Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-3642 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-17T04:03:45.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Informix Dynamic Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account by supplying an invalid username. Additional Analyst Notes: - CVE Program Container: References: - http://www.ngssoftware.com/papers/database-on-xp.pdf - http://www.securityfocus.com/bid/15451
CVE ID: CVE-2005-3643 State: PUBLISHED Published: 2005-11-16T21:17:00Z Last Updated: 2024-09-16T19:15:48.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account without supplying a password. Additional Analyst Notes: - CVE Program Container: References: - http://www.ngssoftware.com/papers/database-on-xp.pdf - http://www.securityfocus.com/bid/15452
CVE ID: CVE-2005-3644 State: PUBLISHED Published: 2005-11-17T11:00:00 Last Updated: 2024-08-07T23:17:23.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: PNP_GetDeviceList (upnp_getdevicelist) in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and a different vulnerability than CVE-2005-2120. Additional Analyst Notes: - CVE Program Container: References: - http://www.microsoft.com/technet/security/advisory/911052.mspx - http://www.securityfocus.com/bid/15460 - http://secur
- http://www.microsoft.com/technet/security/advisory/911052.mspx - http://www.securityfocus.com/bid/15460 - http://securitytracker.com/id?1015233 - http://www.securiteam.com/exploits/6V00C15EKM.html - http://secunia.com/advisories/17595 - http://research.eeye.com/html/alerts/zeroday/20051116.html - https://www.exploit-db.com/exploits/1328 - http://www.frsirt.com/exploits/20051117.Win_upnp_getdevicelist.c.php - http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2005/20051116
CVE ID: CVE-2005-3645 State: PUBLISHED Published: 2005-11-17T11:00:00 Last Updated: 2024-08-07T23:17:23.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application installation path and other sensitive information via direct requests to (1) create.php, and if display_errors is enabled, (2) lib-updates.inc.php, (3) lib-targetstats.inc.php, (4) lib-size.inc.php, (5) lib-misc-stats.inc.php, (6) lib-hourly-hosts.inc.php, (7) lib-hourly.inc.php, (8) lib-history.inc.php, and (9) graph-daily.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.fitsec.com/advis
p, and (9) graph-daily.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.fitsec.com/advisories/FS-05-01.txt - http://www.osvdb.org/20740 - http://www.osvdb.org/20743 - http://marc.info/?l=bugtraq&m=113165036315035&w=2 - http://www.osvdb.org/20737 - http://secunia.com/advisories/17464/ - http://sourceforge.net/project/shownotes.php?group_id=36679&release_id=370942 - http://www.osvdb.org/20739 - http://www.osvdb.org/20735 - http://seclists.org/lists/bugtraq/2005/Nov/0189.html - http://securityreason.com/securityalert/171 - http://www.osvdb.org/20738 - http://www.osvdb.org/20741 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23043 - http://www.vupen.com/en
0738 - http://www.osvdb.org/20741 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23043 - http://www.vupen.com/english/advisories/2005/2380 - http://www.osvdb.org/20742 - http://www.osvdb.org/20736
CVE ID: CVE-2005-3646 State: PUBLISHED Published: 2005-11-17T11:00:00 Last Updated: 2024-08-07T23:17:23.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the sessionID parameter in (1) logout.php and (2) index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.fitsec.com/advisories/FS-05-01.txt - http://securityreason.com/securityalert/172 - http://marc.info/?l=bugtraq&m=113165036315035&w=2 - http://secunia.com/advisories/17464/ - http://sourceforge.net/project/show
/marc.info/?l=bugtraq&m=113165036315035&w=2 - http://secunia.com/advisories/17464/ - http://sourceforge.net/project/shownotes.php?group_id=36679&release_id=370942 - http://www.osvdb.org/20745 - http://www.osvdb.org/20744 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23044 - http://seclists.org/lists/bugtraq/2005/Nov/0189.html - http://securityreason.com/securityalert/171 - http://www.securityfocus.com/bid/15385/ - http://www.zone-h.org/en/advisories/read/id=8413/ - http://securitytracker.com/id?1015193 - http://secunia.com/advisories/17579 - http://www.vupen.com/english/advisories/2005/2380
CVE ID: CVE-2005-3647 State: PUBLISHED Published: 2005-11-17T11:00:00 Last Updated: 2024-08-07T23:17:23.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Folder Guard allows local users to bypass protections by running from or installing to the temporary files directory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23054 - http://marc.info/?l=bugtraq&m=113165092919948&w=2
CVE ID: CVE-2005-3648 State: PUBLISHED Published: 2005-11-17T11:00:00 Last Updated: 2024-08-07T23:17:23.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) category.php and (2) info.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2387 - http://marc.info/?l=bugtraq&m=113165668814241&w=2 - http://www.securityfocus.com/bid/15380/ - http://rgod.altervista.org/moodle16dev.html - http://osvdb.org/20748 - http://secunia.com/advisories/17526/
id/15380/ - http://rgod.altervista.org/moodle16dev.html - http://osvdb.org/20748 - http://secunia.com/advisories/17526/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/23058 - http://securitytracker.com/id?1015181
CVE ID: CVE-2005-3649 State: PUBLISHED Published: 2005-11-17T11:00:00 Last Updated: 2024-08-07T23:17:23.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2387 - http://marc.info/?l=bugtraq&m=113165668814241&w=2 - http://securityreason.com/securityalert/168 - http://rgod.altervista.org/moodle16dev.html - http://secunia.com/advisories/17526/ - http://www.osvdb.org/20750
CVE ID: CVE-2005-3650 State: PUBLISHED Published: 2005-11-17T11:00:00 Last Updated: 2024-08-07T23:17:23.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CodeSupport.ocx ActiveX control, as used by Sony to uninstall the First4Internet XCP DRM, has "safe for scripting" enabled, which allows remote attackers to execute arbitrary code by calling vulnerable functions such as RebootMachine, IsAdministrator, and ExecuteCode. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17610 - http://www.vupen.com/english/advisories/2005/2454 - http://www.osvdb.org/20887 - http://www.kb.cert.org/vuls/id/312073 - http://www.securityfocus.com/bid/15
ies/2005/2454 - http://www.osvdb.org/20887 - http://www.kb.cert.org/vuls/id/312073 - http://www.securityfocus.com/bid/15430 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23063 - http://www.freedom-to-tinker.com/?p=927 - http://hack.fi/~muzzy/sony-drm/
CVE ID: CVE-2005-3651 State: PUBLISHED Published: 2005-12-10T11:00:00 Last Updated: 2024-08-07T23:17:23.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html - http://securitytracker.com/id?1015337 - http://secunia.com/advisories/18911 - http://secunia.com/advisories/19230 - http://secunia.com/advisories/18012 - http://www.se
secunia.com/advisories/18911 - http://secunia.com/advisories/19230 - http://secunia.com/advisories/18012 - http://www.securityfocus.com/bid/15794 - http://www.debian.org/security/2005/dsa-920 - http://www.redhat.com/support/errata/RHSA-2006-0156.html - http://www.ethereal.com/appnotes/enpa-sa-00022.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11286 - http://secunia.com/advisories/17973 - http://www.gentoo.org/security/en/glsa/glsa-200512-06.xml - http://anonsvn.ethereal.com/viewcvs/viewcvs.py/trunk/epan/dissectors/packet-ospf.c - http://www.mandriva.com/security/advisories?name=MDKSA-2006:002 - http://www.idefense.com/application/poi/display?i
.c - http://www.mandriva.com/security/advisories?name=MDKSA-2006:002 - http://www.idefense.com/application/poi/display?id=349&type=vulnerabilities - http://www.vupen.com/english/advisories/2005/2830 - http://secunia.com/advisories/18062 - ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U - http://www.mandriva.com/security/advisories?name=MDKSA-2005:227 - http://secunia.com/advisories/19012 - http://secunia.com/advisories/18426 - http://secunia.com/advisories/18331 - http://securityreason.com/securityalert/247
CVE ID: CVE-2005-3652 State: PUBLISHED Published: 2005-12-16T23:00:00 Last Updated: 2024-08-07T23:17:23.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Citrix Program Neighborhood client 9.0 and earlier allows remote attackers to execute arbitrary code via a long name value in an Application Set response. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015373 - http://www.idefense.com/application/poi/display?id=357&type=vulnerabilities - http://secunia.com/advisories/18068 - http://www.securityfocus.com/bid/15907 - http://support.citrix.com/kb/entry.jspa?externalID=CTX108354 - http://securityreason.
/www.securityfocus.com/bid/15907 - http://support.citrix.com/kb/entry.jspa?externalID=CTX108354 - http://securityreason.com/securityalert/266 - http://www.osvdb.org/21816 - http://www.vupen.com/english/advisories/2005/2944
CVE ID: CVE-2005-3653 State: PUBLISHED Published: 2006-01-23T20:00:00 Last Updated: 2024-08-07T23:17:23.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015526 - http://marc.info/?l=full-disclosure&m=113803349715927&w=2 - http://www.osvdb.org/22688 - http://secunia.com/advisories/18591 - http://www.securityfocus.com/bid/16354
9715927&w=2 - http://www.osvdb.org/22688 - http://secunia.com/advisories/18591 - http://www.securityfocus.com/bid/16354 - http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33778 - http://securityreason.com/securityalert/380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24269 - http://www.vupen.com/english/advisories/2006/0311 - http://www.securityfocus.com/archive/1/423288/100/0/threaded - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=376 - http://www.securityfocus.com/archive/1/423403/100/0/threaded - http://supportconnectw.ca.com/public/ca_common_docs/igatewaysecurity_notice.asp
CVE ID: CVE-2005-3654 State: PUBLISHED Published: 2006-01-06T00:00:00 Last Updated: 2024-08-07T23:17:23.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of packets with 0xFF characters to the Telnet port (TCP 23), which corrupts the heap. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015442 - http://securityreason.com/securityalert/322 - http://www.winproxy.com/products/relnotes.asp - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=365 - http://www.vu
roxy.com/products/relnotes.asp - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=365 - http://www.vupen.com/english/advisories/2006/0065 - http://secunia.com/advisories/18288 - http://www.securityfocus.com/bid/16149
CVE ID: CVE-2005-3655 State: PUBLISHED Published: 2006-01-14T01:00:00 Last Updated: 2024-08-07T23:17:23.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Novell Open Enterprise Server Remote Manager (novell-nrm) in Novell SUSE Linux Enterprise Server 9 allows remote attackers to execute arbitrary code via an HTTP POST request with a negative Content-Length parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16226 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24111 - http://www.osvdb.org/22455 - http://secunia.com/advisories/18484 - http://securitytracker.com/id?1015487 - http://www.i
http://www.osvdb.org/22455 - http://secunia.com/advisories/18484 - http://securitytracker.com/id?1015487 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=371 - http://securityreason.com/securityalert/348 - http://www.novell.com/linux/security/advisories/2006_02_novellnrm.html
CVE ID: CVE-2005-3656 State: PUBLISHED Published: 2006-01-06T11:00:00 Last Updated: 2024-08-07T23:17:23.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200601-05.xml - http://secunia.com/advisories/18321 - http://www.giuseppetanzilli.it/mod_auth_pgsql2/ - http://www.redhat.com/archives/fedora-announce-list/2006-Janu
/18321 - http://www.giuseppetanzilli.it/mod_auth_pgsql2/ - http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00016.html - http://www.securityfocus.com/bid/16153 - https://usn.ubuntu.com/239-1/ - http://secunia.com/advisories/18347 - http://secunia.com/advisories/18304 - http://www.trustix.org/errata/2006/0002/ - http://secunia.com/advisories/18463 - http://secunia.com/advisories/18350 - http://www.vupen.com/english/advisories/2006/0070 - ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U - http://www.redhat.com/support/errata/RHSA-2006-0164.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10600 - http://secunia.
64.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10600 - http://secunia.com/advisories/18517 - http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00015.html - http://securitytracker.com/id?1015446 - http://secunia.com/advisories/18403 - http://secunia.com/advisories/18397 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:009 - http://secunia.com/advisories/18348 - http://www.debian.de/security/2006/dsa-935 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=367
CVE ID: CVE-2005-3657 State: PUBLISHED Published: 2005-12-21T11:00:00 Last Updated: 2024-08-07T23:17:23.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ActiveX control in MCINSCTL.DLL for McAfee VirusScan Security Center does not use the IObjectSafetySiteLock API to restrict access to required domains, which allows remote attackers to create or append to arbitrary files via the StartLog and AddLog methods in the MCINSTALL.McLog object. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/279 - http://securitytracker.com/id?1015390 - http://www.vupen.com/english/advisories/2005/3006 - http://www.idefense.com/intelligence/
curitytracker.com/id?1015390 - http://www.vupen.com/english/advisories/2005/3006 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=358 - http://www.securityfocus.com/bid/15986 - http://secunia.com/advisories/18169
CVE ID: CVE-2005-3658 State: PUBLISHED Published: 2006-01-18T02:00:00 Last Updated: 2024-08-07T23:17:23.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise Backup Software (EBS) 7.1 through 7.2L, allow remote attackers to execute arbitrary code or cause a denial of service (unresponsive application) via malformed RPC packets to (1) RPC program number 390109 (nsrd.exe) and (2) RPC program number 390113 (nsrexecd.exe). Additional Analyst Notes: - CVE Program Container: References: -
.exe) and (2) RPC program number 390113 (nsrexecd.exe). Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015545 - http://secunia.com/advisories/18615 - http://www.legato.com/support/websupport/product_alerts/011606_NW.htm - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=373 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=374 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24175 - http://www.vupen.com/english/advisories/2006/0343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24174 - http://secunia.com/advisories/18495 - http://securitytracker.com/id?1015500 - http://www.securityfocus.com/
ties/24174 - http://secunia.com/advisories/18495 - http://securitytracker.com/id?1015500 - http://www.securityfocus.com/bid/16275 - http://www.vupen.com/english/advisories/2006/0233 - http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102148-1 - ftp://ftp.legato.com/pub/NetWorker/Updates/LGTpa83990/README.TXT
CVE ID: CVE-2005-3659 State: PUBLISHED Published: 2006-01-18T02:00:00 Last Updated: 2024-08-07T23:17:23.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise Backup Software (EBS) 7.1 through 7.2L, allows remote attackers to cause a denial of service (nsrd service crash) via a malformed RPC request to RPC program number 390109, which triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015545 - http://secunia.com/advisories/18615 - http://
E Program Container: References: - http://securitytracker.com/id?1015545 - http://secunia.com/advisories/18615 - http://www.legato.com/support/websupport/product_alerts/011606_NW.htm - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=375 - http://www.vupen.com/english/advisories/2006/0343 - http://secunia.com/advisories/18495 - http://securitytracker.com/id?1015500 - http://www.securityfocus.com/bid/16275 - http://www.vupen.com/english/advisories/2006/0233 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24173 - http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102148-1 - ftp://ftp.legato.com/pub/NetWorker/Updates/LGTpa83990/README.TXT
CVE ID: CVE-2005-3660 State: PUBLISHED Published: 2005-12-22T23:00:00 Last Updated: 2024-08-07T23:17:23.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.4 and 2.6 allows attackers to cause a denial of service (memory exhaustion and panic) by creating a large number of connected file descriptors or socketpairs and setting a large data transfer buffer, then preventing Linux from being able to finish the transfer by causing the process to become a zombie, or closing the file descriptor without closing an associated reference. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/291 - http://www.securityfocus.com/b
tes: - CVE Program Container: References: - http://securityreason.com/securityalert/291 - http://www.securityfocus.com/bid/16041 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=362 - http://www.vupen.com/english/advisories/2005/3076 - http://securitytracker.com/id?1015402 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23835 - http://secunia.com/advisories/18205
CVE ID: CVE-2005-3661 State: PUBLISHED Published: 2005-12-08T11:00:00 Last Updated: 2024-08-07T23:17:23.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dell TrueMobile 2300 Wireless Broadband Router running firmware 3.0.0.8 and 5.1.1.6, and possibly other versions, allows remote attackers to reset authentication credentials, then change configuration or firmware, via a direct request to apply.cgi with the Page parameter set to adv_password.asp. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/242 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23516 - http://www.idefense.com/application/poi/display?id=348&type=vul
s://exchange.xforce.ibmcloud.com/vulnerabilities/23516 - http://www.idefense.com/application/poi/display?id=348&type=vulnerabilities&flashstatus=true - http://securitytracker.com/id?1015325 - http://secunia.com/advisories/17936 - http://www.vupen.com/english/advisories/2005/2802 - http://www.securityfocus.com/bid/15770
CVE ID: CVE-2005-3662 State: PUBLISHED Published: 2005-11-18T02:00:00 Last Updated: 2024-08-07T23:17:23.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one buffer overflow in pnmtopng before 2.39, when using the -alpha command line option (Alphas_Of_Color), allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNM file with exactly 256 colors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9583 - http://www.novell.com/linux/security/advisories/2005_28_sr.html - http://www.redhat.com/support/errata/RHSA-2005-843.html
tp://www.novell.com/linux/security/advisories/2005_28_sr.html - http://www.redhat.com/support/errata/RHSA-2005-843.html - http://www.securityfocus.com/bid/15427 - http://secunia.com/advisories/17544 - http://sourceforge.net/project/shownotes.php?release_id=370545 - ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U - http://www.vupen.com/english/advisories/2005/2418 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:217 - http://secunia.com/advisories/17679 - http://secunia.com/advisories/17828 - http://secunia.com/advisories/18186 - http://secunia.com/advisories/18517 - http://secunia.com/advisories/17671 - https://usn.ubuntu.com/218-1/ - http://www.debian.org/s
nia.com/advisories/18517 - http://secunia.com/advisories/17671 - https://usn.ubuntu.com/218-1/ - http://www.debian.org/security/2005/dsa-904
CVE ID: CVE-2005-3663 State: PUBLISHED Published: 2005-11-18T11:00:00 Last Updated: 2024-08-07T23:17:23.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in Kaspersky Anti-Virus 5.0 might allow local users to gain privileges via a malicious "program.exe" file in the C: folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=340&type=vulnerabilities - http://securitytracker.com/id?1015224 - http://securityreason.com/securityalert/187