Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-3688 State: PUBLISHED Published: 2005-11-19T01:00:00 Last Updated: 2024-08-07T23:17:23.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in members.php in XMB 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the "Your Current Mood" field in the registration page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15489 - http://irannetjob.com/content/view/163/28/ - http://www.securityfocus.com/archive/1/417078/30/0/threaded - http://secunia.com/advisories/17642 - http://www.vupen.com/english/advisories/2005/2488 - http://securitytracker.co
ed - http://secunia.com/advisories/17642 - http://www.vupen.com/english/advisories/2005/2488 - http://securitytracker.com/id?1015237 - https://docs.xmbforum2.com/index.php?title=Security_Issue_History
CVE ID: CVE-2005-3689 State: PUBLISHED Published: 2005-11-19T01:00:00 Last Updated: 2024-08-07T23:17:23.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: post.php in XMB 1.9.2 allows remote attackers to obtain the installation path via an invalid fid parameter in a newthread action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15489 - http://irannetjob.com/content/view/163/28/ - http://www.securityfocus.com/archive/1/417078/30/0/threaded - http://secunia.com/advisories/17642 - http://www.vupen.com/english/advisories/2005/2488 - https://docs.xmbforum2.com/index.php?title=Security_Issue_History
CVE ID: CVE-2005-3690 State: PUBLISHED Published: 2005-11-19T01:00:00 Last Updated: 2024-08-07T23:17:23.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to execute arbitrary code via a long mailbox name in the (1) select, (2) create, (3) delete, (4) rename, (5) subscribe, or (6) unsubscribe commands. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17633 - http://www.vupen.com/english/advisories/2005/2484 - http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0581.h
http://www.vupen.com/english/advisories/2005/2484 - http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0581.html - http://secunia.com/secunia_research/2005-59/advisory/ - http://www.mailenable.com/hotfix/ - http://securitytracker.com/id?1015239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23110 - http://www.securityfocus.com/bid/15492 - http://www.osvdb.org/20929
CVE ID: CVE-2005-3691 State: PUBLISHED Published: 2005-11-19T01:00:00 Last Updated: 2024-08-07T23:17:23.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to create or rename arbitrary mail directories via the mailbox name argument of the (1) create or (2) rename commands. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17633 - http://www.vupen.com/english/advisories/2005/2484 - http://www.securityfocus.com/bid/15494 - http://secunia.com/secunia_research/2005-59/advisor
lish/advisories/2005/2484 - http://www.securityfocus.com/bid/15494 - http://secunia.com/secunia_research/2005-59/advisory/ - http://www.mailenable.com/hotfix/ - http://securitytracker.com/id?1015239
CVE ID: CVE-2005-3692 State: PUBLISHED Published: 2005-11-19T01:00:00 Last Updated: 2024-08-07T23:17:23.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) retid parameter in badlogin.php, (2) Content-Type headers in HTML mails, and (3) HTML mail attachments. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16665 - http://www.osvdb.org/20926 - http://secunia.com/secunia_research/2005-58/advisory/ - http://www.securityfocus.com/bid/15493 - http://archives.neohapsis
tp://secunia.com/secunia_research/2005-58/advisory/ - http://www.securityfocus.com/bid/15493 - http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0580.html - http://www.vupen.com/english/advisories/2005/2485 - http://www.osvdb.org/20927 - http://www.osvdb.org/20928
CVE ID: CVE-2005-3693 State: PUBLISHED Published: 2005-11-19T01:00:00 Last Updated: 2024-08-07T23:17:23.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AxWebRemoveCtrl ActiveX control for uninstalling the SunnComm MediaMax DRM allows remote attackers to download and execute arbitrary code, a similar vulnerability to CVE-2005-3650. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2493 - http://www.osvdb.org/20950 - http://secunia.com/advisories/17639 - http://www.freedom-to-tinker.com/?p=931
CVE ID: CVE-2005-3694 State: PUBLISHED Published: 2005-11-20T20:00:00 Last Updated: 2024-08-07T23:17:23.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: centericq 4.20.0-r3 with "Enable peer-to-peer communications" set allows remote attackers to cause a denial of service (segmentation fault and crash) via short zero-length packets, and possibly packets of length 1 or 2, as demonstrated using Nessus. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23327 - https://bugs.gentoo.org/show_bug.cgi?id=100519 - http://security.gentoo.org/glsa/glsa-200512-11.xml - http://www.osvdb.org/21270 - http://bugs.debian.org/cg
?id=100519 - http://security.gentoo.org/glsa/glsa-200512-11.xml - http://www.osvdb.org/21270 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334089 - http://www.securityfocus.com/bid/15649 - http://www.debian.org/security/2005/dsa-912 - http://secunia.com/advisories/17798 - http://secunia.com/advisories/17818 - http://secunia.com/advisories/18081
CVE ID: CVE-2005-3695 State: PUBLISHED Published: 2005-11-20T22:00:00 Last Updated: 2024-08-07T23:17:23.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the m parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/unixfocus/6S00I1FEKY.html - http://www.securityfocus.com/bid/15485 - http://secunia.com/advisories/17587 - http://www.vupen.com/english/advisories/2005/2457 - http://securitytracker.com/id?1015234 - http://www.osvdb.org/20908
CVE ID: CVE-2005-3696 State: PUBLISHED Published: 2005-11-20T22:00:00 Last Updated: 2024-08-07T23:17:23.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Arki-DB 1.0 and 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a view action (view.php) to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17627 - http://addict3d.org/index.php?page=viewarticle&type=security&ID=5268 - http://www.osvdb.org/20944 - http://www.vupen.com/english/advisories/2005/2477 - http://www.securityfocus.com/bid/15467
CVE ID: CVE-2005-3697 State: PUBLISHED Published: 2005-11-21T11:00:00Z Last Updated: 2024-09-16T18:59:19.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the administration interface in Uresk Links 2.0 Lite allows remote attackers to bypass authentication via unspecified vectors in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15469 - http://secunia.com/advisories/17625
CVE ID: CVE-2005-3698 State: PUBLISHED Published: 2005-11-21T11:00:00Z Last Updated: 2024-09-17T00:56:11.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Easy Download allows remote attackers to bypass authentication via edit.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15470
CVE ID: CVE-2005-3699 State: PUBLISHED Published: 2005-11-21T11:00:00Z Last Updated: 2024-09-17T03:07:55.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera Web Browser 8.50 and 8.0 through 8.0.2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17571
CVE ID: CVE-2005-3700 State: PUBLISHED Published: 2005-12-01T02:02:00 Last Updated: 2024-08-07T23:17:23.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in iodbcadmintool in the ODBC Administrator utility in Mac OS X and OS X Server 10.3.9 and 10.4.3 allows local users to execute arbitrary code via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21272 - http://secunia.com/advisories/17813 - http://www.vupen.com/english/advisories/2005/2659 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23332 - http://securitytracker.com/id?1015289 - http://docs.info.apple.com/article.html?artnum=302847
m/vulnerabilities/23332 - http://securitytracker.com/id?1015289 - http://docs.info.apple.com/article.html?artnum=302847 - http://www.securityfocus.com/bid/15647
CVE ID: CVE-2005-3701 State: PUBLISHED Published: 2005-12-01T02:02:00 Last Updated: 2024-08-07T23:24:35.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in passwordserver in Mac OS X Server 10.3.9 and 10.4.3, when creating an Open Directory master server, allows local users to gain privileges via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17813 - http://www.vupen.com/english/advisories/2005/2659 - http://securitytracker.com/id?1015290 - http://www.osvdb.org/21273 - http://docs.info.apple.com/article.html?artnum=302847 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2333
1273 - http://docs.info.apple.com/article.html?artnum=302847 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23334 - http://www.securityfocus.com/bid/15647
CVE ID: CVE-2005-3702 State: PUBLISHED Published: 2005-12-01T02:02:00 Last Updated: 2024-08-07T23:24:35.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari in Mac OS X and OS X Server 10.3.9 and 10.4.3 allows remote attackers to cause files to be downloaded to locations outside the download directory via a long file name. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17813 - http://www.vupen.com/english/advisories/2005/2659 - http://securitytracker.com/id?1015294 - http://docs.info.apple.com/article.html?artnum=302847 - http://www.securityfocus.com/bid/15647
CVE ID: CVE-2005-3703 State: REJECTED Published: 2005-12-14T11:00:00Z Last Updated: 2024-09-16T17:14:48.488Z Description: No description available.
CVE ID: CVE-2005-3704 State: PUBLISHED Published: 2005-12-01T02:02:00 Last Updated: 2024-08-07T23:24:35.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: System log server in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to spoof syslog messages in log files by injecting various control characters such as newline (NL). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23344 - http://secunia.com/advisories/17813 - http://www.vupen.com/english/advisories/2005/2659 - http://securitytracker.com/id?1015293 - http://docs.info.apple.com/article.html?artnum=302847 - http://www.osvdb.org/21277 - h
/securitytracker.com/id?1015293 - http://docs.info.apple.com/article.html?artnum=302847 - http://www.osvdb.org/21277 - http://www.securityfocus.com/bid/15647
CVE ID: CVE-2005-3705 State: PUBLISHED Published: 2005-12-01T02:02:00 Last Updated: 2024-08-07T23:24:35.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in WebKit in Mac OS X and OS X Server 10.3.9 and 10.4.3, as used in applications such as Safari, allows remote attackers to execute arbitrary code via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17813 - http://www.vupen.com/english/advisories/2005/2659 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23342 - http://www.osvdb.org/21276 - http://securitytracker.com/id?1015294 - http://docs.info.apple.com/article.html?artnu
342 - http://www.osvdb.org/21276 - http://securitytracker.com/id?1015294 - http://docs.info.apple.com/article.html?artnum=302847 - http://www.securityfocus.com/bid/29011 - http://www.securityfocus.com/bid/15647
CVE ID: CVE-2005-3706 State: PUBLISHED Published: 2006-03-02T19:00:00 Last Updated: 2024-08-07T23:24:35.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in LibSystem in Mac OS X 10.4 through 10.4.5 allows context-dependent attackers to execute arbitrary code by causing an application that uses LibSystem to request a large amount of memory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25026 - http://secunia.com/advisories/19064 - http://www.securityfocus.com/bid/16907 - http://www.vupen.com/english/advisories/2006/0791 - http://lists.apple.com/archives/security-announce/2006/Mar/
/16907 - http://www.vupen.com/english/advisories/2006/0791 - http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html - http://www.us-cert.gov/cas/techalerts/TA06-062A.html - http://docs.info.apple.com/article.html?artnum=303382 - http://www.osvdb.org/23644
CVE ID: CVE-2005-3707 State: PUBLISHED Published: 2006-01-11T18:00:00 Last Updated: 2024-08-07T23:24:35.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via crafted TGA image files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18370 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24056 - http://www.us-cert.gov/cas/techalerts/TA06-011A.html - http://docs.info.apple.com/article.html?artnum=303101 - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0445.html - http://securitytracker.com/id?1015464 - http://www.osvdb
hives.neohapsis.com/archives/fulldisclosure/2006-01/0445.html - http://securitytracker.com/id?1015464 - http://www.osvdb.org/22336 - http://www.vupen.com/english/advisories/2006/0128 - http://www.securityfocus.com/bid/16202 - http://www.kb.cert.org/vuls/id/115729
CVE ID: CVE-2005-3708 State: PUBLISHED Published: 2006-01-11T18:00:00 Last Updated: 2024-08-07T23:24:35.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via crafted TGA image files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18370 - http://docs.info.apple.com/article.html?artnum=303101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24057 - http://securitytracker.com/id?1015464 - http://www.osvdb.org/22336 - http://www.vupen.com/english/advisories/2006/0128 - http://www.securityfocus.com/bid/16202
CVE ID: CVE-2005-3709 State: PUBLISHED Published: 2006-01-11T18:00:00 Last Updated: 2024-08-07T23:24:35.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in Apple Quicktime before 7.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Color Map Entry Size in a TGA image file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18370 - http://docs.info.apple.com/article.html?artnum=303101 - http://securitytracker.com/id?1015464 - http://www.osvdb.org/22336 - http://www.vupen.com/english/advisories/2006/0128 - http://www.securityfocus.com/bid/16202 - https://exchan
.org/22336 - http://www.vupen.com/english/advisories/2006/0128 - http://www.securityfocus.com/bid/16202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24058 - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0447.html
CVE ID: CVE-2005-3710 State: PUBLISHED Published: 2006-01-11T18:00:00 Last Updated: 2024-08-07T23:24:35.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a TIFF image file with modified image height and width (ImageWidth) tags. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18370 - http://www.us-cert.gov/cas/techalerts/TA06-011A.html - http://www.securityfocus.com/archive/1/421797/100/0/threaded - http://docs.info.apple.com/article.html?artnum=303101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24059 - http://securitytr
fo.apple.com/article.html?artnum=303101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24059 - http://securitytracker.com/id?1015465 - http://www.vupen.com/english/advisories/2006/0128 - http://www.kb.cert.org/vuls/id/150753 - http://www.securityfocus.com/bid/16202 - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0440.html - http://securityreason.com/securityalert/347 - http://www.osvdb.org/22337
CVE ID: CVE-2005-3711 State: PUBLISHED Published: 2006-01-11T18:00:00 Last Updated: 2024-08-07T23:24:35.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a TIFF image file with modified (1) "strips" (StripByteCounts) or (2) "bands" (StripOffsets) values. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18370 - http://docs.info.apple.com/article.html?artnum=303101 - http://www.securityfocus.com/archive/1/421831/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24059 - http://securitytracker.com/id?1015465 - http:
/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24059 - http://securitytracker.com/id?1015465 - http://www.vupen.com/english/advisories/2006/0128 - http://www.securityfocus.com/bid/16202 - http://www.securityfocus.com/archive/1/421799/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0442.html - http://www.osvdb.org/22337
CVE ID: CVE-2005-3712 State: PUBLISHED Published: 2006-03-02T19:00:00 Last Updated: 2024-08-07T23:24:35.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in rsync in Mac OS X 10.4 through 10.4.5 allows remote authenticated users to execute arbitrary code via long extended attributes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19064 - http://www.securityfocus.com/bid/16907 - http://www.vupen.com/english/advisories/2006/0791 - http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html - http://www.us-cert.gov/cas/techalerts/TA06-062A.html - http://www.osvdb.org/23648 - https://exchange.xf
/msg00000.html - http://www.us-cert.gov/cas/techalerts/TA06-062A.html - http://www.osvdb.org/23648 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25029 - http://docs.info.apple.com/article.html?artnum=303382
CVE ID: CVE-2005-3713 State: PUBLISHED Published: 2006-01-11T18:00:00 Last Updated: 2024-08-07T23:24:35.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a GIF image file with a crafted Netscape Navigator Application Extension Block that modifies the heap in the Picture Modifier block. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0402.html - http://secunia.com/advisories/18370 - http://www.us-cert.gov/cas/techalerts/TA06-011A.html - http://www.securityfocus.com/archive/1/421561/100/0/th
es/18370 - http://www.us-cert.gov/cas/techalerts/TA06-011A.html - http://www.securityfocus.com/archive/1/421561/100/0/threaded - http://docs.info.apple.com/article.html?artnum=303101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24060 - http://securityreason.com/securityalert/333 - http://www.vupen.com/english/advisories/2006/0128 - http://securitytracker.com/id?1015466 - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0401.html - http://www.securityfocus.com/bid/16202 - http://www.kb.cert.org/vuls/id/913449 - http://www.eeye.com/html/research/advisories/AD20060111d.html - http://www.osvdb.org/22338 - http://www.securityfocus.com/archive/1/421547/100/0/threaded
CVE ID: CVE-2005-3714 State: PUBLISHED Published: 2006-01-05T23:00:00 Last Updated: 2024-08-07T23:24:35.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: The network interface for Apple AirPort Express 6.x before Firmware Update 6.3, and AirPort Extreme 5.x before Firmware Update 5.7, allows remote attackers to cause a denial of service (unresponsive interface) via malformed packets. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2006/Jan/msg00000.html - http://www.securityfocus.com/bid/16146 - http://secunia.com/advisories/18319 - http://www.vupen.com/english/advisories/2006/0064 - http://securitytracker.com/i
- http://secunia.com/advisories/18319 - http://www.vupen.com/english/advisories/2006/0064 - http://securitytracker.com/id?1015443 - http://www.osvdb.org/22244
CVE ID: CVE-2005-3715 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-07T23:24:35.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Senao SI-680H Wireless VoIP Phone Firmware 0.03.0839 leaves the VxWorks debugger UDP port 17185 available without authentication, which allows attackers to access the phone OS, obtain sensitive information, and cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038836.html - http://www.securityfocus.com/bid/15475 - http://secunia.com/advisories/17606 - http://www.vupen.com/english/advisories/2005/2474
CVE ID: CVE-2005-3716 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-07T23:24:35.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SNMP daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has hard-coded public credentials that cannot be changed, which allows attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038834.html - http://www.securityfocus.com/bid/15476 - http://www.vupen.com/english/advisories/2005/2472 - http://secunia.com/advisories/17629
CVE ID: CVE-2005-3717 State: PUBLISHED Published: 2005-11-21T11:00:00 Last Updated: 2024-08-07T23:24:35.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: The telnet daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has a default username "target" and password "password", which allows remote attackers to gain full access to the system. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038834.html - http://www.securityfocus.com/bid/15476 - http://www.vupen.com/english/advisories/2005/2472 - http://secunia.com/advisories/17629