Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-2059 State: PUBLISHED Published: 2006-04-26T20:00:00 Last Updated: 2024-08-07T17:35:31.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: action_public/search.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary PHP code via a search with a crafted value of the lastdate parameter, which alters the behavior of a regular expression to add a "#e" (execute) modifier. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17695 - http://www.securityfocus.com/archive/1/432226/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26070 - http://www.secur
ocus.com/archive/1/432226/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26070 - http://www.securityfocus.com/archive/1/432451/100/0/threaded - http://securityreason.com/securityalert/796 - http://secunia.com/advisories/19830 - http://www.vupen.com/english/advisories/2006/1534 - http://www.securityfocus.com/archive/1/431990/100/0/threaded - http://www.securityfocus.com/archive/1/439607/100/0/threaded - http://www.osvdb.org/25005 - http://forums.invisionpower.com/index.php?showtopic=213374
CVE ID: CVE-2006-2060 State: PUBLISHED Published: 2006-04-26T20:00:00 Last Updated: 2024-08-07T17:35:31.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in action_admin/paysubscriptions.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote authenticated administrators to include and execute arbitrary local PHP files via a .. (dot dot) in the name parameter, preceded by enough backspace (%08) characters to erase the initial static portion of a filename. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26072 - http://www.securityfocus.com/archive/1/432
r: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26072 - http://www.securityfocus.com/archive/1/432226/100/0/threaded - http://securityreason.com/securityalert/796 - http://secunia.com/advisories/19830 - http://www.osvdb.org/25008 - http://www.vupen.com/english/advisories/2006/1534 - http://www.securityfocus.com/archive/1/431990/100/0/threaded - http://www.securityfocus.com/archive/1/439607/100/0/threaded - http://forums.invisionpower.com/index.php?showtopic=213374
CVE ID: CVE-2006-2061 State: PUBLISHED Published: 2006-04-26T20:00:00 Last Updated: 2024-08-07T17:35:31.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lib/func_taskmanager.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary SQL commands via the ck parameter, which can inject at most 32 characters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26071 - http://www.securityfocus.com/archive/1/432226/100/0/threaded - http://securityreason.com/securityalert/796 - http://www.securityfocus.com/bid/17690 - http://secunia.com
0/0/threaded - http://securityreason.com/securityalert/796 - http://www.securityfocus.com/bid/17690 - http://secunia.com/advisories/19830 - http://www.vupen.com/english/advisories/2006/1534 - http://www.securityfocus.com/archive/1/431990/100/0/threaded - http://forums.invisionpower.com/index.php?showtopic=213374
CVE ID: CVE-2006-2062 State: PUBLISHED Published: 2006-04-26T20:00:00 Last Updated: 2024-08-07T17:35:31.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "Full Version", allow remote attackers to execute arbitrary SQL commands via the (1) banner parameter in agent_links.pl; the offset parameter in (2) agent_links.pl, (3) agent_transactions.pl, (4) agent_subaffiliates.pl, and (5) agent_summary.pl; the camp_id parameter in (6) agent_transactions_csv.pl, (7) agent_subaffiliates.pl, and (8) agent_camp_det.pl; the (9) login parameter in agent_commission_statement.pl; the logged pa
ent_subaffiliates.pl, and (8) agent_camp_det.pl; the (9) login parameter in agent_commission_statement.pl; the logged parameter in (10) agent_commission_statement.pl and (11) agent_camp_det.pl; the (12) agent_id parameter in agent_commission_statement.pl; and the (13) sub parameter in unspecified files. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25028 - http://www.osvdb.org/25027 - http://pridels0.blogspot.com/2006/04/leadhound-multiple-vuln.html - http://www.osvdb.org/25025 - http://secunia.com/advisories/19867 - http://www.osvdb.org/25029 - http://www.osvdb.org/25023 - http://www.osvdb.org/25026 - http://www.osvdb.org/25024
CVE ID: CVE-2006-2063 State: PUBLISHED Published: 2006-04-26T20:00:00 Last Updated: 2024-08-07T17:35:31.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "Full Version", allow remote attackers to inject arbitrary web script or HTML via the login parameter in (1) agent_affil.pl, (2) agent_help.pl, (3) agent_faq.pl, (4) agent_help_insert.pl, (5) sign_out.pl, (6) members.pl, (7) modify_agent_1.pl, (8) modify_agent_2.pl, (9) modify_agent.pl, (10) agent_links.pl, (11) agent_stats_pending_leads.pl, (12) agent_logoff.pl, (13) agent_rev_det.pl, (14) agent_subaffiliates.p
ent_links.pl, (11) agent_stats_pending_leads.pl, (12) agent_logoff.pl, (13) agent_rev_det.pl, (14) agent_subaffiliates.pl, (15) agent_stats_pending_leads.pl, (16) agent_transactions.pl, (17) agent_payment_history.pl, (18) agent_summary.pl, (19) agent_camp_all.pl, (20) agent_camp_new.pl, (21) agent_camp_notsub.pl, (22) agent_campaign.pl, (23) agent_camp_expired.pl, (24) agent_stats_det.pl, (25) agent_stats.pl, (26) agent_camp_det.pl, (27) agent_camp_sub.pl, (28) agent_affil_list.pl, and (29) agent_affil_code.pl; the logged parameter in (30) agent_faq.pl, (31) agent_help_insert.pl, (32) members.pl, (33) modify_agent_1.pl, (34) modify_agent_2.pl, (35) modify_agent.pl, (36) agent_links.pl, (37)
rt.pl, (32) members.pl, (33) modify_agent_1.pl, (34) modify_agent_2.pl, (35) modify_agent.pl, (36) agent_links.pl, (37) agent_subaffiliates.pl, (38) agent_stats_pending_leads.pl, (39) agent_transactions.pl, (40) agent_summary.pl, (41) agent_camp_all.pl, (42) agent_camp_new.pl, (43) agent_camp_notsub.pl, (44) agent_campaign.pl, (45) agent_camp_expired.pl, (46) agent_stats.pl, (47) agent_camp_det.pl, (48) agent_camp_sub.pl, (49) agent_affil_list.pl, and (50) agent_affil_code.pl; the camp_id parameter in (51) agent_links.pl, (52) agent_subaffiliates.pl, and (53) agent_camp_det.pl; the (54) banner parameter in agent_links.pl; the offset parameter in (55) agent_links.pl, (56) agent_subaffiliates.
.pl; the (54) banner parameter in agent_links.pl; the offset parameter in (55) agent_links.pl, (56) agent_subaffiliates.pl, (57) agent_transactions.pl, and (58) agent_summary.pl; the date parameter in (59) agent_subaffiliates.pl, (60) agent_transactions.pl, and (61) agent_summary.pl; the dates parameter in (62) agent_rev_det.pl and (63) agent_stats_det.pl; the (64) page parameter in agent_camp_det.pl; the (65) agent_id parameter in agent_commission_statement.pl; and the (66) lost password field in lost_pwd.pl. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25030 - http://www.osvdb.org/25033 - http://www.osvdb.org/25057 - http://www.osvdb.org/25037 - htt
http://www.osvdb.org/25030 - http://www.osvdb.org/25033 - http://www.osvdb.org/25057 - http://www.osvdb.org/25037 - http://www.osvdb.org/25038 - http://www.osvdb.org/25052 - http://www.osvdb.org/25035 - http://www.osvdb.org/25047 - http://pridels0.blogspot.com/2006/04/leadhound-multiple-vuln.html - http://www.osvdb.org/25055 - http://www.osvdb.org/25051 - http://www.osvdb.org/25042 - http://www.osvdb.org/25046 - http://www.osvdb.org/25041 - http://www.osvdb.org/25048 - http://www.osvdb.org/25036 - http://www.osvdb.org/25058 - http://www.osvdb.org/25043 - http://secunia.com/advisories/19867 - http://www.osvdb.org/25031 - http://www.osvdb.org/25054 - http://www.osvdb.org/25034 - http://www.os
/advisories/19867 - http://www.osvdb.org/25031 - http://www.osvdb.org/25054 - http://www.osvdb.org/25034 - http://www.osvdb.org/25060 - http://www.osvdb.org/25050 - http://www.osvdb.org/25049 - http://www.osvdb.org/25059 - http://www.osvdb.org/25053 - http://www.osvdb.org/25039 - http://www.osvdb.org/25045 - http://www.osvdb.org/25032 - http://www.osvdb.org/25056 - http://www.osvdb.org/25044
CVE ID: CVE-2006-2064 State: PUBLISHED Published: 2006-04-27T10:00:00 Last Updated: 2024-08-07T17:35:31.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the libpkcs11 library in Sun Solaris 10 might allow local users to gain privileges or cause a denial of service (application failure) via unknown attack vectors that involve the getpwnam family of non-reentrant functions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26075 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102316-1 - http://www.securityfocus.com/bid/17687 - http://www.vupen.com/english/advisories/2006/1
ment.do?assetkey=1-26-102316-1 - http://www.securityfocus.com/bid/17687 - http://www.vupen.com/english/advisories/2006/1504 - http://secunia.com/advisories/19789 - http://securitytracker.com/id?1015987
CVE ID: CVE-2006-2065 State: PUBLISHED Published: 2006-04-27T10:00:00 Last Updated: 2024-08-07T17:35:31.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in save.php in PHPSurveyor 0.995 and earlier allows remote attackers to execute arbitrary SQL commands via the surveyid cookie. NOTE: this issue could be leveraged to execute arbitrary PHP code, as demonstrated by inserting directory traversal sequences into the database, which are then processed by the thissurvey['language'] variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17633 - http://www.securityfocus.com/archive/1/431508/100/0/threaded
ner: References: - http://www.securityfocus.com/bid/17633 - http://www.securityfocus.com/archive/1/431508/100/0/threaded - http://secunia.com/advisories/19761 - http://securitytracker.com/id?1015970 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25970 - http://retrogod.altervista.org/phpsurveyor_0995_xpl.html - http://www.osvdb.org/24787 - http://www.vupen.com/english/advisories/2006/1451
CVE ID: CVE-2006-2066 State: PUBLISHED Published: 2006-04-27T10:00:00 Last Updated: 2024-08-07T17:35:31.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities pm_popup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin 3.5.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) u1, (2) m1, (3) m2, (4) m3, (5) m4 parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.nukedx.com/?viewdoc=26 - http://securitytracker.com/id?1015977 - http://www.securityfocus.com/archive/1/447195/100/0/threaded - http://www.securityfocus.com/archive/1/447303/100/0/threaded - http
.securityfocus.com/archive/1/447195/100/0/threaded - http://www.securityfocus.com/archive/1/447303/100/0/threaded - http://www.vupen.com/english/advisories/2006/1485 - http://securityreason.com/securityalert/801 - http://www.securityfocus.com/bid/17651 - http://www.securityfocus.com/bid/20232 - http://www.osvdb.org/24901 - http://secunia.com/advisories/19786 - http://www.securityfocus.com/archive/1/431759/100/0/threaded
CVE ID: CVE-2006-2067 State: PUBLISHED Published: 2006-04-27T10:00:00 Last Updated: 2024-08-07T17:35:31.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in vb_board_functions.php in MKPortal 1.1, as used with vBulletin 3.5.4 and earlier, allows remote attackers to execute arbitrary SQL commands via the userid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.nukedx.com/?viewdoc=26 - http://securitytracker.com/id?1015977 - http://securityreason.com/securityalert/801 - http://www.securityfocus.com/bid/17651 - http://www.securityfocus.com/archive/1/431759/100/0/threaded
CVE ID: CVE-2006-2068 State: PUBLISHED Published: 2006-04-27T10:00:00 Last Updated: 2024-08-07T17:35:31.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hitachi JP1 products allow remote attackers to cause a denial of service (application stop or fail) via unexpected requests or data. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19841 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26087 - http://www.hitachi-support.com/security_e/vuls_e/HS06-007_e/index-e.html - http://www.securityfocus.com/bid/17706 - http://www.vupen.com/english/advisories/2006/1524
CVE ID: CVE-2006-2069 State: PUBLISHED Published: 2006-04-27T10:00:00 Last Updated: 2024-08-07T17:35:31.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: The recursor in PowerDNS before 3.0.1 allows remote attackers to cause a denial of service (application crash) via malformed EDNS0 packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17711 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26100 - http://secunia.com/advisories/19831 - http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html - http://secunia.com/advisories/20117 - http://doc.powerdns.com/changelog.html#CHANGELOG-RECURSOR-3-0-1 - http://ww
html - http://secunia.com/advisories/20117 - http://doc.powerdns.com/changelog.html#CHANGELOG-RECURSOR-3-0-1 - http://www.vupen.com/english/advisories/2006/1527
CVE ID: CVE-2006-2070 State: PUBLISHED Published: 2006-04-27T10:00:00 Last Updated: 2024-08-07T17:35:31.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in member.php in DevBB 1.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the member parameter in a viewpro action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17703 - http://securityreason.com/securityalert/800 - http://downloads.securityfocus.com/vulnerabilities/exploits/DevBB-1.0.0-xss.txt - http://www.osvdb.org/24994 - http://www.securityfocus.com/archive/1/432096/100/0/threaded - http://secunia.
.0-xss.txt - http://www.osvdb.org/24994 - http://www.securityfocus.com/archive/1/432096/100/0/threaded - http://secunia.com/advisories/19855 - http://www.vupen.com/english/advisories/2006/1544 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26091
CVE ID: CVE-2006-2071 State: PUBLISHED Published: 2006-04-27T17:00:00 Last Updated: 2024-08-07T17:35:31.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permissions and modify a readonly attachment of shared memory by using mprotect to give write permission to the attachment. NOTE: some original raw sources combined this issue with CVE-2006-1524, but they are different bugs. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9978 - http://www.vupen.com/english/advisories/2006/4502 - https://exchange.xfor
efinition/oval%3Aorg.mitre.oval%3Adef%3A9978 - http://www.vupen.com/english/advisories/2006/4502 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26169 - http://www.vupen.com/english/advisories/2006/1391 - http://www.redhat.com/support/errata/RHSA-2006-0579.html - http://secunia.com/advisories/20716 - http://secunia.com/advisories/22875 - http://secunia.com/advisories/22292 - http://www.redhat.com/support/errata/RHSA-2006-0689.html - http://www.vmware.com/download/esx/esx-202-200610-patch.html - http://www.ubuntu.com/usn/usn-302-1 - http://www.securityfocus.com/archive/1/451426/100/200/threaded - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190073 - http://secunia.com/advisorie
e/1/451426/100/200/threaded - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190073 - http://secunia.com/advisories/21035 - http://www.vmware.com/download/esx/esx-213-200610-patch.html - http://www.redhat.com/support/errata/RHSA-2006-0580.html - http://secunia.com/advisories/23064 - http://www.vmware.com/download/esx/esx-254-200610-patch.html - http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm - http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm - http://secunia.com/advisories/22497 - http://www.securityfocus.com/archive/1/451404/100/0/threaded - http://www.osvdb.org/25139 - http://secunia.com/advisories/22945 - http://www.redhat.com/support/errata/RHSA-2006-0710.h
http://www.osvdb.org/25139 - http://secunia.com/advisories/22945 - http://www.redhat.com/support/errata/RHSA-2006-0710.html - http://www.securityfocus.com/archive/1/451417/100/200/threaded - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b78b6af66a5fbaf17d7e6bfc32384df5e34408c8 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:086 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.6 - http://www.securityfocus.com/archive/1/451419/100/200/threaded - http://secunia.com/advisories/20157
CVE ID: CVE-2006-2072 State: PUBLISHED Published: 2006-04-27T22:00:00 Last Updated: 2024-08-07T17:35:31.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in DeleGate 9.x before 9.0.6 and 8.x before 8.11.6 allow remote attackers to cause a denial of service via crafted DNS responses messages that cause (1) a buffer over-read or (2) infinite recursion, which can trigger a segmentation fault or invalid memory access, as demonstrated by the OUSPG PROTOS DNS test suite. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26081 - http://www.kb.cert.org/vuls/id/955777 - http://securi
es: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26081 - http://www.kb.cert.org/vuls/id/955777 - http://securitytracker.com/id?1015991 - http://secunia.com/advisories/19750 - http://www.vupen.com/english/advisories/2006/1505 - http://www.vupen.com/english/advisories/2006/1506 - http://www.securityfocus.com/bid/17691 - http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en - http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en
CVE ID: CVE-2006-2073 State: PUBLISHED Published: 2006-04-27T22:00:00 Last Updated: 2024-08-07T17:35:31.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ISC BIND allows remote attackers to cause a denial of service via a crafted DNS message with a "broken" TSIG, as demonstrated by the OUSPG PROTOS DNS test suite. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26081 - http://www.vupen.com/english/advisories/2006/1537 - http://www.kb.cert.org/vuls/id/955777 - http://secunia.com/advisories/19808 - http://www.securityfocus.com/bid/17692 - http://www.vupen.com/english/advisories/2006
p://secunia.com/advisories/19808 - http://www.securityfocus.com/bid/17692 - http://www.vupen.com/english/advisories/2006/1505 - http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en - http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en - http://securitytracker.com/id?1015993
CVE ID: CVE-2006-2074 State: PUBLISHED Published: 2006-04-27T22:00:00 Last Updated: 2024-08-07T17:35:31.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Juniper Networks JUNOSe E-series routers before 7-1-1 has unknown impact and remote attack vectors related to the DNS "client code," as demonstrated by the OUSPG PROTOS DNS test suite. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015992 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26081 - http://www.kb.cert.org/vuls/id/955777 - http://secunia.com/advisories/19822 - http://www.securityfocus.com/bid/17693 - http://www.vupen.com/english/advi
55777 - http://secunia.com/advisories/19822 - http://www.securityfocus.com/bid/17693 - http://www.vupen.com/english/advisories/2006/1526 - http://www.vupen.com/english/advisories/2006/1505 - http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en - http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en
CVE ID: CVE-2006-2075 State: PUBLISHED Published: 2006-04-27T22:00:00 Last Updated: 2024-08-07T17:35:31.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in MyDNS 1.1.0 allows remote attackers to cause a denial of service via a crafted DNS message, aka "Query-of-death," as demonstrated by the OUSPG PROTOS DNS test suite. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26081 - http://www.kb.cert.org/vuls/id/955777 - http://www.vupen.com/english/advisories/2006/1505 - http://securitytracker.com/id?1015990 - http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en - http://www.n
http://securitytracker.com/id?1015990 - http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en - http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en
CVE ID: CVE-2006-2076 State: PUBLISHED Published: 2006-04-27T22:00:00 Last Updated: 2024-08-07T17:35:31.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Paul Rombouts pdnsd before 1.2.4 allows remote attackers to cause a denial of service (memory consumption) via a DNS query with an unsupported (1) QTYPE or (2) QCLASS, as demonstrated by the OUSPG PROTOS DNS test suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.phys.uu.nl/~rombouts/pdnsd.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26081 - http://www.kb.cert.org/vuls/id/955777 - http://www.securityfocus.com/bid/17694 - http://securitytracker.com/id?1015989 - http:
/www.kb.cert.org/vuls/id/955777 - http://www.securityfocus.com/bid/17694 - http://securitytracker.com/id?1015989 - http://www.vupen.com/english/advisories/2006/1505 - http://secunia.com/advisories/20055 - http://www.gentoo.org/security/en/glsa/glsa-200605-10.xml - http://secunia.com/advisories/19835 - http://www.vupen.com/english/advisories/2006/1528 - http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en - http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en
CVE ID: CVE-2006-2077 State: PUBLISHED Published: 2006-04-27T22:00:00 Last Updated: 2024-08-07T17:35:31.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Paul Rombouts pdnsd before 1.2.4 has unknown impact and attack vectors. NOTE: this issue might be related to the OUSPG PROTOS DNS test suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.phys.uu.nl/~rombouts/pdnsd.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26081 - http://www.kb.cert.org/vuls/id/955777 - http://www.securityfocus.com/bid/17720 - http://secunia.com/advisories/20055 - http://www.gentoo.org/security/en/glsa/glsa-200605-10.xml
CVE ID: CVE-2006-2078 State: PUBLISHED Published: 2006-04-27T22:00:00 Last Updated: 2024-08-07T17:35:31.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in multiple FITELnet products, including FITELnet-F40, F80, F100, F120, F1000, and E20/E30, allow remote attackers to cause a denial of service via crafted DNS messages that trigger errors in (1) ProxyDNS or (2) PKI-Resolver, as demonstrated by the OUSPG PROTOS DNS test suite. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26081 - http://secunia.com/advisories/19820 - http://www.kb.cert.org/vuls/id/955777 - http://www.vu