.org/24381 -
ason.com/securityalert/732 - http://www.securityfocus.com/archive/1/431132/100/0/threaded - http://www.osvdb.org/24381 - http://www.securityfocus.com/bid/17380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25623
CVE ID: CVE-2006-1641 State: PUBLISHED Published: 2006-04-06T10:00:00 Last Updated: 2024-08-07T17:19:48.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in CzarNews 1.14 allow remote attackers to execute arbitrary SQL commands via the (1) usern or (2) passw parameters to (a) cn_auth.php, (3) s parameter to (b) news.php, or (4) a parameter to (c) dpost.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015957 - http://www.osvdb.org/24383 - http://www.vupen.com/english/advisories/2006/1237 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25624 - http://evuln.com/vulns/118/summary.html
sories/2006/1237 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25624 - http://evuln.com/vulns/118/summary.html - http://secunia.com/advisories/19541 - http://www.securityfocus.com/archive/1/431132/100/0/threaded - http://www.securityfocus.com/bid/17380 - http://www.osvdb.org/24382 - http://www.osvdb.org/24384
CVE ID: CVE-2006-1642 State: PUBLISHED Published: 2006-04-06T10:00:00 Last Updated: 2024-08-07T17:19:48.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Interact 2.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) the search_terms parameter to (a) search.php, and (2) the first_name, (3) last_name, (4) email, (5) password, and (6) confirm_password parameters to (b) userinput.php. NOTE: the provenance of this information is unknown; the details are obtained from third party. In addition, the lack of precision in the third party descriptions makes it unclear whether the named vectors are correct. Additional Anal
ack of precision in the third party descriptions makes it unclear whether the named vectors are correct. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19488 - http://www.osvdb.org/24461 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25652 - http://www.osvdb.org/24389 - http://www.vupen.com/english/advisories/2006/1244
CVE ID: CVE-2006-1643 State: PUBLISHED Published: 2006-04-06T10:00:00 Last Updated: 2024-08-07T17:19:48.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in Interact 2.1.1 allows remote attackers to execute arbitrary SQL commands via the user_name parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19488 - http://www.securityfocus.com/bid/17385 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25653 - http://www.vupen.com/english/advisories/2006/1244 - http://www.osvdb.org/24390
CVE ID: CVE-2006-1644 State: PUBLISHED Published: 2006-04-06T10:00:00 Last Updated: 2024-08-07T17:19:49.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: login.php in Interact 2.1.1 generates different responses depending on whether or not a username is valid, which allows remote attackers to determine valid usernames. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19488 - http://www.vupen.com/english/advisories/2006/1244 - http://www.osvdb.org/24388 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25651
CVE ID: CVE-2006-1645 State: PUBLISHED Published: 2006-04-06T10:00:00 Last Updated: 2024-08-07T17:19:49.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Anton Vlasov and Rostislav Gaitkuloff ReloadCMS 1.2.5 and earlier allows remote attackers to inject arbitrary web script or HTML and gain leverage to execute arbitrary PHP code via the User-Agent HTTP header, which is displayed by admin/modules/general/statistic.php in the administration panel. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19470 - http://www.osvdb.org/24327 - http://www.securityfocus.com/bid/17353 - https://exchange.xf
secunia.com/advisories/19470 - http://www.osvdb.org/24327 - http://www.securityfocus.com/bid/17353 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25604 - http://www.vupen.com/english/advisories/2006/1193 - http://www.securityfocus.com/archive/1/429666/100/0/threaded
CVE ID: CVE-2006-1646 State: PUBLISHED Published: 2006-04-06T10:00:00Z Last Updated: 2024-09-16T19:40:22.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in the Shoichi Sakane KAME Project racoon, as used by NetBSD 1.6, 2.x before 20060119, certain FreeBSD releases, and possibly other distributions of BSD or Linux operating systems, when running in aggressive mode, allows remote attackers to cause a denial of service (daemon crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. Additional Analyst Notes: - CVE Program Container: References: - http://www.niscc.gov.uk/ni
ISAKMP Test Suite for IKEv1. Additional Analyst Notes: - CVE Program Container: References: - http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-003.txt.asc - http://mail-index.netbsd.org/source-changes/2006/01/19/0017.html - http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/ - http://secunia.com/advisories/19463
CVE ID: CVE-2006-1647 State: PUBLISHED Published: 2006-04-06T10:00:00 Last Updated: 2024-08-07T17:19:48.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified "logical programming mistake" in SMART SynchronEyes Student and Teacher 6.0, and possibly earlier versions, allows remote attackers to cause a denial of service via a large packet to the Teacher discovery port (UDP port 5496), which causes a thread to terminate and prevents communications on that port. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/429843/100/0/threaded - http://www.securityfocus.com/bid/17373 - https://exchange.xforce.ibmcloud.com/vulnera
/archive/1/429843/100/0/threaded - http://www.securityfocus.com/bid/17373 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25659 - http://www.vupen.com/english/advisories/2006/1241 - http://securitytracker.com/id?1015869 - http://secunia.com/advisories/19535
CVE ID: CVE-2006-1648 State: PUBLISHED Published: 2006-04-06T10:00:00 Last Updated: 2024-08-07T17:19:48.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: SMART SynchronEyes Student and Teacher 6.0, and possibly earlier versions, allows remote attackers to cause a denial of service (memory consumption) via a certain packet to the Teacher discovery port that causes SynchronEyes to connect to the attacker's machine and read a value that is used as a parameter to malloc. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/429843/100/0/threaded - http://www.securityfocus.com/bid/17373 - http://www.vupen.com/english/advisories/2006/
archive/1/429843/100/0/threaded - http://www.securityfocus.com/bid/17373 - http://www.vupen.com/english/advisories/2006/1241 - http://securitytracker.com/id?1015869 - http://www.osvdb.org/24392 - http://secunia.com/advisories/19535 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25663
CVE ID: CVE-2006-1649 State: PUBLISHED Published: 2006-04-06T10:00:00 Last Updated: 2024-08-07T17:19:49.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "restore to" selection in the "quarantine a file" capability of ESET NOD32 before 2.51.26 allows a restore to any directory that permits read access by the invoking user, which allows local users to create new files despite write-access directory permissions. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24393 - http://securitytracker.com/id?1015867 - http://www.securityfocus.com/bid/17374 - http://securityreason.com/securityalert/672 - https://exchange.xforce.ibmcloud.com/vulnerabil
urityfocus.com/bid/17374 - http://securityreason.com/securityalert/672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25640 - http://www.vupen.com/english/advisories/2006/1242 - http://www.securityfocus.com/archive/1/429892/100/0/threaded - http://secunia.com/advisories/19054
CVE ID: CVE-2006-1650 State: PUBLISHED Published: 2006-04-06T10:00:00 Last Updated: 2024-08-07T17:19:48.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox 1.5.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading. NOTE: a followup was unable to replicate this issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/429927/100/0/threaded - http://www.securityfocus.com/archive/1/430348/30/5730/threaded - https://exch
ocus.com/archive/1/429927/100/0/threaded - http://www.securityfocus.com/archive/1/430348/30/5730/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25634
CVE ID: CVE-2006-1651 State: PUBLISHED Published: 2006-04-06T10:00:00 Last Updated: 2024-08-07T17:19:49.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft ISA Server 2004 allows remote attackers to bypass certain filtering rules, including ones for (1) ICMP and (2) TCP, via IPv6 packets. NOTE: An established researcher has disputed this issue, saying that "Neither ISA Server 2004 nor Windows 2003 Basic Firewall support IPv6 filtering ... This is different network protocol. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/429816/100/0/threaded - http://www.securityfocus.com/archive/1/429846/100/0/threaded - http://w
urityfocus.com/archive/1/429816/100/0/threaded - http://www.securityfocus.com/archive/1/429846/100/0/threaded - http://www.securityfocus.com/archive/1/430281/100/0/threaded - http://www.securityfocus.com/archive/1/430684/100/0/threaded
CVE ID: CVE-2006-1652 State: PUBLISHED Published: 2006-04-06T10:00:00 Last Updated: 2024-08-07T17:19:48.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-assisted remote attackers to execute arbitrary code via a malicious server that sends a long string to a client that connects on TCP port 5900, which triggers an overflow in Log::ReallyPrint; and (2) allow remote attackers to cause a denial of service (server crash) via a long HTTP GET request to TCP port 5800, which triggers an overflow in VNCLog::ReallyPrint. Additional Analyst Notes: - CVE Program Container:
to TCP port 5800, which triggers an overflow in VNCLog::ReallyPrint. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1642 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25648 - https://www.exploit-db.com/exploits/1643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25650 - http://secunia.com/advisories/19513 - http://www.securityfocus.com/archive/1/430711/100/0/threaded - http://www.securityfocus.com/archive/1/430287/100/0/threaded - http://www.vupen.com/english/advisories/2006/1240 - http://securityreason.com/securityalert/674 - http://www.securityfocus.com/archive/1/429930/100/0/threaded - http://lists.grok.org.uk/pipermai
com/securityalert/674 - http://www.securityfocus.com/archive/1/429930/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044901.html - http://www.securityfocus.com/bid/17378
CVE ID: CVE-2006-1653 State: PUBLISHED Published: 2006-04-06T10:00:00 Last Updated: 2024-08-07T17:19:48.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in loadkernel.php in AngelineCMS 0.8.1 allows remote attackers to execute arbitrary PHP code via a URL in the installPath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25658 - http://www.securityfocus.com/bid/17371 - http://advisories.echo.or.id/adv/adv27-K-159-2006.txt - http://www.securityfocus.com/archive/1/429983/100/0/threaded - http://www.osvdb.org/24610
CVE ID: CVE-2006-1654 State: PUBLISHED Published: 2006-04-06T10:00:00 Last Updated: 2024-08-07T17:19:49.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request to TCP port 5225. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/429984/100/0/threaded - http://www.osvdb.org/24396 - http://www.securityfocus.com/bid/17367 - http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0085.html - https://exc
/www.securityfocus.com/bid/17367 - http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0085.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25627 - http://secunia.com/advisories/19529 - http://securitytracker.com/id?1015862 - http://www.securityfocus.com/archive/1/429893/100/0/threaded - http://www.securityfocus.com/archive/1/429893/100/0/threaded - http://www.vupen.com/english/advisories/2006/1230