Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-4404 State: PUBLISHED Published: 2006-11-30T16:00:00 Last Updated: 2024-08-07T19:06:07.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Installer application in Apple Mac OS X 10.4.8 and earlier, when used by a user with Admin credentials, does not authenticate the user before installing certain software requiring system privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4750 - http://docs.info.apple.com/article.html?artnum=304829 - http://www.securityfocus.com/bid/21335 - http://securitytracker.com/id?1017304 - http://www.osvdb.org/30733 - http://secunia.com/advisories/23155 - http://l
35 - http://securitytracker.com/id?1017304 - http://www.osvdb.org/30733 - http://secunia.com/advisories/23155 - http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html - http://www.us-cert.gov/cas/techalerts/TA06-333A.html
CVE ID: CVE-2006-4406 State: PUBLISHED Published: 2006-11-30T16:00:00 Last Updated: 2024-08-07T19:06:07.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in PPP on Apple Mac OS X 10.4.x up to 10.4.8 and 10.3.x up to 10.3.9, when PPPoE is enabled, allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4750 - http://www.kb.cert.org/vuls/id/870960 - http://securitytracker.com/id?1017305 - http://labs.musecurity.com/advisories/MU-200611-01.txt - http://docs.info.apple.com/article.html?artnum=304829 - http://www.securityfocus.com/bid/21335
sories/MU-200611-01.txt - http://docs.info.apple.com/article.html?artnum=304829 - http://www.securityfocus.com/bid/21335 - http://secunia.com/advisories/23155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30627 - http://www.osvdb.org/30732 - http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html - http://www.us-cert.gov/cas/techalerts/TA06-333A.html
CVE ID: CVE-2006-4407 State: PUBLISHED Published: 2006-11-30T16:00:00 Last Updated: 2024-08-07T19:06:07.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Security Framework in Apple Mac OS X 10.3.x up to 10.3.9 does not properly prioritize encryption ciphers when negotiating the strongest shared cipher, which causes Secure Transport to user a weaker cipher that makes it easier for remote attackers to decrypt traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4750 - http://www.osvdb.org/30731 - http://docs.info.apple.com/article.html?artnum=304829 - http://www.securityfocus.com/bid/21335 - http://www.kb.cert
31 - http://docs.info.apple.com/article.html?artnum=304829 - http://www.securityfocus.com/bid/21335 - http://www.kb.cert.org/vuls/id/734032 - http://securitytracker.com/id?1017298 - http://secunia.com/advisories/23155 - http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html - http://www.us-cert.gov/cas/techalerts/TA06-333A.html
CVE ID: CVE-2006-4408 State: PUBLISHED Published: 2006-11-30T16:00:00 Last Updated: 2024-08-07T19:06:07.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Security Framework in Apple Mac OS X 10.4 through 10.4.8 allows remote attackers to cause a denial of service (resource consumption) via certain public key values in an X.509 certificate that requires extra resources during signature verification. NOTE: this issue may be similar to CVE-2006-2940. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4750 - http://docs.info.apple.com/article.html?artnum=304829 - http://www.securityfocus.com/bid/21335 - http://www.osvdb
4750 - http://docs.info.apple.com/article.html?artnum=304829 - http://www.securityfocus.com/bid/21335 - http://www.osvdb.org/30730 - http://securitytracker.com/id?1017298 - http://secunia.com/advisories/23155 - http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html - http://www.us-cert.gov/cas/techalerts/TA06-333A.html
CVE ID: CVE-2006-4409 State: PUBLISHED Published: 2006-11-30T16:00:00 Last Updated: 2024-08-07T19:06:07.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Online Certificate Status Protocol (OCSP) service in the Security Framework in Apple Mac OS X 10.4 through 10.4.8 retrieve certificate revocation lists (CRL) when an HTTP proxy is in use, which could cause the system to accept certificates that have been revoked. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4750 - http://docs.info.apple.com/article.html?artnum=304829 - http://www.securityfocus.com/bid/21335 - http://www.osvdb.org/30729 - http://securitytracke
article.html?artnum=304829 - http://www.securityfocus.com/bid/21335 - http://www.osvdb.org/30729 - http://securitytracker.com/id?1017298 - http://secunia.com/advisories/23155 - http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html - http://www.us-cert.gov/cas/techalerts/TA06-333A.html - http://www.kb.cert.org/vuls/id/811384
CVE ID: CVE-2006-4410 State: PUBLISHED Published: 2006-11-30T16:00:00 Last Updated: 2024-08-07T19:06:07.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Security Framework in Apple Mac OS X 10.3.9, and 10.4.x before 10.4.7, does not properly search certificate revocation lists (CRL), which allows remote attackers to access systems by using revoked certificates. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4750 - http://docs.info.apple.com/article.html?artnum=304829 - http://www.securityfocus.com/bid/21335 - http://securitytracker.com/id?1017298 - http://secunia.com/advisories/23155 - http://lists.apple.com/ar
.com/bid/21335 - http://securitytracker.com/id?1017298 - http://secunia.com/advisories/23155 - http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html - http://www.us-cert.gov/cas/techalerts/TA06-333A.html - http://www.osvdb.org/30728
CVE ID: CVE-2006-4411 State: PUBLISHED Published: 2006-11-30T16:00:00 Last Updated: 2024-08-07T19:06:07.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VPN service in Apple Mac OS X 10.3.x through 10.3.9 and 10.4.x through 10.4.8 does not properly clean the environment when executing commands, which allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4750 - http://docs.info.apple.com/article.html?artnum=304829 - http://www.securityfocus.com/bid/21335 - http://www.osvdb.org/30727 - http://securitytracker.com/id?1017304 - http://secunia.com/advisories/231
s.com/bid/21335 - http://www.osvdb.org/30727 - http://securitytracker.com/id?1017304 - http://secunia.com/advisories/23155 - http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html - http://www.us-cert.gov/cas/techalerts/TA06-333A.html
CVE ID: CVE-2006-4412 State: PUBLISHED Published: 2006-11-30T16:00:00 Last Updated: 2024-08-07T19:06:07.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Mac OS X 10.3.x through 10.3.9 and 10.4 through 10.4.8 allows remote attackers to execute arbitrary code via a crafted HTML file, which accesses previously deallocated objects. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4750 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30645 - http://www.osvdb.org/30726 - http://docs.info.apple.com/article.html?artnum=304829 - http://www.securityfocus.com/bid/21335 - http://www.kb.cert.org/vuls/id/8489
info.apple.com/article.html?artnum=304829 - http://www.securityfocus.com/bid/21335 - http://www.kb.cert.org/vuls/id/848960 - http://securitytracker.com/id?1017304 - http://secunia.com/advisories/23155 - http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html - http://www.us-cert.gov/cas/techalerts/TA06-333A.html
CVE ID: CVE-2006-4413 State: PUBLISHED Published: 2006-11-18T01:00:00 Last Updated: 2024-08-07T19:06:07.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Remote Desktop before 3.1 uses insecure permissions for certain built-in packages, which allows local users on an Apple Remote Desktop administration system to modify the packages and gain root privileges on client systems that use the packages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22982 - http://securitytracker.com/id?1017241 - http://www.vupen.com/english/advisories/2006/4567 - http://www.securityfocus.com/bid/21139 - http://lists.apple.com/archives/security-ann
com/english/advisories/2006/4567 - http://www.securityfocus.com/bid/21139 - http://lists.apple.com/archives/security-announce/2006/Nov/msg00000.html
CVE ID: CVE-2006-4416 State: PUBLISHED Published: 2006-08-28T20:00:00 Last Updated: 2024-08-07T19:06:07.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious (1) chdev, (2) mkboot, (3) varyonvg, or (4) varyoffvg program. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22106 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29165 - http://securitytracker.com/id?1016920 - http://www.securityfocus.com/bid/20197 - http://www.vupen.com/english/advisories/2006/3389 - http://ww
.com/id?1016920 - http://www.securityfocus.com/bid/20197 - http://www.vupen.com/english/advisories/2006/3389 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY88737 - http://secunia.com/advisories/21620 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY88722 - http://www.securityfocus.com/bid/19708 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY88699 - http://www.vupen.com/english/advisories/2006/3770 - ftp://aix.software.ibm.com/aix/efixes/security/README
CVE ID: CVE-2006-4417 State: PUBLISHED Published: 2006-08-28T21:00:00 Last Updated: 2024-08-07T19:06:07.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in edituser.php in Xoops before 2.0.15 allows remote attackers to execute arbitrary SQL commands via the user_avatar parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28586 - http://www.osvdb.org/28265 - http://devteam.xoops.org/releases/changelog-2.0.15.html - http://www.securityfocus.com/bid/19720 - http://www.securityfocus.com/archive/1/444419/100/0/threaded - http://www.hackers.ir/advisories/xoops.html - http://secuni
tp://www.securityfocus.com/archive/1/444419/100/0/threaded - http://www.hackers.ir/advisories/xoops.html - http://secunia.com/advisories/21643 - http://www.vupen.com/english/advisories/2006/3402 - http://securityreason.com/securityalert/1461
CVE ID: CVE-2006-4418 State: PUBLISHED Published: 2006-08-28T21:00:00 Last Updated: 2024-08-07T19:06:07.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php for Wikepage 2006.2a Opus 10 allows remote attackers to include arbitrary local files via the lng parameter, as demonstrated by inserting PHP code into a log file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28555 - https://www.exploit-db.com/exploits/2252 - http://www.osvdb.org/28177 - http://secunia.com/advisories/21542 - http://www.vupen.com/english/advisories/2006/3386 - http://www.securityfocus.com/bid/
p://secunia.com/advisories/21542 - http://www.vupen.com/english/advisories/2006/3386 - http://www.securityfocus.com/bid/19694
CVE ID: CVE-2006-4419 State: PUBLISHED Published: 2006-08-28T21:00:00 Last Updated: 2024-08-07T19:06:07.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in note.php in ProManager 0.73 allows remote attackers to execute arbitrary SQL commands via the note_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2259 - http://www.securityfocus.com/bid/19728 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28592
CVE ID: CVE-2006-4420 State: PUBLISHED Published: 2006-08-28T21:00:00 Last Updated: 2024-08-07T19:06:07.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in include_lang.php in Phaos 0.9.2 allows remote attackers to include arbitrary local files via ".." sequences in the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2253 - http://www.securityfocus.com/bid/19710 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28565
CVE ID: CVE-2006-4421 State: PUBLISHED Published: 2006-08-29T00:00:00 Last Updated: 2024-08-07T19:06:07.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in template/default/thanks_comment.php in Yet Another PHP Image Gallery (YaPIG) 0.95b allows remote attackers to inject arbitrary web script or HTML via the D_REFRESH_URL parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444328/100/0/threaded - http://www.securityfocus.com/bid/19709 - http://securityreason.com/securityalert/1463 - http://www.armorize.com/advisory.php?Keyword=Armorize-ADV-2006-0001
CVE ID: CVE-2006-4422 State: PUBLISHED Published: 2006-08-29T00:00:00 Last Updated: 2024-08-07T19:06:07.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/phpdig/libs/search_function.php in Jetbox CMS 2.1 allows remote attackers to execute arbitrary PHP code via a URL in the relative_script_path parameter, a different vector than CVE-2006-2270. NOTE: this issue has been disputed, and as of 20060830, CVE analysis concurs with the dispute. In addition, it is likely that the vulnerability is actually in a third party module, phpDig 1.8.8 Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/
arty module, phpDig 1.8.8 Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444422/100/0/threaded - http://www.securityfocus.com/archive/1/444740/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28588 - http://www.attrition.org/pipermail/vim/2006-August/000997.html - http://securitytracker.com/id?1016765 - http://www.securityfocus.com/bid/19722 - http://www.securityfocus.com/archive/1/444640/100/0/threaded - http://www.securityfocus.com/archive/1/444822/100/0/threaded - http://www.osvdb.org/28299 - http://www.attrition.org/pipermail/vim/2006-August/001003.html - http://www.securityfocus.com/archive/1/444826/100/0/thre
ttp://www.attrition.org/pipermail/vim/2006-August/001003.html - http://www.securityfocus.com/archive/1/444826/100/0/threaded - http://www.securityfocus.com/archive/1/444527/100/0/threaded
CVE ID: CVE-2006-4423 State: PUBLISHED Published: 2006-08-29T00:00:00 Last Updated: 2024-08-07T19:06:07.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Bigace 1.8.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[_BIGACE][DIR][admin] parameter in (a) system/command/admin.cmd.php, (b) admin/include/upload_form.php, and (c) admin/include/item_main.php; and the (2) GLOBALS[_BIGACE][DIR][libs] parameter in (d) system/command/admin.cmd.php and (e) system/command/download.cmd.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016760 - http://www.
hp. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016760 - http://www.securityfocus.com/archive/1/444415/100/0/threaded - http://www.securityfocus.com/bid/19723 - http://securityreason.com/securityalert/1462 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28585
CVE ID: CVE-2006-4424 State: PUBLISHED Published: 2006-08-29T00:00:00 Last Updated: 2024-08-07T19:06:07.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in coin_includes/constants.php in phpCOIN 1.2.3 allows remote attackers to execute arbitrary PHP code via the _CCFG[_PKG_PATH_INCL] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28218 - http://www.vupen.com/english/advisories/2006/3385 - http://secunia.com/advisories/21624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28572 - https://www.exploit-db.com/exploits/2254 - http://www.securityfocus.com/bid/19706
CVE ID: CVE-2006-4425 State: PUBLISHED Published: 2006-08-29T00:00:00 Last Updated: 2024-08-07T19:06:07.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpCOIN 1.2.3 allow remote attackers to execute arbitrary PHP code via the _CCFG[_PKG_PATH_INCL] parameter in coin_includes scripts including (1) api.php, (2) common.php, (3) core.php, (4) custom.php, (5) db.php, (6) redirect.php or (7) session_set.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28224 - http://www.osvdb.org/2
on. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28224 - http://www.osvdb.org/28221 - http://www.osvdb.org/28222 - http://www.osvdb.org/28220 - http://www.vupen.com/english/advisories/2006/3385 - http://www.osvdb.org/28219 - http://secunia.com/advisories/21624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28572 - http://www.osvdb.org/28223 - http://www.osvdb.org/28225
CVE ID: CVE-2006-4426 State: PUBLISHED Published: 2006-08-29T00:00:00 Last Updated: 2024-08-07T19:06:07.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in AES/modules/auth/phpsecurityadmin/include/logout.php in AlberT-EasySite (AES) 1.0a5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PSA_PATH parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3395 - http://www.securityfocus.com/bid/19729 - http://www.securityfocus.com/archive/1/448292/100/0/threaded - https://www.exploit-db.com/exploits/2260 - http://secunia.com/advisories/21651 -
.com/archive/1/448292/100/0/threaded - https://www.exploit-db.com/exploits/2260 - http://secunia.com/advisories/21651 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28584
CVE ID: CVE-2006-4427 State: PUBLISHED Published: 2006-08-29T00:00:00 Last Updated: 2024-08-07T19:06:07.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in eFiction before 2.0.7 allows remote attackers to bypass authentication and gain privileges by setting the (1) adminloggedin, (2) loggedin, and (3) level parameters to "1". Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28595 - http://www.securityfocus.com/bid/19717 - https://www.exploit-db.com/exploits/2255 - http://www.osvdb.org/28237 - http://efiction.org/forums/index.php?topic=3698 - http://www.vupen.com/english/advisories/2006/3392 - http:/
org/28237 - http://efiction.org/forums/index.php?topic=3698 - http://www.vupen.com/english/advisories/2006/3392 - http://secunia.com/advisories/21625
CVE ID: CVE-2006-4428 State: PUBLISHED Published: 2006-08-29T00:00:00 Last Updated: 2025-01-17T14:01:42.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to execute arbitrary PHP code via a URL in the template parameter. NOTE: CVE disputes this claim, since the $template variable is defined as a static value before it is referenced in an include statement Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/archive/1/444421/100/0/threaded - http://www.osvdb.org/28298 - http://www.securityfocus.com/archive/1/444729/10
ocus.com/archive/1/444421/100/0/threaded - http://www.osvdb.org/28298 - http://www.securityfocus.com/archive/1/444729/100/0/threaded - http://www.attrition.org/pipermail/vim/2006-August/000996.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28589 - http://www.securityfocus.com/bid/19721
CVE ID: CVE-2006-4429 State: PUBLISHED Published: 2006-08-29T00:00:00 Last Updated: 2024-08-07T19:06:07.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in handlers/email/mod.output.php in PHlyMail Lite 3.4.4 and earlier (Build 3.04.04) allows remote attackers to execute arbitrary PHP code via a URL in the _PM_[path][handler] parameter, a different vector than CVE-2006-4291. NOTE: This issue has been disputed by a third party, who states that the _IN_PHM_ declaration prevents this file from being called directly Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=115629049105999&w=2 - http://www
nal Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=115629049105999&w=2 - http://www.osvdb.org/29355 - http://www.securityfocus.com/archive/1/444215/100/0/threaded
CVE ID: CVE-2006-4430 State: PUBLISHED Published: 2006-08-29T00:00:00 Last Updated: 2024-08-07T19:06:07.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Network Admission Control (NAC) 3.6.4.1 and earlier allows remote attackers to prevent installation of the Cisco Clean Access (CCA) Agent and bypass local and remote protection mechanisms by modifying (1) the HTTP User-Agent header or (2) the behavior of the TCP/IP stack. NOTE: the vendor has disputed the severity of this issue, stating that users cannot bypass authentication mechanisms. Additional Analyst Notes: - CVE Program Container: References: - http://archive.cert.uni-stuttgart.de/archive/bugtraq/2005/08/msg00
Analyst Notes: - CVE Program Container: References: - http://archive.cert.uni-stuttgart.de/archive/bugtraq/2005/08/msg00200.html - http://www.securityfocus.com/bid/19726 - http://www.securityfocus.com/archive/1/444737/100/0/threaded - http://www.cisco.com/en/US/products/ps6128/products_security_notice09186a00804fa82b.html - http://www.securityfocus.com/archive/1/408603/30/0/threaded - http://www.cisco.com/en/US/products/ps6128/tsd_products_security_response09186a008071d609.html - http://www.securityfocus.com/archive/1/444501/100/0/threaded - http://www.securityfocus.com/archive/1/444424/100/0/threaded
CVE ID: CVE-2006-4431 State: PUBLISHED Published: 2006-08-29T00:00:00 Last Updated: 2024-08-07T19:06:07.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the (a) Session Clustering Daemon and the (b) mod_cluster module in the Zend Platform 2.2.1 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a (1) empty or (2) crafted PHP session identifier (PHPSESSID). Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28231 - http://www.osvdb.org/28230 - http://www.securityfocus.com/archive/1/444263/100/0/threaded - http://securityreason.com/securityalert/1466 - http://www.se
p://www.securityfocus.com/archive/1/444263/100/0/threaded - http://securityreason.com/securityalert/1466 - http://www.securityfocus.com/bid/19692 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28573 - http://marc.info/?l=full-disclosure&m=115642248226217&w=2 - http://www.hardened-php.net/advisory_052006.128.html - http://secunia.com/advisories/21573 - http://www.vupen.com/english/advisories/2006/3388