Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-1260 State: PUBLISHED Published: 2006-03-19T02:00:00 Last Updated: 2024-08-07T17:03:28.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url parameter in services/go.php, which bypasses a sanity check. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/590 - http://www.gentoo.org/security/en/glsa/glsa-200604-02.xml - http://www.debian.org/security/2006/dsa-1034 - http://secunia.com/advisories/19528 - http://www.securityfocus.com/bid/17117 - http://secunia.com/advisories/19246 - http://www.osvdb.org/2
advisories/19528 - http://www.securityfocus.com/bid/17117 - http://secunia.com/advisories/19246 - http://www.osvdb.org/23918 - http://secunia.com/advisories/19692 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25239 - http://www.vupen.com/english/advisories/2006/0959 - http://secunia.com/advisories/19619 - http://securitytracker.com/id?1015771 - http://www.debian.org/security/2006/dsa-1033 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043657.html - http://www.securityfocus.com/archive/1/427710/100/0/threaded - http://secunia.com/advisories/19897 - http://www.novell.com/linux/security/advisories/2006_04_28.html
CVE ID: CVE-2006-1261 State: PUBLISHED Published: 2006-03-19T02:00:00 Last Updated: 2024-08-07T17:03:28.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ASPPortal 3.00 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17114 - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/1517.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25235 - http://securitytracker.com/id?1015772 - http://www.aspportal.net/content/news/News_Item.asp?content_ID=32 - http://www.osvdb.org/23
ritytracker.com/id?1015772 - http://www.aspportal.net/content/news/News_Item.asp?content_ID=32 - http://www.osvdb.org/23920 - http://secunia.com/advisories/19247 - http://marc.info/?l=bugtraq&m=114243660409338&w=2
CVE ID: CVE-2006-1262 State: PUBLISHED Published: 2006-03-19T02:00:00 Last Updated: 2024-08-07T17:03:28.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ASPPortal 3.00 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25234 - http://www.securityfocus.com/bid/17114 - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/1517.html - http://www.osvdb.org/23919 - http://securitytracker.com/id?1015772 - http://www.aspportal.net/content/news/News_Item.asp?content_ID=32 - http://securityreason.com/securityalert/592 - http://secu
//www.aspportal.net/content/news/News_Item.asp?content_ID=32 - http://securityreason.com/securityalert/592 - http://secunia.com/advisories/19247 - http://marc.info/?l=bugtraq&m=114243660409338&w=2
CVE ID: CVE-2006-1263 State: PUBLISHED Published: 2006-03-19T02:00:00 Last Updated: 2024-08-07T17:03:28.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple "unannounced" cross-site scripting (XSS) vulnerabilities in WordPress before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17069 - http://wordpress.org/development/2006/03/security-202/
CVE ID: CVE-2006-1264 State: PUBLISHED Published: 2006-03-19T02:00:00 Last Updated: 2024-08-07T17:03:28.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in xhawk.net discussion 2.0 beta2 allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in a BBCode img tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17119 - http://www.securityfocus.com/archive/1/427729/100/0/threaded - http://evuln.com/vulns/92/summary.html - http://www.osvdb.org/23970 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25236
CVE ID: CVE-2006-1265 State: PUBLISHED Published: 2006-03-19T02:00:00 Last Updated: 2024-08-07T17:03:29.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in discussion.class.php in xhawk.net discussion 2.0 beta2 allows remote attackers to execute arbitrary SQL commands via the view parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25237 - http://www.securityfocus.com/archive/1/427729/100/0/threaded - http://evuln.com/vulns/92/summary.html - http://www.osvdb.org/23971 - http://www.securityfocus.com/bid/17121
CVE ID: CVE-2006-1266 State: PUBLISHED Published: 2006-03-19T02:00:00 Last Updated: 2024-08-07T17:03:28.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Service_Requests.asp in VPMi Enterprise 3.3 allows remote attackers to inject arbitrary web script or HTML via the Request_Name_Display parameter. Additional Analyst Notes: - CVE Program Container: References: - http://attrition.org/pipermail/vim/2006-March/000605.html - http://www.osvdb.org/23916 - http://www.securityfocus.com/bid/17172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25339 - http://secunia.com/advisories/19297
CVE ID: CVE-2006-1267 State: PUBLISHED Published: 2006-03-19T02:00:00 Last Updated: 2024-08-07T17:03:28.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invision Power Board 2.1.4 allows remote attackers to hijack sessions and possibly gain administrative privileges by obtaining the session ID from the s parameter, then replaying it in another request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/427847/100/0/threaded - http://www.securityfocus.com/archive/1/427751/100/0/threaded
CVE ID: CVE-2006-1268 State: PUBLISHED Published: 2006-03-19T02:00:00 Last Updated: 2024-08-07T17:03:28.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internet Key Exchange implementation in Funkwerk X2300 7.2.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17124 - http://secunia.com/advisories/19233 - http://www.fu
am Container: References: - http://www.securityfocus.com/bid/17124 - http://secunia.com/advisories/19233 - http://www.funkwerk-ec.com/portal/downloadcenter/dateien/x2300/r7201p09/readme_721p9.pdf - http://www.vupen.com/english/advisories/2006/0958
CVE ID: CVE-2006-1269 State: PUBLISHED Published: 2006-03-19T02:00:00 Last Updated: 2024-08-07T17:03:28.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long filename command line arguments, which are not properly handled during archive creation. NOTE: since this issue is local and not setuid, the set of attack scenarios is limited, although is reasonable to expect that there are some situations in which the zoo user might automatically list attacker-controlled filenames to add to the zoo archive. Additional Analyst Notes: - CVE Program Container: References: - ht
cker-controlled filenames to add to the zoo archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17126 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=183426 - http://www.gentoo.org/security/en/glsa/glsa-200603-12.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/25264 - http://www.vupen.com/english/advisories/2006/0969 - http://secunia.com/advisories/19254 - http://secunia.com/advisories/19250
CVE ID: CVE-2006-1270 State: PUBLISHED Published: 2006-03-19T02:00:00 Last Updated: 2024-08-07T17:03:28.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in zones.php in Inprotect 0.21 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Description field. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0970 - http://www.securityfocus.com/bid/17141 - http://secunia.com/advisories/19248 - https://exchange.xforce.ibmcloud.com/vul
http://www.securityfocus.com/bid/17141 - http://secunia.com/advisories/19248 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25280 - http://www.osvdb.org/23936
CVE ID: CVE-2006-1271 State: PUBLISHED Published: 2006-03-19T02:00:00 Last Updated: 2024-08-07T17:03:28.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in OxyNews allows remote attackers to execute arbitrary SQL commands via the oxynews_comment_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23940 - http://www.securityfocus.com/bid/17132 - http://secunia.com/advisories/19255 - http://www.securityfocus.com/archive/1/428057/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25301 - http://biyosecurity.be/bugs/oxynews.txt - http://www.vupen.com/english/advisories/2006/
loud.com/vulnerabilities/25301 - http://biyosecurity.be/bugs/oxynews.txt - http://www.vupen.com/english/advisories/2006/0976
CVE ID: CVE-2006-1272 State: PUBLISHED Published: 2006-03-19T02:00:00 Last Updated: 2024-08-07T17:03:28.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in member.php in MyBulletin Board (MyBB) 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) aim, (2) yahoo, (3) msn, or (4) website field. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23935 - http://kapda.ir/advisory-297.html - http://community.mybboard.net/showthread.php?tid=7368 - http://www.securityfocus.com/bid/17097 - http://www.securityfocus.com/archive/1/427746/100/0/threaded - https://exchange.xforc
/www.securityfocus.com/bid/17097 - http://www.securityfocus.com/archive/1/427746/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25263
CVE ID: CVE-2006-1273 State: PUBLISHED Published: 2006-03-19T11:00:00 Last Updated: 2024-08-07T17:03:28.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 1.0.7 and 1.5.0.1 allows remote attackers to cause a denial of service (crash) via an HTML tag with a large number of script action handlers such as onload and onmouseover, which triggers the crash when the user views the page source. NOTE: Red Hat has disputed this issue, suggesting that "It is likely the reporter was running the IE Tab extension," and Mozilla also confirmed that this is not an issue in Firefox itself Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/31833 - htt
an issue in Firefox itself Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/31833 - http://www.securityfocus.com/archive/1/428159/100/0/threaded - http://securityreason.com/securityalert/593 - http://www.securityfocus.com/archive/1/427977/100/0/threaded
CVE ID: CVE-2006-1274 State: PUBLISHED Published: 2006-03-19T11:00:00 Last Updated: 2024-08-07T17:03:28.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Classic Planer in AntiVir PersonalEdition Classic 7 does not drop privileges before executing external programs, which allows local users to gain privileges via notepad.exe, which is used to display scan reports. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/427412/100/0/threaded - http://www.vupen.com/english/advisories/2006/0948 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042868.html - http://www.osvdb.org/23843 - http://securityreason.com/security
rg.uk/pipermail/full-disclosure/2006-March/042868.html - http://www.osvdb.org/23843 - http://securityreason.com/securityalert/573 - http://secunia.com/advisories/19217 - http://www.securityfocus.com/bid/17071 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25244
CVE ID: CVE-2006-1275 State: PUBLISHED Published: 2006-03-19T11:00:00 Last Updated: 2024-08-07T17:03:28.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: GGZ Gaming Zone 0.0.12 allows remote attackers to cause a denial of service (client disconnect) via inputs that produce malformed XML, including (1) trailing ' (apostrophe) character on the ID attribute in a PLAYER XML tag, (2) joining with a long ID attribute or non-trailing ' characters, which causes a <none> name to be assigned, and then disconnecting, or (3) a long CDATA message attribute, which prevents closing tags from being added to the string. Additional Analyst Notes: - CVE Program Container: References: - http://www
closing tags from being added to the string. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0935 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25164 - http://www.securityfocus.com/bid/17094 - http://aluigi.altervista.org/adv/ggzcdos-adv.txt - http://secunia.com/advisories/19212 - http://www.osvdb.org/23848
CVE ID: CVE-2006-1276 State: PUBLISHED Published: 2006-03-19T11:00:00 Last Updated: 2024-08-07T17:03:28.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in Himpfen Consulting Company PHP SimpleNEWS 1.0.0 allows remote attackers to bypass authentication by setting the admin parameter in a cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25177 - http://www.securityfocus.com/bid/17186 - http://securityreason.com/securityalert/613 - http://www.securityfocus.com/archive/1/428427 - http://evuln.com/vulns/94/summary.html - http://www.osvdb.org/23803 - http://www.vupen.com/english/advisories/2006/09
- http://evuln.com/vulns/94/summary.html - http://www.osvdb.org/23803 - http://www.vupen.com/english/advisories/2006/0913 - http://secunia.com/advisories/19195
CVE ID: CVE-2006-1277 State: PUBLISHED Published: 2006-03-19T11:00:00 Last Updated: 2024-08-07T17:03:28.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in signup.php in @1 File Store 2006.03.07 allows remote attackers to inject arbitrary web script or HTML via the (1) real_name, (2) email, and (3) login parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/428659/100/0/threaded - http://www.vupen.com/english/advisories/2006/0943 - http://secunia.com/advisories/19224 - http://securitytracker.com/id?1015826 - http://www.securityfocus.com/bid/17090 - http://www.osvdb.org/23850
ies/19224 - http://securitytracker.com/id?1015826 - http://www.securityfocus.com/bid/17090 - http://www.osvdb.org/23850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25182 - http://evuln.com/vulns/95/summary.html
CVE ID: CVE-2006-1278 State: PUBLISHED Published: 2006-03-19T11:00:00 Last Updated: 2024-08-07T17:03:28.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in @1 File Store 2006.03.07 allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) functions.php and (2) user.php in the libs directory, (3) edit.php and (4) delete.php in control/files/, (5) edit.php and (6) delete.php in control/users/, (7) edit.php, (8) access.php, and (9) in control/folders/, (10) access.php and (11) delete.php in control/groups/, (12) confirm.php, and (13) download.php; (14) the email parameter in password.php, and (15) the id parameter in folder.
(12) confirm.php, and (13) download.php; (14) the email parameter in password.php, and (15) the id parameter in folder.php. NOTE: it was later reported that vectors 12 and 13 also affect @1 File Store PRO 3.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23855 - http://www.osvdb.org/23857 - http://www.osvdb.org/23864 - http://secunia.com/advisories/31063 - http://www.osvdb.org/23863 - http://www.securityfocus.com/archive/1/428659/100/0/threaded - http://www.osvdb.org/23852 - http://www.vupen.com/english/advisories/2006/0943 - http://www.osvdb.org/23861 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25183 - http://secunia.com/advisories/19224
/www.osvdb.org/23861 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25183 - http://secunia.com/advisories/19224 - http://www.attrition.org/pipermail/vim/2009-August/002246.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43718 - http://www.osvdb.org/23853 - http://www.osvdb.org/23860 - http://www.osvdb.org/23856 - http://securitytracker.com/id?1015826 - http://osvdb.org/47018 - http://www.osvdb.org/23858 - http://www.osvdb.org/23854 - http://osvdb.org/47017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43724 - http://www.securityfocus.com/bid/17090 - http://evuln.com/vulns/95/summary.html - http://www.osvdb.org/23851 - http://www.osvdb.org/23862 - https://www.expl
90 - http://evuln.com/vulns/95/summary.html - http://www.osvdb.org/23851 - http://www.osvdb.org/23862 - https://www.exploit-db.com/exploits/6040 - http://securityreason.com/securityalert/619 - http://www.osvdb.org/24106 - http://www.securityfocus.com/bid/30182 - http://www.osvdb.org/23859
CVE ID: CVE-2006-1279 State: PUBLISHED Published: 2006-03-19T11:00:00 Last Updated: 2024-08-07T17:03:28.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: CGI::Session 4.03-1 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by (1) Driver::File, (2) Driver::db_file, and possibly (3) Driver::sqlite. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23865 - http://www.securityfocus.com/bid/17177 - http://www.vupen.com/english/advisories/2006/0946 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25285 - http://secunia.com/advisories/19211 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356555
CVE ID: CVE-2006-1280 State: PUBLISHED Published: 2006-03-19T11:00:00 Last Updated: 2024-08-07T17:03:28.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: CGI::Session 4.03-1 does not set proper permissions on temporary files created in (1) Driver::File and (2) Driver::db_file, which allows local users to obtain privileged information, such as session keys, by viewing the files. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23866 - http://www.osvdb.org/23867 - http://www.vupen.com/english/advisories/2006/0946 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25283 - http://secunia.com/advisories/19211 - http://www.securityfocus.com/bi
change.xforce.ibmcloud.com/vulnerabilities/25283 - http://secunia.com/advisories/19211 - http://www.securityfocus.com/bid/17099 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356555
CVE ID: CVE-2006-1281 State: PUBLISHED Published: 2006-03-19T11:00:00 Last Updated: 2024-08-07T17:03:28.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in member.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to inject arbitrary web script or HTML via the url parameter, a different vulnerability than CVE-2006-1272. NOTE: 1.10 was later reported to be vulnerable. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23935 - http://www.securityfocus.com/bid/17097 - http://www.securityfocus.com/bid/17492 - http://myimei.com/security/2006-03-09/mybb104memberphpxss-after-login.html - http://secuni
securityfocus.com/bid/17492 - http://myimei.com/security/2006-03-09/mybb104memberphpxss-after-login.html - http://secunia.com/advisories/19213 - http://community.mybboard.net/showthread.php?tid=7368 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25266 - http://www.vupen.com/english/advisories/2006/0971 - http://www.securityfocus.com/archive/1/427744/100/0/threaded - http://kapda.ir/advisory-296.html
CVE ID: CVE-2006-1282 State: PUBLISHED Published: 2006-03-19T11:00:00 Last Updated: 2024-08-07T17:03:28.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in inc/function.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to conduct cross-site scripting (XSS), poison caches, or hijack pages via CRLF (%0A%0D) sequences in the Referrer HTTP header field, possibly when redirecting to other web pages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/427747/100/0/threaded - http://www.securityfocus.com/bid/17097 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25267 - http://myimei.com/s
ttp://www.securityfocus.com/bid/17097 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25267 - http://myimei.com/security/2006-03-10/mybb104redirectfunctionheaderinjection.html - http://community.mybboard.net/showthread.php?tid=7368 - http://kapda.ir/advisory-295.html
CVE ID: CVE-2006-1283 State: PUBLISHED Published: 2006-03-23T20:00:00 Last Updated: 2024-08-07T17:03:28.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: opiepasswd in One-Time Passwords in Everything (OPIE) in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin function to determine the invoking user account, which might allow local users to configure OPIE access to the root account and possibly gain root privileges if a root shell is permitted by the configuration of the wheel group or sshd. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25397 - http://securitytracker.com/id?10158
ontainer: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25397 - http://securitytracker.com/id?1015817 - http://www.securityfocus.com/bid/17194 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:12.opie.asc - http://secunia.com/advisories/19347 - http://www.osvdb.org/24067 - http://www.vupen.com/english/advisories/2006/1074
CVE ID: CVE-2006-1284 State: PUBLISHED Published: 2006-03-19T23:00:00 Last Updated: 2024-08-07T17:03:28.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation of SQLAnywhere in Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, includes a default administrator login account and password, which allows local users to gain privileges or modify tasks. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015733 - http://secunia.com/advisories/19171 - http://www.securityfocus.com/bid/17018 - http://securityresponse.symantec.com/avcenter/security/Content/2006.03.07.html - http://www.vupen.com/english
id/17018 - http://securityresponse.symantec.com/avcenter/security/Content/2006.03.07.html - http://www.vupen.com/english/advisories/2006/0870
CVE ID: CVE-2006-1285 State: PUBLISHED Published: 2006-03-19T23:00:00 Last Updated: 2024-08-07T17:03:28.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQLAnywhere in Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, gives read and write permissions to all users for database shared memory sections, which allows local users to access and possibly modify certain information. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015733 - http://secunia.com/advisories/19171 - http://securityresponse.symantec.com/avcenter/security/Content/2006.03.07.html - http://www.securityfocus.com/bid/17019 - http://www.