Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-4883 State: PUBLISHED Published: 2006-09-19T21:00:00 Last Updated: 2024-08-07T19:32:21.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot BizDirectory allow remote attackers to inject arbitrary web script or HTML via (1) the stylesheet parameter in Feed.php or (2) the message parameter in status.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21911 - http://securityreason.com/securityalert/1611 - http://securitytracker.com/id?1016876 - http://www.vupen.com/english/advisories/2006/3691 - http://www.securityfocus.com/archive/1/446223/100/0/threaded -
876 - http://www.vupen.com/english/advisories/2006/3691 - http://www.securityfocus.com/archive/1/446223/100/0/threaded - http://www.securityfocus.com/bid/20081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29002
CVE ID: CVE-2006-4884 State: PUBLISHED Published: 2006-09-19T21:00:00Z Last Updated: 2024-09-17T04:15:16.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary web script or HTML via (1) the suser parameter in support/rightbar.php, (2) the ticket_id parameter in support/open_tickets.php, and (3) the cons_page_title parameter in index.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19963
CVE ID: CVE-2006-4885 State: PUBLISHED Published: 2006-09-19T21:00:00 Last Updated: 2024-08-07T19:32:21.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter in (1) footer.php and (2) header.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information. The bottom.php parameter is already covered by CVE-2006-4826. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28836 - http://www.securityfocus.com/bid/84177 - http://www.osvdb.org/28837
ontainer: References: - http://www.osvdb.org/28836 - http://www.securityfocus.com/bid/84177 - http://www.osvdb.org/28837 - http://www.vupen.com/english/advisories/2006/3629 - http://secunia.com/advisories/21920
CVE ID: CVE-2006-4886 State: PUBLISHED Published: 2006-09-19T21:00:00 Last Updated: 2024-08-07T19:32:22.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VirusScan On-Access Scan component in McAfee VirusScan Enterprise 7.1.0 and Scan Engine 4.4.00 allows local privileged users to bypass security restrictions and disable the On-Access Scan option by opening the program via the task bar and quickly clicking the Disable button, possibly due to an interface-related race condition. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1605 - http://www.securityfocus.com/archive/1/446220/100/0/threaded - https://exchange.xforce.
yreason.com/securityalert/1605 - http://www.securityfocus.com/archive/1/446220/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28971
CVE ID: CVE-2006-4887 State: PUBLISHED Published: 2006-09-19T21:00:00 Last Updated: 2024-08-07T19:32:22.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Remote Desktop (ARD) for Mac OS X 10.2.8 and later does not drop privileges on the remote machine while installing certain applications, which allows local users to bypass authentication and gain privileges by selecting the icon during installation. NOTE: it could be argued that the issue is not in Remote Desktop itself, but in applications that are installed while using it. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20092 - http://www.securityfocus.com/archive/1/446
CVE Program Container: References: - http://www.securityfocus.com/bid/20092 - http://www.securityfocus.com/archive/1/446371/100/0/threaded - http://www.securityfocus.com/archive/1/446751/100/0/threaded - http://www.securityfocus.com/archive/1/447043/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29060 - http://www.osvdb.org/32260
CVE ID: CVE-2006-4888 State: PUBLISHED Published: 2006-09-19T21:00:00Z Last Updated: 2024-09-16T23:15:40.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 and earlier allows remote attackers to cause a denial of service (application hang) via a CSS-formatted HTML INPUT element within a DIV element that has a larger size than the INPUT. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28614 - http://jonas.elunic.de/blog/index.php/2006/07/14/ie-freeze-bug/ - http://archives.neohapsis.com/archives/bugtraq/2006-07/0199.html
CVE ID: CVE-2006-4889 State: PUBLISHED Published: 2006-09-19T21:00:00 Last Updated: 2024-08-07T19:32:22.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dir_path parameter in (1) index.php, (2) includes/functions.gb.php, (3) includes/functions.admin.php, (4) includes/admin.inc.php, (5) help.php, (6) smile.php, (7) entry.php; (8) adminhelp0.php, (9) adminhelp1.php, (10) adminhelp2.php, and (11) adminhelp3.php in (a) help/en and (b) help/de directories; and the (12) preview.
elp1.php, (10) adminhelp2.php, and (11) adminhelp3.php in (a) help/en and (b) help/de directories; and the (12) preview.php, (13) log.php, (14) index.php, (15) config.php, and (16) admin.php in the (c) admin directory, a different set of vectors than CVE-2006-4788. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/32201 - http://www.osvdb.org/32218 - http://www.osvdb.org/32205 - http://www.osvdb.org/32217 - http://www.osvdb.org/32211 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28888 - http://www.osvdb.org/32214 - http://www.osvdb.org/32206 - http://www.securityfocus.com/archive/1/446086/100/0/threaded - http://www.telekorn.com/forum/showthread.p
db.org/32206 - http://www.securityfocus.com/archive/1/446086/100/0/threaded - http://www.telekorn.com/forum/showthread.php?t=1427 - http://www.osvdb.org/32215 - http://www.osvdb.org/32200 - http://www.osvdb.org/32204 - http://www.osvdb.org/32208 - http://www.osvdb.org/32203 - http://www.osvdb.org/32207 - http://www.osvdb.org/32199 - http://www.osvdb.org/32202 - http://www.osvdb.org/32210 - http://www.osvdb.org/32212 - http://www.securityfocus.com/bid/19977 - http://www.osvdb.org/32213 - http://www.osvdb.org/32209 - http://securityreason.com/securityalert/1619 - http://www.osvdb.org/32216
CVE ID: CVE-2006-4890 State: PUBLISHED Published: 2006-09-19T22:00:00 Last Updated: 2024-08-07T19:32:22.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in UNAK-CMS 1.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the dirroot parameter to (1) fckeditor/editor/filemanager/browser/default/connectors/php/connector.php or (2) fckeditor/editor/dialog/fck_link.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21957 - https://www.exploit-db.com/exploits/2380 - http://www.unak.net/forum/viewtopic.php?id=165 - http://www.securityfocus.com/bid/20070 - htt
oit-db.com/exploits/2380 - http://www.unak.net/forum/viewtopic.php?id=165 - http://www.securityfocus.com/bid/20070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28986 - http://www.vupen.com/english/advisories/2006/3657
CVE ID: CVE-2006-4891 State: PUBLISHED Published: 2006-09-19T22:00:00 Last Updated: 2024-08-07T19:32:21.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ArticlesTableview.asp in Techno Dreams Articles & Papers Package 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the key parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21976 - http://www.vupen.com/english/advisories/2006/3682 - http://www.securityfocus.com/archive/1/446312/100/0/threaded - http://securityreason.com/securityalert/1613 - https://www.exploit-db.com/exploits/2386 - http://www.securityfocus.com/bi
ttp://securityreason.com/securityalert/1613 - https://www.exploit-db.com/exploits/2386 - http://www.securityfocus.com/bid/20073 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28978
CVE ID: CVE-2006-4892 State: PUBLISHED Published: 2006-09-19T22:00:00 Last Updated: 2024-08-07T19:32:21.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in faqview.asp in Techno Dreams FAQ Manager Package 1.0 allows remote attackers to execute arbitrary SQL commands via the key parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20074 - http://www.securityfocus.com/archive/1/446259/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28976 - http://securityreason.com/securityalert/1615 - https://www.exploit-db.com/exploits/2385 - http://www.vupen.com/english/advisories/2006/36
ason.com/securityalert/1615 - https://www.exploit-db.com/exploits/2385 - http://www.vupen.com/english/advisories/2006/3681 - http://secunia.com/advisories/21977
CVE ID: CVE-2006-4893 State: PUBLISHED Published: 2006-09-19T22:00:00 Last Updated: 2024-08-07T19:32:22.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in bb_usage_stats/includes/bb_usage_stats.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter, a different vector than CVE-2006-4780. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3654 - http://nyubicrew.org/adv/Noge_adv_02.txt - http://secunia.com/advisories/21970 - http://www.securityfocus.com/archive/1/446108/100/0/threaded - http://www.osvdb.or
http://secunia.com/advisories/21970 - http://www.securityfocus.com/archive/1/446108/100/0/threaded - http://www.osvdb.org/28918 - http://www.securityfocus.com/archive/1/452469/100/200/threaded - http://www.securityfocus.com/bid/20046 - http://securityreason.com/securityalert/1617
CVE ID: CVE-2006-4894 State: PUBLISHED Published: 2006-09-19T22:00:00 Last Updated: 2024-08-07T19:32:22.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in forms/lostpassword.php in iDevSpot NixieAffiliate 1.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22063 - http://www.securityfocus.com/bid/20084 - http://www.securityfocus.com/archive/1/446306/100/0/threaded - http://securityreason.com/securityalert/1616
CVE ID: CVE-2006-4895 State: PUBLISHED Published: 2006-09-19T22:00:00 Last Updated: 2024-08-07T19:32:22.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: IDevSpot NexieAffiliate 1.9 and earlier allows remote attackers to delete arbitrary affiliates via a modified id parameter to delete.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22063 - http://www.securityfocus.com/archive/1/446306/100/0/threaded - http://www.securityfocus.com/bid/20086 - http://securityreason.com/securityalert/1616
CVE ID: CVE-2006-4896 State: REJECTED Published: 2006-09-19T22:00:00 Last Updated: 2006-09-25T09:00:00 Description: No description available.
CVE ID: CVE-2006-4897 State: PUBLISHED Published: 2006-09-19T22:00:00 Last Updated: 2024-08-07T19:32:22.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMtextS 1.0 and earlier stores users_logins/admin.txt under the web document root with insufficient access control, which allows remote attackers to obtain the administrator password. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2388 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28999 - http://secunia.com/advisories/21988 - http://www.vupen.com/english/advisories/2006/3690
CVE ID: CVE-2006-4898 State: PUBLISHED Published: 2006-09-19T22:00:00 Last Updated: 2024-08-07T19:32:22.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/phpxd/phpXD.php in guanxiCRM 0.9.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the appconf[rootpath] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20071 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28994 - https://www.exploit-db.com/exploits/2381
CVE ID: CVE-2006-4899 State: PUBLISHED Published: 2006-09-22T22:00:00 Last Updated: 2024-08-07T19:32:22.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when running on Windows, allows remote attackers to obtain the web server path via a "'" (single quote) in the PIProfile function, which leaks the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/29102 - http://www3.ca.com/securityadvisor/blogs/posting.
tes.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/29102 - http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9 - http://www.osvdb.org/29009 - http://securitytracker.com/id?1016910 - http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34616 - http://secunia.com/advisories/22023 - http://www.securityfocus.com/bid/20139 - http://www.securityfocus.com/archive/1/446716/100/0/threaded - http://www.securityfocus.com/archive/1/446611/100/0/threaded - http://www.vupen.com/english/advisories/2006/3738
CVE ID: CVE-2006-4900 State: PUBLISHED Published: 2006-09-22T22:00:00 Last Updated: 2024-08-07T19:32:22.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, allows remote authenticated users to read and delete arbitrary files via ".." sequences in the eSCCAdHocHtmlFile parameter to eSMPAuditServlet, which is not properly handled by the getadhochtml function. Additional Analyst Notes: - CVE Program Container: References: - http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt - http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=9
adsl2dvp/advisories/200608-computerassociates.txt - http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9 - http://securitytracker.com/id?1016910 - http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34617 - http://secunia.com/advisories/22023 - http://www.osvdb.org/29010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29104 - http://www.securityfocus.com/bid/20139 - http://www.securityfocus.com/archive/1/446716/100/0/threaded - http://www.securityfocus.com/archive/1/446611/100/0/threaded - http://www.vupen.com/english/advisories/2006/3738
CVE ID: CVE-2006-4901 State: PUBLISHED Published: 2006-09-22T22:00:00 Last Updated: 2024-08-07T19:32:22.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows remote attackers to spoof alerts and conduct replay attacks by invoking eTSAPISend.exe with the desired arguments. Additional Analyst Notes: - CVE Program Container: References: - http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/29107 - http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9 - http://sec
ulnerabilities/29107 - http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9 - http://securitytracker.com/id?1016910 - http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34618 - http://secunia.com/advisories/22023 - http://www.securityfocus.com/bid/20139 - http://www.securityfocus.com/archive/1/446716/100/0/threaded - http://secunia.com/advisories/22073 - http://securitytracker.com/id?1016909 - http://www.securityfocus.com/archive/1/446611/100/0/threaded - http://www.vupen.com/english/advisories/2006/3738 - http://www.osvdb.org/29011
CVE ID: CVE-2006-4902 State: PUBLISHED Published: 2006-12-14T20:00:00 Last Updated: 2024-08-07T19:32:22.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 before 6.0_MP4 does not properly check for chained commands, which allows remote attackers to execute arbitrary commands by appending malicious commands to valid commands. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23368 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27638 - http://securitytracker.com/id?1017379 - http://www.kb.cert.org/vuls/id/252936 - h
e.ibmcloud.com/vulnerabilities/27638 - http://securitytracker.com/id?1017379 - http://www.kb.cert.org/vuls/id/252936 - http://www.symantec.com/avcenter/security/Content/2006.12.13a.html - http://www.iss.net/threats/247.html - http://www.securityfocus.com/bid/21565 - http://www.vupen.com/english/advisories/2006/4999
CVE ID: CVE-2006-4904 State: PUBLISHED Published: 2006-09-21T00:00:00 Last Updated: 2024-08-07T19:32:22.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier allows remote attackers to overwrite arbitrary program variables and execute arbitrary PHP code, as demonstrated by PHP remote file inclusion via the xcart_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22005 - http://www.gulftech.org/?node=research&article_id=00113-09182006& - http://www.securityfocus.com/bid/20108 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2900
_id=00113-09182006& - http://www.securityfocus.com/bid/20108 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29005 - http://www.vupen.com/english/advisories/2006/3692
CVE ID: CVE-2006-4905 State: PUBLISHED Published: 2006-09-21T00:00:00 Last Updated: 2024-08-07T19:32:21.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Artmedic Links 5.0 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter, which is processed by the readfile function. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016880 - http://securityreason.com/securityalert/1600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29013 - http://www.securityfocus.com/archive/1/446329/100/0/threaded - http://kurdishsecurity.blogspot.com/2006/09/kurdish
013 - http://www.securityfocus.com/archive/1/446329/100/0/threaded - http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-27-artmedic-links.html
CVE ID: CVE-2006-4906 State: PUBLISHED Published: 2006-09-21T00:00:00 Last Updated: 2024-08-07T19:32:22.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules/calendar/week.php in More.groupware 0.74 allows remote attackers to execute arbitrary SQL commands via the new_calendarid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29027 - http://www.securityfocus.com/bid/20100 - http://secunia.com/advisories/22007 - http://www.vupen.com/english/advisories/2006/3718 - https://www.exploit-db.com/exploits/2394
CVE ID: CVE-2006-4907 State: PUBLISHED Published: 2006-09-21T00:00:00 Last Updated: 2024-08-07T19:32:22.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: OSU 3.11alpha and 3.10a allows remote attackers to obtain sensitive information via a URL to a non-existent file, which displays the web root path in the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/446372/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29031 - http://secunia.com/advisories/22016 - http://securityreason.com/securityalert/1602
CVE ID: CVE-2006-4908 State: PUBLISHED Published: 2006-09-21T00:00:00 Last Updated: 2024-08-07T19:32:22.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: OSU 3.11alpha and 3.10a allows remote attackers to obtain sensitive information via a URL containing an * (asterisk) wildcard, which displays all matching file and directory information. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1622 - http://www.securityfocus.com/archive/1/446372/100/0/threaded - http://secunia.com/advisories/22016 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29032
CVE ID: CVE-2006-4909 State: PUBLISHED Published: 2006-09-21T00:00:00 Last Updated: 2024-08-07T19:32:22.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Guard DDoS Mitigation Appliance before 5.1(6), when anti-spoofing is enabled, allows remote attackers to inject arbitrary web script or HTML via certain character sequences in a URL that are not properly handled when the appliance sends a meta-refresh. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016890 - http://www.osvdb.org/29035 - http://www.cisco.com/warp/public/707/cisco-sa-20060920-guardxss.shtml - http://secunia.com/advi
://www.osvdb.org/29035 - http://www.cisco.com/warp/public/707/cisco-sa-20060920-guardxss.shtml - http://secunia.com/advisories/21962 - http://www.securityfocus.com/bid/20122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29057 - http://www.vupen.com/english/advisories/2006/3720
CVE ID: CVE-2006-4910 State: PUBLISHED Published: 2006-09-21T00:00:00 Last Updated: 2024-08-07T19:32:22.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web administration interface (mainApp) to Cisco IDS before 4.1(5c), and IPS 5.0 before 5.0(6p1) and 5.1 before 5.1(2) allows remote attackers to cause a denial of service (unresponsive device) via a crafted SSLv2 Client Hello packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20060920-ips.shtml - http://secunia.com/advisories/22046 - http://www.securityfocus.com/bid/20124 - http://securitytracker.com/id?1016891 - http://www.kb.cert.org/vuls/id/642076 - htt
://www.securityfocus.com/bid/20124 - http://securitytracker.com/id?1016891 - http://www.kb.cert.org/vuls/id/642076 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29056 - http://www.osvdb.org/29037 - http://www.vupen.com/english/advisories/2006/3721
CVE ID: CVE-2006-4911 State: PUBLISHED Published: 2006-09-21T00:00:00 Last Updated: 2024-08-07T19:32:22.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco IPS 5.0 before 5.0(6p2) and 5.1 before 5.1(2), when running in inline or promiscuous mode, allows remote attackers to bypass traffic inspection via a "crafted sequence of fragmented IP packets". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20127 - http://www.osvdb.org/29036 - http://www.cisco.com/warp/public/707/cisco-sa-20060920-ips.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/29058 - http://securitytracker.com/id?1016891 -