Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-1514 State: PUBLISHED Published: 2005-05-11T04:00:00 Last Updated: 2024-08-07T21:51:50.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: commands.c in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SMTP command without a space character, which causes an array to be referenced with a negative index. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0101.html - http://www.guninski.com/where_do_you_want_billg_to_go_today_4.html - http://securitytracker.com/id
e/2005-05/0101.html - http://www.guninski.com/where_do_you_want_billg_to_go_today_4.html - http://securitytracker.com/id?1013911 - http://www.openwall.com/lists/oss-security/2020/05/19/8 - http://www.openwall.com/lists/oss-security/2020/05/20/2 - http://seclists.org/fulldisclosure/2020/May/42 - http://packetstormsecurity.com/files/157805/Qualys-Security-Advisory-Qmail-Remote-Code-Execution.html - https://www.debian.org/security/2020/dsa-4692 - https://lists.debian.org/debian-lts-announce/2020/06/msg00002.html - https://security.gentoo.org/glsa/202007-01 - https://usn.ubuntu.com/4556-1/
CVE ID: CVE-2005-1515 State: PUBLISHED Published: 2005-05-11T04:00:00 Last Updated: 2024-08-07T21:51:50.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the qmail_put and substdio_put functions in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of SMTP RCPT TO commands. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0101.html - http://www.guninski.com/where_do_you_want_billg_to_go_today_4.html - http://securitytracker.com/id?1013911 -
0101.html - http://www.guninski.com/where_do_you_want_billg_to_go_today_4.html - http://securitytracker.com/id?1013911 - http://www.openwall.com/lists/oss-security/2020/05/19/8 - http://www.openwall.com/lists/oss-security/2020/05/20/2 - http://seclists.org/fulldisclosure/2020/May/42 - http://packetstormsecurity.com/files/157805/Qualys-Security-Advisory-Qmail-Remote-Code-Execution.html - https://www.debian.org/security/2020/dsa-4692 - https://lists.debian.org/debian-lts-announce/2020/06/msg00002.html - https://security.gentoo.org/glsa/202007-01 - https://usn.ubuntu.com/4556-1/
CVE ID: CVE-2005-1516 State: PUBLISHED Published: 2005-05-11T04:00:00 Last Updated: 2024-08-07T21:51:50.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: DList (dlist.exe) in DMail 3.1a allows remote attackers to bypass authentication, read log files, and shutdown the system via a sendlog command with an incorrect password hash, which is not properly handled by the _cmd_sendlog function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15242 - http://www.security.org.sg/vuln/dmail31a.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/20412 - http://www.securityfocus.com/bid/13497
CVE ID: CVE-2005-1517 State: PUBLISHED Published: 2005-05-11T04:00:00 Last Updated: 2024-08-07T21:51:50.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Cisco Firewall Services Module (FWSM) 2.3.1 and earlier, when using URL, FTP, or HTTPS filtering exceptions, allows certain TCP packets to bypass access control lists (ACLs). Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20050511-url.shtml - http://www.vupen.com/english/advisories/2005/0527
CVE ID: CVE-2005-1518 State: PUBLISHED Published: 2005-05-11T04:00:00 Last Updated: 2024-08-07T21:51:50.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Solaris 7 through 9, when using Federated Naming Services (FNS), autofs, and FNS X.500 configuration, allows local users to cause a denial of service (automountd crash) when "accessing" /xfn/_x500. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/0517 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57786-1
CVE ID: CVE-2005-1519 State: PUBLISHED Published: 2005-05-11T04:00:00 Last Updated: 2024-08-07T21:51:50.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing, allows remote attackers to spoof DNS lookups. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13592 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9976 - http://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html - http://secunia.com/advisories/15294 - http://fedoranews.org/updates/FEDORA--.shtml - http
-list/2005-May/msg00025.html - http://secunia.com/advisories/15294 - http://fedoranews.org/updates/FEDORA--.shtml - http://www.debian.org/security/2005/dsa-751 - http://www.redhat.com/support/errata/RHSA-2005-489.html - http://www.vupen.com/english/advisories/2005/0521 - http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-dns_query
CVE ID: CVE-2005-1520 State: PUBLISHED Published: 2005-05-26T04:00:00 Last Updated: 2024-08-07T21:51:50.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the header_get_field_name function in header.c for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via a crafted e-mail. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014052 - http://www.securityfocus.com/bid/13766 - http://secunia.com/advisories/15442 - http://www.debian.org/security/2005/dsa-732 - http://www.idefense.com/application/poi/display?id=249&type=vulnerabilities
CVE ID: CVE-2005-1521 State: PUBLISHED Published: 2005-05-26T04:00:00 Last Updated: 2024-08-07T21:51:50.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the fetch_io function of the imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via a partial message request with a large value in the END parameter, which leads to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014052 - http://www.securityfocus.com/bid/13763 - http://www.idefense.com/application/poi/display?id=248&type=vulnerabilities - http://secunia.
urityfocus.com/bid/13763 - http://www.idefense.com/application/poi/display?id=248&type=vulnerabilities - http://secunia.com/advisories/15442 - http://www.debian.org/security/2005/dsa-732
CVE ID: CVE-2005-1522 State: PUBLISHED Published: 2005-05-26T04:00:00 Last Updated: 2024-08-07T21:51:50.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service (CPU consumption) via a large range value in the FETCH command. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=247&type=vulnerabilities - http://securitytracker.com/id?1014052 - http://secunia.com/advisories/15442 - http://www.securityfocus.com/bid/13765 - http://www.debian.org/security/2005/dsa-732
CVE ID: CVE-2005-1523 State: PUBLISHED Published: 2005-05-26T04:00:00 Last Updated: 2024-08-07T21:51:50.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string specifiers in the command tag for IMAP commands. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014052 - http://www.idefense.com/application/poi/display?id=246&type=vulnerabilities - http://secunia.com/advisories/15442 - http://www.debian.org/security/2005/dsa-732 - http://www.securityfocus.com/bid/13764
CVE ID: CVE-2005-1524 State: PUBLISHED Published: 2005-06-22T04:00:00 Last Updated: 2024-08-07T21:51:50.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the config[library_path] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=265&type=vulnerabilities&flashstatus=true - http://distro.conectiva.com/atualizacoes/index.php?id=a&anuncio=000978 - http://www.cacti.net/release_notes_0_8_6e.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/2
&anuncio=000978 - http://www.cacti.net/release_notes_0_8_6e.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/21118 - http://www.gentoo.org/security/en/glsa/glsa-200506-20.xml - http://www.debian.org/security/2005/dsa-764 - http://securitytracker.com/id?1014252 - http://secunia.com/advisories/15931 - http://secunia.com/advisories/15490 - http://www.osvdb.org/17426 - http://secunia.com/advisories/16136
CVE ID: CVE-2005-1525 State: PUBLISHED Published: 2005-06-22T04:00:00 Last Updated: 2024-08-07T21:51:50.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in config_settings.php for Cacti before 0.8.6e allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/21120 - http://distro.conectiva.com/atualizacoes/index.php?id=a&anuncio=000978 - http://www.cacti.net/release_notes_0_8_6e.php - http://www.idefense.com/application/poi/display?id=267&type=vulnerabilities&flashstatus=true - http://www.osvdb.org/17424 - http:/
.idefense.com/application/poi/display?id=267&type=vulnerabilities&flashstatus=true - http://www.osvdb.org/17424 - http://www.gentoo.org/security/en/glsa/glsa-200506-20.xml - http://www.debian.org/security/2005/dsa-764 - http://securitytracker.com/id?1014252 - http://secunia.com/advisories/15931 - http://secunia.com/advisories/15490 - http://www.securityfocus.com/bid/14027
CVE ID: CVE-2005-1526 State: PUBLISHED Published: 2005-06-22T04:00:00 Last Updated: 2024-08-07T21:51:50.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the config[include_path] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=266&type=vulnerabilities - http://www.osvdb.org/17425 - http://distro.conectiva.com/atualizacoes/index.php?id=a&anuncio=000978 - http://www.cacti.net/release_notes_0_8_6e.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/21119
cio=000978 - http://www.cacti.net/release_notes_0_8_6e.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/21119 - http://www.gentoo.org/security/en/glsa/glsa-200506-20.xml - http://www.debian.org/security/2005/dsa-764 - http://securitytracker.com/id?1014252 - http://secunia.com/advisories/15931 - http://www.securityfocus.com/bid/14028 - http://secunia.com/advisories/15490
CVE ID: CVE-2005-1527 State: PUBLISHED Published: 2005-08-15T04:00:00 Last Updated: 2024-08-07T21:51:50.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/18696 - https://usn.ubuntu.com/167-1/ - http://www.securiteam.com/unixfocus/5DP0J00GKE.html - http://www.novell.com/linux/security/advisories/2005_19_sr.html - http://www.debian.org/securit
xfocus/5DP0J00GKE.html - http://www.novell.com/linux/security/advisories/2005_19_sr.html - http://www.debian.org/security/2005/dsa-892 - http://secunia.com/advisories/17463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21769 - http://www.idefense.com/application/poi/display?id=290&type=vulnerabilities&flashstatus=false - http://secunia.com/advisories/16412 - http://securitytracker.com/id?1014636 - http://www.securityfocus.com/bid/14525
CVE ID: CVE-2005-1528 State: PUBLISHED Published: 2006-02-09T01:00:00 Last Updated: 2024-08-07T21:51:50.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitrary libraries via a LD_LIBRARY_PATH environment variable that references a malicious library. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24560 - http://www.vupen.com/english/advisories/2006/0474 - http://secunia.com/advisories/18750 - http://securitytracker.com/id?1015599 - http://www.idefense.com/intelligence/vulnerabilities/display.ph
visories/18750 - http://securitytracker.com/id?1015599 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=379 - http://www.securityfocus.com/bid/16539
CVE ID: CVE-2005-1530 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-07T21:51:50.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large 'Extra field length' value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14270 - http://www.idefense.com/application/poi/display?id=283&type=vulnerabilities&flashstatus=true - http://securitytracker.com/id?1014488 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21373
CVE ID: CVE-2005-1531 State: PUBLISHED Published: 2005-05-12T04:00:00 Last Updated: 2024-08-07T21:51:50.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security checks for script injection, which allows remote attackers to execute script via "Wrapped" javascript: URLs, as demonstrated using (1) a javascript: URL in a view-source: URL, (2) a javascript: URL in a jar: URL, or (3) "a nested variant." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10351 - https://oval.cisecurity.org/reposit
al.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10351 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100015 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt - http://www.redhat.com/support/errata/RHSA-2005-435.html - http://www.securityfocus.com/bid/13641 - http://www.securityfocus.com/bid/15495 - http://securitytracker.com/id?1013963 - http://www.mozilla.org/security/announce/mfsa2005-43.html - http://securitytracker.com/id?1013962 - http://www.vupen.com/english/advisories/2005/0530 - http://www.redhat.com/support/errata/RHSA-2005-434.html
CVE ID: CVE-2005-1532 State: PUBLISHED Published: 2005-05-12T04:00:00 Last Updated: 2024-08-07T21:51:50.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/mfsa2005-44.html - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt - http://www.redhat.com/support/errata/RHSA-2005-435.html -
.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt - http://www.redhat.com/support/errata/RHSA-2005-435.html - http://secunia.com/advisories/19823 - http://securitytracker.com/id?1013964 - http://www.securityfocus.com/bid/15495 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100014 - http://www.redhat.com/support/errata/RHSA-2005-601.html - http://securitytracker.com/id?1013965 - http://www.securityfocus.com/bid/13645 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10791 - http://www.vupen.com/english/advisories/2005/0530 - http://www.novell.com/linux/security/advisories/2006_04_25.html - http://www.re
vupen.com/english/advisories/2005/0530 - http://www.novell.com/linux/security/advisories/2006_04_25.html - http://www.redhat.com/support/errata/RHSA-2005-434.html
CVE ID: CVE-2005-1543 State: PUBLISHED Published: 2005-05-25T04:00:00 Last Updated: 2024-08-07T21:51:50.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENworks 6.5 Desktop and Server Management, ZENworks for Desktops 4.x, ZENworks for Servers 3.x, and Remote Management allows remote attackers to execute arbitrary code via (1) unspecified vectors, (2) type 1 authentication requests, and (3) type 2 authentication requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.rem0te.com/public/images/zen.pdf - http://www.securityfocus.com/bid/
: - CVE Program Container: References: - http://www.rem0te.com/public/images/zen.pdf - http://www.securityfocus.com/bid/13678 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20639 - http://securitytracker.com/id?1014005 - http://www.vupen.com/english/advisories/2005/0571 - http://marc.info/?l=bugtraq&m=111645317713662&w=2 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097644.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/20645 - http://secunia.com/advisories/15433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20644
CVE ID: CVE-2005-1544 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-755 - http://bugzilla.remotesensing.org/show_bug.cgi?id=843 - http://secunia.com/advisories/18289 - http://secunia.com/advisories/16872 - http://secunia.com/advisories/15320 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20533 - http://secunia.com/advisories/18943
com/advisories/15320 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20533 - http://secunia.com/advisories/18943 - http://www.osvdb.org/16350 - http://securitytracker.com/id?1013944 - http://www.gentoo.org/security/en/glsa/glsa-200505-07.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2006:042 - http://www.ubuntu.com/usn/usn-130-1 - http://www.securityfocus.com/bid/13585 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt - http://bugs.gentoo.org/show_bug.cgi?id=91584 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/SCOSA-2005.34.txt
CVE ID: CVE-2005-1545 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ELF parser in HT Editor before 0.8.0 allows remote attackers to execute arbitrary code via a crafted ELF file, which leads to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200505-08.xml - http://www.debian.org/security/2005/dsa-743
CVE ID: CVE-2005-1546 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the PE parser in HT Editor before 0.8.0 allows remote attackers to execute arbitrary code via a crafted PE file. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200505-08.xml - http://www.debian.org/security/2005/dsa-743
CVE ID: CVE-2005-1547 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the demo version of Bakbone Netvault, and possibly other versions, allows remote attackers to execute arbitrary commands via a large packet to port 20031. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111600439331242&w=2
CVE ID: CVE-2005-1548 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Advanced Guestbook 2.3.1 allows remote attackers to execute arbitrary SQL commands via the entry parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111566565621193&w=2 - http://www.securityfocus.com/bid/13548
CVE ID: CVE-2005-1549 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in easymsgb.pl in Easy Message Board allows remote attackers to read arbitrary files via a .. (dot dot) in the print parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.soulblack.com.ar/repo/papers/easymsgb_advisory.txt - http://www.osvdb.org/16162 - http://marc.info/?l=bugtraq&m=111566691005844&w=2 - http://www.securityfocus.com/bid/13551
CVE ID: CVE-2005-1550 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell metacharacters in the print parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.soulblack.com.ar/repo/papers/easymsgb_advisory.txt - http://www.securityfocus.com/bid/13555 - http://www.osvdb.org/16163 - http://marc.info/?l=bugtraq&m=111566691005844&w=2 - http://secunia.com/advisories/15295
CVE ID: CVE-2005-1551 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos Anti-Virus 3.93 does not check downloaded files for viruses when they have only been written, which creates a race condition and may allow remote attackers to bypass virus protection if the file is executed before the antivirus starts on system reboot. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111566827411376&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20519
CVE ID: CVE-2005-1552 State: PUBLISHED Published: 2005-05-14T04:00:00 Last Updated: 2024-08-07T21:51:50.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0, when set to create JPEG images, does not properly protect an image even when a password and username is assigned, which may allow remote attackers to gain sensitive information via a direct request to the image. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16340 - http://secunia.com/advisories/15330 - http://www.securityfocus.com/bid/13571 - http://www.esqo.com/research/advisories/2005/100505-1.txt - http://marc.info/?l=bugt
//www.securityfocus.com/bid/13571 - http://www.esqo.com/research/advisories/2005/100505-1.txt - http://marc.info/?l=bugtraq&m=111574131105737&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20537