Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-1825 State: PUBLISHED Published: 2005-06-02T04:00:00 Last Updated: 2024-08-07T22:06:57.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the nvd_exec function in HP Radia Notify Daemon 3.1.2.0 (formerly by Novadigm), and other versions including 2.x, 3.x, and 4.x, allows remote attackers to execute arbitrary code via a command with crafted parameters to a RADEXECD process. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014089 - http://www.vupen.com/english/advisories/2005/0681 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034394.html - http://lists.grok.or
h/advisories/2005/0681 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034394.html - http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034387.html - http://secunia.com/advisories/15567 - http://www.grok.org.uk/advisories/radexecd.html - http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034394.html
CVE ID: CVE-2005-1826 State: PUBLISHED Published: 2005-06-02T04:00:00 Last Updated: 2024-08-07T22:06:57.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in HP Radia Notify Daemon 3.1.0.0 (formerly by Novadigm), and other versions including 2.x, 3.x, and 4.x, allows remote attackers to execute arbitrary code via a long file extension. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014089 - http://www.vupen.com/english/advisories/2005/0681 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034394.html - http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034387.html - http://secunia.com/advisor
June/034394.html - http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034387.html - http://secunia.com/advisories/15567 - http://www.grok.org.uk/advisories/radexecd.html - http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034394.html
CVE ID: CVE-2005-1827 State: PUBLISHED Published: 2005-06-02T04:00:00 Last Updated: 2024-08-07T22:06:57.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSL-504T allows remote attackers to bypass authentication and gain privileges, such as upgrade firmware, restart the router or restore a saved configuration, via a direct request to firmwarecfg. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15422 - http://marc.info/?l=bugtraq&m=111722515805478&w=2 - http://www.securityfocus.com/bid/13679
CVE ID: CVE-2005-1828 State: PUBLISHED Published: 2005-06-02T04:00:00 Last Updated: 2024-08-07T22:06:57.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSL-504T stores usernames and passwords in cleartext in the router configuration file, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111722515805478&w=2
CVE ID: CVE-2005-1829 State: PUBLISHED Published: 2005-06-02T04:00:00 Last Updated: 2024-08-07T22:06:57.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 SP2 allows remote attackers to cause a denial of service (infinite loop and application crash) via two embedded files that call each other. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111746441220149&w=2
CVE ID: CVE-2005-1830 State: PUBLISHED Published: 2005-06-02T04:00:00 Last Updated: 2024-08-07T22:06:57.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DbgMsg.sys driver in Compuware SoftICE DriverStudio 3.1 and 3.2 allows remote attackers to cause a denial of service (application crash) via an invalid Debug Message pointer. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15522 - http://marc.info/?l=bugtraq&m=111746654827861&w=2 - http://pb.specialised.info/all/adv/sice-adv.txt
CVE ID: CVE-2005-1831 State: PUBLISHED Published: 2005-06-02T04:00:00 Last Updated: 2025-01-16T19:09:52.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. NOTE: SuSE and multiple third-party researchers have not been able to replicate this issue, stating "Sudo catches SIGINT and returns an empty string for the password so I don't see how this could happen unless the user's actual password was empty. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://
al password was empty. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://archives.neohapsis.com/archives/bugtraq/2005-05/0359.html - http://archives.neohapsis.com/archives/bugtraq/2005-05/0349.html - http://marc.info/?l=bugtraq&m=111755694008928&w=2 - http://www.osvdb.org/20417
CVE ID: CVE-2005-1832 State: PUBLISHED Published: 2005-06-02T04:00:00 Last Updated: 2024-08-07T22:06:57.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 and earlier allow remote attackers to execute arbitrary web script or HTML via the (1) forums, (2) version, or (3) limit parameter to misc.php, (4) page or (5) datecut parameter to forumdisplay.php, (6) username, (7) email, or (8) email2 parameter to member.php, (9) page or (10) usersearch parameter to memberlist.php, (11) pid or (12) tid parameter to showthread.php, or (13) tid parameter to printthread.php. Additional Analyst Notes: - CVE P
pid or (12) tid parameter to showthread.php, or (13) tid parameter to printthread.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111757191118050&w=2 - http://secunia.com/advisories/15552 - http://www.mybboard.com/community/showthread.php?tid=2559
CVE ID: CVE-2005-1833 State: PUBLISHED Published: 2005-06-02T04:00:00 Last Updated: 2024-08-07T22:06:57.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to calendar.php, (2) idsql parameter to online.php, (3) usersearch parameter to memberlist.php, (4) pid parameter to editpost.php, (5) fid parameter to forumdisplay.php, (6) tid parameter to newreply.php, (7) sid parameter to search.php, (8) tid or (9) pid parameter to showthread.php, (10) tid parameter to usercp2.php, (11) tid parameter to printthread.php, or (12) pid par
d parameter to showthread.php, (10) tid parameter to usercp2.php, (11) tid parameter to printthread.php, or (12) pid parameter to reputation.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111757191118050&w=2 - http://secunia.com/advisories/15552 - http://www.mybboard.com/community/showthread.php?tid=2559 - http://www.osvdb.org/17024
CVE ID: CVE-2005-1834 State: PUBLISHED Published: 2005-06-02T04:00:00 Last Updated: 2024-08-07T22:06:57.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.asp in NEXTWEB (i)Site allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111764682925083&w=2 - http://secunia.com/advisories/15560 - http://securitytracker.com/id?1014085
CVE ID: CVE-2005-1835 State: PUBLISHED Published: 2005-06-02T04:00:00 Last Updated: 2024-08-07T22:06:57.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: NEXTWEB (i)Site stores databases under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to databases/Users.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111764682925083&w=2 - http://secunia.com/advisories/15560 - http://securitytracker.com/id?1014085
CVE ID: CVE-2005-1836 State: PUBLISHED Published: 2005-06-02T04:00:00 Last Updated: 2024-08-07T22:06:57.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: NEXTWEB (i)Site allows remote attackers to cause a denial of service (error 500) via a crafted HTTP request, possibly involving wildcard requests for .jsp files. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111764682925083&w=2 - http://secunia.com/advisories/15560
CVE ID: CVE-2005-1837 State: PUBLISHED Published: 2005-06-02T04:00:00 Last Updated: 2024-08-07T22:06:57.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fortinet firewall running FortiOS 2.x contains a hardcoded username with the password set to the serial number, which allows local users with console access to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111773657526375&w=2
CVE ID: CVE-2005-1838 State: PUBLISHED Published: 2005-06-02T04:00:00 Last Updated: 2024-08-07T22:06:57.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Email, (2) Title, or (3) Description fields. Additional Analyst Notes: - CVE Program Container: References: - http://echo.or.id/adv/adv14-theday-2005.txt - http://marc.info/?l=bugtraq&m=111773586701991&w=2
CVE ID: CVE-2005-1839 State: PUBLISHED Published: 2005-06-02T04:00:00 Last Updated: 2024-08-07T22:06:57.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.asp or (2) print.asp or (3) edit parameter to register.asp. Additional Analyst Notes: - CVE Program Container: References: - http://echo.or.id/adv/adv14-theday-2005.txt - http://marc.info/?l=bugtraq&m=111773586701991&w=2 - http://secunia.com/advisories/15593
CVE ID: CVE-2005-1840 State: PUBLISHED Published: 2005-06-02T04:00:00 Last Updated: 2024-08-07T22:06:57.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in class.layout_phpcms.php in phpCMS 1.2.x before 1.2.1pl2 allows remote attackers to read or include arbitrary files, as demonstrated using a .. (dot dot) in the language parameter to parser.php. Additional Analyst Notes: - CVE Program Container: References: - http://cvs.sourceforge.net/viewcvs.py/phpcms/phpcms/parser/include/class.layout_phpcms.php?rev=1.12.2.37&view=markup - http://www.phpcms.de/download/index.en.html - http://marc.info/?l=bugtraq&m=111773774916907&w=2 - http://secunia.com/
- http://www.phpcms.de/download/index.en.html - http://marc.info/?l=bugtraq&m=111773774916907&w=2 - http://secunia.com/advisories/15586
CVE ID: CVE-2005-1841 State: PUBLISHED Published: 2005-07-07T04:00:00 Last Updated: 2024-08-07T22:06:57.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: The control for Adobe Reader 5.0.9 and 5.0.10 on Linux, Solaris, HP-UX, and AIX creates temporary files with the permissions as specified in a user's umask, which could allow local users to read PDF documents of that user if the umask allows it. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2005-6/advisory/ - http://secunia.com/advisories/14457 - http://www.adobe.com/support/techdocs/329121.html - http://www.redhat.com/support/errata/RHSA-2005-575.html
CVE ID: CVE-2005-1842 State: PUBLISHED Published: 2005-08-24T04:00:00 Last Updated: 2024-08-07T22:06:57.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, creates temporary log files with predictable names, which allows local users to modify arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14638 - http://www.adobe.com/support/techdocs/327129.html - http://securitytracker.com/id?1014776 - http://www.idefense.com/application/poi/display?id=297&type=vulnera
27129.html - http://securitytracker.com/id?1014776 - http://www.idefense.com/application/poi/display?id=297&type=vulnerabilities - http://secunia.com/advisories/16541
CVE ID: CVE-2005-1843 State: PUBLISHED Published: 2005-08-24T04:00:00 Last Updated: 2024-08-07T22:06:57.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, allows local users to load arbitrary libraries and execute arbitrary code via the -lib command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14638 - http://www.adobe.com/support/techdocs/327129.html - http://securitytracker.com/id?1014776 - http://secunia.com/advisories/16541 - http://www.idefense.com/application/poi/disp
tp://securitytracker.com/id?1014776 - http://secunia.com/advisories/16541 - http://www.idefense.com/application/poi/display?id=296&type=vulnerabilities
CVE ID: CVE-2005-1844 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-1845 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-1846 State: PUBLISHED Published: 2005-06-03T04:00:00Z Last Updated: 2024-09-16T23:55:37.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in YaMT before 0.5_2 allow attackers to overwrite arbitrary files via the (1) rename or (2) sort options. Additional Analyst Notes: - CVE Program Container: References: - http://rpmfind.net/linux/RPM/suse/updates/8.2/i386/rpm/i586/yamt-0.5-1277.i586.html - http://www.vuxml.org/freebsd/99b5cfa5-d3d2-11d9-8ffb-00061bc2ad93.html
CVE ID: CVE-2005-1847 State: PUBLISHED Published: 2005-06-03T04:00:00Z Last Updated: 2024-09-16T22:44:53.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in YaMT before 0.5_2 allow attackers to execute arbitrary code via the (1) rename or (2) sort options. Additional Analyst Notes: - CVE Program Container: References: - http://rpmfind.net/linux/RPM/suse/updates/8.2/i386/rpm/i586/yamt-0.5-1277.i586.html - http://www.vuxml.org/freebsd/99b5cfa5-d3d2-11d9-8ffb-00061bc2ad93.html
CVE ID: CVE-2005-1848 State: PUBLISHED Published: 2005-07-11T04:00:00 Last Updated: 2024-08-07T22:06:57.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors that cause an out-of-bounds memory read. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-603.html - http://www.debian.org/security/2005/dsa-750
CVE ID: CVE-2005-1849 State: PUBLISHED Published: 2005-07-26T04:00:00 Last Updated: 2024-08-07T22:06:57.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/21456 - http://www.debian.org/security/2006/dsa-1026 - http://secunia.com/advisories/19334 - http://www.debian.org/security/2005/dsa-797 - http://www.debian.org/security/2005/dsa-763 - http://www.gentoo.org/security/en/glsa/glsa-200509-18.xml - ht
5/dsa-797 - http://www.debian.org/security/2005/dsa-763 - http://www.gentoo.org/security/en/glsa/glsa-200509-18.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2005:196 - http://security.debian.org/pool/updates/main/z/zlib/zlib_1.2.2-4.sarge.2.diff.gz - http://www.securityfocus.com/archive/1/464745/100/0/threaded - http://www.ubuntulinux.org/usn/usn-151-3 - http://www.gentoo.org/security/en/glsa/glsa-200603-18.xml - http://www.redhat.com/support/errata/RHSA-2005-584.html - http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html - http://secunia.com/advisories/16137 - http://secunia.com/advisories/31492 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mi
ies/16137 - http://secunia.com/advisories/31492 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11402 - http://www.osvdb.org/18141 - http://securitytracker.com/id?1014540 - http://www.novell.com/linux/security/advisories/2005_43_zlib.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:070 - http://www.redhat.com/support/errata/RHSA-2008-0629.html - http://www.vupen.com/english/advisories/2007/1267 - http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html - http://secunia.com/advisories/24788 - http://secunia.com/advisories/17326 - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://secunia.com/advisori
dvisories/17326 - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://secunia.com/advisories/17516 - http://www.securityfocus.com/bid/14340 - http://secunia.com/advisories/19597 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt - http://secunia.com/advisories/19550 - http://secunia.com/advisories/18377 - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680
CVE ID: CVE-2005-1850 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-07T22:06:57.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain contributed scripts for ekg Gadu Gadu client 1.5 and earlier create temporary files insecurely, with unknown impact and attack vectors, a different vulnerability than CVE-2005-1916. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-760 - http://marc.info/?l=bugtraq&m=112198499417250&w=2
CVE ID: CVE-2005-1851 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-07T22:06:57.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain contributed script for ekg Gadu Gadu client 1.5 and earlier allows attackers to execute shell commands via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-760 - http://marc.info/?l=bugtraq&m=112198499417250&w=2
CVE ID: CVE-2005-1852 State: PUBLISHED Published: 2005-07-26T04:00:00 Last Updated: 2024-08-07T22:06:57.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an incoming message. Additional Analyst Notes: - CVE Program Container: References: - http://www.kde.org/info/security/advisory-20050721-1.txt - http://secunia.com/advisories/16140 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9532 - http://w
dvisories/16140 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9532 - http://www.gentoo.org/security/en/glsa/glsa-200507-26.xml - http://www.securityfocus.com/bid/14345 - http://secunia.com/advisories/16242 - http://security.gentoo.org/glsa/glsa-200507-23.xml - http://www.novell.com/linux/security/advisories/2005_19_sr.html - http://marc.info/?l=bugtraq&m=112198499417250&w=2 - http://www.redhat.com/support/errata/RHSA-2005-639.html - http://lwn.net/Articles/144724/ - http://secunia.com/advisories/16211 - http://secunia.com/advisories/16155
CVE ID: CVE-2005-1853 State: PUBLISHED Published: 2005-08-03T04:00:00Z Last Updated: 2024-09-16T18:08:29.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/alerts/2005/Jul/1014599.html - http://www.debian.org/security/2005/dsa-770
CVE ID: CVE-2005-1854 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-07T22:06:57.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in apt-cacher in Debian 3.1, related to "missing input sanitising," allows remote attackers to execute arbitrary commands on the caching server. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16327 - http://www.securityfocus.com/bid/14459 - http://www.debian.org/security/2005/dsa-772 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21664
CVE ID: CVE-2005-1855 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:06:58.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Backup Manager (backup-manager) before 0.5.8 creates backup files with world-readable default permissions, which allows local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-787 - http://www.securityfocus.com/bid/13892 - http://secunia.com/advisories/15615 - http://securitytracker.com/id?1014124 - http://www.usenetlinux.com/archive/index.php/t-411815.html - http://www.sukria.net/packages/backup-manager/
CVE ID: CVE-2005-1856 State: PUBLISHED Published: 2005-08-29T04:00:00Z Last Updated: 2024-09-17T03:48:55.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CD-burning feature in backup-manager 0.5.8 and earlier uses a fixed filename in a world-writable directory for logging, which allows local users to overwrite files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-787
CVE ID: CVE-2005-1857 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:06:57.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code via format string specifiers in a reply. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/139421 - http://secunia.com/advisories/16567/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22016 - http://www.debian.org/security/2005/dsa-786 - http://www.securityfocus.com/bid/14666 - http://sourceforge.net/project/shownotes.php?group_id=604&release_id=351847
CVE ID: CVE-2005-1858 State: PUBLISHED Published: 2005-06-06T04:00:00 Last Updated: 2024-08-07T22:06:57.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a short byte count to a read request, which may allow local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16024 - http://bugs.debian.org/311634 - http://www.securityfocus.com/bid/13857 - http://securitytracker.com/id?1014107 - http://secunia.com/advisories/15561/ - http://sourceforge.net/project/shownotes.php?release_id=33188
er.com/id?1014107 - http://secunia.com/advisories/15561/ - http://sourceforge.net/project/shownotes.php?release_id=331884 - http://www.sven-tantau.de/public_files/fuse/fuse_20050603.txt - http://www.debian.org/security/2005/dsa-744 - http://www.osvdb.org/17042