Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-0569 State: PUBLISHED Published: 2006-02-07T18:00:00 Last Updated: 2024-08-07T16:41:28.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in user_class.php in Papoo 2.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the username field during the registration of a new account. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22913 - http://www.vupen.com/english/advisories/2006/0438 - http://secunia.com/advisories/18721 - https://exchange.xf
rg/22913 - http://www.vupen.com/english/advisories/2006/0438 - http://secunia.com/advisories/18721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24500
CVE ID: CVE-2006-0570 State: PUBLISHED Published: 2006-02-07T18:00:00 Last Updated: 2024-08-07T16:41:28.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpc_magic_quotes is disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via (1) the username parameter in check.php and (2) unknown attack vectors in the administrative interface. Additional Analyst Notes: - CVE Program Container: References: - http://evuln.com/vulns/61/summary.html - http://secunia.com/advisories/18791 - http://www.securityfocus.com/bid/16587 - http://securityreason.com/securityalert/427 - http://www.securit
sories/18791 - http://www.securityfocus.com/bid/16587 - http://securityreason.com/securityalert/427 - http://www.securityfocus.com/archive/1/424842/100/0/threaded - http://www.vupen.com/english/advisories/2006/0450
CVE ID: CVE-2006-0571 State: PUBLISHED Published: 2006-02-07T18:00:00 Last Updated: 2024-08-07T16:41:28.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface. Additional Analyst Notes: - CVE Program Container: References: - http://evuln.com/vulns/61/summary.html - http://secunia.com/advisories/18791 - http://www.securityfocus.com/bid/16587 - http://securityreason.com/securityalert/427 - http://www.securityfocus.com/archive/1/424842/100/0/threaded - http://www.vupen.com/english/advisories/2006/04
ert/427 - http://www.securityfocus.com/archive/1/424842/100/0/threaded - http://www.vupen.com/english/advisories/2006/0450
CVE ID: CVE-2006-0572 State: PUBLISHED Published: 2006-02-07T18:00:00 Last Updated: 2024-08-07T16:41:28.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpstatus 1.0 does not require passwords when using cookies to identify a user, which allows remote attackers to bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - http://evuln.com/vulns/61/summary.html - http://secunia.com/advisories/18791 - http://www.securityfocus.com/bid/16587 - http://securityreason.com/securityalert/427 - http://www.securityfocus.com/archive/1/424842/100/0/threaded
CVE ID: CVE-2006-0573 State: PUBLISHED Published: 2006-02-07T18:00:00 Last Updated: 2024-08-07T16:41:28.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilies in cPanel 10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to (a) editquota.html or (b) dodelpop.html; (2) showtree parameter to (c) diskusage.html; or the (3) mon, (4) year, (5) target, or (6) domain parameter to (d) stats/detailbw.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24468 - http://ma
tp://www.vupen.com/english/advisories/2006/0433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24468 - http://marc.info/?l=bugtraq&m=113898556313924&w=2 - http://www.osvdb.org/22938 - http://www.osvdb.org/22939 - http://www.osvdb.org/22937 - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0025.html - http://www.osvdb.org/22936 - http://secunia.com/advisories/18695
CVE ID: CVE-2006-0574 State: PUBLISHED Published: 2006-02-07T18:00:00 Last Updated: 2024-08-07T16:41:28.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mime/handle.html in cPanel 10 allows remote attackers to inject arbitrary web script or HTML via the (1) file extension or (2) mime-type. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22940 - http://www.vupen.com/english/advisories/2006/0433 - http://securitytracker.com/id?1015589 - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0062.html - http://www.securityfocus.com/archive/1/424148/100/0/threaded - http://secunia.com/advisori
isclosure/2006-02/0062.html - http://www.securityfocus.com/archive/1/424148/100/0/threaded - http://secunia.com/advisories/18695
CVE ID: CVE-2006-0575 State: PUBLISHED Published: 2006-02-07T20:00:00 Last Updated: 2024-08-07T16:41:28.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: convert-fcrontab in Fcron 2.9.5 and 3.0.0 allows remote attackers to create or overwrite arbitrary files via ".." sequences and a symlink attack on the temporary file that is used during conversion. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22905 - http://www.securityfocus.com/bid/25693 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24504 - http://www.trustix.org/errata/2006/0006 - http://www.vupen.com/english/advisories/2006/0435 - http://secunia.com/advisories/18719 - http:
x.org/errata/2006/0006 - http://www.vupen.com/english/advisories/2006/0435 - http://secunia.com/advisories/18719 - http://marc.info/?l=full-disclosure&m=113890734603201&w=2
CVE ID: CVE-2006-0576 State: PUBLISHED Published: 2006-02-08T00:00:00 Last Updated: 2024-08-07T16:41:28.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary commands via a modified PATH that references malicious (1) which or (2) dirname programs. NOTE: while opcontrol normally is not run setuid, a common configuration suggests accessing opcontrol using sudo. In such a context, this is a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/424325/100/0/threaded - http://www.redhat.com/magazine/012oct
iner: References: - http://www.securityfocus.com/archive/1/424325/100/0/threaded - http://www.redhat.com/magazine/012oct05/features/oprofile/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10890 - http://www.securityfocus.com/bid/16536
CVE ID: CVE-2006-0577 State: PUBLISHED Published: 2006-02-08T00:00:00 Last Updated: 2024-08-07T16:41:28.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lexmark X1185 printer allows local users to gain SYSTEM privileges by navigating to the "Appearance" dialog and selecting the "Additional styles (skins) are available on the Lexmark web site" option, which launches a web browser that is running with SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24596 - http://www.vupen.com/english/advisories/2006/0482 - http://www.securityfocus.com/archive/1/424322/100/0/threaded - http://www.securityfoc
com/english/advisories/2006/0482 - http://www.securityfocus.com/archive/1/424322/100/0/threaded - http://www.securityfocus.com/bid/16534 - http://secunia.com/advisories/18728
CVE ID: CVE-2006-0578 State: PUBLISHED Published: 2006-02-08T01:00:00 Last Updated: 2024-08-07T16:41:28.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blue Coat Proxy Security Gateway OS (SGOS) 4.1.2.1 does not enforce CONNECT rules when using Deep Content Inspection, which allows remote attackers to bypass connection filters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22853 - http://www.bluecoat.com/support/knowledge/advisory_connect_denial_ignore.html - http://secunia.com/advisories/18622 - http://securitytracker.com/id?1015644 - http://www.vupen.com/english/advisories/2006/0401 - http://www.secumind.net/content/french/modules/new
.com/id?1015644 - http://www.vupen.com/english/advisories/2006/0401 - http://www.secumind.net/content/french/modules/news/article.php?storyid=8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24446
CVE ID: CVE-2006-0579 State: PUBLISHED Published: 2006-02-08T01:00:00 Last Updated: 2024-08-07T16:41:28.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in (1) the new_demux_packet function in demuxer.h and (2) the demux_asf_read_packet function in demux_asf.c in MPlayer 1.0pre7try2 and earlier allow remote attackers to execute arbitrary code via an ASF file with a large packet length value. NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18718 - https://exchange.xforce.ibmcloud.com/vul
s: - CVE Program Container: References: - http://secunia.com/advisories/18718 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24531 - http://secunia.com/advisories/19114 - http://www.gentoo.org/security/en/glsa/glsa-200603-03.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2006:048 - http://www.vupen.com/english/advisories/2006/0457
CVE ID: CVE-2006-0580 State: PUBLISHED Published: 2006-02-08T01:00:00 Last Updated: 2024-08-07T16:41:28.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Domino Server 7.0 allows remote attackers to cause a denial of service (segmentation fault) via a crafted packet to the LDAP port (389/TCP). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16523 - http://www.vupen.com/english/advisories/2006/0458 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24518 - http://secunia.com/advisories/18738 - http://securitytracker.com/id?1015592 - http://lists.immunitysec.com/pipermail/dailydave/2006-February/002896.html
CVE ID: CVE-2006-0581 State: PUBLISHED Published: 2006-02-08T01:00:00 Last Updated: 2024-08-07T16:41:28.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Hosting Controller 6.1 Hotfix 2.8 allows remote authenticated users to execute arbitrary SQL commands via the (1) GatewayID parameter in an add action in AddGatewaySettings.asp and (2) IP parameter in IPManager.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22982 - http://www.osvdb.org/22983 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24537 - http://securitytracker.com/id?1015584 - http://www.vupen.com/english/advisories/2006/0460 - http://se
rabilities/24537 - http://securitytracker.com/id?1015584 - http://www.vupen.com/english/advisories/2006/0460 - http://secunia.com/advisories/18731
CVE ID: CVE-2006-0582 State: PUBLISHED Published: 2006-02-08T01:00:00 Last Updated: 2024-08-07T16:41:28.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in rshd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2, when storing forwarded credentials, allows attackers to overwrite arbitrary files and change file ownership via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16524 - http://secunia.com/advisories/18894 - http://www.osvdb.org/22986 - http://secunia.com/advisories/19005 - http://www.pdc.kth.se/heimdal/advisory/2006-02-06/ - https://exchange.xforce.ibmcloud.com/vulnerabilitie
isories/19005 - http://www.pdc.kth.se/heimdal/advisory/2006-02-06/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/24532 - http://www.vupen.com/english/advisories/2006/0456 - http://securitytracker.com/id?1015591 - http://www.gentoo.org/security/en/glsa/glsa-200603-14.xml - http://secunia.com/advisories/18806 - http://secunia.com/advisories/18733 - http://www.ubuntu.com/usn/usn-253-1 - https://usn.ubuntu.com/247-1/ - http://www.debian.org/security/2006/dsa-977 - http://www.vupen.com/english/advisories/2006/0628 - http://www.securityfocus.com/archive/1/426043/100/0/threaded - http://www.stacken.kth.se/lists/heimdal-discuss/2006-02/msg00028.html - http://secunia.com/advisories/19302
CVE ID: CVE-2006-0583 State: PUBLISHED Published: 2006-02-08T01:00:00 Last Updated: 2024-08-07T16:41:28.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mailarticle.php in Clever Copy 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0462 - http://retrogod.altervista.org/Clever_Copy_V3_sql_xpl.html - http://secunia.com/advisories/18749 - http://www.osvdb.org/22984 - http://securitytracker.com/id?1015590 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24545
CVE ID: CVE-2006-0584 State: PUBLISHED Published: 2006-02-08T01:00:00 Last Updated: 2024-08-07T16:41:28.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output strings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16507 - http://www.osvdb.org/22952 - http://www.securityfocus.com/archive/1/424086/100/0/threaded
CVE ID: CVE-2006-0585 State: PUBLISHED Published: 2006-02-08T01:00:00 Last Updated: 2024-08-07T16:41:28.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: jscript.dll in Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (application crash) via a Shockwave Flash object that contains ActionScript code that calls VBScript, which in turn calls the Javascript document.write function, which triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015559 - http://www.securityfocus.com/archive/1/425422/30/6890/threaded - http://www.securityfocus.com/bid/16441 - http://w
559 - http://www.securityfocus.com/archive/1/425422/30/6890/threaded - http://www.securityfocus.com/bid/16441 - http://www.securityfocus.com/archive/1/423675/100/0/threaded
CVE ID: CVE-2006-0586 State: PUBLISHED Published: 2006-02-08T01:00:00 Last Updated: 2024-08-07T16:41:28.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Oracle 10g Release 1 before CPU Jan 2006 allow remote attackers to execute arbitrary SQL commands via multiple parameters in (1) ATTACH_JOB, (2) HAS_PRIVS, and (3) OPEN_JOB functions in the SYS.KUPV$FT package; and (4) UPDATE_JOB, (5) ACTIVE_JOB, (6) ATTACH_POSSIBLE, (7) ATTACH_TO_JOB, (8) CREATE_NEW_JOB, (9) DELETE_JOB, (10) DELETE_MASTER_TABLE, (11) DETACH_JOB, (12) GET_JOB_INFO, (13) GET_JOB_QUEUES, (14) GET_SOLE_JOBNAME, (15) MASTER_TBL_LOCK, and (16) VALID_HANDLE functions in the
GET_JOB_INFO, (13) GET_JOB_QUEUES, (14) GET_SOLE_JOBNAME, (15) MASTER_TBL_LOCK, and (16) VALID_HANDLE functions in the SYS.KUPV$FT_INT package. NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that these issues has been addressed by Oracle. It is unclear which, if any, Oracle Vuln# identifiers apply to these issues. Additional Analyst Notes: - CVE Program Container: References: - http://www.red-database-security.com/advisory/oracle_sql_injection_kupv%24ft.html - http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html - http://www.osvdb.org/22840 - http://www.red-database-security.com/adv
e-security.com/advisory/oracle_cpu_jan_2006.html - http://www.osvdb.org/22840 - http://www.red-database-security.com/advisory/oracle_sql_injection_kupv%24ft_int.html - http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041499.html - http://www.osvdb.org/22839 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041498.html - http://www.securityfocus.com/bid/16294 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24197 - http://www.securityfocus.com/archive/1/422424/30/7370/threaded - http://www.securityfocus.com/archive/1/422423/30/7370/threaded
CVE ID: CVE-2006-0587 State: PUBLISHED Published: 2006-02-08T01:00:00 Last Updated: 2024-08-07T16:41:28.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in util.php in Gallery before 1.5.2-pl2 allows remote authenticated users with trick an owner into modifying stored album data and possibly executing arbitrary code via unspecified vectors involving a crafted link to a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16533 - http://securitytracker.com/id?1015641 - http://www.digitalarmaments.com/2006140293402395.html - http://archives.neohapsis.com/archives/bugtraq/2006-02/0286.html - http
www.digitalarmaments.com/2006140293402395.html - http://archives.neohapsis.com/archives/bugtraq/2006-02/0286.html - http://archives.neohapsis.com/archives/bugtraq/2006-02/0224.html - http://gallery.menalto.com/gallery_1_5_2_pl2_security_release - http://www.osvdb.org/22944 - http://secunia.com/advisories/18735 - http://www.osvdb.org/23256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24538
CVE ID: CVE-2006-0588 State: PUBLISHED Published: 2006-02-08T01:00:00 Last Updated: 2024-08-07T16:41:28.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in MyTopix 1.2.3 allows remote attackers to execute arbitrary SQL commands via the (1) mid and (2) keywords parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/413 - http://www.securityfocus.com/archive/1/423950/100/0/threaded - http://kapda.ir/advisory-249.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24502
CVE ID: CVE-2006-0589 State: PUBLISHED Published: 2006-02-08T01:00:00 Last Updated: 2024-08-07T16:41:28.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyTopix 1.2.3 allows remote attackers to obtain the installation path via a direct request to logon.mod.php, which leaks the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/413 - http://www.securityfocus.com/archive/1/423950/100/0/threaded - http://kapda.ir/advisory-249.html
CVE ID: CVE-2006-0590 State: PUBLISHED Published: 2006-02-08T01:00:00 Last Updated: 2024-08-07T16:41:28.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyTopix 1.2.3 allows remote attackers to obtain the installation path via an invalid hl parameter to index.php, which leads to path disclosure, possibly related to invalid SQL syntax. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/413 - http://www.securityfocus.com/archive/1/423950/100/0/threaded - http://kapda.ir/advisory-249.html
CVE ID: CVE-2006-0591 State: PUBLISHED Published: 2006-02-08T01:00:00 Last Updated: 2024-08-07T16:41:28.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in crypt_blowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number of collisions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/424260/100/0/threaded - http://secunia.com/advisories/20653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
ve/1/424260/100/0/threaded - http://secunia.com/advisories/20653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24590 - http://secunia.com/advisories/20782 - http://www.redhat.com/support/errata/RHSA-2006-0526.html - http://secunia.com/advisories/18772 - ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc - http://www.osvdb.org/23005 - http://secunia.com/advisories/20232 - http://www.vupen.com/english/advisories/2006/0477 - http://support.avaya.com/elmodocs2/security/ASA-2006-113.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11502 - http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/glibc/crypt_blowfish/crypt_gen
l%3Aorg.mitre.oval%3Adef%3A11502 - http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/glibc/crypt_blowfish/crypt_gensalt.c?only_with_tag=CRYPT_BLOWFISH_1_0
CVE ID: CVE-2006-0592 State: PUBLISHED Published: 2006-02-08T01:00:00 Last Updated: 2024-08-07T16:41:28.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Lexmark Printer Sharing LexBce Server Service (LexPPS), possibly 8.29 and 9.41, allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: This information is based on a vague initial disclosure; details will be updated after the grace period has ended. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015593 - http://www.vupen.com/english/advisories/2006/0481 - http://www.securityfocus.com/archive/1/424273/100/0/threaded - htt
- http://www.vupen.com/english/advisories/2006/0481 - http://www.securityfocus.com/archive/1/424273/100/0/threaded - http://secunia.com/advisories/18744 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24581
CVE ID: CVE-2006-0593 State: PUBLISHED Published: 2006-02-08T01:00:00 Last Updated: 2024-08-07T16:41:28.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web script or HTML via the (1) shout_name field in shoutbox_panel.php and the (2) comments field in comments_include.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24548 - http://www.php-fusion.co.uk/news.php?readmore=307 - http://www.vupen.com/english/advisories/2006/0463 - http://www.securityfocus.com/bid/16548 - http://www.php-fusion.co
- http://www.vupen.com/english/advisories/2006/0463 - http://www.securityfocus.com/bid/16548 - http://www.php-fusion.co.uk/downloads.php?cat_id=3 - http://secunia.com/advisories/18949 - http://www.osvdb.org/22981 - http://www.osvdb.org/22980
CVE ID: CVE-2006-0597 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:41:28.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in elogd.c in elog before 2.5.7 r1558-4 allow attackers to cause a denial of service (application crash) and possibly execute code via long "revision attributes". Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi/0001-r1333-Fixed-crashes-with-very-long-revisions-attributes.txt?bug=349528%3Bmsg=15%3Batt=1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24704 - http://www.securityfocus.com/bid/16579 - http://bugs.debian.org/c
//exchange.xforce.ibmcloud.com/vulnerabilities/24704 - http://www.securityfocus.com/bid/16579 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=349528 - http://secunia.com/advisories/18783 - http://www.debian.org/security/2006/dsa-967