Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-0326 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: pafiledb.php in PaFileDB 3.1 allows remote attackers to gain sensitive information via an invalid or missing action parameter, which reveals the path in an error message when it cannot include a login.php script. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19175 - http://marc.info/?l=bugtraq&m=110720365923818&w=2
CVE ID: CVE-2005-0327 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: pafiledb.php in Pafiledb 3.1 may allow remote attackers to execute arbitrary PHP code via a modified action parameter that is used in an include statement for login.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19176 - http://marc.info/?l=bugtraq&m=110720365923818&w=2
CVE ID: CVE-2005-0328 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel P310, P314, P324 and Netgear RT311, RT314 running the latest firmware, allows remote attackers on the WAN to obtain the IP address of the LAN side interface by pinging a valid LAN IP address, which generates an ARP reply from the WAN address side that maps the LAN IP address to the WAN's MAC address. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20609 - http://marc.info/?l=bugtraq&m=110720465527599&w=2
CVE ID: CVE-2005-0329 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ZipGenius 5.5 and earlier allows remote attackers to create and possibly modify arbitrary files via a ZIP file with a file whose name includes .. (dot dot) sequences. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14123 - http://www.securityfocus.com/bid/12419 - http://marc.info/?l=bugtraq&m=110736990230696&w=2 - http://securitytracker.com/id?1013542 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19203 - http://www.7a69ezine.org/node/v
itytracker.com/id?1013542 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19203 - http://www.7a69ezine.org/node/view/195
CVE ID: CVE-2005-0330 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Painkiller 1.35 and earlier, and possibly other versions before 1.61, allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a long cd-key hash. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110736915015707&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19205 - http://www.securityfocus.com/bid/12423 - http://secunia.com/advisories/14113/ - http://securitytracker.com/id?1013066 - http://aluigi.altervis
us.com/bid/12423 - http://secunia.com/advisories/14113/ - http://securitytracker.com/id?1013066 - http://aluigi.altervista.org/adv/painkkeybof-adv.txt
CVE ID: CVE-2005-0331 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:13:54.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP file to extract it, allows remote attackers to create arbitrary files via a ... (triple dot) in the filename of the ZIP file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12422 - http://marc.info/?l=bugtraq&m=110737609604210&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20585
CVE ID: CVE-2005-0332 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:13:53.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in DeskNow Mail and Collaboration Server 2.5.12 allows remote attackers to (1) upload and possibly execute files outside the directory via the AttachmentsKey parameter to attachment.do, as demonstrated using JSP pages, or (2) delete arbitrary files via the select_file parameter to file.do. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19206 - http://marc.info/?l=bugtraq&m=110737616324614&w=2 - http://securitytracker.com/id
e.ibmcloud.com/vulnerabilities/19206 - http://marc.info/?l=bugtraq&m=110737616324614&w=2 - http://securitytracker.com/id?1013060 - http://www.securityfocus.com/bid/12421 - http://www.security.org.sg/vuln/desknow2512.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19212 - http://secunia.com/advisories/14116 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19211
CVE ID: CVE-2005-0333 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:13:53.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: LANChat Pro Revival 1.666c allows remote attackers to cause a denial of service (application crash) via a malformed UDP packet. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19213 - http://www.autistici.org/fdonato/advisory/LANChatRevival1.666c-adv.txt - http://marc.info/?l=bugtraq&m=110746524021133&w=2 - http://www.securityfocus.com/bid/12439
CVE ID: CVE-2005-0334 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:13:54.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys PSUS4 running firmware 6032 allows remote attackers to cause a denial of service (device crash) via an HTTP POST request containing an unknown parameter without a value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19222 - http://marc.info/?l=bugtraq&m=110747234701646&w=2 - http://www.securityfocus.com/bid/12443 - http://secunia.com/advisories/14136
CVE ID: CVE-2005-0335 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:13:53.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12236 - http://securitytracker.com/id?1012838 - http://secunia.com/advisories/13820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18842 - http://marc.info/?l=bugtraq&m=110547214224714&w=2
CVE ID: CVE-2005-0336 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:13:53.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbitrary HTML or web script, as demonstrated using a URL containing .. sequences and HTML, which results in a directory browsing page that does not properly filter the HTML. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12236 - http://securitytracker.com/id?1012838 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18845 - http://secunia.com/advisories/13820
acker.com/id?1012838 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18845 - http://secunia.com/advisories/13820 - http://marc.info/?l=bugtraq&m=110547214224714&w=2
CVE ID: CVE-2005-0337 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:13:53.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-152.html - http://www.securityfocus.com/bid/12445 - http://marc.info/?l=bugtraq&m=110763358832637&w=2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=267837 - https://exchange.xfo
c.info/?l=bugtraq&m=110763358832637&w=2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=267837 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19218 - http://secunia.com/advisories/14137/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11339
CVE ID: CVE-2005-0338 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:13:53.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=110728448025559&w=2 - http://marc.info/?l=bugtraq&m=110756234611259&w=2 - http://www.securityfocus.com/bid/12429 - http://marc.info/?l=full-disclosure&m=110725682327452&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19177
CVE ID: CVE-2005-0339 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:13:53.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Foxmail 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long MAIL FROM command. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110763204301080&w=2 - http://www.securityfocus.com/bid/12454 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19229
CVE ID: CVE-2005-0340 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:13:53.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in Apple File Service (AFP Server) allows remote attackers to cause a denial of service (application crash) via a negative UAM string length in a FPLoginExt packet. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110791369419784&w=2 - http://www.securityfocus.com/bid/12478 - http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19263
CVE ID: CVE-2005-0341 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:13:53.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari 1.2.4 does not obey the Content-type field in the HTTP header and renders text as HTML, which allows remote attackers to inject arbitrary web script or HTML and perform cross-site scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013087 - http://marc.info/?l=bugtraq&m=110756965213819&w=2 - http://tigger.uic.edu/~jrockw2/safari_20050204.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/19227
CVE ID: CVE-2005-0342 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:13:53.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Finder in Mac OS X and earlier allows local users to overwrite arbitrary files and gain privileges by creating a hard link from the .DS_Store file to an arbitrary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14188 - http://www.securityfocus.com/bid/12458 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19253 - http://marc.info/?l=bugtraq&m=110780124707975&w=2 - http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
CVE ID: CVE-2005-0343 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:13:53.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PerlDesk 1.x allows remote attackers to inject arbitrary SQL commands via the view parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19245 - http://secunia.com/advisories/12512 - http://www.securityfocus.com/bid/12471 - http://marc.info/?l=bugtraq&m=110782042532295&w=2 - http://www.security-project.org/projects/board/showthread.php?p=5172#post5172
CVE ID: CVE-2005-0344 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:13:54.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in 602LAN SUITE 2004.0.04.1221 allows remote authenticated users to upload and execute arbitrary files via a .. (dot dot) in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013106 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19258 - http://marc.info/?l=bugtraq&m=110793103506620&w=2 - http://secunia.com/advisories/14169/ - http://www.security.org.sg/vuln/602lansuite1221.html
CVE ID: CVE-2005-0345 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:13:53.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: viewthread.php in php-fusion 4.x does not check the (1) forum_id or (2) forum_cat parameters, which allows remote attackers to view protected forums via the thread_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110788267311132&w=2 - http://www.securityfocus.com/bid/12482 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19257
CVE ID: CVE-2005-0346 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:13:53.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: SafeNet SoftRemote VPN Client stores the VPN password (pre-shared key) in cleartext in memory of the IreIKE.exe process, which allows local users to gain sensitive information if they have access to that process. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19256 - http://marc.info/?l=bugtraq&m=110791865522076&w=2 - http://securitytracker.com/id?1013134 - http://www.nta-monitor.com/news/vpn-flaws/safenet/index.htm
CVE ID: CVE-2005-0347 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:13:53.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in RealArcade 1.2.0.994 and earlier allows remote attackers to execute arbitrary code via an RGS file with an invalid size string for the GUID and game name, which leads to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14187/ - http://securitytracker.com/id?1013128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19259 - http://marc.info/?l=bugtraq&m=110792779115794&w=2
CVE ID: CVE-2005-0348 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:13:53.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in RealArcade 1.2.0.994 allows remote attackers to delete arbitrary files via an RGP file with a .. (dot dot) in the FILENAME tag. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14187/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/19260 - http://securitytracker.com/id?1013128 - http://www.securityfocus.com/bid/12494 - http://marc.info/?l=bugtraq&m=110792779115794&w=2
CVE ID: CVE-2005-0349 State: PUBLISHED Published: 2005-02-11T05:00:00 Last Updated: 2024-08-07T21:13:53.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: The production release of the UniversalAgent for UNIX in BrightStor ARCserve Backup 11.1 contains hard-coded credentials, which allows remote attackers to access the file system and possibly execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/13706 - http://securitytracker.com/id?1013144 - http://www.securityfocus.com/bid/12522 - http://supportconnect.ca.com/sc/solcenter/sol_detail.jsp?aparno=QO63672&os=UNIX&returninput=0 - http://www.idefense.com/application/poi/di
ect.ca.com/sc/solcenter/sol_detail.jsp?aparno=QO63672&os=UNIX&returninput=0 - http://www.idefense.com/application/poi/display?id=198&type=vulnerabilities - http://secunia.com/advisories/14233 - http://www.vupen.com/english/advisories/2005/0145
CVE ID: CVE-2005-0350 State: PUBLISHED Published: 2005-02-11T05:00:00 Last Updated: 2024-08-07T21:13:53.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in multiple F-Secure Anti-Virus and Internet Security products allows remote attackers to execute arbitrary code via a crafted ARJ archive. Additional Analyst Notes: - CVE Program Container: References: - http://xforce.iss.net/xforce/alerts/id/188 - http://www.f-secure.com/security/fsc-2005-1.shtml
CVE ID: CVE-2005-0351 State: PUBLISHED Published: 2005-04-09T04:00:00 Last Updated: 2024-08-07T21:13:54.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in (1) termsh, (2) atcronsh, and (3) auditsh in SCO OpenServer 5.0.6 and 5.0.7 might allow local users to execute arbitrary code via a long HOME environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13062 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.15/SCOSA-2005.15.txt
CVE ID: CVE-2005-0352 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:13:53.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Servers Alive 4.1 and 5.0, when running as a service, does not drop SYSTEM privileges before loading local manual under the help menu, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14616/ - http://marc.info/?l=bugtraq&m=111100364513513&w=2 - http://www.securityfocus.com/bid/12822 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19715
CVE ID: CVE-2005-0353 State: PUBLISHED Published: 2005-03-08T05:00:00 Last Updated: 2024-08-07T21:13:54.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Sentinel LM (Lservnt) service in the Sentinel License Manager 7.2.0.2 allows remote attackers to execute arbitrary code by sending a large amount of data to UDP port 5093. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12742 - http://marc.info/?l=full-disclosure&m=111072872816405&w=2 - http://secunia.com/advisories/14511 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19621 - http://marc.info/?l=bugtraq&m=111022094326772&w=2 - http://www.kb.cert.o
nge.xforce.ibmcloud.com/vulnerabilities/19621 - http://marc.info/?l=bugtraq&m=111022094326772&w=2 - http://www.kb.cert.org/vuls/id/108790 - http://www.cirt.dk/advisories/cirt-30-advisory.pdf
CVE ID: CVE-2005-0356 State: PUBLISHED Published: 2005-05-31T04:00:00 Last Updated: 2024-08-07T21:13:53.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20635 - http://secunia.com/advisories/15393 - http://www.kb.cert.org/vuls/id/637934 - http://se
loud.com/vulnerabilities/20635 - http://secunia.com/advisories/15393 - http://www.kb.cert.org/vuls/id/637934 - http://secunia.com/advisories/15417/ - http://secunia.com/advisories/18662 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.64/SCOSA-2005.64.txt - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:15.tcp.asc - http://www.securityfocus.com/bid/13676 - http://www.cisco.com/warp/public/707/cisco-sn-20050518-tcpts.shtml - http://secunia.com/advisories/18222 - http://support.avaya.com/elmodocs2/security/ASA-2006-032.htm
CVE ID: CVE-2005-0357 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-07T21:13:53.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16470 - http://secunia.com/advisories/16464 - http://www.osvdb.org/18800 - http://securitytracker.com/id?1014713 - http://www.securityfocus.com/bid/14582
ies/16464 - http://www.osvdb.org/18800 - http://securitytracker.com/id?1014713 - http://www.securityfocus.com/bid/14582 - http://www.legato.com/support/websupport/product_alerts/081605_NW_authentication.htm - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21887 - http://www.kb.cert.org/vuls/id/606857
CVE ID: CVE-2005-0358 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-07T21:13:53.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by modifying an authentication token. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/407641 - http://secunia.com/advisories/16470 - http://secunia.com/advisories/16464 - http://securitytracker.com/id?1014713 - http://www.legato.com/support/websupport/product_alerts/081605_NW_token_authenti
http://securitytracker.com/id?1014713 - http://www.legato.com/support/websupport/product_alerts/081605_NW_token_authentication.htm - http://www.securityfocus.com/bid/14582 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21892 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1 - http://www.osvdb.org/18801
CVE ID: CVE-2005-0359 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-07T21:13:53.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and pmap_unset commands, which allows remote attackers to (1) cause a denial of service by using pmap_unset to un-register a NetWorker service, or (2) obtain sensitive information from NetWorker services by using pmap_set to register a new service. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/801089 - https://ex
ice. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/801089 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21893 - http://secunia.com/advisories/16470 - http://secunia.com/advisories/16464 - http://securitytracker.com/id?1014713 - http://www.securityfocus.com/bid/14582 - http://www.legato.com/support/websupport/product_alerts/081605_NW_port_mapper.htm - http://www.osvdb.org/18802 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1
CVE ID: CVE-2005-0360 State: PUBLISHED Published: 2005-07-01T04:00:00Z Last Updated: 2024-09-16T23:01:42.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as "safe for scripting" for Internet Explorer, which allows remote attackers to create or append to arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/165022