Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-4474 State: PUBLISHED Published: 2005-12-22T01:00:00 Last Updated: 2024-08-07T23:46:05.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the "Add to archive" command in WinRAR 3.51 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by tricking the user into adding a file whose filename contains a non-default code page and non-ANSI characters, as demonstrated using a Chinese filename, possibly due to buffer expansion when using the WideCharToMultiByte API. NOTE: it is not clear whether this problem can be exploited for code execution. If not, then perhaps the user-assisted nature of the atta
lear whether this problem can be exploited for code execution. If not, then perhaps the user-assisted nature of the attack should exclude the issue from inclusion in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/290 - http://www.securityfocus.com/archive/1/420006/100/0/threaded - http://www.securityfocus.com/bid/15999
CVE ID: CVE-2005-4475 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in OpenCms 6.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/opencms-xss-vuln.html - http://www.securityfocus.com/bid/16003 - http://www.osvdb.org/21877
CVE ID: CVE-2005-4476 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in store/search/results.html in OpenEdit 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) oe-action and (2) page parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/openedit-xss-vuln.html - http://secunia.com/advisories/18168 - http://www.osvdb.org/21866 - http://www.securityfocus.com/bid/16004 - http://www.vupen.com/english/advisories/2005/3042
CVE ID: CVE-2005-4477 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in papaya CMS 4.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the bab[searchfor] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/papaya-cms-xss-vuln.html - http://www.osvdb.org/21872 - http://www.securityfocus.com/bid/16005
CVE ID: CVE-2005-4478 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) menuid parameter to (a) index.php and (b) guestbook.php, and the (2) forumid and (3) reporeid_print parameters to (c) print.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18152 - http://www.securityfocus.com/bid/16020 - http://pridels0.blogspot.com/2005/12/papoo-multiple-sql-vuln.html - http://www.osvdb.org/21869 - http://www.vupen.com/englis
://pridels0.blogspot.com/2005/12/papoo-multiple-sql-vuln.html - http://www.osvdb.org/21869 - http://www.vupen.com/english/advisories/2005/3046 - http://www.osvdb.org/displayvuln.php?osvdb_id=21871 - http://www.osvdb.org/displayvuln.php?osvdb_id=21870
CVE ID: CVE-2005-4479 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in article.php in phpSlash 0.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the story_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/phpslash-sql-vuln.html - http://www.securityfocus.com/bid/16021 - http://secunia.com/advisories/18150 - http://www.osvdb.org/21873 - http://www.vupen.com/english/advisories/2005/3044
CVE ID: CVE-2005-4480 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Plexcor CMS 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/plexcors-cms-xss-vuln.html - http://www.osvdb.org/21876 - http://www.securityfocus.com/bid/16006
CVE ID: CVE-2005-4481 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Polopoly 9 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. NOTE: the vendor has disputed this vulnerability, stating that the "XSS flaw was only part of the custom implementation of the [polopoly] site". As of 20061003, CVE has no further information on this issue, except that the original researcher has a history of testing live sites and assuming that discoveries indicate vulnerabilities in the associated package Additio
a history of testing live sites and assuming that discoveries indicate vulnerabilities in the associated package Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21878 - http://attrition.org/pipermail/vim/2006-September/001056.html - http://pridels0.blogspot.com/2005/12/polopoly-xss-vuln.html - http://www.securityfocus.com/bid/16007
CVE ID: CVE-2005-4482 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.asp in PortalApp 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the ret_page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16008 - http://www.osvdb.org/21880 - http://secunia.com/advisories/18201 - http://pridels0.blogspot.com/2005/12/portalapp-xss-vuln.html - http://www.vupen.com/english/advisories/2005/3037
CVE ID: CVE-2005-4483 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.asp in SiteEnable 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the ret_page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21879 - http://www.securityfocus.com/bid/16009 - http://www.vupen.com/english/advisories/2005/3036 - http://secunia.com/advisories/18201 - http://pridels0.blogspot.com/2005/12/siteenable-xss-vuln.html
CVE ID: CVE-2005-4484 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IntranetApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ret_page parameter to login.asp or the (2) do_search and (3) search parameters to content.asp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18200 - http://www.vupen.com/english/advisories/2005/3039 - http://pridels0.blogspot.com/2005/12/intranetapp-xss-vuln.html - http://www.securityfocus.com/bid/16010
CVE ID: CVE-2005-4485 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the keywords parameter to (1) forums.asp, (2) search_employees.asp, (3) cat.asp, and (4) links.asp; (5) projectid parameter to pmprojects.asp, (6) ret_page parameter to login.asp, and (7) skin_number parameter to default.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21964 - http://www.vupen.com/english/advisories/2005/3040 - http://www.o
m Container: References: - http://www.osvdb.org/21964 - http://www.vupen.com/english/advisories/2005/3040 - http://www.osvdb.org/21965 - http://secunia.com/advisories/18199 - http://www.osvdb.org/21966 - http://www.osvdb.org/21963 - http://pridels0.blogspot.com/2005/12/projectapp-mutliple-xss-vuln.html - http://www.osvdb.org/21962 - http://www.osvdb.org/21967 - http://www.securityfocus.com/bid/16011 - http://www.osvdb.org/21968
CVE ID: CVE-2005-4486 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Quantum Art QP7.Enterprise (formerly Q-Publishing) allows remote attackers to execute arbitrary SQL commands via the p_news_id parameter to (1) news_and_events_new.asp and (2) news.asp. NOTE: on 20060227, the vendor disputed the accuracy of this report, saying that the p_news_id, news_and_events_new.asp, and news.asp are not specifically part of their product, although they could be dynamically generated through use of the product. Some investigation by CVE suggests evidence that the news_and_eve
d be dynamically generated through use of the product. Some investigation by CVE suggests evidence that the news_and_events_new.asp page has at least a forced invalid SQL syntax error, but this could not be repeated for news.asp Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/qp7enterprise-sql-vuln.html - http://www.osvdb.org/22069 - http://www.securityfocus.com/bid/16022 - http://www.osvdb.org/22070
CVE ID: CVE-2005-4487 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in RAMSite R|1 CMS 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchfield parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16012 - http://secunia.com/advisories/18196 - http://www.vupen.com/english/advisories/2005/3035 - http://pridels0.blogspot.com/2005/12/ramsite-r1-cms-xss-vuln.html
CVE ID: CVE-2005-4488 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.tpl in Redakto WCMS 3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) iid, (2) iid2, (3) r, (4) cart, (5) str, (6) nf, and (7) a parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/3038 - http://secunia.com/advisories/18195 - http://pridels0.blogspot.com/2005/12/redakto-wcms-multiple-xss-vuln.html - http://www.securityfocus.com/bid/16013
CVE ID: CVE-2005-4489 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Scoop 1.1 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) type and (2) count parameters, and (3) the query string in a story. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21945 - http://www.securityfocus.com/bid/16014 - http://www.osvdb.org/21944 - http://www.vupen.com/english/advisories/2005/3041 - http://pridels0.blogspot.com/2005/12/scoop-xss-vuln.html - http://secunia.com/advisories/18182
CVE ID: CVE-2005-4490 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) keyword and (2) invalid parameter to articleSearch.asp; (3) username and (4) invalid parameter to lostPassword.asp; (5) Username, (6) Password, and (7) invalid parameter to account_login.asp; (8) area, (9) articleZoneID, (10) r, and (11) invalid parameters to category.asp; and invalid parameters to (12) articleZone.asp, (13) prePurchaserRegistration.asp, and (14) requestDemo.as
category.asp; and invalid parameters to (12) articleZone.asp, (13) prePurchaserRegistration.asp, and (14) requestDemo.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16015 - http://www.vupen.com/english/advisories/2005/3049 - http://pridels0.blogspot.com/2005/12/scoop-multiple-xss-vuln.html
CVE ID: CVE-2005-4491 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Sitekit CMS 6.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) query string, (2) textonly, (3) locID, and (4) lang parameters to (a) Default.aspx, and the (6) ClickFrom parameter to (b) Request-call-back.html and (c) registration-form.html. NOTE: the vendor states "This issue was resolved by a minor update to Sitekit CMS v6.6, sanitising the html code and eradicating related security issues." Additional Analyst Notes: - CVE Program Co
CMS v6.6, sanitising the html code and eradicating related security issues." Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/sitekit-cms-multiple-xss-vuln.html - http://www.securityfocus.com/bid/16016 - http://www.osvdb.org/22073 - http://www.attrition.org/pipermail/vim/2006-March/000611.html - http://www.osvdb.org/22071 - http://www.osvdb.org/22072 - http://www.vupen.com/english/advisories/2005/3050
CVE ID: CVE-2005-4492 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Starphire SiteSage 5.0.18 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the norelay_highlight_words parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/sitesage-xss-vuln.html - http://www.vupen.com/english/advisories/2005/3051 - http://secunia.com/advisories/18214 - http://www.osvdb.org/21861 - http://www.securityfocus.com/bid/16017
CVE ID: CVE-2005-4493 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SpearTek 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2006-August/001008.html - http://www.securityfocus.com/bid/16018 - http://www.osvdb.org/22068 - http://www.vupen.com/english/advisories/2005/3052 - http://pridels0.blogspot.com/2005/12/speartek-xss-vuln.html
CVE ID: CVE-2005-4494 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SPIP 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) spip_login.php3 and (2) spip_pass.php3. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/3061 - http://www.osvdb.org/21865 - http://www.osvdb.org/21864 - http://www.securityfocus.com/bid/16019 - http://pridels0.blogspot.com/2005/12/spip-xss-vuln.html - http://secunia.com/advisories/18211
CVE ID: CVE-2005-4495 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.cfm in SpireMedia mx7 allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: the vendor has disputed this issue, stating "This information is incorrect, unproven, and potentially slanderous." However, CVE and OSVDB have both performed additional research that suggests that this might be path disclosure from invalid SQL syntax Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/spiremedia-cms-sql-inj-vuln.html
yst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/spiremedia-cms-sql-inj-vuln.html - http://www.vupen.com/english/advisories/2005/3053 - http://www.securityfocus.com/bid/16039 - http://www.osvdb.org/22066
CVE ID: CVE-2005-4496 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search in SyntaxCMS 1.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search_query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/3054 - http://www.osvdb.org/21859 - http://secunia.com/advisories/18207 - http://www.securityfocus.com/bid/16033 - http://pridels0.blogspot.com/2005/12/syntaxcms-xss-vuln.html
CVE ID: CVE-2005-4497 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Tangora Portal CMS 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter in a search page, as demonstrated using (1) page1631.aspx and (2) page496.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18206 - http://www.vupen.com/english/advisories/2005/3055 - http://www.osvdb.org/21860 - http://pridels0.blogspot.com/2005/12/tangora-portal-cms-xss-vuln.html - http://www.securityfocus.com/
.osvdb.org/21860 - http://pridels0.blogspot.com/2005/12/tangora-portal-cms-xss-vuln.html - http://www.securityfocus.com/bid/16034
CVE ID: CVE-2005-4498 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Text-e 1.6.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16035 - http://www.osvdb.org/22067 - http://pridels0.blogspot.com/2005/12/text-e-xss-vuln.html
CVE ID: CVE-2005-4499 State: PUBLISHED Published: 2005-12-22T11:00:00 Last Updated: 2024-08-07T23:46:05.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges by sniffing the username from the cleartext portion of a RADIUS session, then using the password to log in to another device that uses CS ACS. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.c
her device that uses CS ACS. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/420020/100/0/threaded - http://www.securityfocus.com/bid/16025 - http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_field_notice09186a00805bf1c4.shtml - http://www.osvdb.org/22193 - http://www.securityfocus.com/archive/1/420103/100/0/threaded - http://secunia.com/advisories/18141
CVE ID: CVE-2005-4500 State: PUBLISHED Published: 2005-12-22T21:00:00 Last Updated: 2024-08-07T23:46:05.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in MusicBox 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) show and (2) type parameter. NOTE: the provenance of this information is unknown, although it was later rediscovered. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22272 - http://www.securityfocus.com/bid/16030 - http://www.vupen.com/english/advisories/2006/0124 - http://archives.neohapsis.com/archives/bugtraq/2006-03/0515.html - https://exchange.xforce.ibmcloud.com/vulnerabi
0124 - http://archives.neohapsis.com/archives/bugtraq/2006-03/0515.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24055 - http://secunia.com/advisories/18369
CVE ID: CVE-2005-4501 State: PUBLISHED Published: 2005-12-22T21:00:00 Last Updated: 2024-08-07T23:46:05.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki before 1.5.4 uses a hard-coded "internal placeholder string", which allows remote attackers to bypass protection against cross-site scripting (XSS) attacks and execute Javascript using inline style attributes, which are processed by Internet Explorer. Additional Analyst Notes: - CVE Program Container: References: - http://www.mediawiki.org/wiki/Download - http://www.vupen.com/english/advisories/2005/3059 - http://secunia.com/advisories/18219 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23882 - http://lists.
/3059 - http://secunia.com/advisories/18219 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23882 - http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html - http://www.securityfocus.com/bid/16032 - http://secunia.com/advisories/18717
CVE ID: CVE-2005-4502 State: PUBLISHED Published: 2005-12-22T21:00:00 Last Updated: 2024-08-07T23:46:05.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in httprint v202, and possibly other versions before v301, allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response, which is not sanitized before being displayed to the user. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/3070 - http://securitytracker.com/id?1015403 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23885 - http://secunia.com/advisories/18208 - http://www.c
015403 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23885 - http://secunia.com/advisories/18208 - http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_httprint_Multiple_Vulnerabilities.pdf - http://net-square.com/httprint/#history - http://www.securityfocus.com/bid/16031 - http://www.securityfocus.com/archive/1/420101/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040532.html
CVE ID: CVE-2005-4503 State: PUBLISHED Published: 2005-12-22T21:00:00 Last Updated: 2024-08-07T23:46:05.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: httprint v202, and possibly other versions before v301, allows remote attackers to cause a denial of service (crash) via a long Server field in an HTTP response. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/3070 - http://securitytracker.com/id?1015403 - http://secunia.com/advisories/18208 - http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_httprint_Multiple_Vulnerabilities.pdf - http://net-square.com/httprint/#history - http://www.securityfocus.com/bid/16031 -
print_Multiple_Vulnerabilities.pdf - http://net-square.com/httprint/#history - http://www.securityfocus.com/bid/16031 - http://www.securityfocus.com/archive/1/420101/100/0/threaded - http://www.osvdb.org/21917 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23886 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040532.html