Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-2815 State: PUBLISHED Published: 2005-09-07T04:00:00 Last Updated: 2024-08-07T22:45:02.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: print.php in FlatNuke 2.5.6 allows remote attackers to obtain sensitive information (path disclosure on error) or cause a denial of service (resource consumption) via an MS-DOS device name in the news parameter to print.php, such as (1) AUX, (2) CON, (3) PRN, (4) COM1, or (5) LPT1. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22153 - http://securitytracker.com/id?1014824 - http://seclists.org/lists/bugtraq/2005/Aug/0440.html
CVE ID: CVE-2005-2816 State: PUBLISHED Published: 2005-09-07T04:00:00 Last Updated: 2024-08-07T22:45:02.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Greymatter allows remote attackers to inject arbitrary web script or HTML via a post comment, which is recorded in a log file but not properly handled when the administrator uses "View Control Panel Log" to read the log file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112551307528929&w=2
CVE ID: CVE-2005-2817 State: PUBLISHED Published: 2005-09-07T04:00:00 Last Updated: 2024-08-07T22:45:02.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Machines Forum (SMF) 1-0-5 and earlier supports the use of URLs for avatar images, which allows remote attackers to monitor sensitive information of forum visitors such as IP address and user agent, as demonstrated using a PHP script on a malicious server. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014828 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22093 - http://seclists.org/lists/bugtraq/2005/Aug/0438.html - http://secunia.com/advisories/16646 - http://rg
abilities/22093 - http://seclists.org/lists/bugtraq/2005/Aug/0438.html - http://secunia.com/advisories/16646 - http://rgod.altervista.org/smf105.html
CVE ID: CVE-2005-2818 State: PUBLISHED Published: 2005-09-07T04:00:00 Last Updated: 2024-08-07T22:45:02.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in DownFile 1.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter to (1) email.php,(2) index.php, (3) del.php, or (4) add_form.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14713 - http://www.vupen.com/english/advisories/2005/1601 - http://securitytracker.com/id?1014827 - http://secunia.com/advisories/16630
CVE ID: CVE-2005-2819 State: PUBLISHED Published: 2005-09-07T04:00:00 Last Updated: 2024-08-07T22:45:02.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: DownFile 1.3 allows remote attackers to gain administrator privileges via a direct request to (1) update.php, (2) del.php, and (3) add_form.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14714 - http://www.vupen.com/english/advisories/2005/1601 - http://securitytracker.com/id?1014827 - http://secunia.com/advisories/16630
CVE ID: CVE-2005-2820 State: PUBLISHED Published: 2005-09-07T04:00:00 Last Updated: 2024-08-07T22:45:02.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via an e-mail message containing Internet Explorer "Conditional Comments" such as "[if]" and "[endif]". Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16704/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22158 - http://marc.info/?l=bugtraq&m=112607033030475&w=2 - http://secunia.com/advisories/17156 - http://www.ubuntu.com/usn/usn-201-1 - http://secun
bugtraq&m=112607033030475&w=2 - http://secunia.com/advisories/17156 - http://www.ubuntu.com/usn/usn-201-1 - http://secunia.com/secunia_research/2005-44/advisory/ - http://www.debian.org/security/2005/dsa-820 - http://www.securiteam.com/unixfocus/5RP0220GUS.html
CVE ID: CVE-2005-2827 State: PUBLISHED Published: 2005-12-14T01:00:00 Last Updated: 2024-08-07T22:45:02.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: The thread termination routine in the kernel for Windows NT 4.0 and 2000 (NTOSKRNL.EXE) allows local users to modify kernel memory and execution flow via steps in which a terminating thread causes Asynchronous Procedure Call (APC) entries to free the wrong data, aka the "Windows Kernel Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18064 - http://www.vupen.com/english/advisories/2005/2868 - http://www.securityfocus.com/bid/15826 - https://docs.microsoft.com/en-us/
/www.vupen.com/english/advisories/2005/2868 - http://www.securityfocus.com/bid/15826 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-055 - http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf - http://www.vupen.com/english/advisories/2005/2909 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23447 - http://secunia.com/advisories/18311 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1583 - http://www.eeye.com/html/research/advisories/AD20051213.html - http://securityreason.com/securityalert/252 - http://www.securityfocus.com/archive/1/419377/100/0/threaded - http://securitytracker.com/id?1015347 - http://ww
t/252 - http://www.securityfocus.com/archive/1/419377/100/0/threaded - http://securitytracker.com/id?1015347 - http://www.osvdb.org/18823 - http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420 - http://secunia.com/advisories/15821
CVE ID: CVE-2005-2829 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T22:45:02.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overlaying a malicious new window above a file download box, then (2) using a keyboard shortcut and delaying the display of the file download box until the user hits a shortcut that activates the "Run" button, aka "File Download Dialog Box Manipulation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18064 - https://oval.cisecurity.or
l Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18064 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1340 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1458 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1209 - http://www.securityfocus.com/bid/15823 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-054 - http://www.securityfocus.com/archive/1/419395/100/0/threaded - http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf - http://secunia.com/advisories/15368 - http://www.vupen.com/english/adviso
vaya.com/elmodocs2/security/ASA-2005-234.pdf - http://secunia.com/advisories/15368 - http://www.vupen.com/english/advisories/2005/2909 - http://secunia.com/secunia_research/2005-7/advisory/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1507 - http://securitytracker.com/id?1015349 - http://secunia.com/advisories/18311 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1490 - http://www.vupen.com/english/advisories/2005/2867 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23448 - http://marc.info/?l=full-disclosure&m=113450519906463&w=2 - http://secunia.com/secunia_research/2005-21/advisory - http://www130.
rc.info/?l=full-disclosure&m=113450519906463&w=2 - http://secunia.com/secunia_research/2005-21/advisory - http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1505 - http://securityreason.com/securityalert/254
CVE ID: CVE-2005-2830 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T22:45:02.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18064 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-054 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1101 - http://security
ms05-054 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1101 - http://securitytracker.com/id?1015350 - http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf - http://secunia.com/advisories/15368 - http://www.vupen.com/english/advisories/2005/2909 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1097 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1435 - http://secunia.com/advisories/18311 - http://www.vupen.com/english/advisories/2005/2867 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1143 - https://exchange.xforce.ibmclo
s://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1143 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23451 - http://www.securityfocus.com/bid/15825 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1317 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1521 - http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420
CVE ID: CVE-2005-2831 State: PUBLISHED Published: 2005-12-14T11:00:00 Last Updated: 2024-08-07T22:45:02.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of the "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2127. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015348 - http://secunia.com/
tional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015348 - http://secunia.com/advisories/18064 - http://www.securityfocus.com/bid/15827 - http://www.kb.cert.org/vuls/id/959049 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1597 - http://www.us-cert.gov/cas/techalerts/TA05-347A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-054 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1475 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1520 - https://oval.cisecurity.org/repository/search/definition/ov
itory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1520 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1426 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1558 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1543 - http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf - http://secunia.com/advisories/15368 - http://www.vupen.com/english/advisories/2005/2909 - http://secunia.com/advisories/18311 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23453 - http://www.osvdb.org/21763 - http://www.vupen.com/english/advisories/2005/2867 - http://www130.nortelnetw
lities/23453 - http://www.osvdb.org/21763 - http://www.vupen.com/english/advisories/2005/2867 - http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420
CVE ID: CVE-2005-2836 State: PUBLISHED Published: 2005-09-07T04:00:00Z Last Updated: 2024-09-16T19:24:51.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Phorum 5.0.17a and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to register.php or (2) a signature of a logged-in user in "My Control Center," which is not properly handled by control.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16667 - http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0018.html - http://archives.neohapsis.com/archives/fulldisclosure/
rchives.neohapsis.com/archives/fulldisclosure/2005-09/0018.html - http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0048.html
CVE ID: CVE-2005-2837 State: PUBLISHED Published: 2005-09-07T04:00:00Z Last Updated: 2024-09-16T23:05:37.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple eval injection vulnerabilities in PlainBlack Software WebGUI before 6.7.3 allow remote attackers to execute arbitrary Perl code via (1) Help.pm, (2) International.pm, or (3) WebGUI.pm. Additional Analyst Notes: - CVE Program Container: References: - http://www.plainblack.com/getwebgui/advisories/security-exploit-found-in-6.x-versions - http://www.securityfocus.com/bid/14732
CVE ID: CVE-2005-2838 State: PUBLISHED Published: 2005-09-07T04:00:00 Last Updated: 2024-08-07T22:45:02.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in myBloggie 2.1.3-beta and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/419280/100/0/threaded - http://www.securityfocus.com/bid/14739 - http://mywebland.com/forums/showtopic.php?t=399 - http://glide.stanford.edu/yichen/research/sec.pdf - http://secunia.com/advisories/16699 - http://marc.info/?l=bugtraq&m=112607358831963&w=2 - https://
en/research/sec.pdf - http://secunia.com/advisories/16699 - http://marc.info/?l=bugtraq&m=112607358831963&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22162
CVE ID: CVE-2005-2839 State: PUBLISHED Published: 2005-09-07T04:00:00Z Last Updated: 2024-09-17T03:38:41.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.72 allow remote attackers to inject arbitrary web script or HTML via (1) dl-search.php or (2) wl-search.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014847
CVE ID: CVE-2005-2840 State: PUBLISHED Published: 2005-09-07T04:00:00Z Last Updated: 2024-09-17T00:25:29.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unknown vulnerabilities in MAXdev MD-Pro 1.0.72 and earlier have unknown impact and unspecified attack vectors, in one or more of the (1) Download, (2) Search, (3) Web links, (4) Blocks, (5) Messages, (6) News, (7) Comments, (8) Settings, (9) Stats or (10) subjects modules. Additional Analyst Notes: - CVE Program Container: References: - http://www.maxdev.com/index.php?module=News&catid=&topic=2
CVE ID: CVE-2005-2841 State: PUBLISHED Published: 2005-09-08T04:00:00 Last Updated: 2024-08-07T22:45:02.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Firewall Authentication Proxy for FTP and/or Telnet Sessions for Cisco IOS 12.2ZH and 12.2ZL, 12.3 and 12.3T, and 12.4 and 12.4T allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted user authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/236045 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5317 - http://www.vupen.com/english/advisories/2005/1669 -
rg/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5317 - http://www.vupen.com/english/advisories/2005/1669 - http://www.cisco.com/warp/public/707/cisco-sa-20050907-auth_proxy.shtml
CVE ID: CVE-2005-2842 State: PUBLISHED Published: 2005-09-08T04:00:00 Last Updated: 2024-08-07T22:45:02.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary code via the username. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42703/ - http://archives.neohapsis.com/archives/fulldisclosure/2005-08/1074.html - http://secunia.com/advisories/16655 - http://securitytracker.com/id?1014830 - http://www.kb.cert.org/vuls/id/170905 - http://www.securityfocus.com/bid/14707 - http://www.jpno5.com/Releases/Public/Exploits/D
ww.kb.cert.org/vuls/id/170905 - http://www.securityfocus.com/bid/14707 - http://www.jpno5.com/Releases/Public/Exploits/Dameware%20Mini%20Remote%20Control%20Exploit/dameware.txt - http://www.vupen.com/english/advisories/2005/1596
CVE ID: CVE-2005-2843 State: PUBLISHED Published: 2005-09-08T04:00:00 Last Updated: 2024-08-07T22:45:02.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helpdesk software Hesk 0.92 does not properly verify usernames and passwords, which allows remote attackers to bypass authentication via a direct request to admin_main.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112534893423213&w=2 - http://secunia.com/advisories/16623/ - http://marc.info/?l=bugtraq&m=112545306117124&w=2 - http://www.securityfocus.com/bid/14692 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22054
CVE ID: CVE-2005-2844 State: PUBLISHED Published: 2005-09-08T04:00:00 Last Updated: 2024-08-07T22:45:02.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MMClient.exe in Indiatimes Messenger 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long group name argument to the RenameGroup function in the MMClient.MunduMessenger.1 ActiveX object. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22110 - http://securitytracker.com/id?1014842 - http://www.securityfocus.com/bid/14705 - http://marc.info/?l=bugtraq&m=112550635826169&w=
curitytracker.com/id?1014842 - http://www.securityfocus.com/bid/14705 - http://marc.info/?l=bugtraq&m=112550635826169&w=2 - http://secunia.com/advisories/16633/
CVE ID: CVE-2005-2845 State: PUBLISHED Published: 2005-09-08T04:00:00 Last Updated: 2024-08-07T22:45:02.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ariba Spend Management System sends the username and password to the server in plaintext in a POST request, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112559982413287&w=2 - http://marc.info/?l=bugtraq&m=112552683829473&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22116
CVE ID: CVE-2005-2846 State: PUBLISHED Published: 2005-09-08T04:00:00 Last Updated: 2024-08-07T22:45:02.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to execute arbitrary PHP code via the nls[file][vx][vxsfx] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112552342004406&w=2 - http://secunia.com/advisories/16654/ - http://www.securityfocus.com/bid/14709 - http://forum.cmsmadesimple.org/index.php/topic%2C1549.0.html
CVE ID: CVE-2005-2847 State: PUBLISHED Published: 2005-09-08T04:00:00 Last Updated: 2024-08-07T22:45:02.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14712 - http://www.securitytracker.com/alerts/2005/Sep/1014837.html - http://secunia.com/advisories/16683/ - http://www.securiweb.net/wiki/Ressources/AvisDeSecurite/2005.1 - http://marc.info/?l=bugtraq&m=112560044813390&w=2
CVE ID: CVE-2005-2848 State: PUBLISHED Published: 2005-09-08T04:00:00 Last Updated: 2024-08-07T22:53:28.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securiweb.net/wiki/Ressources/AvisDeSecurite/2005.1 - http://www.securitytracker.com/alerts/2005/Sep/1014837.html - http://secunia.com/advisories/16683/ - http://marc.info/?l=bugtraq&m=112560044813390&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22120 -
6683/ - http://marc.info/?l=bugtraq&m=112560044813390&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22120 - http://www.securityfocus.com/bid/14710
CVE ID: CVE-2005-2849 State: PUBLISHED Published: 2005-09-08T04:00:00 Last Updated: 2024-08-07T22:53:28.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to (1) read portions of source code via the -f option to Dig (dig_device.cgi), (2) determine file existence via the -r argument to Tcpdump (tcpdump_device.cgi) or (3) modify files in the cgi-bin directory via the -w argument to Tcpdump. Additional Analyst Notes: - CVE Program Container: References: - http://securiweb.net/wiki/Ressources/AvisDeSecurite/2005.1 - http://www.securitytracker.com/alerts/2005/Sep/101
ences: - http://securiweb.net/wiki/Ressources/AvisDeSecurite/2005.1 - http://www.securitytracker.com/alerts/2005/Sep/1014837.html - http://secunia.com/advisories/16683/ - http://marc.info/?l=bugtraq&m=112560044813390&w=2
CVE ID: CVE-2005-2850 State: PUBLISHED Published: 2005-09-08T04:00:00Z Last Updated: 2024-09-16T22:03:10.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: SlimFTPd 3.17 allows remote attackers to cause a denial of service (crash) via certain (1) USER and (2) PASS commands, possibly due to a buffer overflow or off-by-one error. Additional Analyst Notes: - CVE Program Container: References: - http://www.critical.lt/?vulnerabilities/8 - http://www.critical.lt/research/slimftpd_dos2.c - http://securitytracker.com/id?1014831
CVE ID: CVE-2005-2851 State: PUBLISHED Published: 2005-09-08T04:00:00 Last Updated: 2024-08-07T22:53:29.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the (1) smb4k.tmp or (2) sudoers temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:157 - http://secunia.com/advisories/16724 - http://www.securityfocus.com/bid/14756 - http://www.gentoo.org/security/en/glsa/glsa-200511-15.xml - http://smb4k.berlios.de/ - http://secunia.com/advisories/17636