Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-2852 State: PUBLISHED Published: 2005-09-08T04:00:00Z Last Updated: 2024-09-16T20:43:26.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a denial of service (ABEND) via an incorrect password length, as exploited by the "worm.rbot.ccc" worm. Additional Analyst Notes: - CVE Program Container: References: - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971832.htm - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971821.htm - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971822.htm
CVE ID: CVE-2005-2853 State: PUBLISHED Published: 2005-09-08T04:00:00Z Last Updated: 2024-09-17T01:31:26.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in GuppY 4.5.3a and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the pg parameter to printfaq.php, or the (2) Referer or (3) User-Agent HTTP headers, which are not properly handled by error.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14753 - http://secunia.com/advisories/16707 - http://www.freeguppy.org/thread.php?lng=en&pg=81882&fid=1&cat=200 - http://www.freeguppy.org/download.php?l
ries/16707 - http://www.freeguppy.org/thread.php?lng=en&pg=81882&fid=1&cat=200 - http://www.freeguppy.org/download.php?lng=en
CVE ID: CVE-2005-2854 State: PUBLISHED Published: 2005-09-08T04:00:00Z Last Updated: 2024-09-16T20:52:11.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1 allows remote attackers to use the script as a mail relay (spam proxy) via CRLF sequences in the (1) name or (2) email fields, which are injected into mail headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14749 - http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0094.html
CVE ID: CVE-2005-2855 State: PUBLISHED Published: 2005-09-08T04:00:00 Last Updated: 2024-08-07T22:53:28.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Unclassified NewsBoard 1.5.3 allows remote attackers to inject arbitrary web script or HTML via the description field. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/1665 - http://www.securityfocus.com/bid/14748 - http://packetstormsecurity.org/0509-exploits/unb153.html - http://www.osvdb.org/19239 - http://secunia.com/advisories/16726 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22172 - http://marc.info/?l=bugt
p://secunia.com/advisories/16726 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22172 - http://marc.info/?l=bugtraq&m=112605049014473&w=2
CVE ID: CVE-2005-2856 State: PUBLISHED Published: 2005-09-08T04:00:00 Last Updated: 2024-08-07T22:53:28.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including (1) ALZip 5.51 through 6.11, (2) Servant Salamander 2.0 and 2.5 Beta 1, (3) WinHKI 1.66 and 1.67, (4) ExtractNow 3.x, (5) Total Commander 6.53, (6) Anti-Trojan 5.5.421, (7) PowerArchiver before 9.61, (8) UltimateZip 2.7,1, 3.0.3, and 3.1b, (9) Where Is It (WhereIsIt) 3.73.501, (10) FilZip 3.04, (11) IZArc 3.5 beta3, (12) Eazel 1.0, (13) Rising Antivirus 18.27.21 and earlier, (14) AutoMate
3.501, (10) FilZip 3.04, (11) IZArc 3.5 beta3, (12) Eazel 1.0, (13) Rising Antivirus 18.27.21 and earlier, (14) AutoMate 6.1.0.0, (15) BitZipper 4.1 SR-1, (16) ZipTV, and other products, allows user-assisted attackers to execute arbitrary code via a long filename in an ACE archive. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26982 - http://securitytracker.com/id?1016512 - http://secunia.com/secunia_research/2006-24/advisory - http://www.vupen.com/english/advisories/2006/2824 - http://securityreason.com/securityalert/49 - http://www.securityfocus.com/bid/19884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26479
m/securityalert/49 - http://www.securityfocus.com/bid/19884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26479 - http://www.vupen.com/english/advisories/2006/1797 - http://www.securityfocus.com/archive/1/434279/100/0/threaded - http://securitytracker.com/id?1014863 - http://securitytracker.com/id?1016011 - http://securitytracker.com/id?1016115 - http://secunia.com/advisories/19939 - http://secunia.com/secunia_research/2006-46/advisory/ - http://securitytracker.com/id?1016065 - http://www.vupen.com/english/advisories/2006/1835 - http://securitytracker.com/id?1016088 - http://www.vupen.com/english/advisories/2006/3495 - http://secunia.com/advisories/19967 - http://secunia.com/secunia
8 - http://www.vupen.com/english/advisories/2006/3495 - http://secunia.com/advisories/19967 - http://secunia.com/secunia_research/2006-27/ - http://securitytracker.com/id?1016177 - http://securitytracker.com/id?1016114 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26272 - http://secunia.com/secunia_research/2006-50/advisory/ - http://www.securityfocus.com/archive/1/432579/100/0/threaded - http://secunia.com/advisories/19931 - http://secunia.com/secunia_research/2006-36/advisory - http://secunia.com/secunia_research/2006-28/advisory - https://exchange.xforce.ibmcloud.com/vulnerabilities/26447 - http://secunia.com/advisories/19975 - http://www.vupen.com/english/advisories/2006/1775 -
d.com/vulnerabilities/26447 - http://secunia.com/advisories/19975 - http://www.vupen.com/english/advisories/2006/1775 - http://secunia.com/advisories/16479 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26385 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26116 - http://www.securityfocus.com/archive/1/436639/100/0/threaded - http://www.vupen.com/english/advisories/2006/1611 - http://www.vupen.com/english/advisories/2006/1681 - http://www.securityfocus.com/archive/1/433693/100/0/threaded - http://www.vupen.com/english/advisories/2006/2184 - http://www.vupen.com/english/advisories/2006/1577 - http://secunia.com/secunia_research/2006-33/advisory/ - http://secunia.com/secunia_res
om/english/advisories/2006/1577 - http://secunia.com/secunia_research/2006-33/advisory/ - http://secunia.com/secunia_research/2006-29/advisory/ - http://www.securityfocus.com/archive/1/434234/100/0/threaded - http://secunia.com/advisories/19938 - http://secunia.com/advisories/19581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26302 - http://www.vupen.com/english/advisories/2006/1694 - http://secunia.com/advisories/20270 - http://secunia.com/advisories/19890 - http://secunia.com/advisories/19977 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26142 - http://secunia.com/secunia_research/2006-38/advisory - http://secunia.com/advisories/19596 - http://secunia.com/secunia_researc
secunia.com/secunia_research/2006-38/advisory - http://secunia.com/advisories/19596 - http://secunia.com/secunia_research/2005-41/advisory/ - http://securitytracker.com/id?1016066 - http://www.securityfocus.com/archive/1/440303/100/0/threaded - http://secunia.com/advisories/19458 - http://secunia.com/secunia_research/2006-25/advisory - http://securitytracker.com/id?1016012 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26736 - http://secunia.com/secunia_research/2006-32/advisory/ - http://secunia.com/advisories/19454 - http://www.securityfocus.com/archive/1/433258/100/0/threaded - http://secunia.com/secunia_research/2006-30/advisory - https://exchange.xforce.ibmcloud.com/vulnerabilit
00/0/threaded - http://secunia.com/secunia_research/2006-30/advisory - https://exchange.xforce.ibmcloud.com/vulnerabilities/26315 - http://www.securityfocus.com/archive/1/432357/100/0/threaded - http://www.osvdb.org/25129 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27763 - http://secunia.com/advisories/19834 - http://www.securityfocus.com/archive/1/434011/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28787 - http://www.securityfocus.com/archive/1/433352/100/0/threaded - http://secunia.com/advisories/20009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26480 - http://www.vupen.com/english/advisories/2006/2047 - https://exchange.xforce.ibmcloud.com/vu
.com/vulnerabilities/26480 - http://www.vupen.com/english/advisories/2006/2047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26168 - http://www.securityfocus.com/bid/14759 - http://www.vupen.com/english/advisories/2006/1836 - http://securitytracker.com/id?1016257 - http://secunia.com/advisories/19612 - http://www.vupen.com/english/advisories/2006/1565 - http://www.vupen.com/english/advisories/2006/1725 - http://securitytracker.com/id?1015852 - http://marc.info/?l=bugtraq&m=112621008228458&w=2
CVE ID: CVE-2005-2857 State: PUBLISHED Published: 2005-09-08T04:00:00Z Last Updated: 2024-09-16T17:54:35.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Free SMTP Server 2.2 allows remote attackers to use the server as an open mail relay (spam proxy). Additional Analyst Notes: - CVE Program Container: References: - http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=87 - http://secunia.com/advisories/16698
CVE ID: CVE-2005-2858 State: PUBLISHED Published: 2005-09-08T04:00:00Z Last Updated: 2024-09-16T17:29:09.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Fetch.FetchContact.1 ActiveX control (Fetch.dll) for Rediff Bol 7.0 allows remote attackers to read the Windows Address Book via the FullAddressBook method. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16685 - http://www.infogreg.com/security/im/rediff-bol-7-exposes-wab.html
CVE ID: CVE-2005-2859 State: PUBLISHED Published: 2005-09-08T04:00:00Z Last Updated: 2024-09-17T01:01:48.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Savant Web Server stores user credentials in plaintext in the Savant\Users registry key, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16666 - http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=84
CVE ID: CVE-2005-2860 State: PUBLISHED Published: 2005-09-08T04:00:00 Last Updated: 2024-08-07T22:53:28.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Nikto 1.35 and earlier allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response header, which is directly injected into an HTML report. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14717 - http://seclists.org/lists/vulnwatch/2005/Jul-Sep/0032.html - http://www.cybsec.com/vuln/010905-multiple_webscanner_script_injection.pdf - http://marc.info/?l=bugtraq&m=112561344400914&w=2
CVE ID: CVE-2005-2861 State: PUBLISHED Published: 2005-09-08T04:00:00Z Last Updated: 2024-09-16T23:32:06.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in N-Stealth Commercial Edition before 5.8.0.38 and Free Edition before 5.8.1.03 allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response header, which is directly injected into an HTML report. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14717 - http://seclists.org/lists/vulnwatch/2005/Jul-Sep/0032.html - http://www.cybsec.com/vuln/010905-multiple_webscanner_script_injection.pdf
CVE ID: CVE-2005-2862 State: PUBLISHED Published: 2005-09-08T04:00:00 Last Updated: 2024-08-07T22:53:28.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: ADSL Road Runner modem in the Annex A family has a service running on port 224, which allows remote attackers to login to the modem with a blank password and gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112607274800750&w=2
CVE ID: CVE-2005-2863 State: PUBLISHED Published: 2005-09-08T04:00:00 Last Updated: 2024-08-07T22:53:28.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in openwebmail-main.pl in OpenWebMail 2.41 allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112603902716918&w=2 - http://www.securityfocus.com/bid/14771 - http://secunia.com/advisories/16734/
CVE ID: CVE-2005-2864 State: PUBLISHED Published: 2005-09-08T04:00:00 Last Updated: 2024-08-07T22:53:28.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: URBAN 1.5.3_1 allows local users to overwrite arbitrary files via a symlink attack on the (1) high score or (2) save game files. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112604855119036&w=2 - http://secunia.com/advisories/16680/
CVE ID: CVE-2005-2865 State: PUBLISHED Published: 2005-09-08T04:00:00 Last Updated: 2024-08-07T22:53:28.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in aMember Pro 2.3.4 allow remote attackers to execute arbitrary PHP code via the config[root_dir] parameter to (1) mysql.inc.php, (2) efsnet.inc.php, (3) theinternetcommerce.inc.php, (4) cdg.inc.php, (5) compuworld.inc.php, (6) directone.inc.php, (7) authorize_aim.inc.php, (8) beanstream.inc.php, (9) config.inc.php, (10) eprocessingnetwork.inc.php, (11) eway.inc.php, (12) linkpoint.inc.php, (13) logiccommerce.inc.php, (14) netbilling.inc.php, (15) payflow_pro.inc.php, (16) pa
.inc.php, (12) linkpoint.inc.php, (13) logiccommerce.inc.php, (14) netbilling.inc.php, (15) payflow_pro.inc.php, (16) paymentsgateway.inc.php, (17) payos.inc.php, (18) payready.inc.php, or (19) plugnplay.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22157 - http://marc.info/?l=bugtraq&m=112605375926801&w=2
CVE ID: CVE-2005-2866 State: PUBLISHED Published: 2005-09-08T04:00:00Z Last Updated: 2024-09-16T23:06:04.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mercora IMRadio 4.0.0.0 stores usernames and passwords in plaintext in the MercoraClient\Profiles registry key, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014780
CVE ID: CVE-2005-2867 State: PUBLISHED Published: 2005-09-08T04:00:00Z Last Updated: 2024-09-16T20:37:42.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in BlueWhaleCRM allows remote attackers to execute arbitrary SQL commands via the Account ID field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14697 - http://secunia.com/advisories/16615
CVE ID: CVE-2005-2868 State: PUBLISHED Published: 2005-09-08T04:00:00Z Last Updated: 2024-09-16T23:47:05.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZipTorrent 1.3.7.3 stores sensitive information in plaintext in the pref.txt file, which allows local users to obtain sensitive information such as proxy server information and passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.spyinstructors.com/show.php?name=Advisories&pa=showpage&pid=65 - http://secunia.com/advisories/16542
CVE ID: CVE-2005-2869 State: PUBLISHED Published: 2005-09-08T04:00:00 Last Updated: 2024-08-07T22:53:29.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via (1) the Username to libraries/auth/cookie.auth.lib.php or (2) the error parameter to error.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_28_sr.html - http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html - http://sourceforge.net/tracker/index.php?func=detail&aid=1265740&group_id=23067&atid=3
isories/2005_66_phpmyadmin.html - http://sourceforge.net/tracker/index.php?func=detail&aid=1265740&group_id=23067&atid=377408 - http://secunia.com/advisories/17607 - http://secunia.com/advisories/17559 - http://sourceforge.net/tracker/index.php?func=detail&aid=1240880&group_id=23067&atid=377408 - http://www.debian.org/security/2005/dsa-880 - http://secunia.com/advisories/17337 - http://secunia.com/advisories/16605
CVE ID: CVE-2005-2870 State: PUBLISHED Published: 2005-09-08T04:00:00Z Last Updated: 2024-09-16T19:00:42.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the net-svc script on Solaris 10 allows remote authenticated users to execute arbitrary code on a DHCP client via certain DHCP responses. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101897-1
CVE ID: CVE-2005-2871 State: PUBLISHED Published: 2005-09-09T04:00:00 Last Updated: 2024-08-07T22:53:29.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3.3 and 7.2, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a hostname with all "soft" hyphens (character 0xAD), which is not properly handled by the NormalizeIDN call in nsStandardURL::BuildNormalizedSpec. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/573857 - http://www.debian.org/security/2005/dsa-868 - ht
rogram Container: References: - http://www.kb.cert.org/vuls/id/573857 - http://www.debian.org/security/2005/dsa-868 - http://www.vupen.com/english/advisories/2005/1824 - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html - http://www.vupen.com/english/advisories/2005/1690 - http://securityreason.com/securityalert/83 - http://secunia.com/advisories/16767 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1287 - http://www.vupen.com/english/advisories/2005/1691 - http://secunia.com/advisories/16764 - http://www.debian.org/security/2005/dsa-837 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ad
ww.debian.org/security/2005/dsa-837 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A584 - http://www.ubuntu.com/usn/usn-181-1 - http://www.redhat.com/support/errata/RHSA-2005-791.html - http://secunia.com/advisories/17042 - http://www.securityfocus.com/bid/14784 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9608 - http://secunia.com/advisories/16766 - http://www.debian.org/security/2005/dsa-866 - http://www.security-protocols.com/advisory/sp-x17-advisory.txt - http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0316.html - http://www.redhat.com/support/errata/RHSA-2005-769.html - http://securitytrac
rchives/fulldisclosure/2005-09/0316.html - http://www.redhat.com/support/errata/RHSA-2005-769.html - http://securitytracker.com/id?1014877 - http://www.mozilla.org/security/announce/mfsa2005-57.html - http://www.securiteam.com/securitynews/5RP0B0UGVW.html - http://secunia.com/advisories/17284 - http://www.osvdb.org/19255 - http://secunia.com/advisories/17263 - http://www.redhat.com/support/errata/RHSA-2005-768.html - http://www.ciac.org/ciac/bulletins/p-303.shtml - http://www.gentoo.org/security/en/glsa/glsa-200509-11.xml - http://www.security-protocols.com/firefox-death.html - https://bugzilla.mozilla.org/show_bug.cgi?id=307259 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:1
ml - https://bugzilla.mozilla.org/show_bug.cgi?id=307259 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:174 - http://secunia.com/advisories/17090 - http://marc.info/?l=full-disclosure&m=112624614008387&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22207
CVE ID: CVE-2005-2872 State: PUBLISHED Published: 2005-09-09T04:00:00 Last Updated: 2024-08-07T22:53:28.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ipt_recent kernel module (ipt_recent.c) in Linux kernel before 2.6.12, when running on 64-bit processors such as AMD64, allows remote attackers to cause a denial of service (kernel panic) via certain attacks such as SSH brute force, which leads to memset calls using a length based on the u_int32_t type, acting on an array of unsigned long elements, a different vulnerability than CVE-2005-2873. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18056 - http://www.mandriva.com/secu
Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18056 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - http://secunia.com/advisories/17073 - http://secunia.com/advisories/18059 - http://www.securityfocus.com/archive/1/419522/100/0/threaded - http://www.debian.org/security/2005/dsa-922 - http://www.securityfocus.com/bid/14791 - http://www.debian.org/security/2005/dsa-921 - http://www.redhat.com/support/errata/RHSA-2005-514.html - http://secunia.com/advisories/17826 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11394 - http://secunia.com/advisories/17918 - http://www.kernel.org/git/?p=linux/kernel
on/oval%3Aorg.mitre.oval%3Adef%3A11394 - http://secunia.com/advisories/17918 - http://www.kernel.org/git/?p=linux/kernel/git/chrisw/lsm-2.6.git%3Ba=commit%3Bh=bcfff0b471a60df350338bcd727fc9b8a6aa54b2 - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=322237
CVE ID: CVE-2005-2873 State: PUBLISHED Published: 2005-09-09T04:00:00 Last Updated: 2024-08-07T22:53:29.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ipt_recent kernel module (ipt_recent.c) in Linux kernel 2.6.12 and earlier does not properly perform certain time tests when the jiffies value is greater than LONG_MAX, which can cause ipt_recent netfilter rules to block too early, a different vulnerability than CVE-2005-2872. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:235 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - http://blog.blackdown.de/2005/05/09/fixing-the-ipt_re
http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - http://blog.blackdown.de/2005/05/09/fixing-the-ipt_recent-netfilter-module/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9838 - http://www.securityfocus.com/bid/14791 - http://rhn.redhat.com/errata/RHBA-2007-0304.html - http://secunia.com/advisories/17826 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219
CVE ID: CVE-2005-2874 State: PUBLISHED Published: 2005-09-13T04:00:00 Last Updated: 2024-08-07T22:53:29.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: The is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service (CPU consumption by tight loop) via a "..\.." URL in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://lwn.net/Alerts/152835/ - http://www.cups.org/relnotes.php#010123 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168072 - http://securitytracker.com/id?1012811 - http://www.redhat.com/support/errata/RHSA-2005-772.html - https://oval.cisecuri
http://securitytracker.com/id?1012811 - http://www.redhat.com/support/errata/RHSA-2005-772.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9774 - http://www.cups.org/str.php?L1042+P0+S-1+C0+I0+E0+Q1042