Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-2498 State: PUBLISHED Published: 2005-08-15T04:00:00 Last Updated: 2024-08-07T22:30:01.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3) phpPgAds, and (4) phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be nested, which are injected into an eval function call, a different vulnerability than CVE-2005-1921. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-789 - http://secunia.
onal Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-789 - http://secunia.com/advisories/17066 - http://secunia.com/advisories/16441 - http://marc.info/?l=bugtraq&m=112431497300344&w=2 - http://secunia.com/advisories/16491 - http://secunia.com/advisories/16619 - http://marc.info/?l=bugtraq&m=112412415822890&w=2 - http://marc.info/?l=bugtraq&m=112605112027335&w=2 - http://secunia.com/advisories/16460 - http://www.redhat.com/support/errata/RHSA-2005-748.html - http://www.securityfocus.com/bid/14560 - http://secunia.com/advisories/16558 - http://www.debian.org/security/2005/dsa-840 - http://secunia.com/advisories/16431 - http://secunia.com/advisorie
16558 - http://www.debian.org/security/2005/dsa-840 - http://secunia.com/advisories/16431 - http://secunia.com/advisories/16693 - http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html - http://www.novell.com/linux/security/advisories/2005_49_php.html - http://secunia.com/advisories/17440 - http://www.securityfocus.com/archive/1/408125 - http://secunia.com/advisories/16976 - http://www.gentoo.org/security/en/glsa/glsa-200509-19.xml - http://secunia.com/advisories/16469 - http://secunia.com/advisories/16563 - http://secunia.com/advisories/17053 - http://www.debian.org/security/2005/dsa-798 - http://secunia.com/advisories/16468 - http
/secunia.com/advisories/17053 - http://www.debian.org/security/2005/dsa-798 - http://secunia.com/advisories/16468 - http://www.debian.org/security/2005/dsa-842 - http://secunia.com/advisories/16465 - http://secunia.com/advisories/16635 - http://www.hardened-php.net/advisory_152005.67.html - http://secunia.com/advisories/16432 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9569 - http://secunia.com/advisories/16550
CVE ID: CVE-2005-2499 State: PUBLISHED Published: 2005-08-22T04:00:00 Last Updated: 2024-08-07T22:30:01.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service (updatedb exit and incomplete slocate database) via a certain crafted directory structure. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014751 - http://www.osvdb.org/19034 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9538 - http://www.redhat.com/support/errata/RHSA-2005-346.html - https://exchange.xforce.ibmcloud.com/vu
re.oval%3Adef%3A9538 - http://www.redhat.com/support/errata/RHSA-2005-346.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/22316 - http://www.securityfocus.com/bid/14640 - http://www.redhat.com/support/errata/RHSA-2005-345.html - http://www.redhat.com/support/errata/RHSA-2005-747.html
CVE ID: CVE-2005-2500 State: PUBLISHED Published: 2005-08-08T04:00:00 Last Updated: 2024-08-07T22:30:00.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the xdr_xcode_array2 function in xdr.c in Linux kernel 2.6.12, as used in SuSE Linux Enterprise Server 9, might allow remote attackers to cause a denial of service and possibly execute arbitrary code via crafted XDR data for the nfsacl protocol. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14470 - http://lkml.org/lkml/2005/6/23/19 - http://secunia.com/advisories/16406 - http://lkml.org/lkml/2005/6/23/126 - http://www.novell.com/linux/security/advisories/20
//secunia.com/advisories/16406 - http://lkml.org/lkml/2005/6/23/126 - http://www.novell.com/linux/security/advisories/2005_44_kernel.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/21805 - http://linux.bkbits.net:8080/linux-2.6/cset%4042b9c4fdYUuaq0joRUZi8W0Q-2hA1A
CVE ID: CVE-2005-2501 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:30:01.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2 allows external user-assisted attackers to execute arbitrary code via a crafted Rich Text Format (RTF) file. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014695 - http://www.us-cert.gov/cas/techalerts/TA05-229A.html - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://www.kb.cert.org/vuls/id/435188 - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2502 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:30:00.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2, as used in applications such as TextEdit, allows external user-assisted attackers to execute arbitrary code via a crafted Microsoft Word file. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014695 - http://www.kb.cert.org/vuls/id/172948 - http://www.us-cert.gov/cas/techalerts/TA05-229A.html - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//
s.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2503 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:30:00.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: AppKit for Mac OS X 10.3.9 and 10.4.2 allows attackers with physical access to create local accounts by forcing a particular error to occur at the login window. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014696 - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2504 State: PUBLISHED Published: 2005-08-19T04:00:00Z Last Updated: 2024-09-17T03:33:04.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: The System Profiler in Mac OS X 10.4.2 labels a Bluetooth device with "Requires Authentication: No" even when the user has selected the "Require pairing for security" option, which could confuse users about which setting is valid. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2505 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:30:00.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in CoreFoundation in Mac OS X 10.3.9 allows attackers to execute arbitrary code via command line arguments to an application that uses CoreFoundation. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014697 - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2506 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:30:00.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Algorithmic complexity vulnerability in CoreFoundation in Mac OS X 10.3.9 and 10.4.2 allows attackers to cause a denial of service (CPU consumption) via crafted Gregorian dates. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014697 - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2507 State: PUBLISHED Published: 2005-08-19T04:00:00Z Last Updated: 2024-09-16T21:09:08.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Directory Services in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/913820 - http://www.us-cert.gov/cas/techalerts/TA05-229A.html - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2508 State: PUBLISHED Published: 2005-08-19T04:00:00Z Last Updated: 2024-09-16T19:37:06.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: dsidentity in Directory Services in Mac OS X 10.4.2 allows local users to add or remove user accounts. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2509 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:30:01.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in loginwindow in Mac OS X 10.4.2 and earlier, when Fast User Switching is enabled, allows attackers to log into other accounts if they know the passwords to at least two accounts. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014704 - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2510 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:30:01.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Server Admin tool in servermgr_ipfilter for Mac OS X 10.4 to 10.4.2, when using multiple subnets and Address Groups, does not always properly write firewall rules to the Active Rules when certain conditions occur, which could result in firewall policies that are less restrictive than intended by the administrator. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014708 - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/
id?1014708 - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2511 State: PUBLISHED Published: 2005-08-19T04:00:00Z Last Updated: 2024-09-17T02:33:05.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Mac OS X 10.4.2 and earlier, when using Kerberos authentication with LDAP, allows attackers to gain access to a root Terminal window. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2512 State: PUBLISHED Published: 2005-08-19T04:00:00Z Last Updated: 2024-09-16T19:57:23.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mail.app in Mac OS 10.4.2 and earlier, when printing or forwarding an HTML message, loads remote images even when the user's preferences state otherwise, which could result in a privacy leak. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2513 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:30:01.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in HItoolbox for Mac OS X 10.4.2 allows VoiceOver services to read secure input fields. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014699 - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2514 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:30:01.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ping in Mac OS X 10.3.9 allows local users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014701 - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2515 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:30:01.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quartz Composer Screen Saver in Mac OS X 10.4.2 allows local users to access links from the RSS Visualizer even when a password is required. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014705 - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2516 State: PUBLISHED Published: 2005-08-19T04:00:00Z Last Updated: 2024-09-16T22:36:16.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari in Mac OS X 10.3.9 and 10.4.2, when rendering Rich Text Format (RTF) files, can directly access URLs without performing the normal security checks, which allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/709220 - http://www.us-cert.gov/cas/techalerts/TA05-229A.html - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2517 State: PUBLISHED Published: 2005-08-19T04:00:00Z Last Updated: 2024-09-17T00:36:12.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari in Mac OS X 10.3.9 and 10.4.2 submits forms from an XSL formatted page to the next page that is browsed by the user, which causes form data to be sent to the wrong site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2518 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:30:00.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in servermgrd in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/461412 - http://www.us-cert.gov/cas/techalerts/TA05-229A.html - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html - http://securitytracker.com/id?1014709
CVE ID: CVE-2005-2519 State: PUBLISHED Published: 2005-08-19T04:00:00Z Last Updated: 2024-09-17T00:16:38.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: slpd in Directory Services in Mac OS X 10.3.9 creates insecure temporary files as root, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2520 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:30:01.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password assistant in Mac OS X 10.4 to 10.4.2, when used to create multiple accounts from the same process, does not reset the suggested password list when the assistant is displayed, which allows attackers to view recently used passwords. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014707 - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2521 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:30:01.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in traceroute in Mac OS X 10.3.9 allows local users to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://securitytracker.com/id?1014702 - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2522 State: PUBLISHED Published: 2005-08-19T04:00:00Z Last Updated: 2024-09-16T22:36:02.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari in WebKit in Mac OS X 10.4 to 10.4.2 directly accesses URLs within PDF files without the normal security checks, which allows remote attackers to execute arbitrary code via links in a PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/420316 - http://www.us-cert.gov/cas/techalerts/TA05-229A.html - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2523 State: PUBLISHED Published: 2005-08-19T04:00:00Z Last Updated: 2024-09-16T23:10:21.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Weblog Server in Mac OS X 10.4 to 10.4.2 allow remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2524 State: PUBLISHED Published: 2005-10-25T04:00:00Z Last Updated: 2024-09-17T00:51:49.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari after 2.0 in Apple Mac OS X 10.3.9 allows remote attackers to bypass domain restrictions via crafted web archives that cause Safari to render them as if they came from a different site. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/p-312.shtml - http://www.auscert.org.au/5509 - http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html - http://secunia.com/advisories/16920/
CVE ID: CVE-2005-2525 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:30:01.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: CUPS in Mac OS X 10.3.9 and 10.4.2 does not properly close file descriptors when handling multiple simultaneous print jobs, which allows remote attackers to cause a denial of service (printing halt). Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014698 - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2526 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:30:00.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: CUPS in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to cause a denial of service (CPU consumption) by sending a partial IPP request and closing the connection. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014698 - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
CVE ID: CVE-2005-2527 State: PUBLISHED Published: 2006-08-05T01:00:00 Last Updated: 2024-08-07T22:30:01.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to corrupt files or create arbitrary files via unspecified attack vectors related to a temporary directory, possibly due to a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/p-306.shtml - http://docs.info.apple.com/article.html?artnum=302266 - http://www.vupen.com/english/advisories/2005/1734 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22262 - http://secunia.com
vupen.com/english/advisories/2005/1734 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22262 - http://secunia.com/advisories/16808 - http://www.securityfocus.com/bid/14825 - http://lists.apple.com/archives/security-announce/2005/Sep/msg00001.html
CVE ID: CVE-2005-2528 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-2529 State: PUBLISHED Published: 2006-08-05T01:00:00 Last Updated: 2024-08-07T22:30:01.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to gain privileges via unspecified attack vectors relating to "the utility used to update Java shared archives." Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/p-306.shtml - http://docs.info.apple.com/article.html?artnum=302266 - http://www.vupen.com/english/advisories/2005/1734 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22264 - http://lists.apple.com/archives/Secu
advisories/2005/1734 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22264 - http://lists.apple.com/archives/Security-announce/2005/Sep/msg00000.html - http://secunia.com/advisories/16808
CVE ID: CVE-2005-2530 State: PUBLISHED Published: 2006-08-05T01:00:00 Last Updated: 2024-08-07T22:30:00.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Java 1.3.1 before 1.3.1_16 on Apple Mac OS X allows an untrusted applet to gain privileges, related to "Mac OS X specific extensions." Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/p-306.shtml - http://www.securityfocus.com/bid/14826 - http://www.vupen.com/english/advisories/2005/1734 - http://secunia.com/advisories/16808 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22265 - http://docs.info.apple.com/article.html?artnum=302265 - http:/
ps://exchange.xforce.ibmcloud.com/vulnerabilities/22265 - http://docs.info.apple.com/article.html?artnum=302265 - http://lists.apple.com/archives/security-announce/2005/Sep/msg00001.html
CVE ID: CVE-2005-2531 State: PUBLISHED Published: 2005-08-24T04:00:00 Last Updated: 2024-08-07T22:30:01.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenVPN before 2.0.1, when running with "verb 0" and without TLS authentication, does not properly flush the OpenSSL error queue when a client fails certificate authentication to the server and causes the error to be processed by the wrong client, which allows remote attackers to cause a denial of service (client disconnection) via a large number of failed authentication attempts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14605 - http://secunia.com/advisories/17103 - http
CVE Program Container: References: - http://www.securityfocus.com/bid/14605 - http://secunia.com/advisories/17103 - http://openvpn.net/changelog.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:145 - http://www.novell.com/linux/security/advisories/2005_20_sr.html - http://www.debian.org/security/2005/dsa-851 - http://secunia.com/advisories/16463