Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-3113 State: PUBLISHED Published: 2005-09-30T04:00:00 Last Updated: 2024-08-07T23:01:57.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ActiveX control for NateOn Messenger (NateonDownloadManager.ocx) allows remote attackers to download and execute arbitrary programs by setting the arguments to the GotNate.Excute method. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=112796492819343&w=2 - http://www.securityfocus.com/bid/14974 - http://secunia.com/advisories/16983 - http://securitytracker.com/id?1014987
CVE ID: CVE-2005-3114 State: PUBLISHED Published: 2005-09-30T04:00:00 Last Updated: 2024-08-07T23:01:57.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ActiveX control for NateOn Messenger (NateonDownloadManager.ocx) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long third argument to the GotNate.Excute method. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=112796492819343&w=2 - http://www.securityfocus.com/bid/14974 - http://secunia.com/advisories/16983 - http://securitytracker.com/id?1014987
CVE ID: CVE-2005-3115 State: PUBLISHED Published: 2005-09-30T04:00:00 Last Updated: 2024-08-07T23:01:57.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: mpeg-tools before 1.5b-r2 creates multiple temporary files insecurely, which allows local users to overwrite arbitrary files via (1) ts.stat, (2) ts.mpg, (3) foobar, (4) blockbar, or (5) foobar[NNN]. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17051 - http://secunia.com/advisories/17008 - http://www.gentoo.org/security/en/glsa/glsa-200510-02.xml - https://bugs.gentoo.org/show_bug.cgi?id=107344 - http://www.securityfocus.com/bid/15002
CVE ID: CVE-2005-3116 State: PUBLISHED Published: 2005-11-18T11:00:00 Last Updated: 2024-08-07T23:01:57.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute arbitrary code via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/574662 - http://www.osvdb.org/20674 - http://www.securityfocus.com/archive/1/422066/100/0/threaded - http://www.securityfocus.com/bid/15353 - http://www.idefense.com/application/poi/display?id=336&typ
066/100/0/threaded - http://www.securityfocus.com/bid/15353 - http://www.idefense.com/application/poi/display?id=336&type=vulnerabilities - http://securitytracker.com/id?1015170 - http://secunia.com/advisories/17503 - http://securityresponse.symantec.com/avcenter/security/Content/2005.11.08b.html - http://www.securityfocus.com/archive/1/422157/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/22985 - http://www.vupen.com/english/advisories/2005/2349 - http://seer.support.veritas.com/docs/279553.htm
CVE ID: CVE-2005-3117 State: REJECTED Published: 2005-10-06T04:00:00 Last Updated: 2005-11-02T10:00:00 Description: No description available.
CVE ID: CVE-2005-3118 State: PUBLISHED Published: 2005-10-06T04:00:00 Last Updated: 2024-08-07T23:01:58.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mason before 1.0.0 does not install the init script after the user uses Mason to configure a firewall, which causes the system to run without a firewall after a reboot. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/19875 - http://www.vupen.com/english/advisories/2005/1976 - http://secunia.com/advisories/17084 - http://www.debian.org/security/2005/dsa-845 - http://www.securityfocus.com/bid/15019
CVE ID: CVE-2005-3119 State: PUBLISHED Published: 2005-10-11T04:00:00 Last Updated: 2024-08-07T23:01:57.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the request_key_auth_destroy function in request_key_auth in Linux kernel 2.6.10 up to 2.6.13 allows local users to cause a denial of service (memory consumption) via a large number of authorization token keys. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15076 - http://www.redhat.com/support/errata/RHSA-2005-808.html - http://secunia.com/advisories/17364 - http://linux.bkbits.net:8080/linux-2.6/cset%4043483fddCiQX1WyG_orbko06TrjMVA - https://oval.cisecurity.o
isories/17364 - http://linux.bkbits.net:8080/linux-2.6/cset%4043483fddCiQX1WyG_orbko06TrjMVA - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11236 - http://secunia.com/advisories/17114
CVE ID: CVE-2005-3120 State: PUBLISHED Published: 2005-10-17T04:00:00 Last Updated: 2024-08-07T23:01:58.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015065 - http://secunia.com/advisories/18376 - http://secunia.com/advisories/17216 - http://secunia.com/advisories/17480 - http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html
/17216 - http://secunia.com/advisories/17480 - http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.423056 - http://www.openpkg.org/security/OpenPKG-SA-2005.026-lynx.html - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.47/SCOSA-2005.47.txt - http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038019.html - http://www.securityfocus.com/archive/1/435689/30/4740/threaded - http://secunia.com/advisories/17444 - http://www.debian.org/security/2006/dsa-1085 - http://www.gentoo.org/security/en/glsa/glsa-200510-15.xml - http://secunia.com/advisories/18584 - http://secunia.c
085 - http://www.gentoo.org/security/en/glsa/glsa-200510-15.xml - http://secunia.com/advisories/18584 - http://secunia.com/advisories/17238 - http://www.novell.com/linux/security/advisories/2005_25_sr.html - http://secunia.com/advisories/17150 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:186 - http://secunia.com/advisories/17248 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=170253 - http://support.avaya.com/elmodocs2/security/ASA-2006-010.htm - http://www.securityfocus.com/archive/1/419763/100/0/threaded - http://secunia.com/advisories/17360 - http://secunia.com/advisories/17445 - http://www.securityfocus.com/bid/15117 - https://usn.ubuntu.com/206-1/ - https://oval.
://secunia.com/advisories/17445 - http://www.securityfocus.com/bid/15117 - https://usn.ubuntu.com/206-1/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9257 - http://www.redhat.com/support/errata/RHSA-2005-803.html - http://secunia.com/advisories/17231 - http://secunia.com/advisories/17230 - http://secunia.com/advisories/17340 - http://secunia.com/advisories/20383 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.7/SCOSA-2006.7.txt - http://www.debian.org/security/2005/dsa-874 - http://www.debian.org/security/2005/dsa-876
CVE ID: CVE-2005-3121 State: PUBLISHED Published: 2005-10-20T04:00:00 Last Updated: 2024-08-07T23:01:58.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: A rule file in module-assistant before 0.9.10 causes a temporary file to be created insecurely, which allows local users to conduct unauthorized operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-867 - http://secunia.com/advisories/17267 - http://www.securityfocus.com/bid/15151
CVE ID: CVE-2005-3122 State: REJECTED Published: 2005-10-30T20:00:00 Last Updated: 2005-11-04T10:00:00 Description: No description available.
CVE ID: CVE-2005-3123 State: PUBLISHED Published: 2005-10-30T20:00:00 Last Updated: 2024-08-07T23:01:57.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted sequences such as "/.//..//////././", which is collapsed into "/.././" after ".." and "//" sequences are removed. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_28_sr.html - http://www.osvdb.org/20360 - http://securityreason.com/securityalert/127 - http://securitytracker.com/id?1015118 - http://secunia.com/advisories/17559 - http://www.secur
n.com/securityalert/127 - http://securitytracker.com/id?1015118 - http://secunia.com/advisories/17559 - http://www.securityfocus.com/bid/15228 - http://lists.gnu.org/archive/html/gnump3d-users/2005-10/msg00013.html - http://www.vupen.com/english/advisories/2005/2242 - http://www.debian.org/security/2005/dsa-877 - http://secunia.com/advisories/17351 - http://www.novell.com/linux/security/advisories/2005_27_sr.html
CVE ID: CVE-2005-3124 State: PUBLISHED Published: 2005-11-06T11:00:00 Last Updated: 2024-08-07T23:01:58.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-883 - http://secunia.com/advisories/17472 - http://www.vupen.com/english/advisories/2005/2308 - http://secunia.com/advisories/17454 - http://www.securityfocus.com/bid/15320
CVE ID: CVE-2005-3125 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-3126 State: PUBLISHED Published: 2006-01-18T00:00:00 Last Updated: 2024-08-07T23:01:57.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) kantiword (kantiword.sh) and (2) gantiword (gantiword.sh) scripts in antiword 0.35 and earlier allow local users to overwrite arbitrary files via a symlink attack on temporary (a) output and (b) error files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15866 - http://www.vupen.com/english/advisories/2006/0242 - http://www.securityfocus.com/bid/16278 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24194 - http://secunia.com/advisories/18530 - http://www.debian.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/24194 - http://secunia.com/advisories/18530 - http://www.debian.org/security/2005/dsa-945
CVE ID: CVE-2005-3127 State: PUBLISHED Published: 2005-10-04T04:00:00 Last Updated: 2024-08-07T23:01:59.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in lucidCMS 1.0.11 allows remote attackers to inject arbitrary web script or HTML via the query string. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22436 - http://securityreason.com/securityalert/29 - http://marc.info/?l=bugtraq&m=112784678820859&w=2 - http://www.securityfocus.com/bid/14951
CVE ID: CVE-2005-3128 State: PUBLISHED Published: 2005-10-04T04:00:00 Last Updated: 2024-08-07T23:01:57.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2732 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:178 - http://squirrelmail.org/plugin_view.php?id=101 - http://moritz-naumann.com/adv/0002/sqmadd
isories?name=MDKSA-2005:178 - http://squirrelmail.org/plugin_view.php?id=101 - http://moritz-naumann.com/adv/0002/sqmadd/0002.txt - http://www.securityfocus.com/bid/14973 - http://securitytracker.com/id?1014988 - http://docs.info.apple.com/article.html?artnum=306172 - http://marc.info/?l=bugtraq&m=112801672520766&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22453 - http://www.securityfocus.com/bid/25159 - http://secunia.com/advisories/16987/ - http://secunia.com/advisories/26235
CVE ID: CVE-2005-3129 State: PUBLISHED Published: 2005-10-04T04:00:00 Last Updated: 2024-08-07T23:01:58.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Serendipity 0.8.4 and earlier allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag to serendipity_admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112801570631203&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037580.html - http://secunia.com/advisories/17011/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22456
CVE ID: CVE-2005-3130 State: PUBLISHED Published: 2005-10-04T04:00:00 Last Updated: 2024-08-07T23:01:57.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lucidCMS 1.0.11 allows remote attackers to execute arbitrary SQL commands via the login field. Additional Analyst Notes: - CVE Program Container: References: - http://rgod.altervista.org/lucidcms1011.html - http://marc.info/?l=bugtraq&m=112803020415743&w=2 - http://securityreason.com/securityalert/33 - http://www.securityfocus.com/bid/14976
CVE ID: CVE-2005-3131 State: PUBLISHED Published: 2005-10-04T04:00:00 Last Updated: 2024-08-07T23:01:58.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to blank.html, or the createdataCX parameter to (2) calendar_d.html, (3) calendar_m.html, or (4) calendar_w.html. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17046/ - http://www.securityfocus.com/bid/14980 - http://marc.info/?l=bugtraq&m=112810385104168&
/secunia.com/advisories/17046/ - http://www.securityfocus.com/bid/14980 - http://marc.info/?l=bugtraq&m=112810385104168&w=2 - http://www.vupen.com/english/advisories/2005/1933
CVE ID: CVE-2005-3132 State: PUBLISHED Published: 2005-10-04T04:00:00 Last Updated: 2024-08-07T23:01:57.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to bwlist_inc.html, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17046/ - http://marc.info/?l=bugtraq&m=112810385104168&w=2 - http://www.vupen.com/english/advisories/2005/1933
CVE ID: CVE-2005-3133 State: PUBLISHED Published: 2005-10-04T04:00:00 Last Updated: 2024-08-07T23:01:58.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to (1) delete arbitrary files or directories via a relative path to the id parameter to logout.html or (2) include arbitrary PHP files or other files via the helpid parameter to help.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14988 - http://secunia.com/advisories/17046/ - http://www.securityfocus.com/bid/14986 -
ttp://www.securityfocus.com/bid/14988 - http://secunia.com/advisories/17046/ - http://www.securityfocus.com/bid/14986 - http://marc.info/?l=bugtraq&m=112810385104168&w=2 - http://www.vupen.com/english/advisories/2005/1933
CVE ID: CVE-2005-3134 State: PUBLISHED Published: 2005-10-04T04:00:00 Last Updated: 2024-08-07T23:01:59.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changing the client device name (ClientName). Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/kb/entry%21default.jspa?categoryID=275&externalID=CTX107705 - http://securitytracker.com/id?1014994 - http://marc.info/?l=bugtraq&m=112811189420696&w=2 - http://securityreason.com/securityalert/39 - http://www.securityfocus.com/bid/14989 - http://www.gr
12811189420696&w=2 - http://securityreason.com/securityalert/39 - http://www.securityfocus.com/bid/14989 - http://www.grupoitpro.com.ar/ctxpoliciesbypass.txt - http://secunia.com/advisories/17032/
CVE ID: CVE-2005-3135 State: PUBLISHED Published: 2005-10-04T04:00:00 Last Updated: 2024-08-07T23:01:58.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Virtools Web Player 3.0.0.100 and earlier allows remote attackers to execute arbitrary code via a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112811771331997&w=2 - http://securitytracker.com/id?1014993 - http://secunia.com/advisories/17034/ - http://www.securityfocus.com/bid/14990 - http://aluigi.altervista.org/adv/virtbugs-adv.txt
CVE ID: CVE-2005-3136 State: PUBLISHED Published: 2005-10-04T04:00:00 Last Updated: 2024-08-07T23:01:57.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Virtools Web Player 3.0.0.100 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112811771331997&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22471 - http://securityreason.com/securityalert/40 - http://securitytracker.com/id?1014993 - http://secunia.com/advisories/17034/ - http://www.securityfocus.com/bid/14991 - http://aluigi.altervist
com/id?1014993 - http://secunia.com/advisories/17034/ - http://www.securityfocus.com/bid/14991 - http://aluigi.altervista.org/adv/virtbugs-adv.txt
CVE ID: CVE-2005-3137 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T23:01:57.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) cfmailfilter and (2) cfcron.in files for cfengine 1.6.5 allow local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CVE-2005-2960. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=107871 - http://secunia.com/advisories/17040 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22489 - http://www.securityfocus.com/bid/14994 - http://www.debian.org/security/2005/dsa-836 - http://www.ubuntu.com/usn/usn-198-1
tp://www.securityfocus.com/bid/14994 - http://www.debian.org/security/2005/dsa-836 - http://www.ubuntu.com/usn/usn-198-1 - http://www.debian.org/security/2005/dsa-835 - http://secunia.com/advisories/17182 - http://secunia.com/advisories/17037/ - http://groups.google.com/group/gnu.cfengine.help/browse_thread/thread/fc25e7d98f8ba401/38151ed821803be0#38151ed821803be0 - http://secunia.com/advisories/17142 - http://secunia.com/advisories/17038 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:184
CVE ID: CVE-2005-3138 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T23:01:58.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.18rc1 through 2.18.3, 2.19 through 2.20rc2, and 2.21 allows remote attackers to obtain sensitive information such as the list of installed products via the config.cgi file, which is accessible even when the requirelogin parameter is set. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17030/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22490 - http://www.bugzilla.org/security/2.18.4/ - http://marc.info/?l=bugtraq&m=112818466125484&w=2 - http://www.securityfocu
- http://www.bugzilla.org/security/2.18.4/ - http://marc.info/?l=bugtraq&m=112818466125484&w=2 - http://www.securityfocus.com/bid/14995
CVE ID: CVE-2005-3139 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T23:01:58.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.19.1 through 2.20rc2 and 2.21, with user matching turned on in substring mode, allows attackers to list all users whose names match an arbitrary substring, even when the usevisibilitygroups parameter is set. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42799 - http://secunia.com/advisories/17030/ - http://www.securityfocus.com/bid/14996 - http://www.bugzilla.org/security/2.18.4/ - http://marc.info/?l=bugtraq&m=112818466125484&w=2
CVE ID: CVE-2005-3140 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T23:01:58.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Procom NetFORCE 800 4.02 M10 Build 20 and possibly other versions sends the NIS password map (passwd.nis) as a file attachment in diagnostic e-mail messages, which allows remote attackers to obtain the cleartext NIS password hashes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14997 - http://marc.info/?l=bugtraq&m=112818351032426&w=2 - http://secunia.com/advisories/17033/
CVE ID: CVE-2005-3141 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T23:01:59.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cerulean Studios Trillian 3.0 allows remote attackers to cause a denial of service (crash) via a reverse direct connection from a different client, as demonstrated using LICQ. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20006 - http://sourceforge.net/mailarchive/forum.php?thread_id=8315933&forum_id=5420 - http://marc.info/?l=bugtraq&m=112837909626441&w=2 - http://ceruleanstudios.com/forums/showthread.php?s=84987af3601384b1dc7ea1f36b237c9c&threadid=64889 - http://securityreason.com/secu
leanstudios.com/forums/showthread.php?s=84987af3601384b1dc7ea1f36b237c9c&threadid=64889 - http://securityreason.com/securityalert/43
CVE ID: CVE-2005-3142 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T23:01:57.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Kaspersky Antivirus (KAV) 5.0 and Kaspersky Personal Security Suite 1.1 allows remote attackers to execute arbitrary code via a CAB file with large records after the header. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/1934 - http://marc.info/?l=bugtraq&m=112837961522571&w=2 - http://securityreason.com/securityalert/44 - http://www.securityfocus.com/bid/14998 - http://secunia.com/advisories/17024/ - http://archives.neohapsis.com/arch
/44 - http://www.securityfocus.com/bid/14998 - http://secunia.com/advisories/17024/ - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0018.html - http://www.osvdb.org/19850 - http://securitytracker.com/id?1014998 - http://www.rem0te.com/public/images/kaspersky.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/22497 - http://www.kaspersky.com/news?id=171512144
CVE ID: CVE-2005-3143 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T23:01:58.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to cause a denial of service (crash) via IMAP clients on Mac OS X 10.4 Mail 2. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History_535.txt - http://www.securityfocus.com/bid/14981 - http://secunia.com/advisories/17003