Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-1035 State: PUBLISHED Published: 2006-03-07T11:00:00 Last Updated: 2024-08-07T16:56:15.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16844 - http://www.integrigy.com/info/IntegrigySecurityAnalysis-OracleDiag0206.pdf - http://secunia.com/advisories/19076 - http://www.kb.cert.org/vuls/id/298958
CVE ID: CVE-2006-1036 State: PUBLISHED Published: 2006-03-07T11:00:00 Last Updated: 2024-08-07T16:56:15.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Oracle Diagnostics module 2.2 and earlier have unknown impact and attack vectors, related to "permissions." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16844 - http://www.integrigy.com/info/IntegrigySecurityAnalysis-OracleDiag0206.pdf - http://secunia.com/advisories/19076
CVE ID: CVE-2006-1037 State: PUBLISHED Published: 2006-03-07T11:00:00 Last Updated: 2024-08-07T16:56:15.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25259 - http://www.securityfocus.com/bid/16844 - http://www.integrigy.com/info/IntegrigySecurityAnalysis-OracleDiag0206.pdf - http://secunia.com/advisories/19076
CVE ID: CVE-2006-1038 State: PUBLISHED Published: 2006-03-07T11:00:00 Last Updated: 2024-08-07T16:56:14.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in SecureCRT 5.0.4 and earlier and SecureFX 3.0.4 and earlier allows remote attackers to have an unknown impact when a Unicode string is converted to a "narrow" string. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25092 - http://www.securityfocus.com/bid/16935 - http://secunia.com/advisories/19040 - http://www.vandyke.com/products/securecrt/history.txt - http://www.vandyke.com/products/securefx/history.txt - http://www.vupen.com/english/ad
/products/securecrt/history.txt - http://www.vandyke.com/products/securefx/history.txt - http://www.vupen.com/english/advisories/2006/0806
CVE ID: CVE-2006-1039 State: PUBLISHED Published: 2006-03-07T11:00:00 Last Updated: 2024-08-07T16:56:15.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP response and obtain sensitive authentication information, or have other impacts, via a ";%20" followed by encoded HTTP headers. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015702 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25003 - http://secunia.com/advisories/19085 - http://www.securityfocus.com/bid/18006 - http://www.securityfocus.com/archive/1/426
ttp://secunia.com/advisories/19085 - http://www.securityfocus.com/bid/18006 - http://www.securityfocus.com/archive/1/426449/100/0/threaded - http://www.vupen.com/english/advisories/2006/0810
CVE ID: CVE-2006-1040 State: PUBLISHED Published: 2006-03-07T11:00:00 Last Updated: 2024-08-07T16:56:15.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web script or HTML via the email field, which is injected in profile.php but not sanitized in sendmsg.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19100 - http://www.vupen.com/english/advisories/2006/0808 - http://www.securityfocus.com/archive/1/426589/100/0/threaded - http://www.securityfocus.com/archive/1/426537/100/0/threaded - http://www.vbulletin.com/foru
e/1/426589/100/0/threaded - http://www.securityfocus.com/archive/1/426537/100/0/threaded - http://www.vbulletin.com/forum/showthread.php?postid=1079030 - http://www.kapda.ir/advisory-266.html - http://www.securityfocus.com/bid/16919 - http://www.osvdb.org/23614
CVE ID: CVE-2006-1041 State: PUBLISHED Published: 2006-03-07T11:00:00 Last Updated: 2024-08-07T16:56:15.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Gregarius 0.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) rss_query parameter to search.php or (2) tag parameter to tags.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16939 - http://www.osvdb.org/23679 - http://www.securityfocus.com/archive/1/426656/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25058 - http://www.vupen.com/english/advisories/2006/0819 - http://w
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/25058 - http://www.vupen.com/english/advisories/2006/0819 - http://www.osvdb.org/23678 - http://secunia.com/advisories/19102
CVE ID: CVE-2006-1042 State: PUBLISHED Published: 2006-03-07T11:00:00 Last Updated: 2024-08-07T16:56:15.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Gregarius 0.5.2 allow remote attackers to execute arbitrary SQL commands via the (1) folder parameter to feed.php or (2) rss_query parameter to search.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16939 - http://www.securityfocus.com/archive/1/426656/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25059 - http://www.osvdb.org/23681 - http://www.osvdb.org/23680 - http://securityreason.com/securityalert/537 -
ilities/25059 - http://www.osvdb.org/23681 - http://www.osvdb.org/23680 - http://securityreason.com/securityalert/537 - http://www.vupen.com/english/advisories/2006/0819 - http://secunia.com/advisories/19102
CVE ID: CVE-2006-1043 State: PUBLISHED Published: 2006-03-07T11:00:00 Last Updated: 2024-08-07T16:56:15.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attackers to execute arbitrary code via a long DataProject field in a (1) Visual Studio Database Project File (.dbp) or (2) Visual Studio Solution (.sln). Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015721 - http://www.osvdb.org/23711 - http://www.frsirt.com/exploits/20060305.ms-visual-dbp.c.php - http://secunia.com/advisories/19081 - http://www.vupen.com/english/
w.frsirt.com/exploits/20060305.ms-visual-dbp.c.php - http://secunia.com/advisories/19081 - http://www.vupen.com/english/advisories/2006/0825 - http://www.securityfocus.com/bid/16953 - http://www.securityfocus.com/archive/1/426767/100/0/threaded - http://www.securityfocus.com/archive/1/426830/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25148
CVE ID: CVE-2006-1044 State: PUBLISHED Published: 2006-03-07T11:00:00 Last Updated: 2024-08-07T16:56:14.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in LISTSERV 14.3 and 14.4, including LISTSERV Lite and HPO, with the web archive interface enabled, allow remote attackers to execute arbitrary code via unknown attack vectors related to the WA CGI. NOTE: technical details will be released after the grace period has ended on 20060603. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25168 - http://www.kb.cert.org/vuls/id/841132 - http://www.securityfocus.com/archive/1/426770/100/0/th
m/vulnerabilities/25168 - http://www.kb.cert.org/vuls/id/841132 - http://www.securityfocus.com/archive/1/426770/100/0/threaded - http://secunia.com/advisories/19106 - http://www.ngssoftware.com/advisories/listserv_3.txt - http://www.lsoft.com/manuals/1.8e/relnotes/LISTSERV14.5-Release-Notes.html#wasecurityalert - http://securitytracker.com/id?1015722 - http://www.vupen.com/english/advisories/2006/0824 - http://www.securityfocus.com/bid/16951
CVE ID: CVE-2006-1045 State: PUBLISHED Published: 2006-03-07T11:00:00 Last Updated: 2024-08-07T16:56:15.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP address, when the user reads the email and the external image is accessed. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2006/mfsa2006-26.html - http://www.redhat.com/support/erra
ainer: References: - http://www.mozilla.org/security/announce/2006/mfsa2006-26.html - http://www.redhat.com/support/errata/RHSA-2006-0330.html - http://secunia.com/advisories/19902 - https://usn.ubuntu.com/276-1/ - http://secunia.com/advisories/19941 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1975 - http://secunia.com/advisories/19821 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10254 - http://secunia.com/advisories/19823 - http://www.debian.org/security/2006/dsa-1051 - http://www.vupen.com/english/advisories/2006/3749 - http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml - http://www.vupen.com/en
n.com/english/advisories/2006/3749 - http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml - http://www.vupen.com/english/advisories/2006/1356 - http://www.securityfocus.com/archive/1/446657/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24959 - http://securityreason.com/securityalert/514 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:078 - http://secunia.com/advisories/20051 - http://secunia.com/advisories/19863 - http://www.securityfocus.com/bid/16881 - http://www.securityfocus.com/archive/1/446657/100/200/threaded - http://www.securityfocus.com/bid/17516 - http://www.novell.com/linux/security/advisories/2006_04_25.html - http://www.securityfocus
securityfocus.com/bid/17516 - http://www.novell.com/linux/security/advisories/2006_04_25.html - http://www.securityfocus.com/archive/1/426347 - http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml - http://secunia.com/advisories/22065 - http://secunia.com/advisories/19950 - http://www.debian.org/security/2006/dsa-1046
CVE ID: CVE-2006-1046 State: PUBLISHED Published: 2006-03-07T11:00:00 Last Updated: 2024-08-07T16:56:15.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: server.cpp in Monopd 0.9.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via a string containing a large number of characters that are escaped when Monopd produces XML output. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0844 - http://www.robertjohnkaper.com/downloads/atlantik/monopd-0.9.3-dosfix.diff - http://aluigi.altervista.org/adv/monopdx-adv.txt - http://secunia.com/advisories/19133 - http://www.securityfocus.com/bid/1698
/aluigi.altervista.org/adv/monopdx-adv.txt - http://secunia.com/advisories/19133 - http://www.securityfocus.com/bid/16981 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25161
CVE ID: CVE-2006-1047 State: PUBLISHED Published: 2006-03-07T11:00:00Z Last Updated: 2024-09-17T01:26:45.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the "Remember Me login functionality" in Joomla! 1.0.7 and earlier has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.joomla.org/content/view/938/78/
CVE ID: CVE-2006-1048 State: PUBLISHED Published: 2006-03-07T11:00:00 Last Updated: 2024-08-07T16:56:15.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! 1.0.7 and earlier allows attackers to bypass intended access restrictions and gain certain privileges via certain attack vectors related to the (1) Weblink, (2) Polls, (3) Newsfeeds, (4) Weblinks, (5) Content, (6) Content Section, (7) Content Category, (8) Contact items, or (9) Contact Search, (10) Content Search, (11) Newsfeed Search, or (12) Weblink Search. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0818 - http://secunia.com/advisories/19105 - https:/
ntainer: References: - http://www.vupen.com/english/advisories/2006/0818 - http://secunia.com/advisories/19105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25033 - http://www.joomla.org/content/view/938/78/ - http://www.osvdb.org/23822
CVE ID: CVE-2006-1049 State: PUBLISHED Published: 2006-03-07T11:00:00 Last Updated: 2024-08-07T16:56:15.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Admin functionality in Joomla! 1.0.7 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0818 - http://secunia.com/advisories/19105 - http://www.joomla.org/content/view/938/78/ - http://www.osvdb.org/23819
CVE ID: CVE-2006-1050 State: PUBLISHED Published: 2006-03-07T20:00:00 Last Updated: 2024-08-07T16:56:15.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kwik-Pay Payroll 4.2.20, and possibly other versions, stores the KwikPay.mdb database file with insecure permissions, which allows local users to obtain sensitive information such as employment and payment data. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: the vendor has disputed this vulnerability, stating that "The kwikpay.mdb file supplied with kwikpay is a template for the database structure of user databases created by kwikpay and to store a demon
supplied with kwikpay is a template for the database structure of user databases created by kwikpay and to store a demonstration payroll. It does not contain any sensitive user information. When a user payroll database is opened, the encryption of the database is checked and if the database is not encrypted, the user is prompted to encrypt the database, but the choice is the customers. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25114 - http://www.osvdb.org/23617 - http://secunia.com/advisories/19075
CVE ID: CVE-2006-1051 State: PUBLISHED Published: 2006-03-07T21:00:00 Last Updated: 2024-08-07T16:56:14.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Akarru Social BookMarking Engine before 0.4.3.4 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors, possibly involving the username parameter to akarru.lib/users.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16989 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25115 - http://sourceforge.net/project/shownotes.php?release_id=398713&group_id=155783 - http://secunia.com/advisories/19112 - http://www.vup
forge.net/project/shownotes.php?release_id=398713&group_id=155783 - http://secunia.com/advisories/19112 - http://www.vupen.com/english/advisories/2006/0841
CVE ID: CVE-2006-1052 State: PUBLISHED Published: 2006-05-05T10:00:00 Last Updated: 2024-08-07T16:56:15.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: The selinux_ptrace logic in hooks.c in SELinux for Linux 2.6.6 allows local users with ptrace permissions to change the tracer SID to an SID of another process. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=git-commits-head&m=114210002712363&w=2 - http://selinuxnews.org/wp/index.php/2006/03/13/security-ptrace-bug-cve-2006-1052/ - https://usn.ubuntu.com/281-1/ - http://www.osvdb.org/25232 - http://marc.info/?l=selinux&m=114226465106131&w=2 - http://www.redhat.com/support/errata/RHSA-2006-0
w.osvdb.org/25232 - http://marc.info/?l=selinux&m=114226465106131&w=2 - http://www.redhat.com/support/errata/RHSA-2006-0575.html - http://secunia.com/advisories/19955 - http://www.securityfocus.com/bid/17830 - http://secunia.com/advisories/21465 - http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm - http://secunia.com/advisories/22417 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:086 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10102 - http://secunia.com/advisories/22093 - http://secunia.com/advisories/20157 - http://www.debian.org/security/2006/dsa-1184
CVE ID: CVE-2006-1053 State: REJECTED Published: 2021-06-21T13:48:19 Last Updated: 2021-06-21T13:48:19 Description: No description available.
CVE ID: CVE-2006-1054 State: REJECTED Published: 2006-05-26T21:00:00Z Last Updated: 2024-09-16T17:07:49.974Z Description: No description available.
CVE ID: CVE-2006-1055 State: PUBLISHED Published: 2006-04-05T17:00:00 Last Updated: 2024-08-07T16:56:15.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fill_write_buffer function in sysfs/file.c in Linux kernel 2.6.12 up to versions before 2.6.17-rc1 does not zero terminate a buffer when a length of PAGE_SIZE or more is requested, which might allow local users to cause a denial of service (crash) by causing an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17402 - http://secunia.com/advisories/19735 - http://secunia.com/advisories/20716 - https://usn.ubuntu.com/281-1/ - http://lwn.net/Alerts/180820/ -
dvisories/19735 - http://secunia.com/advisories/20716 - https://usn.ubuntu.com/281-1/ - http://lwn.net/Alerts/180820/ - http://secunia.com/advisories/19495 - http://www.ubuntu.com/usn/usn-302-1 - http://www.novell.com/linux/security/advisories/2006-05-31.html - http://secunia.com/advisories/19955 - http://www.vupen.com/english/advisories/2006/1475 - http://www.vupen.com/english/advisories/2006/1273 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6e0dd741a89be35defa05bd79f4211c5a2762825 - http://secunia.com/advisories/20398 - http://www.osvdb.org/24443 - http://www.trustix.org/errata/2006/0020 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25693 -
osvdb.org/24443 - http://www.trustix.org/errata/2006/0020 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25693 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=6e0dd741a89be35defa05bd79f4211c5a2762825%3Bhp=597a7679dd83691be2f3a53e1f3f915b4a7f6eba
CVE ID: CVE-2006-1056 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T16:56:15.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one process to determine portions of the state of floating point instructions of other processes, which can be leveraged to obtain sensitive information such as cryptographic keys. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel proces
cryptographic keys. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion that was not addressed by the kernels. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9995 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187911 - http://www.redhat.com/support/errata/RHSA-2006-0437.html - http://secunia.com/advisories/22876 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.9 - http://secunia.com/advisories/19735 - http://www.vupen.com/english/advisories/2006/4502 - http://www.vupen.com/english/advisor
/secunia.com/advisories/19735 - http://www.vupen.com/english/advisories/2006/4502 - http://www.vupen.com/english/advisories/2006/2554 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187910 - http://www.redhat.com/support/errata/RHSA-2006-0579.html - http://secunia.com/advisories/20716 - http://secunia.com/advisories/22875 - http://lwn.net/Alerts/180820/ - http://secunia.com/advisories/21136 - http://www.ubuntu.com/usn/usn-302-1 - http://kb.vmware.com/kb/2533126 - http://www.osvdb.org/24746 - http://www.osvdb.org/24807 - http://secunia.com/advisories/21983 - http://www.vupen.com/english/advisories/2006/4353 - http://secunia.com/advisories/21035 - http://www.vmware.com/download/esx/esx-
w.vupen.com/english/advisories/2006/4353 - http://secunia.com/advisories/21035 - http://www.vmware.com/download/esx/esx-213-200610-patch.html - http://www.debian.org/security/2006/dsa-1097 - http://www.redhat.com/support/errata/RHSA-2006-0575.html - http://www.novell.com/linux/security/advisories/2006-05-31.html - http://www.securityfocus.com/archive/1/451421/100/0/threaded - http://www.vupen.com/english/advisories/2006/1426 - http://secunia.com/advisories/19715 - http://securitytracker.com/id?1015966 - http://www.securityfocus.com/archive/1/431341 - http://www.securityfocus.com/bid/17600 - http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm - http://www.debian.org/security/2006/dsa
s.com/bid/17600 - http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm - http://www.debian.org/security/2006/dsa-1103 - http://www.vmware.com/download/esx/esx-254-200610-patch.html - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:14.fpu.asc - http://secunia.com/advisories/21465 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://marc.info/?l=linux-kernel&m=114548768214478&w=2 - http://www.vupen.com/english/advisories/2006/1475 - http://www.securityfocus.com/archive/1/451404/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25871 - http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm - http://secunia.com/ad
bmcloud.com/vulnerabilities/25871 - http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm - http://secunia.com/advisories/20398 - http://www.securityfocus.com/archive/1/451417/100/200/threaded - http://security.freebsd.org/advisories/FreeBSD-SA-06:14-amd.txt - http://secunia.com/advisories/22417 - http://secunia.com/advisories/19724 - http://secunia.com/advisories/20671 - http://www.securityfocus.com/archive/1/451419/100/200/threaded - http://secunia.com/advisories/20914
CVE ID: CVE-2006-1057 State: PUBLISHED Published: 2006-04-25T01:00:00 Last Updated: 2024-08-07T16:56:15.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26092 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188303 - http://cvs.gnome.org/viewcvs/gdm2/daemon/slave.c?r1=1.260&r2=1.261 - http://www.vupen.com/english/advisories/2006/1465 - http://www.mandriva.com/security/advis
n/slave.c?r1=1.260&r2=1.261 - http://www.vupen.com/english/advisories/2006/1465 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:083 - http://www.debian.org/security/2006/dsa-1040 - http://www.securityfocus.com/bid/17635 - http://www.redhat.com/support/errata/RHSA-2007-0286.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10092 - https://www.redhat.com/archives/fedora-announce-list/2006-April/msg00160.html - https://usn.ubuntu.com/278-1/