Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-2627 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:30:02.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer underflows in Kismet before 2005-08-R1 allow remote attackers to execute arbitrary code via (1) kernel headers in a pcap file or (2) data frame dissection, which leads to heap-based buffer overflows. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200508-10.xml - http://www.debian.org/security/2005/dsa-788 - http://www.novell.com/linux/security/advisories/2005_20_sr.html - http://secunia.com/advisories/16634 - http://secunia.com/advisories/16477 - ht
nux/security/advisories/2005_20_sr.html - http://secunia.com/advisories/16634 - http://secunia.com/advisories/16477 - http://www.vupen.com/english/advisories/2005/1422 - http://secunia.com/advisories/16447 - http://www.kismetwireless.net/CHANGELOG - http://www.kismetwireless.net/blog/?entry=/kismet/entry-1124158146.txt - http://www.securityfocus.com/bid/14430
CVE ID: CVE-2005-2628 State: PUBLISHED Published: 2005-11-05T11:00:00 Last Updated: 2024-08-07T22:30:01.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Macromedia Flash 6 and 7 (Flash.ocx) allows remote attackers to execute arbitrary code via a SWF file with a modified frame type identifier that is used as an out-of-bounds array index to a function pointer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17951 - http://secunia.com/advisories/17430 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22959 - http://www.vupen.com/english/advisories/2006/1779 - http://www.us-cert.gov/cas/techalerts/TA06-132A.html - http://secun
http://www.vupen.com/english/advisories/2006/1779 - http://www.us-cert.gov/cas/techalerts/TA06-132A.html - http://secunia.com/advisories/17626/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1557 - http://www.us-cert.gov/cas/techalerts/TA06-129A.html - http://www.vupen.com/english/advisories/2005/2317 - http://www.gentoo.org/security/en/glsa/glsa-200511-21.xml - http://www.kb.cert.org/vuls/id/146284 - http://www.securityfocus.com/archive/1/415789/30/0/threaded - http://securitytracker.com/id?1015156 - http://www.redhat.com/support/errata/RHSA-2005-835.html - http://secunia.com/advisories/20045 - http://lists.apple.com/archives/security-announce/2006
errata/RHSA-2005-835.html - http://secunia.com/advisories/20045 - http://lists.apple.com/archives/security-announce/2006/May/msg00003.html - http://www.securityfocus.com/bid/15332 - http://www.osvdb.org/18825 - http://secunia.com/advisories/17481 - http://www.macromedia.com/devnet/security/security_zone/mpsb05-07.html - http://secunia.com/advisories/17738 - http://www.vupen.com/english/advisories/2006/1744 - http://secunia.com/advisories/20077 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-020 - http://www.novell.com/linux/security/advisories/2005_27_sr.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1987 - http:/
s/2005_27_sr.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1987 - http://secunia.com/advisories/17437/
CVE ID: CVE-2005-2629 State: PUBLISHED Published: 2005-11-18T23:00:00 Last Updated: 2024-08-07T22:30:01.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large value in the length field of the first data packet, which leads to a stack-based buffer overflow, a different vulnerability than CVE-2004-1481. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/169 - http://securitytracker.com/id?1015186 - http://www.eeye.com/html/research/advisorie
curityreason.com/securityalert/169 - http://securitytracker.com/id?1015186 - http://www.eeye.com/html/research/advisories/AD20051110a.html - http://securitytracker.com/id?1015184 - http://secunia.com/advisories/17559 - http://marc.info/?l=bugtraq&m=113166476423021&w=2 - http://secunia.com/advisories/17514/ - http://www.securityfocus.com/bid/15381/ - http://service.real.com/help/faq/security/051110_player/EN/ - http://www.debian.org/security/2005/dsa-915 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9550 - http://secunia.com/advisories/17860 - http://securitytracker.com/id?1015185 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23024
CVE ID: CVE-2005-2630 State: PUBLISHED Published: 2005-11-18T23:00:00 Last Updated: 2024-08-07T22:30:01.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in DUNZIP32.DLL for RealPlayer 8, 10, and 10.5 and RealOne Player 1 and 2 allows remote attackers to execute arbitrary code via a crafted RealPlayer Skin (RJS) file, a different vulnerability than CVE-2004-1094. Additional Analyst Notes: - CVE Program Container: References: - http://www.eeye.com/html/research/advisories/AD20051110b.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/23025 - http://securitytracker.com/id?1015184 - http://marc.info/?l=bugtraq&m=113166519206033&w=2 - http://secu
bilities/23025 - http://securitytracker.com/id?1015184 - http://marc.info/?l=bugtraq&m=113166519206033&w=2 - http://securityreason.com/securityalert/170 - http://www.securityfocus.com/bid/15382 - http://secunia.com/advisories/17514/ - http://service.real.com/help/faq/security/051110_player/EN/ - http://secunia.com/advisories/17860 - http://www.osvdb.org/18827 - http://securitytracker.com/id?1015185
CVE ID: CVE-2005-2631 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-07T22:30:01.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16472/ - http://www.cisco.com/warp/public/707/cisco-sa-20050817-cca.shtml - http://www.securityfocus.com/bid/14585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21884
CVE ID: CVE-2005-2632 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-07T22:45:00.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login_admin_mediabox404.php in mediabox404 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the User field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14593 - http://secunia.com/advisories/16493/ - http://marc.info/?l=bugtraq&m=112431321513646&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21905
CVE ID: CVE-2005-2633 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-07T22:45:00.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP file inclusion vulnerabilities in (1) admin_o.php, (2) board_o.php, (3) dev_o.php, (4) file_o.php or (5) tech_o.php in PHPTB Topic Board 2.0 and earlier allow remote attackers to execute arbitrary PHP code via the absolutepath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112431407619802&w=2 - http://secunia.com/advisories/16492 - http://www.securityfocus.com/bid/14592
CVE ID: CVE-2005-2634 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-07T22:45:00.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Log-SCR function in the "Log to Screen" feature in WinFtp Server 1.6.8 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long request. Additional Analyst Notes: - CVE Program Container: References: - http://www.autistici.org/fdonato/advisory/WinFtpServer1.6.8-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/21873 - http://www.securityfocus.com/bid/14581 - http://secunia.com/advisories/16461/ - http://marc.info/?l=bugtraq&m=112
1873 - http://www.securityfocus.com/bid/14581 - http://secunia.com/advisories/16461/ - http://marc.info/?l=bugtraq&m=112431455512374&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/036173.html
CVE ID: CVE-2005-2635 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-07T22:45:00.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in phpAdsNew and phpPgAds before 2.0.6 allow remote attackers to include arbitrary files via a .. (dot dot) in the (1) layerstyle parameter to adlayer.php or (2) language parameter to js-form.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16469/ - http://marc.info/?l=bugtraq&m=112431497300344&w=2 - http://www.securityreason.com/adv/phpAdsnew.SR.16.asc - http://www.securityfocus.com/bid/14584 - https://exchange.xforce.ibmcloud.com/
urityreason.com/adv/phpAdsnew.SR.16.asc - http://www.securityfocus.com/bid/14584 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21880
CVE ID: CVE-2005-2636 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-07T22:45:00.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lib-view-direct.inc.php in phpAdsNew and phpPgAds before 2.0.6 allows remote attackers to execute arbitrary SQL commands via the clientid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16469/ - http://marc.info/?l=bugtraq&m=112431497300344&w=2 - http://www.securityfocus.com/bid/14588 - http://www.securityfocus.com/bid/14583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21879
CVE ID: CVE-2005-2637 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-07T22:45:00.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) Match or (2) CatID parameter to SearchResults.php, or (3) the password to AccessControl.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16490/ - http://securitytracker.com/id?1014726 - http://marc.info/?l=bugtraq&m=112439254700016&w=2 - http://www.securityfocus.com/bid/14589
CVE ID: CVE-2005-2638 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-07T22:45:01.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) NewsMode parameter to NewsCategoryForm.php, or the (2) Match or (3) NewsMode parameter to SearchResults.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16490/ - http://securitytracker.com/id?1014726 - http://marc.info/?l=bugtraq&m=112439254700016&w=2 - http://www.securityfocus.com/bid/14590
CVE ID: CVE-2005-2639 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-07T22:45:00.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Chris Moneymaker's World Poker Championship 1.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long nickname. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16478/ - http://www.osvdb.org/18844 - http://aluigi.altervista.org/adv/chmpokbof-adv.txt - http://marc.info/?l=bugtraq&m=112431235221271&w=2 - http://securitytracker.com/id?1014738 - http://www.securityfocus.com/bid/14587
CVE ID: CVE-2005-2640 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-07T22:45:01.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14595 - http://marc.info/?l=bugtraq&m=112438068426034&w=2 - http://www.nta-monitor.com/news
://www.securityfocus.com/bid/14595 - http://marc.info/?l=bugtraq&m=112438068426034&w=2 - http://www.nta-monitor.com/news/vpn-flaws/juniper/netscreen/index.htm - http://securitytracker.com/id?1014728 - http://secunia.com/advisories/16474/
CVE ID: CVE-2005-2641 State: PUBLISHED Published: 2005-08-21T04:00:00 Last Updated: 2024-08-07T22:45:01.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in pam_ldap before 180 does not properly handle a new password policy control, which could allow attackers to gain privileges. NOTE: CVE-2005-2497 had also been assigned to this issue, but CVE-2005-2641 is the correct candidate. Additional Analyst Notes: - CVE Program Container: References: - https://issues.rpath.com/browse/RPL-680 - http://www.securityfocus.com/archive/1/447859/100/200/threaded - https://www.redhat.com/archives/fedora-test-list/2005-August/msg00170.html - http://secunia.com/advisories/17
threaded - https://www.redhat.com/archives/fedora-test-list/2005-August/msg00170.html - http://secunia.com/advisories/17270 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:190 - http://www.kb.cert.org/vuls/id/778916 - http://www.securityfocus.com/bid/14649 - http://www.redhat.com/support/errata/RHSA-2005-767.html - http://secunia.com/advisories/17233 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10370
CVE ID: CVE-2005-2642 State: PUBLISHED Published: 2005-08-21T04:00:00 Last Updated: 2024-08-07T22:45:01.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the mutt_decode_xbit function in Handler.c for Mutt 1.5.10 allows remote attackers to execute arbitrary code, possibly due to interactions with libiconv or gettext. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14596 - http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-08/0600.html - http://online.securityfocus.com/archive/1/408493 - http://comments.gmane.org/gmane.mail.mutt.devel/8379 - http://online.securityfocus.com/archive/1/408501 - http://www
3 - http://comments.gmane.org/gmane.mail.mutt.devel/8379 - http://online.securityfocus.com/archive/1/408501 - http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-08/0594.html - http://secunia.com/advisories/16485 - http://securitytracker.com/id?1014729
CVE ID: CVE-2005-2643 State: PUBLISHED Published: 2005-08-21T04:00:00 Last Updated: 2024-08-07T22:45:01.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor 0.1.0.13 and earlier, and experimental versions 0.1.1.4-alpha and earlier, does not reject certain weak keys when using ephemeral Diffie-Hellman (DH) handshakes, which allows malicious Tor servers to obtain the keys that a client uses for other systems in the circuit. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16424 - http://archives.seul.org/or/announce/Aug-2005/msg00002.html - http://marc.info/?l=bugtraq&m=112448002732443&w=2 - http://securitytracker.com/id?1014739
CVE ID: CVE-2005-2644 State: PUBLISHED Published: 2005-08-21T04:00:00Z Last Updated: 2024-09-16T23:00:25.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in JaguarEditControl.dll in Isemarket JaguarControl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Jtext field. Additional Analyst Notes: - CVE Program Container: References: - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-08/0191.html - http://www.securityfocus.com/bid/14558
CVE ID: CVE-2005-2645 State: PUBLISHED Published: 2005-08-21T04:00:00 Last Updated: 2024-08-07T22:45:01.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014720 - http://www.xerox.com/downloads/usa/en/c/cert_XRX05_008.pdf - http://www.xerox.com/downloads/usa/en/c/cert_XRX05_009.pdf - http://secunia.com/advisories/16467
CVE ID: CVE-2005-2646 State: PUBLISHED Published: 2005-08-21T04:00:00 Last Updated: 2024-08-07T22:45:01.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to cause a denial of service or read files via unknown vectors involving crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014720 - http://www.xerox.com/downloads/usa/en/c/cert_XRX05_008.pdf - http://www.xerox.com/downloads/usa/en/c/cert_XRX05_009.pdf - http://secunia.com/advisories/16467
CVE ID: CVE-2005-2647 State: PUBLISHED Published: 2005-08-21T04:00:00 Last Updated: 2024-08-07T22:45:01.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to inject arbitrary web script or HTML and modify web pages via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014720 - http://www.xerox.com/downloads/usa/en/c/cert_XRX05_008.pdf - http://www.xerox.com/downloads/usa/en/c/cert_XRX05_009.pdf - http://secunia.com/advisories/16467
CVE ID: CVE-2005-2648 State: PUBLISHED Published: 2005-08-21T04:00:00 Last Updated: 2024-08-07T22:45:01.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in W-Agora 4.2.0 and earlier allows remote attackers to read arbitrary files via the site parameter. Additional Analyst Notes: - CVE Program Container: References: - http://h4cky0u.org/viewtopic.php?t=2097 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21906 - http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0599.html - http://secunia.com/advisories/16497 - http://www.securityfocus.com/archive/1/408522 - http://www.securityfocus.com/bid/14597 - http://security
isories/16497 - http://www.securityfocus.com/archive/1/408522 - http://www.securityfocus.com/bid/14597 - http://securitytracker.com/id?1014737
CVE ID: CVE-2005-2649 State: PUBLISHED Published: 2005-08-21T04:00:00 Last Updated: 2024-08-07T22:45:01.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ATutor 1.5.1 allows remote attackers to inject arbitrary web script or HTML via (1) course parameter in login.php or (2) words parameter in search.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/408521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21910 - http://www.securityfocus.com/bid/14598 - http://secunia.com/advisories/16496
CVE ID: CVE-2005-2650 State: PUBLISHED Published: 2005-08-21T04:00:00 Last Updated: 2024-08-07T22:45:01.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in sign.asp in Emefa Guestbook 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) location, and (3) email parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16489 - http://systemsecure.org/ssforum/viewtopic.php?t=91 - http://www.securityfocus.com/bid/14599 - http://packetstormsecurity.org/0508-advisories/emefaGuest.txt - http://www.emefa.myserver.org/comp/guestview.php
CVE ID: CVE-2005-2651 State: PUBLISHED Published: 2005-08-21T04:00:00 Last Updated: 2024-08-07T22:45:02.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: gorum/prod.php in Zorum 3.5 allows remote attackers to execute arbitrary code via shell metacharacters in the argv parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/21912 - http://www.securityfocus.com/bid/14601 - http://rgod.altervista.org/zorum.html - http://securitytracker.com/id?1014725 - http://marc.info/?l=bugtraq&m=112438781604862&w=2 - http://secunia.com/advisories/16504/
CVE ID: CVE-2005-2652 State: PUBLISHED Published: 2005-08-21T04:00:00 Last Updated: 2024-08-07T22:45:01.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zorum 3.5 allows remote attackers to obtain the full installation path via direct requests to (1) gorum/notification.php, (2) user.php, (3) attach.php, (4) blacklist.php, (5) zorum/forum.php, (6) globalstat.php, (7) gorum/trace.php, (8) gorum/badwords.php, or (9) gorum/flood.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/21914 - http://rgod.altervista.org/zorum.html - http://securitytracker.com/id?1014725 - http://marc.info/?l=bugtraq&m=112438781604862
//rgod.altervista.org/zorum.html - http://securitytracker.com/id?1014725 - http://marc.info/?l=bugtraq&m=112438781604862&w=2
CVE ID: CVE-2005-2653 State: PUBLISHED Published: 2005-08-21T04:00:00 Last Updated: 2024-08-07T22:45:01.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in BBCaffe 2.0 allows remote attackers to inject arbitrary web script or HTML via e-mail data in a message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14602 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21913 - http://securitytracker.com/id?1014733 - http://rgod.altervista.org/bbcaffe.html - http://secunia.com/advisories/16503 - http://www.securityfocus.com/archive/1/408503
CVE ID: CVE-2005-2654 State: PUBLISHED Published: 2005-08-30T04:00:00 Last Updated: 2024-08-07T22:45:01.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disable_anon_bind is set, via an HTTP request to login.php with the anonymous_bind parameter set. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-790 - http://www.gentoo.org/security/en/glsa/glsa-200509-04.xml - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=322423
CVE ID: CVE-2005-2655 State: PUBLISHED Published: 2005-08-30T04:00:00Z Last Updated: 2024-09-17T00:56:09.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-791
CVE ID: CVE-2005-2656 State: PUBLISHED Published: 2005-09-06T04:00:00Z Last Updated: 2024-09-17T02:56:39.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, which allows local users to cause a denial of service (disk consumption) and possibly perform other unauthorized activities. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14722 - http://www.debian.org/security/2005/dsa-794