Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-2532 State: PUBLISHED Published: 2005-08-24T04:00:00 Last Updated: 2024-08-07T22:30:01.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenVPN before 2.0.1 does not properly flush the OpenSSL error queue when a packet can not be decrypted by the server, which allows remote authenticated attackers to cause a denial of service (client disconnection) via a large number of packets that can not be decrypted. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17103 - http://openvpn.net/changelog.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:145 - http://www.debian.org/security/2005/dsa-851 - http://ww
ttp://www.mandriva.com/security/advisories?name=MDKSA-2005:145 - http://www.debian.org/security/2005/dsa-851 - http://www.securityfocus.com/bid/14607 - http://secunia.com/advisories/16463
CVE ID: CVE-2005-2533 State: PUBLISHED Published: 2005-08-24T04:00:00 Last Updated: 2024-08-07T22:30:01.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenVPN before 2.0.1, when running in "dev tap" Ethernet bridging mode, allows remote authenticated clients to cause a denial of service (memory exhaustion) via a flood of packets with a large number of spoofed MAC addresses. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17103 - http://openvpn.net/changelog.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:145 - http://www.debian.org/security/2005/dsa-851 - http://secunia.com/advisories/16463
CVE ID: CVE-2005-2534 State: PUBLISHED Published: 2005-08-24T04:00:00 Last Updated: 2024-08-07T22:30:01.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in OpenVPN before 2.0.1, when --duplicate-cn is not enabled, allows remote attackers to cause a denial of service (server crash) via simultaneous TCP connections from multiple clients that use the same client certificate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17103 - http://openvpn.net/changelog.html - http://www.securityfocus.com/bid/14610 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:145 - http://www.debian.org/security/2005/dsa-851 - htt
10 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:145 - http://www.debian.org/security/2005/dsa-851 - http://secunia.com/advisories/16463
CVE ID: CVE-2005-2535 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:30:01.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2005-02/0123.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19320 - http://www.kb.cert.org/vuls/id/966880 - http://archives.neohapsis.com/archives/bugtraq/2005-02/0201.html - http:/
9320 - http://www.kb.cert.org/vuls/id/966880 - http://archives.neohapsis.com/archives/bugtraq/2005-02/0201.html - http://www.securityfocus.com/bid/12536 - http://archives.neohapsis.com/archives/bugtraq/2005-02/0141.html - http://www.osvdb.org/13814 - http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?ID=32478 - http://secunia.com/advisories/14293
CVE ID: CVE-2005-2536 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:30:01.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: pstotext before 1.8g does not properly use the "-dSAFER" option when calling Ghostscript to extract plain text from PostScript and PDF files, which allows remote attackers to execute arbitrary commands via a malicious PostScript file. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200507-29.xml - http://secunia.com/advisories/16305 - http://www.debian.org/security/2005/dsa-792 - http://secunia.com/advisories/16624 - http://secunia.com/advisories/16183/ - https://exc
ian.org/security/2005/dsa-792 - http://secunia.com/advisories/16624 - http://secunia.com/advisories/16183/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/21498 - http://www.securityfocus.com/bid/14378
CVE ID: CVE-2005-2537 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:30:01.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to obtain sensitive information via a direct request to structure.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112327238030127&w=2 - http://www.rgod.altervista.org/flatnuke.html - http://secunia.com/advisories/16330 - http://www.osvdb.org/18549
CVE ID: CVE-2005-2538 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:30:01.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to obtain sensitive information via (1) a null byte or (2) an MS-DOS device name such as AUX, CON, PRN, COM1, or LPT1 in the mod parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112327238030127&w=2 - http://www.rgod.altervista.org/flatnuke.html - http://secunia.com/advisories/16330 - http://www.osvdb.org/18550
CVE ID: CVE-2005-2539 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:30:01.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in FlatNuke 2.5.5 and possibly earlier versions allow remote attackers to inject arbitrary web script or HTML via the (1) bodycolor, (2) backimage, (3) theme, or (4) logo parameter to structure.php, (5) admin, (6) admin_mail, or (7) back parameter to footer.php, or (8) the message body in a news post. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/18552 - http://marc.info/?l=bugtraq&m=112327238030127&w=2 - http://www.rgod.altervista.org/
nces: - http://www.osvdb.org/18552 - http://marc.info/?l=bugtraq&m=112327238030127&w=2 - http://www.rgod.altervista.org/flatnuke.html - http://secunia.com/advisories/16330 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21707 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21708 - http://www.securityfocus.com/bid/14483 - http://www.osvdb.org/18553 - http://www.osvdb.org/18551
CVE ID: CVE-2005-2540 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:30:01.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to execute arbitrary PHP commands via an ASCII char 13 (carriage return) in the signature field, which is injected into a PHP script without a preceding comment character, which can then be executed by a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112327238030127&w=2 - http://www.rgod.altervista.org/flatnuke.html - http://secunia.com/advisories/16330 - https://e
q&m=112327238030127&w=2 - http://www.rgod.altervista.org/flatnuke.html - http://secunia.com/advisories/16330 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21709 - http://www.osvdb.org/18554 - http://www.securityfocus.com/bid/14485
CVE ID: CVE-2005-2541 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:30:01.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112327628230258&w=2 - https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E
CVE ID: CVE-2005-2542 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:30:00.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invision Power Board (IPB) 1.0.3 allows remote attackers to inject arbitrary web script or HTML via an attachment, which is automatically downloaded and processed as HTML. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112327712614854&w=2 - http://secunia.com/advisories/16348 - http://www.securityfocus.com/bid/14492
CVE ID: CVE-2005-2543 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:30:01.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in wce.download.php in Comdev eCommerce 3.0 allows remote attackers to download arbitrary files via a .. (dot dot) in the download parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14479 - http://marc.info/?l=bugtraq&m=112327874920062&w=2
CVE ID: CVE-2005-2544 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:30:01.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in config.php in Comdev eCommerce 3.0 allows remote attackers to execute arbitrary PHP code via the path[docroot] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/18601 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21733 - http://www.securityfocus.com/bid/14478 - http://secunia.com/advisories/16346 - http://marc.info/?l=bugtraq&m=112327556202520&w=2
CVE ID: CVE-2005-2545 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:30:01.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHPOpenChat 3.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) content parameter to profile.php and profile_misc.php, (3) the profile fields in userpage.php, (4) subject or (5) body in mail.php, or (8) disinvited_chatter or (7) invited_chatter parameter to invite.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14484 - http://securitytracker.com/id?1014634 - http://www.osvdb.org
ner: References: - http://www.securityfocus.com/bid/14484 - http://securitytracker.com/id?1014634 - http://www.osvdb.org/18678 - http://www.osvdb.org/18674 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21761 - http://www.osvdb.org/18676 - http://secunia.com/advisories/16350 - http://marc.info/?l=bugtraq&m=112327181704137&w=2 - http://www.osvdb.org/18677 - http://www.osvdb.org/18675
CVE ID: CVE-2005-2546 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:30:01.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arab Portal 2.0 allows remote attackers to obtain sensitive information via a long (1) username or (2) password, which reveals the path in an error message when the undefined "errmsg" function is called. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112300301707175&w=2
CVE ID: CVE-2005-2547 State: PUBLISHED Published: 2005-08-12T04:00:00 Last Updated: 2024-08-07T22:30:01.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: security.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows remote attackers to execute arbitrary commands via shell metacharacters in the Bluetooth device name when invoking the PIN helper. Additional Analyst Notes: - CVE Program Container: References: - http://cvs.sourceforge.net/viewcvs.py/bluez/utils/hcid/security.c?r1=1.31&r2=1.34 - http://secunia.com/advisories/16476 - http://www.debian.org/security/2005/dsa-782 - https://bugs.gentoo.org/show_bug.cgi?id=101557 - http://www.gentoo.org/security/en/glsa/glsa-200508-09.xml - ht
sa-782 - https://bugs.gentoo.org/show_bug.cgi?id=101557 - http://www.gentoo.org/security/en/glsa/glsa-200508-09.xml - http://secunia.com/advisories/16453 - http://www.securityfocus.com/bid/14572 - http://sourceforge.net/mailarchive/forum.php?thread_id=7893206&forum_id=1881
CVE ID: CVE-2005-2548 State: PUBLISHED Published: 2005-08-12T04:00:00 Last Updated: 2024-08-07T22:30:01.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: vlan_dev.c in the VLAN code for Linux kernel 2.6.8 allows remote attackers to cause a denial of service (kernel oops from null dereference) via certain UDP packets that lead to a function call with the wrong argument, as demonstrated using snmpwalk on snmpd. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18056 - https://usn.ubuntu.com/169-1/ - http://www.securityfocus.com/bid/14611 - http://www.debian.org/security/2005/dsa-922 - http://secunia.com/advisories/17826 - http://www.ma
yfocus.com/bid/14611 - http://www.debian.org/security/2005/dsa-922 - http://secunia.com/advisories/17826 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=309308 - http://lists.osdl.org/pipermail/bridge/2004-September/000638.html
CVE ID: CVE-2005-2549 State: PUBLISHED Published: 2005-08-12T04:00:00 Last Updated: 2024-08-07T22:30:01.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) full vCard data, (2) contact data from remote LDAP servers, or (3) task list data from remote servers. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_54_evolution.html - http://www.securityfocus.com/bid/14532 - http://www.redhat.com/support/errata/RHSA-2005-267.html - http://secunia.c
ml - http://www.securityfocus.com/bid/14532 - http://www.redhat.com/support/errata/RHSA-2005-267.html - http://secunia.com/advisories/19380 - http://www.debian.org/security/2006/dsa-1016 - http://www.redhat.com/archives/fedora-announce-list/2005-August/msg00031.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:141 - http://secunia.com/advisories/16394 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9553 - http://www.sitic.se/eng/advisories_and_recommendations/sa05-001.html - http://www.securityfocus.com/archive/1/407789 - http://marc.info/?l=full-disclosure&m=112368237712032&w=2 - https://usn.ubuntu.com/166-1/
CVE ID: CVE-2005-2550 State: PUBLISHED Published: 2005-08-12T04:00:00 Last Updated: 2024-08-07T22:30:01.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the calendar entries such as task lists, which are not properly handled when the user selects the Calendars tab. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_54_evolution.html - http://www.securityfocus.com/bid/14532 - http://www.redhat.com/support/errata/RHSA-2005-267.html - http://secunia.com/a
http://www.securityfocus.com/bid/14532 - http://www.redhat.com/support/errata/RHSA-2005-267.html - http://secunia.com/advisories/19380 - http://www.debian.org/security/2006/dsa-1016 - http://www.redhat.com/archives/fedora-announce-list/2005-August/msg00031.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:141 - http://secunia.com/advisories/16394 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10880 - http://www.sitic.se/eng/advisories_and_recommendations/sa05-001.html - http://www.securityfocus.com/archive/1/407789 - http://marc.info/?l=full-disclosure&m=112368237712032&w=2 - https://usn.ubuntu.com/166-1/
CVE ID: CVE-2005-2551 State: PUBLISHED Published: 2005-08-12T04:00:00 Last Updated: 2024-08-07T22:30:01.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in dhost.exe in iMonitor for Novell eDirectory 8.7.3 on Windows allows attackers to cause a denial of service (crash) and obtain access to files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16393 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972038.htm - http://securitytracker.com/id?1014661 - http://www.securityfocus.com/bid/14548 - http://www.kb.cert.org/vuls/id/213165 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/
tyfocus.com/bid/14548 - http://www.kb.cert.org/vuls/id/213165 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098568.htm
CVE ID: CVE-2005-2552 State: PUBLISHED Published: 2005-08-12T04:00:00 Last Updated: 2024-08-07T22:30:01.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in HP ProLiant DL585 servers running Integrated Lights Out (ILO) firmware before 1.81 allows attackers to access server controls when the server is "powered down." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014658 - http://www.securityfocus.com/bid/14540 - http://secunia.com/advisories/16402 - http://marc.info/?l=bugtraq&m=112369495001738&w=2 - http://marc.info/?l=bugtraq&m=112369495001738&w=2
CVE ID: CVE-2005-2553 State: PUBLISHED Published: 2005-08-12T04:00:00 Last Updated: 2024-08-07T22:30:01.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: The find_target function in ptrace32.c in the Linux kernel 2.4.x before 2.4.29 does not properly handle a NULL return value from another function, which allows local users to cause a denial of service (kernel crash/oops) by running a 32-bit ltrace program with the -i option on a 64-bit executable program. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19038 - http://secunia.com/advisories/18977 - http://secunia.com/advisories/18059 - http://www.securityfocus.com/archive/1/428058/
tp://secunia.com/advisories/18977 - http://secunia.com/advisories/18059 - http://www.securityfocus.com/archive/1/428058/100/0/threaded - http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044 - http://lkml.org/lkml/2005/1/5/245 - http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html - http://www.debian.org/security/2005/dsa-921 - http://secunia.com/advisories/17002 - http://www.securityfocus.com/bid/14965 - http://www.redhat.com/support/errata/RHSA-2005-663.html - http://www.vupen.com/english/advisories/2005/1878 - http://linux.bkbits.net:8080/linux-2.4/cset%4041dd3455GwQPufrGvBJjcUOXQa3WXA - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mit
inux-2.4/cset%4041dd3455GwQPufrGvBJjcUOXQa3WXA - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9647
CVE ID: CVE-2005-2554 State: PUBLISHED Published: 2005-08-12T04:00:00 Last Updated: 2024-08-07T22:30:01.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server for Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3) uses insecure permissions for the "Common Framework\Db" folder, which allows local users to read arbitrary files by creating a subfolder in the EPO agent web root directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/1402 - http://lists.virus.org/full-disclosure-0508/msg00376.html - http://knowledgemap.nai.com/KanisaSupportSite/search.do?cmd=displayKC&docType=kc&externalId=KBkb4221
508/msg00376.html - http://knowledgemap.nai.com/KanisaSupportSite/search.do?cmd=displayKC&docType=kc&externalId=KBkb42216xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/21839 - http://www.securityfocus.com/bid/14549 - http://secunia.com/advisories/16410 - http://www.osvdb.org/18735 - http://reedarvin.thearvins.com/20050811-01.html
CVE ID: CVE-2005-2555 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-07T22:30:01.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.6.x does not properly restrict socket policy access to users with the CAP_NET_ADMIN capability, which could allow local users to conduct unauthorized activities via (1) ipv4/ip_sockglue.c and (2) ipv6/ipv6_sockglue.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_50_kernel.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10444 - https://usn.ubuntu.com/169-1/ - http://secunia.com/advisories/17073 -
h/definition/oval%3Aorg.mitre.oval%3Adef%3A10444 - https://usn.ubuntu.com/169-1/ - http://secunia.com/advisories/17073 - http://secunia.com/advisories/19369 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=6fc0b4a7a73a81e74d0004732df358f4f9975be2 - http://www.debian.org/security/2006/dsa-1018 - http://www.securityfocus.com/bid/14609 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:218 - http://www.redhat.com/support/errata/RHSA-2005-514.html - http://secunia.com/advisories/17002 - http://secunia.com/advisories/17826 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6fc0b4a7a73a81e74d0004732df358f4f9975b
tp://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6fc0b4a7a73a81e74d0004732df358f4f9975be2 - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2005-663.html - http://www.debian.org/security/2006/dsa-1017 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 - http://www.vupen.com/english/advisories/2005/1878 - http://secunia.com/advisories/19374
CVE ID: CVE-2005-2556 State: PUBLISHED Published: 2005-08-24T04:00:00 Last Updated: 2024-08-07T22:30:01.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: core/database_api.php in Mantis 0.19.0a1 through 1.0.0a3, with register_globals enabled, allows remote attackers to connect to internal databases by modifying the g_db_type variable and monitoring the speed of responses, as identified by bug#0005956. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-778 - http://secunia.com/advisories/16506 - http://www.securityfocus.com/bid/14604 - http://www.gentoo.org/security/en/glsa/glsa-200509-16.xml - http://marc.info/?l=bugtraq&m=1
ecurityfocus.com/bid/14604 - http://www.gentoo.org/security/en/glsa/glsa-200509-16.xml - http://marc.info/?l=bugtraq&m=112786017426276&w=2
CVE ID: CVE-2005-2557 State: PUBLISHED Published: 2005-09-28T04:00:00 Last Updated: 2024-08-07T22:30:01.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in view_all_set.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the dir parameter, as identified by bug#0005959, and a different vulnerability than CVE-2005-3090. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21958 - http://secunia.com/advisories/16506 - http://www.securityfocus.com/bid/14604 - http://www.gentoo.o
lnerabilities/21958 - http://secunia.com/advisories/16506 - http://www.securityfocus.com/bid/14604 - http://www.gentoo.org/security/en/glsa/glsa-200509-16.xml - http://www.mantisbt.org/changelog.php - http://marc.info/?l=bugtraq&m=112786017426276&w=2