Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rg/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3456 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-016 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A407 - http://marc.info/?l=bugtraq&m=111755356016155&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A587 - http://www.securiteam.com/exploits/5YP0T0AFFW.html - http://www.idefense.com/application/poi/display?id=231&type=vulnerabilities - http://www.vupen.com/english/advisories/2005/0335 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A573 - https://oval.cisecurity.org/repos
//oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A573 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2184 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4710 - http://www.securityfocus.com/bid/13132
CVE ID: CVE-2005-0064 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T20:57:40.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17277 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11781 - http://www.redhat.com/support/errata/RHSA-2005-066.html - http://www.redhat.com/support/errata/RHSA-2005-034.html - http://www.m
ww.redhat.com/support/errata/RHSA-2005-066.html - http://www.redhat.com/support/errata/RHSA-2005-034.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:018 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:017 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:016 - http://www.trustix.org/errata/2005/0003/ - https://bugzilla.fedora.us/show_bug.cgi?id=2352 - https://bugzilla.fedora.us/show_bug.cgi?id=2353 - http://www.debian.org/security/2005/dsa-645 - https://security.gentoo.org/glsa/200502-10 - http://www.redhat.com/support/errata/RHSA-2005-026.html - http://www.redhat.com/support/errata/RHSA-2005-053.html - http://www.mandriva.com/security/advisories?
A-2005-026.html - http://www.redhat.com/support/errata/RHSA-2005-053.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:020 - https://security.gentoo.org/glsa/200501-28 - http://www.idefense.com/application/poi/display?id=186&type=vulnerabilities - http://www.redhat.com/support/errata/RHSA-2005-059.html - http://marc.info/?l=bugtraq&m=110625368019554&w=2 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.42/SCOSA-2005.42.txt - http://www.debian.org/security/2005/dsa-648 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:021 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000921 - ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.00pl3.patch - http://www.mandriva
ctiva.com.br/atualizacoes/?id=a&anuncio=000921 - ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.00pl3.patch - http://www.mandriva.com/security/advisories?name=MDKSA-2005:019 - http://www.redhat.com/support/errata/RHSA-2005-057.html
CVE ID: CVE-2005-0065 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T20:57:40.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: The original design of TCP does not check that the TCP sequence number in an ICMP error message is within the range of sequence numbers for data that has been sent but not acknowledged (aka "TCP sequence number checking"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged "Destination Unreachable" messages, (2) blind throughput-reduction attacks with forged "Source Quench" messages, or
rged "Destination Unreachable" messages, (2) blind throughput-reduction attacks with forged "Source Quench" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced. NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. Additional
f affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13124 - http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html
CVE ID: CVE-2005-0066 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T20:57:40.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an intermediate router is within the range of possible values for data that has already been acknowledged (aka "TCP acknowledgement number checking"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged "Destination Unreachable" messages, (2) blind throughput-reduction atta
g (1) blind connection-reset attacks with forged "Destination Unreachable" messages, (2) blind throughput-reduction attacks with forged "Source Quench" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced. NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of
ifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13124 - http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html
CVE ID: CVE-2005-0067 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T20:57:41.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: The original design of TCP does not require that port numbers be assigned randomly (aka "Port randomization"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged "Destination Unreachable" messages, (2) blind throughput-reduction attacks with forged "Source Quench" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced. NOTE: C
ages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced. NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13124 - http://www.gont.c
itional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13124 - http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html
CVE ID: CVE-2005-0068 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T20:57:41.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: The original design of ICMP does not require authentication for host-generated ICMP error messages, which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged "Destination Unreachable" messages, (2) blind throughput-reduction attacks with forged "Source Quench" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced. NOTE: CVE-2004-079
) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced. NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13124 - http://www.gont.com.ar/draft
lyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13124 - http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html
CVE ID: CVE-2005-0069 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T20:57:40.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1012938 - https://bugzilla.fedora.us/show_bug.cgi?id=2343 - http://marc.info/?l=bugtraq&m=110608387001863&w=2 - http://www.redhat.com/support/errata/RHSA-2005-122.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9402 - http://secunia.com/ad
ml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9402 - http://secunia.com/advisories/13841/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18870 - http://www.redhat.com/support/errata/RHSA-2005-036.html
CVE ID: CVE-2005-0070 State: PUBLISHED Published: 2005-02-16T05:00:00 Last Updated: 2024-08-07T20:57:40.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Synaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not drop privileges before processing configuration and mixer files, which allows local users to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14300 - http://www.debian.org/security/2005/dsa-681 - http://www.securityfocus.com/bid/12546 - http://securitytracker.com/id?1013206
CVE ID: CVE-2005-0071 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T20:57:41.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13995 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19066 - http://www.debian.org/security/2005/dsa-656 - http://www.securityfocus.com/bid/12356 - http://www.gentoo.org/security/en/glsa/glsa-200501-42.xml - http://secunia.com/advisories/13930 - http://secunia.com/advisories/14066
CVE ID: CVE-2005-0072 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T20:57:41.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: zhcon before 0.2 does not drop privileges before reading a user configuration file, which allows local users to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12343 - http://securitytracker.com/id?1012977 - http://secunia.com/advisories/13982 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:012 - http://secunia.com/advisories/13977 - http://www.debian.org/security/2005/dsa-655 - http://secunia.com/advisories/13987 - https://exchange.xforce.ib
s/13977 - http://www.debian.org/security/2005/dsa-655 - http://secunia.com/advisories/13987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19045
CVE ID: CVE-2005-0073 State: PUBLISHED Published: 2005-02-11T05:00:00 Last Updated: 2024-08-07T20:57:41.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14224 - http://www.debian.org/security/2005/dsa-677 - http://secunia.com/advisories/14217 - http://securitytracker.com/id?1013163
CVE ID: CVE-2005-0074 State: PUBLISHED Published: 2005-02-11T05:00:00 Last Updated: 2024-08-07T20:57:40.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in pcdsvgaview in xpcd 2.08 allows local users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12523 - http://securitytracker.com/id?1013162 - http://secunia.com/advisories/14248 - http://www.debian.org/security/2005/dsa-676 - http://secunia.com/advisories/14250
CVE ID: CVE-2005-0075 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T20:57:40.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers. Additional Analyst Notes: - CVE Program Container: References: - http://www.squirrelmail.org/security/issue/2005-01-14 - http://www.redhat.com/support/errata/RHSA-2005-135.html - http://marc.info/?l=bugtraq&m=110702772714662&w=2 - http://www.redhat.com/support/errata/RHSA-2005-099.html - http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.
/www.redhat.com/support/errata/RHSA-2005-099.html - http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html - http://secunia.com/advisories/13962/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9587 - http://www.gentoo.org/security/en/glsa/glsa-200501-39.xml
CVE ID: CVE-2005-0076 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T20:57:40.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the XView library 3.2 may allow local users to execute arbitrary code via setuid applications that use the library. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19271 - http://www.debian.org/security/2005/dsa-672
CVE ID: CVE-2005-0077 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T20:57:41.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DBI library (libdbi-perl) for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013007 - http://www.securityfocus.com/archive/1/426530/30/6600/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2005:030 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19068 - http://www.debian.org/security/2005/dsa-658 - http://secunia.com/advisories/14015 - https://oval.cisec
abilities/19068 - http://www.debian.org/security/2005/dsa-658 - http://secunia.com/advisories/14015 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10552 - http://www.securityfocus.com/bid/12360 - http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml - http://secunia.com/advisories/14050 - http://www.redhat.com/support/errata/RHSA-2005-072.html - http://marc.info/?l=bugtraq&m=110667936707597&w=2
CVE ID: CVE-2005-0078 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T20:57:40.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with physical access to cause a crash and access the desktop session. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19084 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9260 - http://www.debian.org/security/2005/dsa-660 - http://www.redhat.com/support/errata/RHSA-2005-009.html
CVE ID: CVE-2005-0079 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T20:57:40.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service (application crash) and hijack the desktop session. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13938 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18991 - http://www.debian.org/security/2005/dsa-649 - http://www.securityfocus.com/bid/12316
CVE ID: CVE-2005-0080 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T20:57:41.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error message depending on whether the e-mail address is subscribed to a private list, which allows remote attackers to determine the list membership for a given e-mail address. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110549296126351&w=2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=285839 - http://qa.debian.org/bts-security.html
CVE ID: CVE-2005-0081 State: PUBLISHED Published: 2005-01-20T05:00:00Z Last Updated: 2024-09-16T16:52:39.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via an HTTP request with invalid headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=187&type=vulnerabilities
CVE ID: CVE-2005-0082 State: PUBLISHED Published: 2005-01-20T05:00:00Z Last Updated: 2024-09-16T18:29:51.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sapdbwa_GetUserData function in MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via invalid parameters to the WebDAV handler code, which triggers a null dereference that causes the SAP DB Web Agent to crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=187&type=vulnerabilities
CVE ID: CVE-2005-0083 State: PUBLISHED Published: 2005-03-17T05:00:00 Last Updated: 2024-08-07T20:57:40.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL MaxDB 7.5.00 for Windows, and possibly earlier versions and other platforms, allows remote attackers to cause a denial of service (application crash) via invalid parameters to the (1) DBMCli_String::ReallocString, (2) DBMCli_String::operator, (3) DBMCli_Buffer::ForceResize, (4) DBMCli_Wizard::InstallDatabase, (5) DBMCli_Devspaces::Complete, (6) DBMWeb_TemplateWizard::askForWriteCountStep5, or (7) DBMWeb_DBMWeb::wizardDB functions, which triggers a null dereference. Additional Analyst Notes: - CVE Program Container: Refer
_DBMWeb::wizardDB functions, which triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=218&type=vulnerabilities - https://exchange.xforce.ibmcloud.com/vulnerabilities/19687
CVE ID: CVE-2005-0084 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T20:57:41.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the X11 dissector in Ethereal 0.8.10 through 0.10.8 allows remote attackers to execute arbitrary code via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12326 - http://www.ethereal.com/appnotes/enpa-sa-00017.html - http://www.debian.org/security/2005/dsa-653 - http://www.redhat.com/support/errata/RHSA-2005-037.html - http://secunia.com/advisories/13946/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/19004 - https://oval.cisecurity.o
//secunia.com/advisories/13946/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/19004 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9140 - http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml - http://www.ciac.org/ciac/bulletins/p-106.shtml - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:013
CVE ID: CVE-2005-0085 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-07T20:57:40.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14795 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10878 - http://www.redhat.com/support/errata/RHSA-2005-073.html - http://secunia.com/advisories/142
g.mitre.oval%3Adef%3A10878 - http://www.redhat.com/support/errata/RHSA-2005-073.html - http://secunia.com/advisories/14255 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:063 - http://secunia.com/advisories/17415 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19223 - http://secunia.com/advisories/14303 - http://secunia.com/advisories/14276 - http://www.securityfocus.com/bid/12442 - http://www.gentoo.org/security/en/glsa/glsa-200502-16.xml - http://www.debian.org/security/2005/dsa-680 - http://secunia.com/advisories/17414 - http://www.redhat.com/support/errata/RHSA-2005-090.html - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00002.html - http://s
/errata/RHSA-2005-090.html - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00002.html - http://secunia.com/advisories/15007 - http://securitytracker.com/id?1013078 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.46/SCOSA-2005.46.txt
CVE ID: CVE-2005-0086 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T20:57:40.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in less in Red Hat Enterprise Linux 3 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted file, as demonstrated using the UTF-8 locale. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11027 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19131 - http://www.redhat.com/support/errata/RHSA-2005-068.html - https://bugzilla.redhat.com
mcloud.com/vulnerabilities/19131 - http://www.redhat.com/support/errata/RHSA-2005-068.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=145527 - https://bugzilla.fedora.us/show_bug.cgi?id=2404