Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
006/5068 - http://secunia.com/advisories/23282 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://secunia.com/advisories/23614 - http://www.ubuntu.com/usn/usn-398-1 - http://www.vupen.com/english/advisories/2008/0083 - http://www.legroom.net/modules.php?op=modload&name=News&file=article&sid=215 - http://www.novell.com/linux/security/advisories/2006_80_mozilla.html - http://secunia.com/advisories/23545 - http://www.us-cert.gov/cas/techalerts/TA06-354A.html - http://secunia.com/advisories/23589 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.novell.com/linux/security/advisories/2007_06_mozilla.html - http:
chSupport/Document.jsp?objectID=c00771742 - http://www.novell.com/linux/security/advisories/2007_06_mozilla.html - http://www.mozilla.org/security/announce/2006/mfsa2006-75.html - http://securitytracker.com/id?1017421 - http://security.gentoo.org/glsa/glsa-200701-02.xml
CVE ID: CVE-2006-6507 State: PUBLISHED Published: 2006-12-20T01:00:00 Last Updated: 2024-08-07T20:26:46.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 2.0 before 2.0.0.1 allows remote attackers to bypass Cross-Site Scripting (XSS) protection via vectors related to a Function.prototype regression error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21668 - http://secunia.com/advisories/23672 - http://www.vupen.com/english/advisories/2006/5068 - http://securitytracker.com/id?1017422 - http://secunia.com/advisories/23282 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http:/
secunia.com/advisories/23282 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://secunia.com/advisories/23614 - http://www.mozilla.org/security/announce/2006/mfsa2006-76.html - http://www.ubuntu.com/usn/usn-398-1 - http://www.vupen.com/english/advisories/2008/0083 - http://www.novell.com/linux/security/advisories/2006_80_mozilla.html - http://secunia.com/advisories/23545 - http://www.us-cert.gov/cas/techalerts/TA06-354A.html - http://secunia.com/advisories/23589 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.novell.com/linux/security/advisories/2007_06_mozilla.html - http://security.gentoo.org/glsa/glsa-
c00771742 - http://www.novell.com/linux/security/advisories/2007_06_mozilla.html - http://security.gentoo.org/glsa/glsa-200701-02.xml
CVE ID: CVE-2006-6508 State: PUBLISHED Published: 2006-12-14T00:00:00 Last Updated: 2024-08-07T20:26:46.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in phpBB 2.0.21 allows remote authenticated users to send unauthorized messages as an arbitrary user via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30786 - http://secunia.com/advisories/28871 - http://www.debian.org/security/2008/dsa-1488 - http://secunia.com/advisories/23
- http://secunia.com/advisories/28871 - http://www.debian.org/security/2008/dsa-1488 - http://secunia.com/advisories/23283
CVE ID: CVE-2006-6509 State: PUBLISHED Published: 2006-12-14T00:00:00 Last Updated: 2024-08-07T20:26:46.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the skinning feature in SiteKiosk before 6.5.150 allows local users to bypass security protections and inject arbitrary web script or HTML via an ABOUT: URI, which is displayed in the title bar of the browser. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30877 - http://www.securityfocus.com/archive/1/454185/100/0/threaded - http://www.securityfocus.com/bid/21567 - http://www.sitekiosk.com/th_support/versions/ind
hive/1/454185/100/0/threaded - http://www.securityfocus.com/bid/21567 - http://www.sitekiosk.com/th_support/versions/index.php3?id=39 - http://www.vupen.com/english/advisories/2006/4985 - http://secunia.com/advisories/23253 - http://securityreason.com/securityalert/2024
CVE ID: CVE-2006-6510 State: PUBLISHED Published: 2006-12-14T00:00:00 Last Updated: 2024-08-07T20:26:46.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified ActiveX control in SiteKiosk before 6.5.150 is installed "safe for scripting", which allows local users to bypass security protections and read arbitrary files via certain functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/454185/100/0/threaded - http://www.securityfocus.com/bid/21567 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30878 - http://www.sitekiosk.com/th_support/versions/index.php3?id=39 - http://www.vupen.com/english/advisories/
ilities/30878 - http://www.sitekiosk.com/th_support/versions/index.php3?id=39 - http://www.vupen.com/english/advisories/2006/4985 - http://secunia.com/advisories/23253
CVE ID: CVE-2006-6511 State: PUBLISHED Published: 2006-12-14T00:00:00 Last Updated: 2024-08-07T20:26:46.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: dadaIMC .99.3 uses an insufficiently restrictive FilesMatch directive in the installed .htaccess file, which allows remote attackers to execute arbitrary PHP code by uploading files whose names contain (1) feature, (2) editor, (3) newswire, (4) otherpress, (5) admin, (6) pbook, (7) media, or (8) mod, which are processed as PHP file types (application/x-httpd-php). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23305 - http://www.vupen.com/english/advisories/2006/4977 - https://ex
iner: References: - http://secunia.com/advisories/23305 - http://www.vupen.com/english/advisories/2006/4977 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30862 - http://bugs.dadaimc.org/view.php?id=191
CVE ID: CVE-2006-6512 State: PUBLISHED Published: 2006-12-14T01:00:00 Last Updated: 2024-08-07T20:26:46.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Browse function (/browse URI) in Winamp Web Interface (Wawi) 7.5.13 and earlier allows remote authenticated users to list arbitrary directories via URL encoded backslashes ("%2F") in the path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/454059/100/0/threaded - http://secunia.com/advisories/23292 - http://securitytracker.com/id?1017362 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30827 - http://lists.grok.org
tp://securitytracker.com/id?1017362 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30827 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051217.html - http://www.vupen.com/english/advisories/2006/4935 - http://securityreason.com/securityalert/2032 - http://aluigi.altervista.org/adv/wawix-adv.txt
CVE ID: CVE-2006-6513 State: PUBLISHED Published: 2006-12-14T01:00:00 Last Updated: 2024-08-07T20:26:46.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CControl::Download function (/dl URI) in Winamp Web Interface (Wawi) 7.5.13 and earlier allows remote authenticated users to download arbitrary file types under the root via a trailing "." (dot) in a filename in the file parameter, related to erroneous behavior of the IsWinampFile function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30829 - http://www.securityfocus.com/archive/1/454059/100/0/threaded - http://secunia.com/advisories/23292 - http://se
s/30829 - http://www.securityfocus.com/archive/1/454059/100/0/threaded - http://secunia.com/advisories/23292 - http://securitytracker.com/id?1017362 - http://www.securityfocus.com/bid/21539 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051217.html - http://www.vupen.com/english/advisories/2006/4935 - http://securityreason.com/securityalert/2032 - http://aluigi.altervista.org/adv/wawix-adv.txt
CVE ID: CVE-2006-6514 State: PUBLISHED Published: 2006-12-14T01:00:00 Last Updated: 2024-08-07T20:26:46.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Winamp Web Interface (Wawi) 7.5.13 and earlier uses an insufficient comparison to determine whether a directory is located below the application's root directory, which allows remote authenticated users to access certain other directories if the name of the root directory is a substring of the name of the target directory, as demonstrated by accessing C:\folder2 when the root directory is C:\folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/454059/100/0/threaded - h
l Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/454059/100/0/threaded - http://secunia.com/advisories/23292 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30830 - http://securitytracker.com/id?1017362 - http://www.securityfocus.com/bid/21539 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051217.html - http://www.vupen.com/english/advisories/2006/4935 - http://securityreason.com/securityalert/2032 - http://aluigi.altervista.org/adv/wawix-adv.txt
CVE ID: CVE-2006-6515 State: PUBLISHED Published: 2006-12-14T01:00:00 Last Updated: 2024-08-07T20:26:46.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to "reporter" instead of a more privileged role, which has unknown impact and attack vectors, possibly related to frequency of reminders. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=469627 - http://www.mantisbugtracker.com/changelog.php
CVE ID: CVE-2006-6516 State: PUBLISHED Published: 2006-12-14T01:00:00 Last Updated: 2024-08-07T20:26:46.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in KDPics 1.16 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) page parameter to (a) index.php3, or the (2) lib_path parameter to (b) authenticate.inc.php3 or (c) lib/exifer/exif.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3263 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32175 - http://www.securityfocus.com/archive/1/453962/100/0/threaded - http://secunia.com/advisori
d.com/vulnerabilities/32175 - http://www.securityfocus.com/archive/1/453962/100/0/threaded - http://secunia.com/advisories/23313 - http://www.securityfocus.com/bid/21515 - http://www.vupen.com/english/advisories/2006/4930
CVE ID: CVE-2006-6517 State: PUBLISHED Published: 2006-12-14T01:00:00 Last Updated: 2024-08-07T20:26:46.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in KDPics 1.16 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) categories parameter to (a) index.php3 or (b) galeries.inc.php3. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/453962/100/0/threaded - http://secunia.com/advisories/23313 - http://www.securityfocus.com/bid/21515 - http://www.vupen.com/english/advisories/2006/4930
CVE ID: CVE-2006-6518 State: PUBLISHED Published: 2006-12-14T01:00:00 Last Updated: 2024-08-07T20:26:46.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ProNews 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) pseudo, (2) email, (3) date, (4) sujet, (5) message, (6) site, and (7) lien parameters to (a) admin/change.php, and the (8) aa parameter to (b) lire-avis.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21516 - http://securityreason.com/securityalert/2025 - http://www.securityfocus.com/archive/1/453964/100/0/threaded
CVE ID: CVE-2006-6519 State: PUBLISHED Published: 2006-12-14T01:00:00 Last Updated: 2024-08-07T20:26:46.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lire-avis.php in ProNews 1.5 allows remote attackers to execute arbitrary SQL commands via the aa parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21516 - http://securityreason.com/securityalert/2025 - http://www.securityfocus.com/archive/1/453964/100/0/threaded
CVE ID: CVE-2006-6520 State: PUBLISHED Published: 2006-12-14T01:00:00 Last Updated: 2024-08-07T20:26:46.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Messageriescripthp 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) pseudo parameter to (a) existepseudo.php, the (2) email parameter to (b) existeemail.php, or the (3) pageName or (4) cssform parameter to (c) Contact/contact.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2026 - http://www.securityfocus.com/bid/21513 - http://secunia.com/advisories/23319 - http://www.vupen.com/engli
tyalert/2026 - http://www.securityfocus.com/bid/21513 - http://secunia.com/advisories/23319 - http://www.vupen.com/english/advisories/2006/4939 - http://www.securityfocus.com/archive/1/453965/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30819
CVE ID: CVE-2006-6521 State: PUBLISHED Published: 2006-12-14T01:00:00 Last Updated: 2024-08-07T20:26:46.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lire-avis.php in Messageriescripthp 2.0 allows remote attackers to execute arbitrary SQL commands via the aa parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2026 - http://www.securityfocus.com/bid/21513 - http://secunia.com/advisories/23319 - http://www.securityfocus.com/archive/1/453965/100/0/threaded
CVE ID: CVE-2006-6522 State: PUBLISHED Published: 2006-12-14T01:00:00 Last Updated: 2024-08-07T20:26:46.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WikiTimeScale TwoZero before 2.31 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the (1) forum module and (2) event descriptions. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4909 - http://www.wikitimescale.org/versionlist.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/30784
CVE ID: CVE-2006-6523 State: PUBLISHED Published: 2006-12-14T01:00:00 Last Updated: 2024-08-07T20:26:46.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mail/manage.html in BoxTrapper in cPanel 11 allows remote attackers to inject arbitrary web script or HTML via the account parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23302 - http://www.aria-security.com/forum/showthread.php?t=67 - http://www.securityfocus.com/archive/1/453888/100/0/threaded - http://www.securityfocus.com/bid/21497 - http://securityreason.com/securityalert/2028 - https://exchange.xforce.ibmcloud.com/vulner
securityfocus.com/bid/21497 - http://securityreason.com/securityalert/2028 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30788
CVE ID: CVE-2006-6524 State: PUBLISHED Published: 2006-12-14T01:00:00 Last Updated: 2024-08-07T20:26:46.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the Uname (UserName) parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2909 - http://secunia.com/advisories/23304 - http://www.vupen.com/english/advisories/2006/4934 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30847
CVE ID: CVE-2006-6525 State: PUBLISHED Published: 2006-12-14T01:00:00 Last Updated: 2024-08-07T20:26:46.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30847
CVE ID: CVE-2006-6526 State: PUBLISHED Published: 2006-12-14T01:00:00 Last Updated: 2024-08-07T20:26:46.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Gizzar 03162002 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the basePath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2905 - http://www.securityfocus.com/bid/21524 - http://www.vupen.com/english/advisories/2006/4929 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30832 - http://www.securityfocus.com/archive/1/466032/100/0/threaded
CVE ID: CVE-2006-6527 State: PUBLISHED Published: 2006-12-14T01:00:00 Last Updated: 2024-08-07T20:26:46.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in guest.php in Gizzar 03162002 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the basePath parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4929
CVE ID: CVE-2006-6528 State: PUBLISHED Published: 2006-12-14T01:00:00 Last Updated: 2024-08-07T20:26:46.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chatroom Module before 4.7.x.-1.0 for Drupal broadcasts Chatroom visitors' session IDs to all participants, which allows remote attackers to hijack sessions and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4942 - http://secunia.com/advisories/23343 - http://drupal.org/node/102614
CVE ID: CVE-2006-6529 State: PUBLISHED Published: 2006-12-14T01:00:00Z Last Updated: 2024-09-16T20:26:19.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chatroom Module before 4.7.x.-1.0 for Drupal displays private messages in a chatroom's last messages overview, which allows remote attackers to obtain sensitive information by reading the overview. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23343 - http://drupal.org/node/102614
CVE ID: CVE-2006-6530 State: PUBLISHED Published: 2006-12-14T01:00:00 Last Updated: 2024-08-07T20:26:46.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Help Tip module before 4.7.x-1.0 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4941 - http://secunia.com/advisories/23295 - http://drupal.org/node/102605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30809
CVE ID: CVE-2006-6531 State: PUBLISHED Published: 2006-12-14T01:00:00 Last Updated: 2024-08-07T20:26:46.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Help Tip module before 4.7.x-1.0 for Drupal allows remote attackers to inject arbitrary web script or HTML, and possibly obtain administrative access, via node titles. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4941 - http://secunia.com/advisories/23295 - http://drupal.org/node/102605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30807
CVE ID: CVE-2006-6532 State: PUBLISHED Published: 2006-12-14T01:00:00 Last Updated: 2024-08-07T20:26:46.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Vt-Forum Lite 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) StrMsg or (2) Topic_ID parameter to (a) vf_info.asp, (b) vf_newtopic.asp, (c) vf_settings.asp, and (d) vf_replytopic.asp, different vectors than CVE-2006-6447. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.
rd party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30725 - http://www.vupen.com/english/advisories/2006/4850
CVE ID: CVE-2006-6533 State: PUBLISHED Published: 2006-12-14T01:00:00 Last Updated: 2024-08-07T20:26:46.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin/templates_boxes_layout.php in osCommerce 3.0a3 allows remote attackers to include and execute arbitrary PHP files via a .. (dot dot) in the filter parameter. NOTE: this issue can be leveraged to obtain full path information in error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21477 - http://www.vupen.com/english/advisories/2006/4895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30767 - http://lostmon.blogspot.com
/english/advisories/2006/4895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30767 - http://lostmon.blogspot.com/2006/12/oscommerce-traversal-arbitrary-file.html - http://securitytracker.com/id?1017353
CVE ID: CVE-2006-6534 State: PUBLISHED Published: 2006-12-14T01:00:00Z Last Updated: 2024-09-17T00:51:19.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 3.0a3 allow remote attackers to inject arbitrary web script or HTML via the (1) set parameter to admin/modules.php, the (2) selected_box parameter to definitiva/admin/customers.php, the (3) lID parameter to admin/languages_definitions.php, or the (4) pID parameter to admin/products.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21477 - http://lostmon.blogspot.com/2006/12/oscommerce-traversal-arbitrary-file
nces: - http://www.securityfocus.com/bid/21477 - http://lostmon.blogspot.com/2006/12/oscommerce-traversal-arbitrary-file.html - http://securitytracker.com/id?1017353
CVE ID: CVE-2006-6535 State: PUBLISHED Published: 2007-01-30T19:00:00 Last Updated: 2024-08-07T20:26:46.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dev_queue_xmit function in Linux kernel 2.6 can fail before calling the local_bh_disable function, which could lead to data corruption and "node lockups." NOTE: it is not clear whether this issue is exploitable. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2007-0014.html - http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm - http://secunia.com/advisories/25683 - http://secunia.com/advisories/24206 - http://secunia.com/advisories/23997 - http://www.securityfocu
m/advisories/25683 - http://secunia.com/advisories/24206 - http://secunia.com/advisories/23997 - http://www.securityfocus.com/bid/22317 - http://www.debian.org/security/2007/dsa-1304 - http://secunia.com/advisories/25714 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11679 - http://www.novell.com/linux/security/advisories/2007_35_kernel.html - http://linux.bkbits.net:8080/linux-2.6/gnupatch%404186e5bfgUOMBbA6xFaY0_z84kaURw