Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-2199 State: PUBLISHED Published: 2005-07-11T04:00:00 Last Updated: 2024-08-07T22:15:37.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers to execute arbitrary code via the config[ppa_root_path] variable. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16011 - http://www.securityfocus.com/bid/14209 - http://securitytracker.com/id?1014436
CVE ID: CVE-2005-2200 State: PUBLISHED Published: 2005-07-11T04:00:00 Last Updated: 2024-08-07T22:15:37.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unknown vulnerabilities in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allow attackers to bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15970 - http://securitytracker.com/id?1014429 - http://www.xerox.com/downloads/usa/en/c/cert_XRX05_006.pdf
CVE ID: CVE-2005-2201 State: PUBLISHED Published: 2005-07-11T04:00:00Z Last Updated: 2024-09-16T23:10:47.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allow attackers to cause a denial of service or access files via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.xerox.com/downloads/usa/en/c/cert_XRX05_006.pdf - http://secunia.com/advisories/15970 - http://securitytracker.com/id?1014429
CVE ID: CVE-2005-2202 State: PUBLISHED Published: 2005-07-11T04:00:00Z Last Updated: 2024-09-17T00:16:35.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.xerox.com/downloads/usa/en/c/cert_XRX05_006.pdf - http://secunia.com/advisories/15970 - http://securitytracker.com/id?1014429
CVE ID: CVE-2005-2203 State: PUBLISHED Published: 2005-07-11T04:00:00Z Last Updated: 2024-09-16T22:55:37.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: login.php in phpWishlist before 0.1.15 allows remote attackers to bypass authentication via a direct request to admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://unix.freshmeat.net/projects/phpwishlist/?branch_id=53897&release_id=200925 - http://securitytracker.com/id?1014432
CVE ID: CVE-2005-2204 State: PUBLISHED Published: 2005-07-11T04:00:00 Last Updated: 2024-08-07T22:15:37.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Computer Associates (CA) eTrust SiteMinder 5.5, when the "CSSChecking" parameter is set to "NO," allows remote attackers to inject arbitrary web script or HTML via the (1) PASSWORD or (2) BUFFER parameters to smpwservicescgi.exe, (3) the TARGET parameter to login.fcc, and possibly other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014433 - http://secunia.com/advisories/15956 - http://www.osvdb.org/17809 - https://exchange.xf
/securitytracker.com/id?1014433 - http://secunia.com/advisories/15956 - http://www.osvdb.org/17809 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21305 - http://www.osvdb.org/17810 - http://marc.info/?l=bugtraq&m=112110963416714&w=2 - http://marc.info/?l=bugtraq&m=112084050624959&w=2 - http://www.vupen.com/english/advisories/2005/1040
CVE ID: CVE-2005-2205 State: PUBLISHED Published: 2005-07-11T04:00:00Z Last Updated: 2024-09-16T19:25:09.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadLog function in kaiseki.cgi in pngren allows remote attackers to execute arbitrary commands via shell metacharacters in the query string. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/17784 - http://seclists.org/lists/bugtraq/2005/Jul/0097.html - http://www.securityfocus.com/bid/14182 - http://securitytracker.com/id?1014426 - http://secunia.com/advisories/15981
CVE ID: CVE-2005-2206 State: PUBLISHED Published: 2005-07-11T04:00:00Z Last Updated: 2024-09-17T00:45:48.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in CartWIZ allow remote attackers to modify SQL statements via the (1) idProduct parameter to tellAFriend.asp, (2) sortType parameter to viewSupportTickets.asp, or the id parameter to (3) updateCreditCards.asp or (4) deleteCreditCards.asp. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014418 - http://digitalparadox.org/viewadvisories.ah?view=42
CVE ID: CVE-2005-2207 State: PUBLISHED Published: 2005-07-11T04:00:00Z Last Updated: 2024-09-16T16:18:02.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in store/login.asp in CartWIZ allows remote attackers to inject arbitrary web script or HTML via the message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014418 - http://digitalparadox.org/viewadvisories.ah?view=42
CVE ID: CVE-2005-2208 State: PUBLISHED Published: 2005-07-11T04:00:00 Last Updated: 2024-08-07T22:15:37.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: PrivaShare 1.1b allows remote attackers to cause a denial of service (crash) via a malformed message. Additional Analyst Notes: - CVE Program Container: References: - http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=66 - http://securitytracker.com/id?1014412 - http://secunia.com/advisories/15933
CVE ID: CVE-2005-2209 State: PUBLISHED Published: 2005-07-11T04:00:00 Last Updated: 2024-08-07T22:15:37.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Capturix ScanShare 1.06 build 50 stores sensitive information such as the password in cleartext in capturixss_cfg.ini, which is readable by local users. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014409 - http://secunia.com/advisories/15995
CVE ID: CVE-2005-2210 State: PUBLISHED Published: 2005-07-11T04:00:00 Last Updated: 2024-08-07T22:15:37.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Internet Download Manager 4.05 allows remote attackers to execute arbitrary code via a long URL. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014404 - http://www.ihsteam.com/download/ihsexpl/dlm.c
CVE ID: CVE-2005-2211 State: PUBLISHED Published: 2005-07-11T04:00:00Z Last Updated: 2024-09-16T22:51:50.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Backup Manager 0.5.8a creates temporary files insecurely, which allows local users to conduct unauthorized file operations when a user is burning a CDR. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15989 - http://www.sukria.net/packages/backup-manager/
CVE ID: CVE-2005-2212 State: PUBLISHED Published: 2005-07-11T04:00:00Z Last Updated: 2024-09-16T18:03:58.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Backup Manager 0.5.8a creates an archive repository with world readable and writable permissions, which allows attackers to modify or read the repository. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15989 - http://www.sukria.net/packages/backup-manager/
CVE ID: CVE-2005-2213 State: PUBLISHED Published: 2005-07-11T04:00:00Z Last Updated: 2024-09-16T19:29:55.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the mms_interp_header function in mms.c in MMS Ripper before 0.6.4 might allow remote attackers to execute arbitrary code via a file with more than 20 streams. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15987 - http://nbenoit.tuxfamily.org/projects/mmsrip/ChangeLog
CVE ID: CVE-2005-2214 State: PUBLISHED Published: 2005-07-11T04:00:00 Last Updated: 2024-08-07T22:15:37.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows local users to obtain sensitive information such as passwords. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=305142 - http://secunia.com/advisories/15955 - http://www.securityfocus.com/bid/14173
CVE ID: CVE-2005-2215 State: PUBLISHED Published: 2005-07-12T04:00:00 Last Updated: 2024-08-07T22:15:37.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1.5beta3 allows remote attackers to inject arbitrary web script or HTML via a parameter in the page move template, a different vulnerability than CVE-2005-1888. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_19_sr.html - http://sourceforge.net/project/shownotes.php?release_id=340290 - http://www.securityfocus.com/bid/14181 - http://secunia.com/advisories/15950
CVE ID: CVE-2005-2216 State: PUBLISHED Published: 2005-07-12T04:00:00Z Last Updated: 2024-09-17T00:26:24.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in gals.php in PhotoGal Photo Gallery 1.5 and earlier allows remote attackers to execute arbitrary code via the news_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014397
CVE ID: CVE-2005-2217 State: PUBLISHED Published: 2005-07-12T04:00:00Z Last Updated: 2024-09-16T18:39:23.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dansie Shopping Cart stores the vars.dat file under the web root with insufficient access control, which might allow remote attackers to obtain sensitive information such as program variables. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014396
CVE ID: CVE-2005-2218 State: PUBLISHED Published: 2005-07-26T04:00:00 Last Updated: 2024-08-07T22:22:47.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: The device file system (devfs) in FreeBSD 5.x does not properly check parameters of the node type when creating a device node, which makes hidden devices available to attackers, who can then bypass restrictions on a jailed process. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14334 - http://www.osvdb.org/18123 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21451 - http://secunia.com/advisories/16145 - http://securitytracker.com/id?1014536 - ftp://ftp.freebsd.org/pub/
ilities/21451 - http://secunia.com/advisories/16145 - http://securitytracker.com/id?1014536 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:17.devfs.asc
CVE ID: CVE-2005-2219 State: PUBLISHED Published: 2005-07-12T04:00:00Z Last Updated: 2024-09-16T20:52:34.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hosting Controller 6.1 Hotfix 2.1 allows remote authenticated users to perform unauthorized actions, such as modifying the credit limit, via a direct request to AccountActions.asp and modifying the CreditLimit parameter in an UpdateCreditLimit action. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014443
CVE ID: CVE-2005-2220 State: PUBLISHED Published: 2005-07-12T04:00:00 Last Updated: 2024-08-07T22:22:47.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dragonfly Commerce allows remote attackers to change a product price by modifying the x_DragonflyCartProductPrice hidden field to (1) dc_Categorieslist.asp, (2) dc_Categoriesview.asp, (3) dc_productslist.asp, and (4) dc_productslist_Clearance.asp. NOTE: the vendor has disputed this issue, saying that "Dragonfly Commerce does not allow for editing prices nor does it allow for viewing information about clients stored in the database except by the store owner and authorized staff as appointed in the store administration." However
stored in the database except by the store owner and authorized staff as appointed in the store administration." However, SecurityTracker claims that they have been able to confirm the problem Additional Analyst Notes: - CVE Program Container: References: - http://www.digitalparadox.org/viewadvisories.ah?view=46 - http://marc.info/?l=bugtraq&m=112121930328341&w=2 - http://securitytracker.com/id?1014451
CVE ID: CVE-2005-2221 State: PUBLISHED Published: 2005-07-12T04:00:00 Last Updated: 2024-08-07T22:22:47.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Dragonfly Commerce allows remote attackers to modify SQL statements and possibly execute arbitrary SQL commands via the (1) key parameter to dc_Categoriesview.asp, (2) dc_productslist_Clearance.asp, (3) PID parameter to ratings.asp, (4) dc_Productsview.asp, (5) start, (6) key_mp, (7) searchtype, or (8) psearch parameters to dc_forum_Postslist.asp. NOTE: the vendor has disputed this issue, saying that the error messages arise from invalid category and product numbers. Assuming that this
disputed this issue, saying that the error messages arise from invalid category and product numbers. Assuming that this is the case, the issue still satisfies the CVE definition of "exposure. Additional Analyst Notes: - CVE Program Container: References: - http://www.digitalparadox.org/viewadvisories.ah?view=46 - http://marc.info/?l=bugtraq&m=112121930328341&w=2
CVE ID: CVE-2005-2222 State: PUBLISHED Published: 2005-07-12T04:00:00Z Last Updated: 2024-09-17T03:23:41.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the HTTPMail service in MailEnable Professional before 1.6 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mailenable.com/professionalhistory.asp - http://securitytracker.com/id?1014427
CVE ID: CVE-2005-2223 State: PUBLISHED Published: 2005-07-12T04:00:00Z Last Updated: 2024-09-17T03:28:28.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the SMTP service in MailEnable Standard before 1.9 and Professional before 1.6 allows remote attackers to cause a denial of service (crash) during authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.mailenable.com/professionalhistory.asp - http://securitytracker.com/id?1014427 - http://www.mailenable.com/standardhistory.asp
CVE ID: CVE-2005-2224 State: PUBLISHED Published: 2005-07-12T04:00:00 Last Updated: 2024-08-07T22:22:47.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: aspnet_wp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a crafted SOAP message to an RPC/Encoded method. Additional Analyst Notes: - CVE Program Container: References: - http://www.spidynamics.com/spilabs/advisories/aspRCP.html - http://www.securityfocus.com/bid/14217 - http://secunia.com/advisories/16005
CVE ID: CVE-2005-2225 State: PUBLISHED Published: 2005-07-12T04:00:00 Last Updated: 2024-08-07T22:22:48.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is interpreted as a malicious file extension and causes users to be kicked from a group conversation. NOTE: it has been reported that Gaim is also affected, so this may be an issue in the protocol or MSN servers. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014444 - http://www.digitalparadox.org/viewadvisories.ah?view=45 - http://www.messenge
- http://securitytracker.com/id?1014444 - http://www.digitalparadox.org/viewadvisories.ah?view=45 - http://www.messenger-blog.com/?p=146
CVE ID: CVE-2005-2226 State: PUBLISHED Published: 2005-07-12T04:00:00Z Last Updated: 2024-09-17T03:37:36.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Outlook Express 6.0 leaks the default news server account when a user responds to a "watched" conversation thread, which could allow remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14225 - http://support.microsoft.com/default.aspx/kb/900930
CVE ID: CVE-2005-2227 State: PUBLISHED Published: 2005-07-12T04:00:00 Last Updated: 2024-08-07T22:22:48.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Softiacom wMailserver 1.0 stores passwords in plaintext in the Darsite\MAILSRV\Admin key, which allows local users to gain administrator privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14212 - http://securitytracker.com/id?1014450 - http://marc.info/?l=bugtraq&m=112120030308592&w=2
CVE ID: CVE-2005-2228 State: PUBLISHED Published: 2005-07-12T04:00:00Z Last Updated: 2024-09-17T03:07:35.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Wiz Forums 7.9 and 8.0 allows remote attackers to view message titles of a hidden forum. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14207
CVE ID: CVE-2005-2229 State: PUBLISHED Published: 2005-07-12T04:00:00 Last Updated: 2024-08-07T22:22:47.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blog Torrent 0.92 and earlier stores sensitive files under the web document root in the (1) data or (2) torrents directories with insufficient access control, which allows remote attackers to obtain sensitive information such as account names and password hashes, as demonstrated using data/newusers. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15983 - http://marc.info/?l=bugtraq&m=112110868021563&w=2 - http://securitytracker.com/id?1014449
CVE ID: CVE-2005-2230 State: PUBLISHED Published: 2005-07-12T04:00:00 Last Updated: 2024-08-07T22:22:48.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Electronic Mail Operator (elmo) 1.3.2-r1 and earlier creates the elmostats temporary file insecurely, which allows local users to overwrite arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15977 - http://www.zataz.net/adviso/elmo-06272005.txt - http://www.securityfocus.com/bid/14235
CVE ID: CVE-2005-2231 State: PUBLISHED Published: 2005-07-12T04:00:00 Last Updated: 2024-08-07T22:22:47.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16039 - http://www.debian.org/security/2005/dsa-761
CVE ID: CVE-2005-2232 State: PUBLISHED Published: 2005-07-12T04:00:00Z Last Updated: 2024-09-17T02:21:13.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in invscout in IBM AIX 5.1.0 through 5.3.0 might allow local users to execute arbitrary code via a long command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15636 - http://www.securityfocus.com/advisories/8816 - http://www.securityfocus.com/bid/13909 - http://www.caughq.org/advisories/CAU-2005-0002.txt - http://securitytracker.com/id?1014132
CVE ID: CVE-2005-2233 State: PUBLISHED Published: 2005-07-12T04:00:00Z Last Updated: 2024-09-17T03:18:24.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in multiple "p" commands in IBM AIX 5.1, 5.2 and 5.3 might allow local users to execute arbitrary code via long command line arguments to (1) penable or other hard-linked files including (2) pdisable, (3) pstart, (4) phold, (5) pdelay, or (6) pshare. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15636 - http://www.securityfocus.com/bid/13915 - http://www.security-focus.com/advisories/8684 - http://www.caughq.org/advisories/CAU-2005-0006.txt - http://securitytrac
http://www.security-focus.com/advisories/8684 - http://www.caughq.org/advisories/CAU-2005-0006.txt - http://securitytracker.com/id?1014132
CVE ID: CVE-2005-2234 State: PUBLISHED Published: 2005-07-12T04:00:00Z Last Updated: 2024-09-16T18:55:52.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the getlvname command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long command line arguments. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15636 - http://www.caughq.org/advisories/CAU-2005-0005.txt - http://www.securityfocus.com/bid/13914 - http://www.security-focus.com/advisories/8684 - http://securitytracker.com/id?1014132
CVE ID: CVE-2005-2235 State: PUBLISHED Published: 2005-07-12T04:00:00 Last Updated: 2024-08-07T22:22:48.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the diagTasksWebSM command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long command line arguments. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15636 - http://www.securityfocus.com/bid/13912 - http://securitytracker.com/id?1014132 - http://www.caughq.org/advisories/CAU-2005-0004.txt - http://www.security-focus.com/advisories/8819
CVE ID: CVE-2005-2236 State: PUBLISHED Published: 2005-07-12T04:00:00Z Last Updated: 2024-09-16T22:25:41.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via format strings in command line arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13911 - http://www.caughq.org/advisories/CAU-2005-0003.txt - http://securitytracker.com/id?1014132
CVE ID: CVE-2005-2237 State: PUBLISHED Published: 2005-07-12T04:00:00Z Last Updated: 2024-09-16T18:13:47.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the swcons command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via long command line arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13921 - http://www.caughq.org/advisories/CAU-2005-0007.txt - http://securitytracker.com/id?1014132
CVE ID: CVE-2005-2238 State: PUBLISHED Published: 2005-07-12T04:00:00Z Last Updated: 2024-09-17T00:41:51.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: ftpd in IBM AIX 5.1, 5.2 and 5.3 allows remote authenticated users to cause a denial of service (port exhaustion and memory consumption) by using all ephemeral ports. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014421
CVE ID: CVE-2005-2239 State: PUBLISHED Published: 2005-07-12T04:00:00Z Last Updated: 2024-09-16T22:41:05.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: oftpd 0.3.7 allows remote attackers to cause a denial of service via a USER command with a large number of null (\0) characters. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014413