Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-4840 State: PUBLISHED Published: 2007-06-07T21:00:00 Last Updated: 2024-08-08T00:01:23.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Outlook Express Address Book control, when using Internet Explorer 6, allows remote attackers to cause a denial of service (NULL dereference and browser crash) by creating the OutlookExpress.AddressBook COM object, which is not intended for use within Internet Explorer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/470694/100/0/threaded - http://www.osvdb.org/26836 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34755 - http://www.securityfocus.com/archive/1/
w.osvdb.org/26836 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34755 - http://www.securityfocus.com/archive/1/391803 - http://browserfun.blogspot.com/2006/07/mobb-3-outlookexpressaddressbook_02.html
CVE ID: CVE-2005-4841 State: PUBLISHED Published: 2007-06-11T18:00:00Z Last Updated: 2024-09-16T17:43:33.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Outlook Progress Ctl control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/391803
CVE ID: CVE-2005-4842 State: PUBLISHED Published: 2007-06-11T18:00:00Z Last Updated: 2024-09-17T01:21:37.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: The System Monitor Source Properties control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/391803
CVE ID: CVE-2005-4843 State: PUBLISHED Published: 2007-06-11T18:00:00Z Last Updated: 2024-09-16T19:50:40.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SmartConnect Class control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/391803
CVE ID: CVE-2005-4844 State: PUBLISHED Published: 2007-06-11T18:00:00Z Last Updated: 2024-09-17T02:21:47.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CLSID_ApprenticeICW control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/391803
CVE ID: CVE-2005-4845 State: PUBLISHED Published: 2007-06-11T18:00:00Z Last Updated: 2024-09-16T19:10:48.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4.2_03 and 1.4.2_04 <applet> redirector controls, allow remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/391803
CVE ID: CVE-2005-4846 State: PUBLISHED Published: 2007-06-20T22:00:00Z Last Updated: 2024-09-16T18:44:05.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Logger.cc for Spey 0.3.3 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a syslog call. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21327 - http://spey.cvs.sourceforge.net/spey/spey/src/Logger.cc?r1=1.5&r2=1.6 - http://sourceforge.net/forum/forum.php?forum_id=514029 - http://spey.cvs.sourceforge.net/spey/spey/src/Logger.cc?view=log
CVE ID: CVE-2005-4847 State: PUBLISHED Published: 2007-06-20T22:00:00 Last Updated: 2024-08-08T00:01:23.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Spey 0.3.3 has unknown impact and attack vectors related to "A number of security holes which could lead to compromise," a different issue than CVE-2005-4846. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/forum/forum.php?forum_id=514029 - http://www.osvdb.org/38887
CVE ID: CVE-2005-4848 State: PUBLISHED Published: 2007-06-29T18:00:00 Last Updated: 2024-08-08T00:01:23.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the decompression algorithm in Research in Motion BlackBerry Enterprise Server 4.0 SP1 and earlier before 20050607 might allow remote attackers to execute arbitrary code via certain data packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.blackberry.com/btsc/articles/669/KB04075_f.SAL_Public.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35241 - http://www.vupen.com/english/advisories/2007/2419 - http://blog2.lemondeinformatique.fr/management_du_si/2006/05/notre_
http://www.vupen.com/english/advisories/2007/2419 - http://blog2.lemondeinformatique.fr/management_du_si/2006/05/notre_ami_imad_.html - http://www.lemonde.fr/web/article/0%2C1-0%402-3208%2C36-777732%2C0.html
CVE ID: CVE-2005-4849 State: PUBLISHED Published: 2007-07-05T20:00:00Z Last Updated: 2024-09-16T23:56:48.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Derby before 10.1.2.1 exposes the (1) user and (2) password attributes in cleartext via (a) the RDBNAM parameter of the ACCSEC command and (b) the output of the DatabaseMetaData.getURL function, which allows context-dependent attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://issues.apache.org/jira/browse/DERBY-559 - http://issues.apache.org/jira/browse/DERBY-530 - http://db.apache.org/derby/releases/release-10.1.2.1.html
CVE ID: CVE-2005-4850 State: PUBLISHED Published: 2007-07-06T19:00:00Z Last Updated: 2024-09-17T01:51:15.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: eZ publish 3.5 through 3.7 before 20050608 requires both edit and create permissions in order to submit data, which allows remote attackers to edit data submitted by arbitrary anonymous users. Additional Analyst Notes: - CVE Program Container: References: - http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0 - http://issues.ez.no/6680
CVE ID: CVE-2005-4851 State: PUBLISHED Published: 2007-07-06T19:00:00Z Last Updated: 2024-09-17T03:07:10.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: eZ publish 3.4.4 through 3.7 before 20050722 applies certain permissions on the node level, which allows remote authenticated users to bypass the original permissions on embedded objects in XML fields and read these objects. Additional Analyst Notes: - CVE Program Container: References: - http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0 - http://issues.ez.no/6841
CVE ID: CVE-2005-4852 State: PUBLISHED Published: 2007-07-06T19:00:00Z Last Updated: 2024-09-17T01:10:31.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: The siteaccess URIMatching implementation in eZ publish 3.5 through 3.8 before 20050812 converts all non-alphanumeric characters in a URI to '_' (underscore), which allows remote attackers to bypass access restrictions by inserting certain characters in a URI, as demonstrated by a request for /admin:de, which matches a rule allowing only /admin_de to access /admin. Additional Analyst Notes: - CVE Program Container: References: - http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0 - http:/
tainer: References: - http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0 - http://issues.ez.no/7025
CVE ID: CVE-2005-4853 State: PUBLISHED Published: 2007-07-06T19:00:00Z Last Updated: 2024-09-16T20:17:15.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the forum package in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050818 does not restrict edit permissions to a posting's owner, which allows remote authenticated users to edit arbitrary postings. Additional Analyst Notes: - CVE Program Container: References: - http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0 - http://issues.ez.no/7052
CVE ID: CVE-2005-4854 State: PUBLISHED Published: 2007-07-06T19:00:00Z Last Updated: 2024-09-17T01:21:28.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: eZ publish 3.5 through 3.7 before 20050830 does not use a folder's read permissions to restrict notifications, which allows remote authenticated users to obtain sensitive information about changes to content in arbitrary folders. Additional Analyst Notes: - CVE Program Container: References: - http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0 - http://issues.ez.no/6355
CVE ID: CVE-2005-4855 State: PUBLISHED Published: 2007-07-06T19:00:00Z Last Updated: 2024-09-17T03:23:06.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050922 does not restrict Image datatype uploads to image content types, which allows remote authenticated users to upload certain types of files, as demonstrated by .js files, which may enable cross-site scripting (XSS) attacks or other attacks. Additional Analyst Notes: - CVE Program Container: References: - http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0 - h
m Container: References: - http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0 - http://issues.ez.no/5984
CVE ID: CVE-2005-4856 State: PUBLISHED Published: 2007-07-06T19:00:00Z Last Updated: 2024-09-17T01:21:26.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: The admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051110 does not properly handle authorization errors, which allows remote attackers to obtain sensitive information and see the admin pagelayout and associated templates via a request with (1) "anything after the url" or (2) a "wrong url". Additional Analyst Notes: - CVE Program Container: References: - http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0 - http://issues.ez.no/6703
CVE ID: CVE-2005-4857 State: PUBLISHED Published: 2007-07-06T19:00:00Z Last Updated: 2024-09-16T16:12:42.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051128 allows remote authenticated users to cause a denial of service (Apache httpd segmentation fault) via a request to content/advancedsearch.php with an empty SearchContentClassID parameter, reportedly related to a "memory addressing error". Additional Analyst Notes: - CVE Program Container: References: - http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0 - http://issues.ez.no/7459
CVE ID: CVE-2005-4858 State: PUBLISHED Published: 2007-07-06T19:00:00Z Last Updated: 2024-09-16T18:33:47.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in mimic2.cgi in mimicboard2 (Mimic2) 086 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters associated with the (1) name, (2) title, and (3) comment sections, as demonstrated by referencing a remote document through the SRC attribute of an IFRAME element. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14778 - http://exploitlabs.com/files/advisories/EXPL-A-2005-013-mimic2.txt
CVE ID: CVE-2005-4859 State: PUBLISHED Published: 2007-07-06T19:00:00Z Last Updated: 2024-09-16T23:30:35.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: mimicboard2 (Mimic2) 086 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mimic2.dat. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14779 - http://exploitlabs.com/files/advisories/EXPL-A-2005-013-mimic2.txt
CVE ID: CVE-2005-4860 State: PUBLISHED Published: 2007-08-08T01:52:00Z Last Updated: 2024-09-16T19:19:25.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Spectrum Cash Receipting System before 6.504 uses weak cryptography (static substitution) in the PASSFILE password file, which makes it easier for local users to gain privileges by decrypting a password. Additional Analyst Notes: - CVE Program Container: References: - http://www.portcullis.co.uk/uplds/advisories/Portcullis%20Security%20Advisory%2005-002%20Spectrum%20Cash%20Receipting%20System%20Weak%20Password%20Protection%20Vulnerability.txt - http://secunia.com/advisories/13985 - http://marc.info/?l=bugtraq&m=11122961390755
rd%20Protection%20Vulnerability.txt - http://secunia.com/advisories/13985 - http://marc.info/?l=bugtraq&m=111229613907550&w=2
CVE ID: CVE-2005-4861 State: PUBLISHED Published: 2007-09-05T19:00:00Z Last Updated: 2024-09-17T00:07:03.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: functions.php in Ragnarok Online Control Panel (ROCP) 4.3.4a allows remote attackers to bypass authentication by requesting account_manage.php with a trailing "/login.php" PHP_SELF value, which is not properly handled by the CHECK_AUTH function. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2005-07/0522.html - http://www.osvdb.org/18389 - http://www.jasio.net/index.php?categoryid=3&p13_sectionid=2&p13_fileid=6 - http://secunia.com/advisories/16287
CVE ID: CVE-2005-4862 State: PUBLISHED Published: 2007-09-14T00:00:00Z Last Updated: 2024-09-17T02:53:16.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: The search functionality in XWiki 0.9.793 indexes cleartext user passwords, which allows remote attackers to obtain sensitive information via a search string that matches a password. Additional Analyst Notes: - CVE Program Container: References: - http://jira.xwiki.org/jira/browse/XWIKI-70
CVE ID: CVE-2005-4863 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T00:01:23.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in db2fmp in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=IY62039&apar=only - http://www.nextgenss.com/advisories/db205012005A.txt - http://marc.info/?l=bugtraq&m=110494995113579&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17615 - http://www.securityfocus.com/bid/11397 - http://www-1.ibm.com/support/docview.wss?uid=swg21181228 - http
ilities/17615 - http://www.securityfocus.com/bid/11397 - http://www-1.ibm.com/support/docview.wss?uid=swg21181228 - http://secunia.com/advisories/12733
CVE ID: CVE-2005-4864 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T00:01:23.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in libdb2.so in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long DB2LPORT environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11390 - http://www-1.ibm.com/support/docview.wss?uid=swg1IY62042 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17616 - http://marc.info/?l=bugtraq&m=110495092105541&w=2 - http://secunia.com/advisories/12733/ - http://www.ngssoftware.com/advisories/db205012005B.txt
CVE ID: CVE-2005-4865 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T00:01:23.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in call in IBM DB2 7.x and 8.1 allows remote attackers to execute arbitrary code via a long libname. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110495173031208&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17611 - http://www.nextgenss.com/advisories/db205012005C.txt - http://www-1.ibm.com/support/docview.wss?uid=swg1IY62041 - http://www.securityfocus.com/bid/11399 - http://secunia.com/advisories/12733/ - http://www-1.ibm.com/support/do
Y62041 - http://www.securityfocus.com/bid/11399 - http://secunia.com/advisories/12733/ - http://www-1.ibm.com/support/docview.wss?uid=swg21181228
CVE ID: CVE-2005-4866 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T00:01:23.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminator to be removed and leads to the overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg1IY61492 - http://www.securityfocus.com/bid/11401 - http://marc.info/?l=bugtraq
www-1.ibm.com/support/docview.wss?uid=swg1IY61492 - http://www.securityfocus.com/bid/11401 - http://marc.info/?l=bugtraq&m=110495251101381&w=2 - http://secunia.com/advisories/12733/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/17613 - http://www.nextgenss.com/advisories/db205012005D.txt
CVE ID: CVE-2005-4867 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T00:01:23.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the SATENCRYPT function in IBM DB2 8.1, when Satellite Administration (SATADMIN) is enabled, allows remote attackers to execute arbitrary code via a long parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.ngssoftware.com/advisories/db205012005E.txt - http://www.securityfocus.com/bid/11396 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY62040&apar=only - https://exchange.xforce.ibmcloud.com/vulnerabilities/17612 - http://secunia.com/advisories/12733/ - http:/
0&apar=only - https://exchange.xforce.ibmcloud.com/vulnerabilities/17612 - http://secunia.com/advisories/12733/ - http://www-1.ibm.com/support/docview.wss?uid=swg21181228 - http://marc.info/?l=bugtraq&m=110495332301120&w=2
CVE ID: CVE-2005-4868 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T00:01:23.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, which allows local users to gain unauthorized access, gain sensitive information, such as cleartext passwords, and cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110495402231836&w=2 - http://www.securityfocus.com/bid/11402 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17605 - http://www.nextgenss.com/advisories/db205012005F.txt -
2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17605 - http://www.nextgenss.com/advisories/db205012005F.txt - http://secunia.com/advisories/12733/ - http://www-1.ibm.com/support/docview.wss?uid=swg21181228
CVE ID: CVE-2005-4869 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T00:01:23.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) to_char and (2) to_date function in IBM DB2 8.1 allows local users to cause a denial of service (application crash) via an empty string in the second parameter, which causes a null pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11400 - http://www-1.ibm.com/support/docview.wss?uid=swg1IY61781 - http://www.nextgenss.com/advisories/db205012005G.txt - http://marc.info/?l=bugtraq&m=110495483501494&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
b205012005G.txt - http://marc.info/?l=bugtraq&m=110495483501494&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17614 - http://secunia.com/advisories/12733/
CVE ID: CVE-2005-4870 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T00:01:23.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflows in the (1) xmlvarcharfromfile, (2) xmlclobfromfile, (3) xmlfilefromvarchar, and (4) xmlfilefromclob function calls in IBM DB2 8.1 allow remote attackers to execute arbitrary code via a 94-byte second argument, which causes the return address to be overwritten with a pointer to the argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.nextgenss.com/advisories/db205012005H.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/17617 - http://www-1.ibm.com/support/d
dvisories/db205012005H.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/17617 - http://www-1.ibm.com/support/docview.wss?uid=swg1IY62297 - http://www.securityfocus.com/bid/11404 - http://secunia.com/advisories/12733/ - http://marc.info/?l=bugtraq&m=110495554227717&w=2
CVE ID: CVE-2005-4871 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T00:01:23.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain XML functions in IBM DB2 8.1 run with the privileges of DB2 instead of the logged-in user, which allows remote attackers to create or overwrite files via (1) XMLFileFromVarchar or (2) XMLFileFromClob, or read files via (3) XMLVarcharFromFile or (4) XMLClobFromFile. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110495620513954&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18761 - http://www.ngssoftware.com/advisories/db205012005I.txt - http://secunia.com/advi
ce.ibmcloud.com/vulnerabilities/18761 - http://www.ngssoftware.com/advisories/db205012005I.txt - http://secunia.com/advisories/12733/ - http://www.securityfocus.com/bid/12170
CVE ID: CVE-2005-4872 State: PUBLISHED Published: 2007-11-14T21:00:00 Last Updated: 2024-08-08T00:01:23.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Perl-Compatible Regular Expression (PCRE) library before 6.2 does not properly count the number of named capturing subpatterns, which allows context-dependent attackers to cause a denial of service (crash) via a regular expression with a large number of named subpatterns, which triggers a buffer overflow. NOTE: this issue was originally subsumed by CVE-2006-7224, but that CVE has been REJECTED and split. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2007-493.ht
tional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2007-493.htm - http://www.mandriva.com/security/advisories?name=MDVSA-2008:030 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html - http://secunia.com/advisories/28658 - http://secunia.com/advisories/27773 - http://www.securityfocus.com/bid/26462 - http://www.redhat.com/support/errata/RHSA-2007-1052.html - http://www.novell.com/linux/security/advisories/2007_62_pcre.html - http://www.pcre.org/changelog.txt - http://secunia.com/advisories/27869 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11615 - http://secunia.com/a