Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-3267 State: PUBLISHED Published: 2006-06-27T21:00:00 Last Updated: 2024-08-07T18:23:21.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Infinite Core Technologies (ICT) 1.0 Gold and earlier allows remote attackers to execute arbitrary SQL commands via the post parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/ict-infinite-core-technologies-vuln.html - http://www.securityfocus.com/bid/18644 - http://www.vupen.com/english/advisories/2006/2517 - http://secunia.com/advisories/20806 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27360
CVE ID: CVE-2006-3268 State: PUBLISHED Published: 2006-06-29T17:00:00 Last Updated: 2024-08-07T18:23:21.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Windows Client API in Novell GroupWise 5.x through 7 might allow users to obtain "random programmatic access" to other email within the same post office. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/438725/100/0/threaded - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974006.htm - http://support.novell.com/cgi-bin/search/searchtid.cgi?2974027.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/27550 - http://securitytr
gi-bin/search/searchtid.cgi?2974027.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/27550 - http://securitytracker.com/id?1016404 - http://www.vupen.com/english/advisories/2006/2594 - http://www.securityfocus.com/bid/18716 - http://secunia.com/advisories/20888 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973921.htm
CVE ID: CVE-2006-3269 State: PUBLISHED Published: 2006-06-28T22:00:00 Last Updated: 2024-08-07T18:23:20.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions_cms.php in THoRCMS 1.3.1 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26937 - http://www.vupen.com/english/advisories/2006/2527 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27375 - http://secunia.com/advisories/20815 - https://www.exploit-db.com/exploits/1952 - http://www.securityfocus.com/bid/18637
CVE ID: CVE-2006-3270 State: PUBLISHED Published: 2006-06-28T22:00:00 Last Updated: 2024-08-07T18:23:20.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cms_admin.php in THoRCMS 1.3.1 allows remote attackers to execute arbitrary SQL commands via multiple unspecified parameters, such as the add_link_mid parameter. NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2527 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27377
CVE ID: CVE-2006-3271 State: PUBLISHED Published: 2006-06-28T22:00:00 Last Updated: 2024-08-07T18:23:20.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Softbiz Dating 1.0 allow remote attackers to execute SQL commands via the (1) country and (2) sort_by parameters in (a) search_results.php; (3) browse parameter in (b) featured_photos.php; (4) cid parameter in (c) products.php, (d) index.php, and (e) news_desc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/438245/100/0/threaded - http://securityreason.com/securityalert/1163 - http://www.vupen.com/english/advisories/2006/2512
438245/100/0/threaded - http://securityreason.com/securityalert/1163 - http://www.vupen.com/english/advisories/2006/2512 - http://www.securityfocus.com/bid/18605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27383 - http://secunia.com/advisories/20802
CVE ID: CVE-2006-3272 State: PUBLISHED Published: 2006-06-28T22:00:00 Last Updated: 2024-08-07T18:23:20.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in menu.php in Some Chess 1.5 rc2 allows remote attackers to conduct actions as another user, such as changing usernames and passwords, via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27307
CVE ID: CVE-2006-3273 State: PUBLISHED Published: 2006-06-28T22:00:00 Last Updated: 2024-08-07T18:23:21.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in menu.php in Some Chess 1.5 rc1 allows remote attackers to inject arbitrary web script or HTML via the user parameter ("New Name" field). Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016360 - http://securityreason.com/securityalert/1162 - http://www.securityfocus.com/bid/18557 - http://www.securityfocus.com/archive/1/438009/100/0/threaded - http://secunia.com/advisories/20770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2730
/438009/100/0/threaded - http://secunia.com/advisories/20770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27307
CVE ID: CVE-2006-3274 State: PUBLISHED Published: 2006-06-28T22:00:00 Last Updated: 2024-08-07T18:23:21.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Webmin before 1.280, when run on Windows, allows remote attackers to read arbitrary files via \ (backslash) characters in the URL to certain directories under the web root, such as the image directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/438149/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27366 - http://www.webmin.com/changes.html - http://securityreason.com/securityalert/1161 - http://securitytrack
ilities/27366 - http://www.webmin.com/changes.html - http://securityreason.com/securityalert/1161 - http://securitytracker.com/id?1016375 - http://secunia.com/advisories/20777 - http://www.vupen.com/english/advisories/2006/2493 - http://jvn.jp/jp/JVN%2367974490/index.html - http://www.securityfocus.com/bid/18613 - http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/88_e.html
CVE ID: CVE-2006-3275 State: PUBLISHED Published: 2006-06-28T22:00:00 Last Updated: 2024-08-07T18:23:21.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profile.php in YaBB SE 1.5.5 and earlier allows remote attackers to execute SQL commands via a double-encoded user parameter in a viewprofile action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2504 - http://marc.info/?l=full-disclosure&m=115102378824221&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27331 - http://secunia.com/advisories/20780 - http://www.securityfocus.com/bid/18625
CVE ID: CVE-2006-3276 State: PUBLISHED Published: 2006-06-28T22:00:00 Last Updated: 2024-08-07T18:23:20.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in RealNetworks Helix DNA Server 10.0 and 11.0 allows remote attackers to execute arbitrary code via (1) a long User-Agent HTTP header in the RTSP service and (2) unspecified vectors involving the "parsing of HTTP URL schemes". Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27316 - http://www.securityfocus.com/bid/18606 - http://securitytracker.com/id?1016365 - http://www.vupen.com/english/advisories/2006/2521 - http://archives.ne
d/18606 - http://securitytracker.com/id?1016365 - http://www.vupen.com/english/advisories/2006/2521 - http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0600.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27317 - http://www.osvdb.org/26799 - http://secunia.com/advisories/20784 - http://labs.musecurity.com/advisories/MU-200606-01.txt
CVE ID: CVE-2006-3277 State: PUBLISHED Published: 2006-06-28T22:00:00 Last Updated: 2024-08-07T18:23:20.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier before the MESMTPC hotfix, allows remote attackers to cause a denial of service (application crash) via a HELO command with a null byte in the argument, possibly triggering a length inconsistency or a missing argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.mailenable.com/hotfix/mesmtpc.zip - https://exchange.xforce.ibmcloud.com/vulnerabilities/27387 - http://securitytracke
w.mailenable.com/hotfix/mesmtpc.zip - https://exchange.xforce.ibmcloud.com/vulnerabilities/27387 - http://securitytracker.com/id?1016376 - http://www.vupen.com/english/advisories/2006/2520 - http://secunia.com/advisories/20790 - http://www.osvdb.org/26791 - http://www.divisionbyzero.be/?p=174 - http://www.securityfocus.com/bid/18630 - http://www.divisionbyzero.be/?p=173 - http://www.securityfocus.com/archive/1/438374/100/0/threaded
CVE ID: CVE-2006-3278 State: PUBLISHED Published: 2006-06-28T22:00:00 Last Updated: 2024-08-07T18:23:21.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in H-Sphere 2.5.1 Beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) next_template, (2) start, (3) curr_menu_id, and (4) arid parameters in psoft/servlet/resadmin/psoft.hsphere.CP when using the mailman/massmail.html template_name. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27381 - http://www.vupen.com/english/advisories/2006/2550 - http://www.osvdb.org/26863 - http://se
d.com/vulnerabilities/27381 - http://www.vupen.com/english/advisories/2006/2550 - http://www.osvdb.org/26863 - http://secunia.com/advisories/20798 - http://pridels0.blogspot.com/2006/06/h-sphere-25x-xss-vuln.html - http://www.securityfocus.com/bid/18677
CVE ID: CVE-2006-3279 State: PUBLISHED Published: 2006-06-28T22:00:00 Last Updated: 2024-08-07T18:23:21.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in aeDating 4.1 allows remote attackers to inject arbitrary web script or HTML via the (1) Sex parameter in index.php, (2) ProfileType parameter in join_form.php, and (3) Email parameter in forgot.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26832 - http://www.vupen.com/english/advisories/2006/2533 - http://secunia.com/advisories/20820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27339 - http://www.osvdb.org/26830 - http://www.secu
sories/20820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27339 - http://www.osvdb.org/26830 - http://www.securityfocus.com/archive/1/438157/100/0/threaded - http://www.osvdb.org/26831
CVE ID: CVE-2006-3280 State: PUBLISHED Published: 2006-06-28T22:00:00 Last Updated: 2024-08-07T18:23:21.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, aka "Redirect Cross-Domain Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://
s-Domain Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047398.html - http://www.securityfocus.com/archive/1/438863/100/0/threaded - http://secunia.com/advisories/20825 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042 - http://www.securityfocus.com/archive/1/439146/100/0/threaded - http://www.kb.cert.org/vuls/id/883108 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27452 - http://securitytracker.com/id?1016388 - http://www.securityfocus.com/archive/1/438785/100/0/threaded - http://secunia.com/advisories/21396 - http://www.vupen.com/e
p://www.securityfocus.com/archive/1/438785/100/0/threaded - http://secunia.com/advisories/21396 - http://www.vupen.com/english/advisories/2006/3212 - http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060627/3d930eda/PLEBO-2006.06.16-IE_ONE_MINOR_ONE_MAJOR.obj - http://www.securityfocus.com/archive/1/438864/100/0/threaded - http://secunia.com/internet_explorer_information_disclosure_vulnerability_test - http://www.us-cert.gov/cas/techalerts/TA06-220A.html - http://www.securityfocus.com/archive/1/438811/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A738 - http://www.securityfocus.com/archive/1/438788/100/0/threaded - http:
arch/definition/oval%3Aorg.mitre.oval%3Adef%3A738 - http://www.securityfocus.com/archive/1/438788/100/0/threaded - http://www.securityfocus.com/bid/18682 - http://www.vupen.com/english/advisories/2006/2553
CVE ID: CVE-2006-3281 State: PUBLISHED Published: 2006-06-28T22:00:00 Last Updated: 2024-08-07T18:23:20.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0 does not properly handle Drag and Drop events, which allows remote user-assisted attackers to execute arbitrary code via a link to an SMB file share with a filename that contains encoded ..\ (%2e%2e%5c) sequences and whose extension contains the CLSID Key identifier for HTML Applications (HTA), aka "Folder GUID Code Execution Vulnerability." NOTE: directory traversal sequences were used in the original exploit, although their role is not clear. Additional Analyst Notes: - CVE Program Container:
were used in the original exploit, although their role is not clear. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047398.html - http://secunia.com/advisories/20825 - http://www.kb.cert.org/vuls/id/655100 - http://www.securityfocus.com/bid/19389 - http://securitytracker.com/id?1016388 - http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060627/3d930eda/PLEBO-2006.06.16-IE_ONE_MINOR_ONE_MAJOR.obj - http://www.us-cert.gov/cas/techalerts/TA06-220A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A318 - https://docs.microsoft.com/en-us/security-updates/securit
pository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A318 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27456 - http://www.vupen.com/english/advisories/2006/2553
CVE ID: CVE-2006-3282 State: PUBLISHED Published: 2006-06-28T22:00:00 Last Updated: 2024-08-07T18:23:21.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: requirements.php in Dating Agent PRO 4.7.1 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20833 - http://securityreason.com/securityalert/1164 - http://www.securityfocus.com/archive/1/438160/100/100/threaded - http://www.vupen.com/english/advisories/2006/2536 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27476
CVE ID: CVE-2006-3283 State: PUBLISHED Published: 2006-06-28T22:00:00 Last Updated: 2024-08-07T18:23:21.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to execute arbitrary SQL commands via the (1) pid parameter in picture.php, (2) mid parameter in mem.php, and the (3) sex and (4) relationship parameters in search.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27342 - http://securityreason.com/securityalert/1164 - http://www.securityfocus.com/archive/1/438160/100/100/threaded
CVE ID: CVE-2006-3284 State: PUBLISHED Published: 2006-06-28T22:00:00 Last Updated: 2024-08-07T18:23:21.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to inject arbitrary web script or HTML via the login parameter in (1) webmaster/index.php and (2) search.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20833 - http://securityreason.com/securityalert/1164 - http://www.securityfocus.com/archive/1/438160/100/100/threaded - http://www.vupen.com/english/advisories/2006/2536 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27343
CVE ID: CVE-2006-3285 State: PUBLISHED Published: 2006-06-28T22:00:00 Last Updated: 2024-08-07T18:23:21.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) uses an undocumented, hard-coded username and password, which allows remote authenticated users to read, and possibly modify, sensitive configuration data (aka bugs CSCsd15955). Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2583 - http://www.osvdb.org/26884 - http://secunia.com/advisories/20870 - http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml - http:
g/26884 - http://secunia.com/advisories/20870 - http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml - http://securitytracker.com/id?1016398 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27438 - http://www.securityfocus.com/bid/18701
CVE ID: CVE-2006-3286 State: PUBLISHED Published: 2006-06-28T23:00:00 Last Updated: 2024-08-07T18:23:20.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(63) stores a hard-coded username and password in plaintext within unspecified files, which allows remote authenticated users to access the database (aka bug CSCsd15951). Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2583 - http://secunia.com/advisories/20870 - http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml - http://www.osvdb.org/26883 - http://securitytr
0870 - http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml - http://www.osvdb.org/26883 - http://securitytracker.com/id?1016398 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27438 - http://www.securityfocus.com/bid/18701
CVE ID: CVE-2006-3287 State: PUBLISHED Published: 2006-06-28T23:00:00 Last Updated: 2024-08-07T18:23:21.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wireless Control System (WCS) for Linux and Windows 4.0(1) and earlier uses a default administrator username "root" and password "public," which allows remote attackers to gain access (aka bug CSCse21391). Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2583 - http://secunia.com/advisories/20870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27439 - http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml - http://www.osvdb.org/26882 - http://s
ilities/27439 - http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml - http://www.osvdb.org/26882 - http://securitytracker.com/id?1016398 - http://www.securityfocus.com/bid/18701
CVE ID: CVE-2006-3288 State: PUBLISHED Published: 2006-06-28T23:00:00 Last Updated: 2024-08-07T18:23:20.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the TFTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51), when configured to use a directory path name that contains a space character, allows remote authenticated users to read and overwrite arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2583 - http://secunia.com/advisories/20870 - http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml - http://securi
- http://secunia.com/advisories/20870 - http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml - http://securitytracker.com/id?1016398 - http://www.osvdb.org/26881 - http://www.securityfocus.com/bid/18701 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27440
CVE ID: CVE-2006-3289 State: PUBLISHED Published: 2006-06-28T23:00:00 Last Updated: 2024-08-07T18:23:21.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login page of the HTTP interface for the Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a "malicious URL". Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2583 - http://secunia.com/advisories/20870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27441 - http://www.cisco.com/warp/public/707/c
m/advisories/20870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27441 - http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml - http://www.osvdb.org/26880 - http://securitytracker.com/id?1016398 - http://www.securityfocus.com/bid/18701
CVE ID: CVE-2006-3290 State: PUBLISHED Published: 2006-06-28T23:00:00 Last Updated: 2024-08-07T18:23:21.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames and directory paths via a direct URL request. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2583 - http://secunia.com/advisories/20870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27442 - http://www.cisco.com/warp/public/707/cisco-sa-2006
/20870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27442 - http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml - http://securitytracker.com/id?1016398 - http://www.osvdb.org/26879 - http://www.securityfocus.com/bid/18701
CVE ID: CVE-2006-3291 State: PUBLISHED Published: 2006-06-28T23:00:00 Last Updated: 2024-08-07T18:23:21.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface on Cisco IOS 12.3(8)JA and 12.3(8)JA1, as used on the Cisco Wireless Access Point and Wireless Bridge, reconfigures itself when it is changed to use the "Local User List Only (Individual Passwords)" setting, which removes all security and password configurations and allows remote attackers to access the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18704 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27437 - http://www.cisco.com/warp/public/7
ityfocus.com/bid/18704 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27437 - http://www.cisco.com/warp/public/707/cisco-sa-20060628-ap.shtml - http://www.osvdb.org/26878 - http://securitytracker.com/id?1016399 - http://www.vupen.com/english/advisories/2006/2584 - http://www.kb.cert.org/vuls/id/544484 - http://secunia.com/advisories/20860