Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-2725 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:45:01.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: The inputtrap utility in QNX RTOS 6.1.0, 6.3, and possibly earlier versions does not properly check permissions when the -t flag is specified, which allows local users to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16569/ - http://www.securityfocus.com/bid/14656 - http://www.rfdslabs.com.br/advisories/qnx-advs-01-2005.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/21969 - http://marc.info/?l=bugtraq&m=112490406301882&w=2
CVE ID: CVE-2005-2726 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:45:01.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Home Ftp Server 1.0.7 allows remote authenticated users to read arbitrary files via "C:\" (Windows drive letter) sequences in commands such as (1) LIST or (2) RETR. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22003 - http://marc.info/?l=bugtraq&m=112490496918102&w=2 - http://www.autistici.org/fdonato/advisory/HomeFtpServer1.0.7-adv.txt - http://secunia.com/advisories/16556/ - http://www.securityfocus.com/bid/14653
CVE ID: CVE-2005-2727 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:45:02.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Home Ftp Server 1.0.7 stores sensitive user information and server information in the same directory as the user's home directory, which allows remote authenticated users to obtain sensitive information by obtaining ftpmembers.lst and ftpsettings.lst. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112490496918102&w=2 - http://www.autistici.org/fdonato/advisory/HomeFtpServer1.0.7-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/22002 - http://www.securityfocus.com/bi
omeFtpServer1.0.7-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/22002 - http://www.securityfocus.com/bid/14653
CVE ID: CVE-2005-2728 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:45:02.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16705 - http://www.securityfocus.com/bid/14660 - http://www.redhat.com/support/errata/RHSA-2005-608.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10017 - http://secunia.com/advisories/16743 - http://secunia.com/advisorie
arch/definition/oval%3Aorg.mitre.oval%3Adef%3A10017 - http://secunia.com/advisories/16743 - http://secunia.com/advisories/16753 - http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm - http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html - http://www.novell.com/linux/security/advisories/2005_51_apache2.html - http://secunia.com/advisories/17831 - http://www.ubuntu.com/usn/usn-177-1 - http://www.gentoo.org/security/en/glsa/glsa-200508-15.xml - http://www.securityfocus.com/archive/1/428138/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/22006 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1246 - http://
rabilities/22006 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1246 - http://secunia.com/advisories/16754 - http://secunia.com/advisories/18333 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:161 - ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U - http://securityreason.com/securityalert/604 - http://secunia.com/advisories/17923 - http://issues.apache.org/bugzilla/show_bug.cgi?id=29962 - http://www.securityfocus.com/archive/1/428138/100/0/threaded - http://secunia.com/advisories/16789 - http://secunia.com/advisories/16714 - http://secunia.com/advisories/16769 - http://secunia.com/advisories/17036 - http://secunia.co
nia.com/advisories/16714 - http://secunia.com/advisories/16769 - http://secunia.com/advisories/17036 - http://secunia.com/advisories/17288 - http://secunia.com/advisories/16956 - http://secunia.com/advisories/19072 - http://secunia.com/advisories/18517 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A760 - http://secunia.com/advisories/16746 - http://www.novell.com/linux/security/advisories/2005_52_apache2.html - http://www.debian.org/security/2005/dsa-805 - http://secunia.com/advisories/17600 - http://secunia.com/advisories/16559/ - http://secunia.com/advisories/18161 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ad
http://secunia.com/advisories/18161 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1727 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1 - http://www.vupen.com/english/advisories/2006/0789 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac78261
e0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.o
ead.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2005-2729 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:45:02.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows remote attackers to bypass firewall rules and connect to local services. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16578/ - http://marc.info/?l=bugtraq&m=112501186602731&w=2 - http://www.securityfocus.com/bid/14665 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22021
CVE ID: CVE-2005-2730 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:45:02.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP proxy in Astaro Security Linux 6.0 allows remote attackers to obtain sensitive information via an invalid request, which reveals a Proxy-authorization string in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112501186602731&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22024
CVE ID: CVE-2005-2731 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:45:02.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Astaro Security Linux 6.0, when using Webmin, allows remote authenticated webmin users to read arbitrary files via a .. (dot dot) in the wfe_download parameter to index.fpl. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112501186602731&w=2
CVE ID: CVE-2005-2732 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:45:02.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: AWStats 6.4, and possibly earlier versions, allows remote attackers to obtain sensitive information via a file that does not exist in the config parameter, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112510261425888&w=2
CVE ID: CVE-2005-2733 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:45:02.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which could allow remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22012 - http://www.securityfocus.com/bid/14667 - http://marc.info/?l=bugtraq&m=112511159821143&w=2 - http://secunia.com/advisories/16598/
CVE ID: CVE-2005-2734 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:45:01.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Gallery 1.5.1-RC2 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21502 - http://secunia.com/advisories/16594/ - http://www.us.debian.org/security/2006/dsa-1148 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325285 - http://securitytracker.com/id?1014800 - http://www.securityfocus.com/bid/14668 - http://sourceforge.
rt.cgi?bug=325285 - http://securitytracker.com/id?1014800 - http://www.securityfocus.com/bid/14668 - http://sourceforge.net/project/shownotes.php?release_id=352576 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22020 - http://marc.info/?l=bugtraq&m=112511025414488&w=2
CVE ID: CVE-2005-2735 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:45:02.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpGraphy 0.9.9a and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14669 - http://cedri.cc/advisories/EXIF_XSS.txt - http://securitytracker.com/id?1014801 - http://secunia.com/advisories/16595/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22020 - http://marc.info/?l=bugtraq&m=112511025414488&w=2
CVE ID: CVE-2005-2736 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:45:02.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in YaPig 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14670 - http://cedri.cc/advisories/EXIF_XSS.txt - http://securitytracker.com/id?1014802 - http://secunia.com/advisories/16596/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22020 - http://marc.info/?l=bugtraq&m=112511025414488&w=2
CVE ID: CVE-2005-2737 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:45:02.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PhotoPost PHP Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag. Additional Analyst Notes: - CVE Program Container: References: - http://cedri.cc/advisories/EXIF_XSS.txt - http://securitytracker.com/id?1014803 - http://www.securityfocus.com/bid/14671 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22020 - http://marc.info/?l=bugtraq&m=112511025414488&w=2 - http://secunia.com/advisories/16597/
CVE ID: CVE-2005-2738 State: PUBLISHED Published: 2006-08-05T01:00:00 Last Updated: 2024-08-07T22:45:02.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X does not prevent multiple programs from opening the same port as a Java ServerSocket, which allows local users to operate a Java program that intercepts network data intended for the ServerSocket of a different Java program. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/p-306.shtml - http://www.vupen.com/english/advisories/2005/1734 - http://secunia.com/advisories/16808 - http://docs.info.apple.com/article.html?artnum=3022
english/advisories/2005/1734 - http://secunia.com/advisories/16808 - http://docs.info.apple.com/article.html?artnum=302265 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22269 - http://www.osvdb.org/19397 - http://www.securityfocus.com/bid/14827 - http://lists.apple.com/archives/security-announce/2005/Sep/msg00001.html
CVE ID: CVE-2005-2739 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T22:45:02.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Keychain Access in Mac OS X 10.4.2 and earlier keeps a password visible even if a keychain times out while the password is being viewed, which could allow attackers with physical access to obtain the password. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015126 - http://www.vupen.com/english/advisories/2005/2256 - http://www.osvdb.org/20430 - http://secunia.com/advisories/17368 - http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html - http://www.securityfocu
om/advisories/17368 - http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html - http://www.securityfocus.com/bid/15252 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44462
CVE ID: CVE-2005-2740 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-2741 State: PUBLISHED Published: 2005-10-25T04:00:00Z Last Updated: 2024-09-16T20:26:21.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Authorization Services in securityd for Apple Mac OS X 10.3.9 allows local users to gain privileges by granting themselves certain rights that should be restricted to administrators. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/p-312.shtml - http://www.auscert.org.au/5509 - http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html - http://secunia.com/advisories/16920/
CVE ID: CVE-2005-2742 State: PUBLISHED Published: 2005-10-25T04:00:00Z Last Updated: 2024-09-17T04:19:20.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: SecurityAgent in Apple Mac OS X 10.4.2, under certain circumstances, can cause the "Switch User..." button to appear even though the "Enable fast user switching" setting is disabled, which can allow attackers with physical access to gain access to the desktop and bypass the "Require password to wake this computer from sleep or screen saver" setting. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/p-312.shtml - http://www.auscert.org.au/5509 - http://lists.apple.com/archives/
es: - http://www.ciac.org/ciac/bulletins/p-312.shtml - http://www.auscert.org.au/5509 - http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html - http://secunia.com/advisories/16920/
CVE ID: CVE-2005-2743 State: PUBLISHED Published: 2005-10-25T04:00:00Z Last Updated: 2024-09-16T22:14:17.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java extensions for QuickTime 6.52 and earlier in Apple Mac OS X 10.3.9 allow untrusted applets to call arbitrary functions in system libraries, which allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/p-312.shtml - http://www.auscert.org.au/5509 - http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html - http://secunia.com/advisories/16920/
CVE ID: CVE-2005-2744 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-07T22:45:01.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in QuickDraw Manager for Apple OS X 10.3.9 and 10.4.2, as used by applications such as Safari, Mail, and Finder, allows remote attackers to execute arbitrary code via a crafted PICT file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/p-312.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/22384 - http://www.securityfocus.com/bid/14914 - http://www.auscert.org.au/5509 - http://www.kb.cert.org/vuls/id/529945 - http://securitytracker.com/alerts/2005/
14914 - http://www.auscert.org.au/5509 - http://www.kb.cert.org/vuls/id/529945 - http://securitytracker.com/alerts/2005/Sep/1014961.html - http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html - http://secunia.com/advisories/16920/
CVE ID: CVE-2005-2745 State: PUBLISHED Published: 2005-10-25T04:00:00Z Last Updated: 2024-09-17T01:11:46.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mail.app in Mail for Apple Mac OS X 10.3.9, when using Kerberos 5 for SMTP authentication, can include uninitialized memory in a message, which might allow remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/p-312.shtml - http://www.auscert.org.au/5509 - http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html - http://secunia.com/advisories/16920/
CVE ID: CVE-2005-2746 State: PUBLISHED Published: 2005-10-25T04:00:00Z Last Updated: 2024-09-17T00:16:18.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mail.app in Mail for Apple Mac OS X 10.3.9 and 10.4.2 includes message contents when using auto-reply rules, which could cause Mail.app to include decrypted message contents for encrypted messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/p-312.shtml - http://www.auscert.org.au/5509 - http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html - http://secunia.com/advisories/16920/
CVE ID: CVE-2005-2747 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-07T22:45:02.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ImageIO for Apple Mac OS X 10.4.2, as used by applications such as WebCore and Safari, allows remote attackers to execute arbitrary code via a crafted GIF file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22381 - http://www.kb.cert.org/vuls/id/650681 - http://www.ciac.org/ciac/bulletins/p-312.shtml - http://www.securityfocus.com/bid/14914 - http://securitytracker.com/alerts/2005/Sep/1014958.html - http://www.auscert.org.au/5509 - http:
tyfocus.com/bid/14914 - http://securitytracker.com/alerts/2005/Sep/1014958.html - http://www.auscert.org.au/5509 - http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html - http://secunia.com/advisories/16920/
CVE ID: CVE-2005-2748 State: PUBLISHED Published: 2005-10-25T04:00:00Z Last Updated: 2024-09-17T03:59:48.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: The malloc function in the libSystem library in Apple Mac OS X 10.3.9 and 10.4.2 allows local users to overwrite arbitrary files by setting the MallocLogFile environment variable to the target file before running a setuid application. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/p-312.shtml - http://www.suresec.org/advisories/adv7.pdf - http://www.auscert.org.au/5509 - http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html - http://secunia.com/advisories
t.org.au/5509 - http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html - http://secunia.com/advisories/16920/
CVE ID: CVE-2005-2749 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T22:45:01.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Finder Get Info window for Mac OS X 10.4 up to 10.4.2 causes Finder to misrepresent file and group ownership information. NOTE: it is not clear whether this issue satisfies the CVE definition of a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2256 - http://secunia.com/advisories/17368 - http://www.osvdb.org/20427 - http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html - http://www.securityfocus.com
svdb.org/20427 - http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html - http://www.securityfocus.com/bid/15252 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44463 - http://securitytracker.com/id?1015123
CVE ID: CVE-2005-2750 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T22:45:02.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Software Update in Mac OS X 10.4.2, when the user marks all updates to be ignored, exits without asking the user to reset the status of the updates, which could prevent important, security-relevant updates from being installed. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44464 - http://www.vupen.com/english/advisories/2005/2256 - http://secunia.com/advisories/17368 - http://securitytracker.com/id?1015124 - http://lists.apple.com/archives/security-announc
/secunia.com/advisories/17368 - http://securitytracker.com/id?1015124 - http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html - http://www.securityfocus.com/bid/15252 - http://www.osvdb.org/20428
CVE ID: CVE-2005-2751 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T22:45:02.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: memberd in Mac OS X 10.4 up to 10.4.2, in certain situations, does not quickly synchronize access control checks with changes in group membership, which could allow users to access files and other resources after they have been removed from a group. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44465 - http://www.vupen.com/english/advisories/2005/2256 - http://secunia.com/advisories/17368 - http://www.osvdb.org/20429 - http://lists.apple.com/archives/secur
ies/2005/2256 - http://secunia.com/advisories/17368 - http://www.osvdb.org/20429 - http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html - http://www.securityfocus.com/bid/15252 - http://securitytracker.com/id?1015125
CVE ID: CVE-2005-2752 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T22:45:02.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified kernel interface in Mac OS X 10.4.2 and earlier does not properly clear memory before reusing it, which could allow attackers to obtain sensitive information, a different vulnerability than CVE-2005-1126 and CVE-2005-1406. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015127 - http://www.vupen.com/english/advisories/2005/2256 - http://secunia.com/advisories/17368 - http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html - http://www.osvdb.org/204