Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
22047 - http://www.securityfocus.com/bid/20130 - http://www.vupen.com/english/advisories/2006/3733 - http://www.kb.cert.org/vuls/id/468798 - http://www.sisconet.com/downloads/NESSUS_Vulnerability_Announcement.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/29072
CVE ID: CVE-2005-4813 State: PUBLISHED Published: 2006-10-09T21:00:00 Last Updated: 2024-08-08T00:01:23.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Report Application Server (Crystalras.exe) before 11.0.0.1370, as used in Business Objects Crystal Reports XI, Crystal Reports Server XI, and BusinessObjects Enterprise XI, allows remote attackers to cause a denial of service (application hang) via certain network traffic, possibly involving multiple simultaneous TCP connections. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014605 - http://securitytracker.com/id?1014604 - http://support.businessobj
References: - http://securitytracker.com/id?1014605 - http://securitytracker.com/id?1014604 - http://support.businessobjects.com/downloads/critical_updates/security_bulletin_june05.asp - http://www.securityfocus.com/bid/14433 - http://support.businessobjects.com/library/kbase/articles/c2017748.asp - https://exchange.xforce.ibmcloud.com/vulnerabilities/21654 - http://www.osvdb.org/18473 - http://secunia.com/advisories/16282
CVE ID: CVE-2005-4814 State: PUBLISHED Published: 2006-10-31T00:00:00Z Last Updated: 2024-09-16T19:31:34.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with the PHP interpreter, allows remote attackers to upload and execute arbitrary PHP code by placing .phtml files in the userfiles/ directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29902 - http://sourceforge.net/project/shownotes.php?release_id=456920&group_id=82171
CVE ID: CVE-2005-4815 State: PUBLISHED Published: 2006-11-21T23:00:00 Last Updated: 2024-08-08T00:01:23.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP 6.4 before 6.40 patch 4, 6.2 before 6.20 patch 1364, 4.6 before 4.6D patch 1767, 45 before 45B patch 913, 40 before 40B patch 1008, and 31 before 31I patch 735 do not properly restrict process execution by lnaxdm/sapsys, which allows remote attackers to execute arbitrary code via a certain UDP packet that ends with the name of a local executable file, aka the "FX SAP R/3 gwrd vuln." Additional Analyst Notes: - CVE Program Container: References: - http://lists.virus.org/darklab-0509/msg00017.html - http://lists.virus.org/da
es: - CVE Program Container: References: - http://lists.virus.org/darklab-0509/msg00017.html - http://lists.virus.org/darklab-0509/msg00011.html - http://lists.darklab.org/pipermail/darklab/2006-January/000209.html - http://lists.virus.org/darklab-0509/msg00018.html - http://www.securityfocus.com/archive/1/451378/100/0/threaded
CVE ID: CVE-2005-4816 State: PUBLISHED Published: 2006-12-23T11:00:00 Last Updated: 2024-08-08T00:01:23.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in mod_radius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/dailydave/2006-q1/0122.html - http://bugs.proftpd.org/show_bug.cgi?id=2658 - http://www.securityfocus.com/bid/16535 - http://www.debian.org/security/2007/dsa-1245 - http://www.osvdb.org/23063
CVE ID: CVE-2005-4817 State: PUBLISHED Published: 2006-12-29T11:00:00 Last Updated: 2024-08-08T00:01:23.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in ui.c in Textbased MSN Client (TMSNC) before 0.2.5 allows attackers to cause a denial of service and possibly execute arbitrary code via unknown attack vectors that cause format strings to be injected into the wprintw function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22242 - http://secunia.com/advisories/16752 - http://www.securityfocus.com/bid/14810 - http://sourceforge.net/project/shownotes.php?release_id=355808 - http
s/16752 - http://www.securityfocus.com/bid/14810 - http://sourceforge.net/project/shownotes.php?release_id=355808 - http://www.osvdb.org/displayvuln.php?osvdb_id=19311 - http://www.vupen.com/english/advisories/2005/1709
CVE ID: CVE-2005-4818 State: PUBLISHED Published: 2006-12-29T11:00:00Z Last Updated: 2024-09-17T03:18:15.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Copernicus Europa allow remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14895
CVE ID: CVE-2005-4819 State: PUBLISHED Published: 2006-12-29T11:00:00 Last Updated: 2024-08-08T00:01:23.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Lotus Domino versions before 6.5.4 fix pack 1 (FP1) and versions before 7.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/alerts/2005/Sep/1014946.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/22358 - http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21217285 - http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg21201845 - http://www
/support/docview.wss?rs=463&uid=swg21217285 - http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg21201845 - http://www.osvdb.org/displayvuln.php?osvdb_id=19614 - http://www.securityfocus.com/bid/14901
CVE ID: CVE-2005-4820 State: PUBLISHED Published: 2006-12-29T11:00:00 Last Updated: 2024-08-08T00:01:23.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: SMC Wireless Router model SMC7904WBRA allows remote attackers to cause a denial of service (reboot) by flooding the router with traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14809 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40019
CVE ID: CVE-2005-4821 State: PUBLISHED Published: 2006-12-29T11:00:00Z Last Updated: 2024-09-17T02:26:35.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbitrary SQL commands via parameters including (1) the m parameter in auth.php, (2) the f parameter in events.php, or (3) the e parameter in plug.php. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0381.html - http://www.osvdb.org/19505 - http://www.securityfocus.com/bid/14820 - http://www.osvdb.org/19504 - http://www.g-0.org/code/ld
//www.osvdb.org/19505 - http://www.securityfocus.com/bid/14820 - http://www.osvdb.org/19504 - http://www.g-0.org/code/ldu-adv.html
CVE ID: CVE-2005-4822 State: PUBLISHED Published: 2006-12-29T11:00:00 Last Updated: 2024-08-08T00:01:23.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in projects/project-edit.asp in Digger Solutions Intranet Open Source (IOS) version 2.7.2 allows remote attackers to execute arbitrary SQL commands via the project_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14882 - http://www.osvdb.org/19574 - http://secunia.com/advisories/16870 - http://www.vupen.com/english/advisories/2005/1804 - http://osvdb.org/ref/19/DiggerIOS_Ver_2.7.2_SQL_Injection_Vulnerability.pdf - https://exchange.xforce
sories/2005/1804 - http://osvdb.org/ref/19/DiggerIOS_Ver_2.7.2_SQL_Injection_Vulnerability.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/22345
CVE ID: CVE-2005-4823 State: PUBLISHED Published: 2007-01-12T01:00:00Z Last Updated: 2024-09-17T00:40:51.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the HP HTTP Server 5.0 through 5.95 of the HP Web-enabled Management Software allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2005-02/0235.html - http://archives.neohapsis.com/archives/bugtraq/2005-02/0235.html - http://securitytracker.com/id?1013182 - http://www.securityfocus.com/bid/12566 - http://secunia.com/advisories/14311 - http://www.osvdb.org/13843
CVE ID: CVE-2005-4824 State: PUBLISHED Published: 2007-01-24T01:00:00Z Last Updated: 2024-09-16T18:44:14.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in web/classes.php in Siteframe before 3.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the LOCAL_PATH parameter, a different vulnerability than CVE-2005-1965. Additional Analyst Notes: - CVE Program Container: References: - http://list.broadpool.com/pipermail/siteframe/2005-October/001416.html
CVE ID: CVE-2005-4825 State: PUBLISHED Published: 2007-01-29T16:00:00Z Last Updated: 2024-09-16T23:55:52.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service (disk consumption), or make unauthorized files accessible, by uploading files through requests to certain JSP scripts, a related issue to CVE-2005-4332. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/419645/30/0/threaded - http://www.osvdb.org/21959 - http://www.cisco.com/warp/public/707/cisco-response-20051221-CCA.shtml
CVE ID: CVE-2005-4826 State: PUBLISHED Published: 2007-01-31T11:00:00 Last Updated: 2024-08-08T00:01:23.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(22)EA3 on Catalyst 2950T switches allows remote attackers to cause a denial of service (device reboot) via a crafted Subset-Advert message packet, a different issue than CVE-2006-4774, CVE-2006-4775, and CVE-2006-4776. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017568 - http://secunia.com/advisories/23892 - http://osvdb.org/33013 - http://www.cisco.com/en/US/products/products_security_res
http://secunia.com/advisories/23892 - http://osvdb.org/33013 - http://www.cisco.com/en/US/products/products_security_response09186a00807d1a81.html - http://www.vupen.com/english/advisories/2007/0414 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5544 - http://www.securityfocus.com/archive/1/458554/100/0/threaded - http://www.blackhat.com/html/bh-europe-05/bh-eu-05-speakers.html#Berrueta - http://www.securityfocus.com/bid/22268 - http://www.s21sec.com/en/avisos/s21sec-034-en.txt - http://www.securityfocus.com/archive/1/458240/100/0/threaded
CVE ID: CVE-2005-4827 State: PUBLISHED Published: 2007-02-07T20:00:00 Last Updated: 2024-08-08T00:01:23.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy and make requests outside of the intended domain by calling open on an XMLHttpRequest object (Microsoft.XMLHTTP) and using tab, newline, and carriage return characters within the first argument (method name), which is supported by some proxy servers that convert tabs to spaces. NOTE: this issue can be leveraged to conduct referer spoofing, HTTP Request Smuggling, and other attacks. Additional Analyst Notes: - C
e can be leveraged to conduct referer spoofing, HTTP Request Smuggling, and other attacks. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2007/Feb/0081.html - http://www.securityfocus.com/archive/1/459172/100/0/threaded - http://www.securityfocus.com/bid/14969 - http://www.securityfocus.com/archive/1/459172/100/0/threaded - http://www.securityfocus.com/archive/1/411585
CVE ID: CVE-2005-4828 State: PUBLISHED Published: 2007-02-12T11:00:00 Last Updated: 2024-08-08T00:01:23.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a "." in the wrong place, which causes kolabfilter to add another ".", which might break clear-text signatures and attachments. NOTE: it is not clear whether this issue crosses privilege boundaries, so this might not be a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://kolab.org/security/kolab-vendor-notice-07.txt - http://www.mandriva.com/security/advisories?name=MDKSA-2006:013 - http://www.osvdb.org/22
y/kolab-vendor-notice-07.txt - http://www.mandriva.com/security/advisories?name=MDKSA-2006:013 - http://www.osvdb.org/22538
CVE ID: CVE-2005-4829 State: PUBLISHED Published: 2007-02-26T17:00:00Z Last Updated: 2024-09-16T19:51:45.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a requested page, which has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://virtuemart.svn.sourceforge.net/viewvc/%2Acheckout%2A/virtuemart/trunk/virtuemart/CHANGELOG.php?revision=692
CVE ID: CVE-2005-4830 State: PUBLISHED Published: 2007-03-03T19:00:00 Last Updated: 2024-08-08T00:01:23.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the content-type parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030514.html - http://www.securityfocus.com/archive/1/461382/100/0/threaded - http://www.securityfocus.com/bid/12112
CVE ID: CVE-2005-4831 State: PUBLISHED Published: 2007-03-03T19:00:00 Last Updated: 2024-08-08T00:01:23.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: viewcvs in ViewCVS 0.9.2 allows remote attackers to set the Content-Type header to arbitrary values via the content-type parameter, which can be leveraged for cross-site scripting (XSS) and other attacks, as demonstrated using (1) "text/html", or (2) "image/jpeg" with an image that is rendered as HTML by Internet Explorer, a different vulnerability than CVE-2004-1062. NOTE: it was later reported that 0.9.4 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full
also affected. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030514.html - http://www.securitytracker.com/id?1017704 - http://www.securityfocus.com/archive/1/461382/100/0/threaded - http://www.securityfocus.com/bid/12112
CVE ID: CVE-2005-4832 State: PUBLISHED Published: 2007-03-03T20:00:00 Last Updated: 2024-08-08T00:01:23.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL commands with elevated privileges via the SUBSCRIPTION_NAME parameter in the (1) SYS.DBMS_CDC_SUBSCRIBE and (2) SYS.DBMS_CDC_ISUBSCRIBE packages, a different vector than CVE-2005-1197. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/396133 - http://www.argeniss.com/research/OraDBMS_CDC_SUBSCRIBEWorkaround.sql - http://www.argeniss.com/research/OraDBMS_C
6133 - http://www.argeniss.com/research/OraDBMS_CDC_SUBSCRIBEWorkaround.sql - http://www.argeniss.com/research/OraDBMS_CDC_SUBSCRIBEExploit.txt - http://www.appsecinc.com/resources/alerts/oracle/2005-02.html - http://www.securityfocus.com/archive/1/404970 - http://www.oracle.com/technology/deploy/security/pdf/cpuapr2005.pdf - http://www.securityfocus.com/bid/13236 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20159
CVE ID: CVE-2005-4833 State: PUBLISHED Published: 2007-03-20T10:00:00 Last Updated: 2024-08-08T00:01:23.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 6.0 before 20050201, when serving pages in an Application WAR or an Extended Document Root, allows remote attackers to obtain the JSP source code and other sensitive information via "a specific JSP URL," related to lack of normalization of the URL format. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0970 - http://secunia.com/advisories/24478 - http://www-1.ibm.com/support/docview.wss?uid=swg21243541 - http://osvdb.org/34177
http://secunia.com/advisories/24478 - http://www-1.ibm.com/support/docview.wss?uid=swg21243541 - http://osvdb.org/34177 - http://www.securityfocus.com/bid/22991 - http://www-1.ibm.com/support/docview.wss?uid=swg24008815
CVE ID: CVE-2005-4834 State: PUBLISHED Published: 2007-03-20T10:00:00 Last Updated: 2024-08-08T00:01:23.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 5.0.2.5 through 5.1.1.3 allows remote attackers to obtain JSP source code and other sensitive information, related to incorrect request processing by the web container. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0970 - http://secunia.com/advisories/24478 - http://www-1.ibm.com/support/docview.wss?uid=swg21243541 - http://www-1.ibm.com/support/docview.wss?uid=swg24008814 - http://www.securityfocus.com/bid/22991 - http://www
1243541 - http://www-1.ibm.com/support/docview.wss?uid=swg24008814 - http://www.securityfocus.com/bid/22991 - http://www-1.ibm.com/support/docview.wss?uid=swg24013840
CVE ID: CVE-2005-4835 State: PUBLISHED Published: 2007-03-30T01:00:00 Last Updated: 2024-08-08T00:01:23.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ath_rate_sample function in the ath_rate/sample/sample.c sample code in MadWifi before 0.9.3 allows remote attackers to cause a denial of service (failed KASSERT and system crash) by moving a connected system to a location with low signal strength, and possibly other vectors related to a race condition between interface enabling and packet transmission. Additional Analyst Notes: - CVE Program Container: References: - http://madwifi.org/ticket/287 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:082 - http://se
eferences: - http://madwifi.org/ticket/287 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:082 - http://secunia.com/advisories/26083 - http://www.novell.com/linux/security/advisories/2007_14_sr.html - http://madwifi.org/ticket/162 - http://madwifi.org/wiki/Releases/0.9.3 - http://secunia.com/advisories/24841 - http://madwifi.org/ticket/279
CVE ID: CVE-2005-4836 State: PUBLISHED Published: 2007-05-09T22:00:00 Last Updated: 2024-08-08T00:01:23.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which allows remote attackers to read JSP source files and obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://www.securityfocus.com/bid/28483 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/
2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2005-4837 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-08T00:01:23.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of service (crash) by causing a particular TCP disconnect, which triggers a free of an incorrect variable, a different vulnerability than CVE-2005-2177. Additional Analyst Notes: - CVE Program Container: References: - https://issues.rpath.com/browse/RPL-1334 - http://secunia.com/advisories/25115 - https://oval.cisecurity.org/repository/search/definition
ath.com/browse/RPL-1334 - http://secunia.com/advisories/25115 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9442 - http://www.vupen.com/english/advisories/2007/1944 - http://secunia.com/advisories/25114 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102929-1 - http://sourceforge.net/tracker/index.php?func=detail&aid=1207023&group_id=12694&atid=112694 - http://www.securityfocus.com/bid/23762 - http://www.ubuntu.com/usn/USN-456-1 - http://secunia.com/advisories/25411
CVE ID: CVE-2005-4838 State: PUBLISHED Published: 2007-04-25T21:00:00 Last Updated: 2024-08-08T00:01:23.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) el/functions.jsp, (2) el/implicit-objects.jsp, and (3) jspx/textRotate.jspx in examples/jsp2/, as demonstrated via script in a request to snp/snoop.jsp. NOTE: other XSS issues in the manager were simultaneously reported, but these require admin access and do not cross privilege boundaries. Additional Analyst Notes: - CVE Program Container:
but these require admin access and do not cross privilege boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36467 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065598.html - http://rhn.redhat.com/errata/RHSA-2008-0630.html - http://www.osvdb.org/34878 - http://www.osvdb.org/12721 - http://secunia.com/advisories/31493 - http://marc.info/?l=tomcat-dev&m=110477195116951&w=2 - http://www.osvdb.org/34879 - http://securitytracker.com/id?1012793 - http://secunia.com/advisories/13737 - http://www.oliverkarow.de/research/jakarta556_xss.txt - http://tomcat.ap
1012793 - http://secunia.com/advisories/13737 - http://www.oliverkarow.de/research/jakarta556_xss.txt - http://tomcat.apache.org/security-5.html - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://marc.info/?l=tomcat-dev&m=110476790331536&w=2 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2005-4839 State: PUBLISHED Published: 2007-04-30T20:00:00 Last Updated: 2024-08-08T00:01:23.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: PureTLS before 0.9b5 does not clear optional Extensions and Algorithm.Parameters values before parsing, which might trigger an information leak of values from earlier certificates. Additional Analyst Notes: - CVE Program Container: References: - http://www.rtfm.com/puretls/ - http://www1.ietf.org/mail-archive/web/tls/current/msg00229.html