Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-0207 State: PUBLISHED Published: 2005-03-09T05:00:00 Last Updated: 2024-08-07T21:05:25.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via O_DIRECT. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-366.html - http://www.securityfocus.com/advisories/7880 - http://www.securityfocus.com/bid/12330 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000930 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11001
CVE ID: CVE-2005-0208 State: PUBLISHED Published: 2005-02-28T05:00:00 Last Updated: 2024-08-07T21:05:25.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0473. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/795812 - http://www.securityfocus.com/archive/1/426078/100/0/threaded - http://gaim.sourceforge.net/security/?id=12 - http://secunia.com/advisories/14386 - https://oval.cisecurity.org/repository/search/definitio
orge.net/security/?id=12 - http://secunia.com/advisories/14386 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10477 - http://www.gentoo.org/security/en/glsa/glsa-200503-03.xml - http://marc.info/?l=bugtraq&m=110935655500670&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:049 - http://www.securityfocus.com/bid/12660 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000933 - http://www.redhat.com/support/errata/RHSA-2005-215.html - http://www.novell.com/linux/security/advisories/2005_36_sudo.html
CVE ID: CVE-2005-0209 State: PUBLISHED Published: 2005-03-18T05:00:00 Last Updated: 2024-08-07T21:05:25.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via crafted IP packet fragments. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111091402626556&w=2 - http://www.redhat.com/support/errata/RHSA-2005-366.html - http://www.novell.com/linux/security/advisories/2005_18_kernel.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11855 - http://www.securityfocus.com/bid/12598 - http://www.redha
sitory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11855 - http://www.securityfocus.com/bid/12598 - http://www.redhat.com/support/errata/RHSA-2005-420.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945
CVE ID: CVE-2005-0210 State: PUBLISHED Published: 2005-03-18T05:00:00 Last Updated: 2024-08-07T21:05:25.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service (memory consumption) via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111091402626556&w=2 - http://rhn.redhat.com/errata/RHSA-2005-663.html - http://www.securityfocus.com/bid/12816 - http://www.novell.com/linux/security/advisories/2005_18_kernel.html - http://secunia.com/advisories/14295 -
/bid/12816 - http://www.novell.com/linux/security/advisories/2005_18_kernel.html - http://secunia.com/advisories/14295 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:218 - http://secunia.com/advisories/17002 - http://secunia.com/advisories/17826 - http://rhn.redhat.com/errata/RHSA-2005-366.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 - http://www.vupen.com/english/advisories/2005/1878 - http://www.osvdb.org/14966 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10275 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945
CVE ID: CVE-2005-0211 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T21:05:25.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013045 - http://www.osvdb.org/13319 - http://www.kb.cert.org/vuls/id/886006 - http://secunia.com/advisories/14076 - http://fedoranews.org/updates/FEDORA--.shtml - http://www.sec
org/vuls/id/886006 - http://secunia.com/advisories/14076 - http://fedoranews.org/updates/FEDORA--.shtml - http://www.securityfocus.com/bid/12432 - http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-wccp_buffer_overflow.patch - http://www.redhat.com/support/errata/RHSA-2005-061.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9573 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:034 - http://www.debian.org/security/2005/dsa-667 - http://marc.info/?l=bugtraq&m=110780531820947&w=2 - http://www.novell.com/linux/security/advisories/2005_06_squid.html - http://www.redhat.com/support/errata/RHSA-2005-060.html - http://www.squi
linux/security/advisories/2005_06_squid.html - http://www.redhat.com/support/errata/RHSA-2005-060.html - http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-wccp_buffer_overflow
CVE ID: CVE-2005-0212 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T21:05:25.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Amp II engine as used by Gore: Ultimate Soldier 1.50 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero byte UDP packet. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18789 - http://marc.info/?l=bugtraq&m=110503597505648&w=2 - http://www.securityfocus.com/bid/12192 - http://aluigi.altervista.org/adv/amp2zero-adv.txt - http://secunia.com/advisories/13754
CVE ID: CVE-2005-0213 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T21:05:25.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in WinHKI 1.4d allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a zip file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12176 - http://marc.info/?l=bugtraq&m=110505334903257&w=2 - http://secunia.com/advisories/13738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18798 - http://securitytracker.com/id?1012798
CVE ID: CVE-2005-0214 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T21:05:24.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Simple PHP Blog (SPHPBlog) 0.3.7c allows remote attackers to read or create arbitrary files via a .. (dot dot) in the entry parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2005-01/0210.html - http://marc.info/?l=bugtraq&m=110512850603989&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18802 - http://www.securityfocus.com/bid/12193
CVE ID: CVE-2005-0215 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T21:05:25.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla 1.6 and possibly other versions allows remote attackers to cause a denial of service (application crash) via a XBM (X BitMap) file with a large (1) height or (2) width value. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110512665029209&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18803
CVE ID: CVE-2005-0216 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T21:05:25.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly other versions, allows remote attackers to inject arbitrary web script and HTML via the userid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13782 - http://marc.info/?l=bugtraq&m=110537385427004&w=2 - http://www.securityfocus.com/bid/12199 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18814
CVE ID: CVE-2005-0217 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T21:05:25.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Invision Community Blog allows remote attackers to execute arbitrary SQL commands via the eid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18815 - http://www.securityfocus.com/bid/12205 - http://www.osvdb.org/12817 - http://marc.info/?l=bugtraq&m=110538277223800&w=2 - http://secunia.com/advisories/13783 - http://securitytracker.com/id?1012831
CVE ID: CVE-2005-0218 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T21:05:25.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: (RFC 2397) URL. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/lists/fulldisclosure/2005/Jan/0537.html - http://sourceforge.net/project/shownotes.php?release_id=300116 - http://seclists.org/lists/fulldisclosure/2005/Jan/0332.html - http://www.gentoo.org/security/en/glsa/glsa-200501-46.xml - http://secunia.com/advisories/13900/ - http://www.mandriva.com/security/advisories?name=MDK
en/glsa/glsa-200501-46.xml - http://secunia.com/advisories/13900/ - http://www.mandriva.com/security/advisories?name=MDKSA-2005:025
CVE ID: CVE-2005-0219 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T21:05:25.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Gallery 1.3.4-pl1 allow remote attackers to inject arbitrary web script or HTML via (1) the index field in add_comment.php, (2) set_albumName, (3) slide_index, (4) slide_full, (5) slide_loop, (6) slide_pause, (7) slide_dir fields in slideshow_low.php, or (8) username field in search.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110608459222364&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43473 - http://arc
p://marc.info/?l=bugtraq&m=110608459222364&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43473 - http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html - http://theinsider.deep-ice.com/texts/advisory69.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/18938 - http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147
CVE ID: CVE-2005-0220 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T21:05:25.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in login.php in Gallery 1.4.4-pl2 allows remote attackers to inject arbitrary web script or HTML via the username field. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200501-45.xml - http://marc.info/?l=bugtraq&m=110608459222364&w=2 - http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html - http://theinsider.deep-ice.com/texts/advisory69.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/18938 - http://gallery.
insider.deep-ice.com/texts/advisory69.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/18938 - http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147 - http://secunia.com/advisories/13887/
CVE ID: CVE-2005-0221 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T21:05:25.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.php in Gallery 2.0 Alpha allows remote attackers to inject arbitrary web script or HTML via the g2_form[subject] field. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110608459222364&w=2 - http://theinsider.deep-ice.com/texts/advisory69.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/43472 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18938 - http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html -
change.xforce.ibmcloud.com/vulnerabilities/18938 - http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html - http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147
CVE ID: CVE-2005-0222 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T21:05:25.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: main.php in Gallery 2.0 Alpha allows remote attackers to gain sensitive information by changing the value of g2_subView parameter, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110608459222364&w=2 - http://theinsider.deep-ice.com/texts/advisory69.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/18940 - http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html - http://gallery.menalto.com/modules.php?op=modload&name=N
//archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html - http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147
CVE ID: CVE-2005-0223 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T21:05:25.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Software Development Kit (SDK) and Run Time Environment (RTE) 1.4.1 and 1.4.2 for Tru64 UNIX allows remote attackers to cause a denial of service (Java Virtual Machine hang) via object deserialization. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110719624029320&w=2
CVE ID: CVE-2005-0224 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T21:05:25.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in HP-UX B.11.04 running Virtualvault 4.5 through 4.7, when running the TGA daemon, allows remote attackers to cause a denial of service via certain network traffic. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14082/ - http://marc.info/?l=bugtraq&m=110726808700080&w=2
CVE ID: CVE-2005-0225 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T21:05:25.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: firehol.sh in FireHOL before 1.224 creates temporary files with predictable file names, which could allow local users to overwrite arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200502-01.xml - http://secunia.com/advisories/14102 - http://secunia.com/advisories/13970 - http://www.securityfocus.com/bid/12336 - http://securitytracker.com/id?1012969 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19032 - http://www.osvdb.org
ttp://securitytracker.com/id?1012969 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19032 - http://www.osvdb.org/13137 - http://cvs.sourceforge.net/viewcvs.py/firehol/firehol/firehol.sh
CVE ID: CVE-2005-0226 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T21:05:25.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the Log_Resolver function in log.c for ngIRCd 0.8.2 and earlier, when compiled with IDENT, logging to SYSLOG, and with DEBUG enabled, allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110746413108183&w=2 - http://secunia.com/advisories/14114/ - http://www.nosystem.com.ar/advisories/advisory-11.txt - http://www.securityfocus.com/bid/12434
CVE ID: CVE-2005-0227 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T21:05:25.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows local users to load arbitrary shared libraries and execute code via the LOAD extension. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200502-08.xml - http://www.trustix.org/errata/2005/0003/ - http://www.debian.org/security/2005/dsa-668 - http://archives.postgresql.org/pgsql-announce/2005-02/msg00000.php - http://www.securityfocus.com/bid/12411 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:040 - ht
0000.php - http://www.securityfocus.com/bid/12411 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:040 - http://archives.postgresql.org/pgsql-bugs/2005-01/msg00269.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10234 - http://www.redhat.com/support/errata/RHSA-2005-138.html - http://secunia.com/advisories/12948 - http://www.redhat.com/support/errata/RHSA-2005-150.html - http://marc.info/?l=bugtraq&m=110726899107148&w=2 - http://www.novell.com/linux/security/advisories/2005_36_sudo.html
CVE ID: CVE-2005-0228 State: REJECTED Published: 2005-02-06T05:00:00 Last Updated: 2005-02-09T10:00:00 Description: No description available.
CVE ID: CVE-2005-0229 State: PUBLISHED Published: 2005-02-14T05:00:00 Last Updated: 2024-08-07T21:05:25.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers to steal credit card information via a direct request to newfile.txt. Additional Analyst Notes: - CVE Program Container: References: - http://www.citrusdb.org/forums/viewtopic.php?t=49 - http://securitytracker.com/id?1013040 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19145 - http://www.securityfocus.com/bid/12402 - http://www.redteam-pentesting.de/advisories/rt-sa-2005-001.txt - http://marc.info/?
://www.securityfocus.com/bid/12402 - http://www.redteam-pentesting.de/advisories/rt-sa-2005-001.txt - http://marc.info/?l=full-disclosure&m=110824766519417&w=2
CVE ID: CVE-2005-0230 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox 1.0 does not prevent the user from dragging an executable file to the desktop when it has an image/gif content type but has a dangerous extension such as .bat or .exe, which allows remote attackers to bypass the intended restriction and execute arbitrary commands via malformed GIF files that can still be parsed by the Windows batch file parser, aka "firedragging." Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/mfsa2005-25.html - https://oval.cisecurity.org/repo
am Container: References: - http://www.mozilla.org/security/announce/mfsa2005-25.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100033 - http://secunia.com/advisories/19823 - http://marc.info/?l=bugtraq&m=110780995232064&w=2 - http://www.mikx.de/firedragging/ - https://bugzilla.mozilla.org/show_bug.cgi?id=279945 - http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml - http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml - http://www.novell.com/linux/security/advisories/2006_04_25.html - http://www.securityfocus.com/bid/12468
CVE ID: CVE-2005-0231 State: PUBLISHED Published: 2005-02-08T05:00:00 Last Updated: 2024-08-07T21:05:25.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or data: URL to a tab, which allows remote attackers to bypass the security model, aka "firetabbing." Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html - https://bugzilla.mozilla.org/show_bug.cgi?id=280056 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10079 - http://marc.info/?l=bugtraq&m=110781134617144
ity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10079 - http://marc.info/?l=bugtraq&m=110781134617144&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19264 - http://www.redhat.com/support/errata/RHSA-2005-176.html - http://www.redhat.com/support/errata/RHSA-2005-384.html - http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml - http://www.mozilla.org/security/announce/mfsa2005-26.html - http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml - http://www.mikx.de/firetabbing/
CVE ID: CVE-2005-0232 State: PUBLISHED Published: 2005-02-08T05:00:00 Last Updated: 2024-08-07T21:05:25.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox 1.0 allows remote attackers to modify Boolean configuration parameters for the about:config site by using a plugin such as Flash, and the -moz-opacity filter, to display the about:config site then cause the user to double-click at a certain screen position, aka "Fireflashing." Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110781055630856&w=2 - http://www.redhat.com/support/errata/RHSA-2005-323.html - http://www.mozilla.org/security/announce/mfsa2005-27.html - http://www.
w.redhat.com/support/errata/RHSA-2005-323.html - http://www.mozilla.org/security/announce/mfsa2005-27.html - http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19266 - http://www.redhat.com/support/errata/RHSA-2005-176.html - http://www.redhat.com/support/errata/RHSA-2005-384.html - https://bugzilla.mozilla.org/show_bug.cgi?id=280664 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10967 - http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml - http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml - http://www.mikx.de/fireflashing/
CVE ID: CVE-2005-0233 State: PUBLISHED Published: 2005-02-07T05:00:00 Last Updated: 2024-08-07T21:05:25.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.shmoo.com/idn/homograph.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/19236 - http://lists.grok.org.uk/pipermail/f
om/idn/homograph.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/19236 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html - http://www.shmoo.com/idn - http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11229 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100029 - http://www.redhat.com/support/errata/RHSA-2005-176.html - http://www.redhat.com/support/errata/RHSA-2005-384.html - http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml - http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml - http
://www.gentoo.org/security/en/glsa/glsa-200503-30.xml - http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml - http://marc.info/?l=bugtraq&m=110782704923280&w=2 - http://www.securityfocus.com/bid/12461 - http://www.mozilla.org/security/announce/mfsa2005-29.html