Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ies/24098 - http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=658fdbef66e5e9be79b457edc2cbbb3add840aa9 - http://www.redhat.com/support/errata/RHSA-2008-0957.html - http://secunia.com/advisories/26994 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:171 - http://www.ubuntu.com/usn/usn-416-1 - http://www.securityfocus.com/bid/26060 - http://secunia.com/advisories/26620 - http://www.debian.org/security/2007/dsa-1381 - http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.18-git13.log - http://www.securityfocus.com/archive/1/471457 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=658fdbef66e5e9be79b457e
e/1/471457 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=658fdbef66e5e9be79b457edc2cbbb3add840aa9 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.18 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9554 - http://secunia.com/advisories/25691
CVE ID: CVE-2006-5756 State: REJECTED Published: 2007-03-24T21:00:00Z Last Updated: 2024-09-17T00:00:55.158Z Description: No description available.
CVE ID: CVE-2006-5757 State: PUBLISHED Published: 2006-11-06T20:00:00 Last Updated: 2024-08-07T20:04:54.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the __find_get_block_slow function in the ISO9660 filesystem in Linux 2.6.18 and possibly other versions allows local users to cause a denial of service (infinite loop) by mounting a crafted ISO9660 filesystem containing malformed data structures. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24098 - http://www.novell.com/linux/security/advisories/2006_79_kernel.html - http://www.securityfocus.com/bid/20920 - https://exchange.xforce.ibmcloud.com/vulnerabilities
ries/2006_79_kernel.html - http://www.securityfocus.com/bid/20920 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30029 - http://www.vupen.com/english/advisories/2006/4359 - http://rhn.redhat.com/errata/RHSA-2007-0014.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:012 - http://secunia.com/advisories/23593 - http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm - http://www.ubuntu.com/usn/usn-416-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10111 - http://secunia.com/advisories/23752 - http://secunia.com/advisories/24206 - http://secunia.com/advisories/23474 - http://secunia.com/advisories/22746 - http://secunia.c
unia.com/advisories/24206 - http://secunia.com/advisories/23474 - http://secunia.com/advisories/22746 - http://secunia.com/advisories/23997 - http://www.securityfocus.com/archive/1/471457 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:002 - http://www.debian.org/security/2007/dsa-1304 - http://secunia.com/advisories/25714 - http://secunia.com/advisories/25691 - http://secunia.com/advisories/22702 - http://projects.info-pull.com/mokb/MOKB-05-11-2006.html
CVE ID: CVE-2006-5758 State: PUBLISHED Published: 2006-11-06T20:00:00 Last Updated: 2024-08-07T20:04:55.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Graphics Rendering Engine in Microsoft Windows 2000 through 2000 SP4 and Windows XP through SP2 maps GDI Kernel structures on a global shared memory section that is mapped with read-only permissions, but can be remapped by other processes as read-write, which allows local users to cause a denial of service (memory corruption and crash) and gain privileges by modifying the kernel structures. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1215 - http://kernelwars
lyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1215 - http://kernelwars.blogspot.com/2007/01/alive.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2056 - http://www.blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Eriksson - http://www.vupen.com/english/advisories/2006/4358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30042 - http://www.securityfocus.com/archive/1/466186/100/200/threaded - http://projects.info-pull.com/mokb/MOKB-06-11-2006.html - http://securitytracker.com/id?1017168 - http://www.securityfocus.com/bid/20940 - https://docs.microsoft.com/en-us/security-updates/security
ker.com/id?1017168 - http://www.securityfocus.com/bid/20940 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017 - http://secunia.com/advisories/22668 - http://www.securityfocus.com/archive/1/466186/100/200/threaded
CVE ID: CVE-2006-5759 State: PUBLISHED Published: 2006-11-06T22:00:00 Last Updated: 2024-08-07T20:04:55.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Rhadrix If-CMS, possibly 1.01 and 2.07, allows remote attackers to obtain the full path of the web server via empty (1) rns[] or (2) pag[] arguments, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1825 - http://www.securityfocus.com/archive/1/450566/100/0/threaded - http://s-a-p.ca/index.php?page=OurAdvisories&id=5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30012
CVE ID: CVE-2006-5760 State: PUBLISHED Published: 2006-11-06T23:00:00 Last Updated: 2024-08-07T20:04:55.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpDynaSite 3.2.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the racine parameter to (1) function_log.php, (2) function_balise_url.php, or (3) connection.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30016 - http://www.osvdb.org/30183 - http://secunia.com/advisories/22710 - http://www.securityfocus.com/bid/20921 - http://www.osvdb.org/30185 - http://www.vupen.com/
cunia.com/advisories/22710 - http://www.securityfocus.com/bid/20921 - http://www.osvdb.org/30185 - http://www.vupen.com/english/advisories/2006/4344 - https://www.exploit-db.com/exploits/2717 - http://www.osvdb.org/30184
CVE ID: CVE-2006-5761 State: PUBLISHED Published: 2006-11-06T23:00:00 Last Updated: 2024-08-07T20:04:55.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Rhadrix If-CMS 1.01 and 2.07 allows remote attackers to inject arbitrary web script or HTML via the rns parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30010 - http://www.vupen.com/english/advisories/2006/4367 - http://securityreason.com/securityalert/1825 - http://www.securityfocus.com/bid/20909 - http://www.securityfocus.com/archive/1/450566/100/0/threaded - http://s-a-p.ca/index.php?page=
rityfocus.com/bid/20909 - http://www.securityfocus.com/archive/1/450566/100/0/threaded - http://s-a-p.ca/index.php?page=OurAdvisories&id=5 - http://securitytracker.com/id?1017161 - http://secunia.com/advisories/22715
CVE ID: CVE-2006-5762 State: PUBLISHED Published: 2006-11-06T23:00:00 Last Updated: 2024-08-07T20:04:55.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in forgot_pass.php in Free File Hosting 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter. NOTE: this issue was later reported for the "File Upload System" which is a component of Free File Hosting. This also affects Free Image Hosting 2.0, which contains the same code. Additional Analyst Notes: - CVE Program Container: References: - http://www.rahim.webd.pl/exploity/Exploits/111.txt - http://www.attrition.org/pipermail/vim/2007
ontainer: References: - http://www.rahim.webd.pl/exploity/Exploits/111.txt - http://www.attrition.org/pipermail/vim/2007-March/001473.html - http://secunia.com/advisories/22594 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33196 - http://www.securityfocus.com/bid/23118 - https://www.exploit-db.com/exploits/3568 - https://www.exploit-db.com/exploits/2670 - http://www.vupen.com/english/advisories/2006/4228 - http://www.securityfocus.com/archive/1/463707/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29874 - http://www.osvdb.org/30143 - http://www.securityfocus.com/bid/20781
CVE ID: CVE-2006-5763 State: PUBLISHED Published: 2006-11-06T23:00:00 Last Updated: 2024-08-07T20:04:55.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Free File Hosting 1.1, and possibly earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter to (1) login.php, (2) register.php, or (3) send.php. NOTE: the original provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this issue was later reported for the "File Upload System" which is a component of Free File Hosting. Vector 1 also affects
s issue was later reported for the "File Upload System" which is a component of Free File Hosting. Vector 1 also affects Free Image Hosting 2.0, which contains the same code. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2007-March/001473.html - http://www.osvdb.org/30146 - http://secunia.com/advisories/22594 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33196 - http://www.securityfocus.com/bid/23118 - https://www.exploit-db.com/exploits/3568 - http://www.osvdb.org/30145 - http://www.securityfocus.com/archive/1/463707/100/0/threaded - http://www.osvdb.org/30144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29874
CVE ID: CVE-2006-5764 State: PUBLISHED Published: 2006-11-06T23:00:00 Last Updated: 2024-08-07T20:04:55.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in contact.php in Free File Hosting 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this issue was later reported for the "File Upload System" which is a component of Free File Hosting. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2007-March/001473.
ditional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2007-March/001473.html - http://www.securityfocus.com/bid/23118 - http://www.vupen.com/english/advisories/2006/4228 - http://www.securityfocus.com/archive/1/463707/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29874
CVE ID: CVE-2006-5765 State: PUBLISHED Published: 2006-11-06T23:00:00 Last Updated: 2024-08-07T20:04:55.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in rss.php in Article Script 1.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20929 - http://secunia.com/advisories/22698 - http://www.vupen.com/english/advisories/2006/4352 - http://www.securityfocus.com/archive/1/450678 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30038 - http://securityreason.com/securityalert/1826 - http://www.blogcu.c
/exchange.xforce.ibmcloud.com/vulnerabilities/30038 - http://securityreason.com/securityalert/1826 - http://www.blogcu.com/Liz0ziM/1312100
CVE ID: CVE-2006-5766 State: PUBLISHED Published: 2006-11-06T23:00:00 Last Updated: 2024-08-07T20:04:55.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in volume.php in Article System 0.6 allows remote attackers to execute arbitrary PHP code via a URL in the config[public_dir] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29988 - https://www.exploit-db.com/exploits/2703 - http://www.securityfocus.com/bid/20892
CVE ID: CVE-2006-5767 State: PUBLISHED Published: 2006-11-06T23:00:00 Last Updated: 2024-08-07T20:04:55.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/xhtml.php in Drake CMS 0.2.2 alpha rev.846 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the d_root parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4345 - http://www.securityfocus.com/bid/20914 - https://www.exploit-db.com/exploits/2713 - http://sourceforge.net/forum/forum.php?forum_id=636860 - http://www.attrition.org/pipermail/vim/2006-December/001202.html - https://exc
rge.net/forum/forum.php?forum_id=636860 - http://www.attrition.org/pipermail/vim/2006-December/001202.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30021
CVE ID: CVE-2006-5768 State: PUBLISHED Published: 2006-11-06T23:00:00 Last Updated: 2024-08-07T20:04:55.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Cyberfolio 2.0 RC1 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the av parameter to (1) msg/view.php, (2) msg/inc_message.php, (3) msg/inc_envoi.php, and (4) admin/incl_voir_compet.php. Additional Analyst Notes: - CVE Program Container: References: - http://advisories.echo.or.id/adv/adv58-theday-2006.txt - http://secunia.com/advisories/22721 - https://www.exploit-db.com/exploits/2725 - http://translate.goog
theday-2006.txt - http://secunia.com/advisories/22721 - https://www.exploit-db.com/exploits/2725 - http://translate.google.com/translate?hl=en&sl=fr&u=http://www.cyberfolio.org/ - http://securitytracker.com/id?1017175 - http://www.securityfocus.com/bid/20928 - http://www.osvdb.org/displayvuln.php?osvdb_id=30211 - http://marc.info/?l=bugtraq&m=116283724113571&w=2 - http://www.vupen.com/english/advisories/2006/4360 - http://www.osvdb.org/30212 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30033
CVE ID: CVE-2006-5769 State: PUBLISHED Published: 2006-11-06T23:00:00 Last Updated: 2024-08-07T20:04:55.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin.tool CMS 3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) fSid or (2) fSrcBegriffe parameters in unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.majorsecurity.de/index_2.php?major_rls=major_rls30 - http://www.securityfocus.com/bid/20905 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30014 - http://marc.info/?l=bugtraq&m=116266802117129&w=2
CVE ID: CVE-2006-5770 State: PUBLISHED Published: 2006-11-06T23:00:00 Last Updated: 2024-08-07T20:04:55.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web script or HTML via (1) Bloks, (2) Newnews, (3) lBlok, and (4) foooot parameter in (a) index.php; Newnews, (5) newmsgs, and Bloks parameter in (b) MobileNews.php; Newnews parameter in (c) polls.php; (6) cats parameter in (d) send.php; (7) footer parameter in (e) up.php; and (8) pagenav parameter in (f) cp/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/32049 - http://
(f) cp/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/32049 - http://www.osvdb.org/32050 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30007 - http://www.osvdb.org/32051 - http://www.osvdb.org/32048 - http://www.osvdb.org/32047 - http://www.securityfocus.com/archive/1/450496/100/0/threaded - http://www.securityfocus.com/bid/20895 - http://www.osvdb.org/32046
CVE ID: CVE-2006-5771 State: PUBLISHED Published: 2006-11-06T23:00:00 Last Updated: 2024-08-07T20:04:55.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Arkoon SSL360 1.0 and 2.0 before 2.0/2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22833 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29993 - http://www.securityfocus.com/bid/20890 - http://www.arkoon.fr/upload/alertes/42AK-2006-05-FR-1.1_SSL360_XSS.pdf - http://www.vupen.com/english/advisories/2006/4330
CVE ID: CVE-2006-5772 State: PUBLISHED Published: 2006-11-06T23:00:00 Last Updated: 2024-08-07T20:04:55.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) password and (2) prod parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4332 - http://www.freewebshop.org/index.php?id=27 - https://www.exploit-db.com/exploits/2704 - http://secunia.com/advisories/22664 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29990
CVE ID: CVE-2006-5773 State: PUBLISHED Published: 2006-11-06T23:00:00 Last Updated: 2024-08-07T20:04:55.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in FreeWebshop 2.2.1 and earlier allows remote attackers to read arbitrary files and disclose the installation path via a .. (dot dot) in the action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4332 - http://www.freewebshop.org/index.php?id=27 - https://www.exploit-db.com/exploits/2704 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29991 - http://www.securityfocus.com/bid/20888 - http://secunia.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/29991 - http://www.securityfocus.com/bid/20888 - http://secunia.com/advisories/22664
CVE ID: CVE-2006-5774 State: PUBLISHED Published: 2006-11-06T23:00:00 Last Updated: 2024-08-07T20:04:55.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Hyper NIKKI System before 2.19.9 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30040 - http://www.h14m.org/dist/ - http://www.securityfocus.com/bid/20949 - http://secunia.com/advisories/22697 - http://jvn.jp/jp/JVN%2388325166/index.html
CVE ID: CVE-2006-5775 State: PUBLISHED Published: 2006-11-06T23:00:00 Last Updated: 2024-08-07T20:04:55.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in profile.php in FunkBoard 0.71 before 4 November 2006 at 18:16 GMT allows remote attackers to inject arbitrary web script or HTML, possibly via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30044 - http://www.funkboard.co.uk/forum/thread.php?id=312 - http://secunia.com/advisories/22720 - http://www.vupen.com/english/advisories/2006/4364 - http://www.securityfocus.com/bid/20946
CVE ID: CVE-2006-5776 State: PUBLISHED Published: 2006-11-07T00:00:00 Last Updated: 2024-08-07T20:04:55.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusions in Ariadne 2.4.1 allows remote attackers to execute arbitrary PHP code via the ariadne parameter in (1) ftp/loader.php and (2) lib/includes/loader.cmd.php. NOTE: this issue is disputed by CVE, since installation instructions recommend that the files be placed outside of the web document root and require the administrator to modify $ariadne in an include file Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30018 - http://at
yst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30018 - http://attrition.org/pipermail/vim/2006-November/001109.html - http://www.securityfocus.com/bid/20916 - http://securityreason.com/securityalert/1827 - http://www.securityfocus.com/archive/1/450709/100/0/threaded - http://attrition.org/pipermail/vim/2006-November/001108.html
CVE ID: CVE-2006-5777 State: PUBLISHED Published: 2006-11-07T00:00:00 Last Updated: 2024-08-07T20:04:55.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Creasito E-Commerce Content Manager 1.3.08 allows remote attackers to bypass authentication and perform privileged functions via a non-empty finame parameter to (1) addnewcont.php, (2) adminpassw.php, (3) amministrazione.php, (4) artins.php, (5) bgcolor.php, (6) cancartcat.php, (7) canccat.php, (8) cancelart.php, (9) cancontsit.php, (10) chanpassamm.php, (11) dele.php, (12) delecat.php, (13) delecont.php, (14) emailall.php, (15) gestflashtempl.php, (16) gestmagart.php, (17) gestmagaz.php, (18) gestpre.php, (19) input.php, (20)
) emailall.php, (15) gestflashtempl.php, (16) gestmagart.php, (17) gestmagaz.php, (18) gestpre.php, (19) input.php, (20) input3.php, (21) insnucat.php, (22) instempflash.php, (23) mailfc.php, (24) modfdati.php, (25) rescont4.php, (26) ricordo1.php, (27) ricordo4.php, (28) tabcatalg.php, (29) tabcont.php, (30) tabcont3.php, (31) tabstile.php, (32) tabstile3.php, (33) testimmg.php, and (34) update.php in admin/. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22729 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30011 - https://www.exploit-db.com/exploits/2709
CVE ID: CVE-2006-5778 State: PUBLISHED Published: 2006-11-07T18:00:00 Last Updated: 2024-08-07T20:04:55.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: ftpd in linux-ftpd 0.17, and possibly other versions, performs a chdir before setting the UID, which allows local users to bypass intended access restrictions by redirecting their home directory to a restricted directory. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=384454 - http://security.gentoo.org/glsa/glsa-200611-05.xml - http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/049014.html - http://www.securityfocus.com/bid/21000 - http://secunia.c
rok.org.uk/pipermail/full-disclosure/2006-August/049014.html - http://www.securityfocus.com/bid/21000 - http://secunia.com/advisories/22997 - http://www.debian.org/security/2006/dsa-1217
CVE ID: CVE-2006-5779 State: PUBLISHED Published: 2006-11-07T18:00:00 Last Updated: 2024-08-07T20:04:55.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, which triggers an assertion failure. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23133 - http://www.novell.com/linux/security/advisories/2006_72_openldap2.html - http://gleg.net/vulndisco_meta.shtml - https://issues.rpath.com/browse/RPL-820 - http://secunia.com/advisories/23170 - http://securitytracker.com/id?1017166 - http://www.trustix.or