Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-6292 State: PUBLISHED Published: 2006-12-05T11:00:00 Last Updated: 2024-08-07T20:19:35.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Airport Extreme firmware 0.1.27 in Mac OS X 10.4.8 on Mac mini, MacBook, and MacBook Pro with Core Duo hardware allows remote attackers to cause a denial of service (out-of-bounds memory access and kernel panic) and have possibly other security-related impact via certain beacon frames. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30663 - http://lists.apple.com/archives/Security-announce/2007/Mar/msg00001.html - http://docs.info.apple.com/article.htm
0663 - http://lists.apple.com/archives/Security-announce/2007/Mar/msg00001.html - http://docs.info.apple.com/article.html?artnum=305031 - http://www.apple.com/support/downloads/airportextremeupdate2007001.html - http://securitytracker.com/id?1017328 - http://www.securityfocus.com/bid/21383 - http://www.kb.cert.org/vuls/id/583552 - http://www.vupen.com/english/advisories/2006/4822 - http://lists.apple.com/archives/security-announce/2007/Jan/msg00001.html - http://projects.info-pull.com/mokb/MOKB-30-11-2006.html - http://secunia.com/advisories/23159
CVE ID: CVE-2006-6293 State: PUBLISHED Published: 2006-12-05T11:00:00 Last Updated: 2024-08-07T20:19:35.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code via a crafted CHM file. NOTE: this issue has at least a partial overlap with CVE-2006-6294. Additional Analyst Notes: - CVE Program Container: References: - http://gleg.net/vulndisco_meta.shtml - http://secunia.com/advisories/23328 - http://www.f-prot.com/news/gen_news/061201_release_unix467.html - http://secunia.com/advisories/22879 - http://www.osvdb.org/30406 - http://securitytracker.com
201_release_unix467.html - http://secunia.com/advisories/22879 - http://www.osvdb.org/30406 - http://securitytracker.com/id?1017331 - http://www.securityfocus.com/bid/21086 - http://www.securityfocus.com/archive/1/453475/100/0/threaded - http://gleg.net/fprot.txt - http://security.gentoo.org/glsa/glsa-200612-12.xml - http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051096.html - http://www.vupen.com/english/advisories/2006/4830 - https://www.exploit-db.com/exploits/2893
CVE ID: CVE-2006-6294 State: PUBLISHED Published: 2006-12-05T11:00:00 Last Updated: 2024-08-07T20:19:35.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in FRISK Software F-Prot Antivirus before 4.6.7 have unspecified impact and attack vectors. NOTE: this might be related to CVE-2006-6293, but it is not clear due to the vagueness of the report. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23328 - http://www.f-prot.com/news/gen_news/061201_release_unix467.html - http://security.gentoo.org/glsa/glsa-200612-12.xml
CVE ID: CVE-2006-6295 State: PUBLISHED Published: 2006-12-05T11:00:00 Last Updated: 2024-08-07T20:19:35.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/mx_common.php in the mx_tinies 1.3.0 Module for MxBB Portal 1.06 allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4838 - http://secunia.com/advisories/23206 - http://www.securityfocus.com/bid/21415 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30736 - https://www.exploit-db.com/exploits/2885
CVE ID: CVE-2006-6296 State: PUBLISHED Published: 2006-12-05T11:00:00 Last Updated: 2024-08-07T20:19:35.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RpcGetPrinterData function in the Print Spooler (spoolsv.exe) service in Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via an RPC request that specifies a large 'offered' value (output buffer size), a variant of CVE-2005-3644. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30717 - http://securitytracker.com/id?1017330 - http://research.eeye.com/h
/exchange.xforce.ibmcloud.com/vulnerabilities/30717 - http://securitytracker.com/id?1017330 - http://research.eeye.com/html/alerts/zeroday/20051116.html - http://www.securityfocus.com/bid/21401 - http://secunia.com/advisories/23196 - http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2005/20051116 - https://www.exploit-db.com/exploits/2879 - http://www.kb.cert.org/vuls/id/914617 - http://www.vupen.com/english/advisories/2006/4827
CVE ID: CVE-2006-6297 State: PUBLISHED Published: 2006-12-05T11:00:00 Last Updated: 2024-08-07T20:19:35.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in the KFILE JPEG (kfile_jpeg) plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of service (stack consumption) via a crafted EXIF section in a JPEG file, which results in an infinite recursion. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23728 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:227 - http://secunia.com/advisories/23203 - http://www.novell.co
://www.mandriva.com/security/advisories?name=MDKSA-2006:227 - http://secunia.com/advisories/23203 - http://www.novell.com/linux/security/advisories/2006_73_mono.html - http://security.gentoo.org/glsa/glsa-200701-05.xml - http://secunia.com/advisories/23213 - http://www.securityfocus.com/bid/21384 - http://www.kde.org/info/security/advisory-20061129-1.txt - http://www.vupen.com/english/advisories/2006/4810 - http://secunia.com/advisories/23300 - http://securitytracker.com/id?1017325
CVE ID: CVE-2006-6298 State: PUBLISHED Published: 2006-12-05T11:00:00 Last Updated: 2024-08-07T20:19:35.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in uye_giris_islem.asp in Metyus Okul Yonetim Sistemi 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) kullanici_ismi and (2) sifre parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/453419/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30705 - http://securityreason.com/securityalert/1971 - http://www.securityfocus.com/bid/21418
CVE ID: CVE-2006-6299 State: PUBLISHED Published: 2006-12-05T11:00:00 Last Updated: 2024-08-07T20:19:35.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Msg.dll in Novell ZENworks 7 Asset Management (ZAM) before SP1 IR11 and the Collection client allows remote attackers to execute arbitrary code via crafted packets, which trigger a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4829 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=448 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=447 - http://securitytracker.com/id?101732
id=448 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=447 - http://securitytracker.com/id?1017326 - http://secunia.com/advisories/23157 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30665 - http://www.securityfocus.com/bid/21400 - http://www.securityfocus.com/bid/21395 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974824.htm
CVE ID: CVE-2006-6300 State: PUBLISHED Published: 2006-12-05T11:00:00 Last Updated: 2024-08-07T20:19:35.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CuteNews 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the result parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1969 - http://www.securityfocus.com/bid/21403 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30660 - http://www.securityfocus.com/archive/1/453314/100/0/threaded
CVE ID: CVE-2006-6301 State: PUBLISHED Published: 2006-12-06T19:00:00 Last Updated: 2024-08-07T20:19:35.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: DenyHosts 2.5 does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a login name containing certain strings with an IP address, which is not properly handled by a regular expression. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=157163 - http://www.vupen.com/english/advisories/2
ogram Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=157163 - http://www.vupen.com/english/advisories/2006/4876 - http://secunia.com/advisories/23236 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30761 - http://www.securityfocus.com/bid/21468 - http://secunia.com/advisories/23603 - http://security.gentoo.org/glsa/glsa-200701-01.xml
CVE ID: CVE-2006-6302 State: PUBLISHED Published: 2006-12-06T19:00:00 Last Updated: 2024-08-07T20:19:35.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: fail2ban 0.7.4 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a login name containing certain strings with an IP address. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200702-05.xml - http://bugs.gentoo.org/show_bug.cgi?id=157166 - http://secunia.com/advisories/
rity.gentoo.org/glsa/glsa-200702-05.xml - http://bugs.gentoo.org/show_bug.cgi?id=157166 - http://secunia.com/advisories/23237 - http://secunia.com/advisories/24184 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30739 - http://www.securityfocus.com/bid/21469 - http://www.vupen.com/english/advisories/2006/4877
CVE ID: CVE-2006-6303 State: PUBLISHED Published: 2006-12-06T19:00:00 Last Updated: 2024-08-07T20:19:35.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote attackers to cause a denial of service (infinite loop) via crafted HTTP requests, a different issue than CVE-2006-5467. Additional Analyst Notes: - CVE Program Container: References: - http://docs.info.apple.com/article.html?artnum=305530 - http://www.ubuntu.com/usn/usn-394-1 - http://secunia.com/advisories/31090 - http://secunia.com/advisories/27576 - http://www.vupen.com/english/adv
usn-394-1 - http://secunia.com/advisories/31090 - http://secunia.com/advisories/27576 - http://www.vupen.com/english/advisories/2007/1939 - http://jvn.jp/jp/JVN%2384798830/index.html - http://secunia.com/advisories/23268 - http://lists.apple.com/archives/security-announce/2007/May/msg00004.html - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=218287 - http://www.ruby-lang.org/en/news/2006/12/04/another-dos-vulnerability-in-cgi-library/ - http://secunia.com/advisories/25402 - http://secunia.com/advisories/23165 - http://www.redhat.com/support/errata/RHSA-2007-0961.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10529 - https://exchange.xforce
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10529 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30734 - http://securitytracker.com/id?1017363 - http://www.novell.com/linux/security/advisories/2007_4_sr.html - http://bugs.gentoo.org/show_bug.cgi?id=157048 - http://www.ruby-lang.org/cgi-bin/cvsweb.cgi/ruby/lib/cgi.rb.diff?f=h&only_with_tag=MAIN&r1=text&tr1=1.92&r2=text&tr2=1.91 - http://www.vupen.com/english/advisories/2006/4855 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:225 - http://security.gentoo.org/glsa/glsa-200612-21.xml - http://secunia.com/advisories/23454 - http://www.securityfocus.com/bid/21441
CVE ID: CVE-2006-6304 State: PUBLISHED Published: 2006-12-14T20:00:00 Last Updated: 2024-08-07T20:19:35.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_coredump function in fs/exec.c in the Linux kernel 2.6.19 sets the flag variable to O_EXCL but does not use it, which allows context-dependent attackers to modify arbitrary files via a rewrite attack during a core dump. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21591 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7446 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.19.1 - http://secunia.com/advisories/23349 - ht
3Adef%3A7446 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.19.1 - http://secunia.com/advisories/23349 - http://support.avaya.com/css/P8/documents/100073666 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10797 - https://rhn.redhat.com/errata/RHSA-2010-0095.html - http://www.vupen.com/english/advisories/2006/5002 - https://rhn.redhat.com/errata/RHSA-2010-0046.html - http://www.trustix.org/errata/2006/0074/
CVE ID: CVE-2006-6305 State: PUBLISHED Published: 2006-12-06T22:00:00 Last Updated: 2024-08-07T20:19:35.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Net-SNMP 5.3 before 5.3.0.1, when configured using the rocommunity or rouser snmpd.conf tokens, causes Net-SNMP to grant write access to users or communities that only have read-only access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30782 - http://net-snmp.sourceforge.net/about/news.html - http://securitytracker.com/id?1017355 - http://net-snmp.sourceforge.net/about/ChangeLog.html -
ge.net/about/news.html - http://securitytracker.com/id?1017355 - http://net-snmp.sourceforge.net/about/ChangeLog.html - http://sourceforge.net/forum/forum.php?forum_id=531399 - http://secunia.com/advisories/23285
CVE ID: CVE-2006-6306 State: PUBLISHED Published: 2006-12-05T11:00:00 Last Updated: 2024-08-07T20:19:35.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Novell Modular Authentication Services (NMAS) in the Novell Client 4.91 SP2 and SP3 allows users with physical access to read stack and memory contents via format string specifiers in the Username field of the logon window. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1970 - http://securitytracker.com/id?1017377 - http://www.vupen.com/english/advisories/2006/4987 - http://secunia.com/advisories/23363 - http://www.securityfocus.com/archiv
//www.vupen.com/english/advisories/2006/4987 - http://secunia.com/advisories/23363 - http://www.securityfocus.com/archive/1/453176/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30644 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974876.htm - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974872.htm - https://secure-support.novell.com/KanisaPlatform/Publishing/372/3546910_f.SAL_Public.html - http://www.layereddefense.com/Novell01DEC.html - http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051038.html
CVE ID: CVE-2006-6307 State: PUBLISHED Published: 2006-12-05T11:00:00 Last Updated: 2024-08-07T20:19:35.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: srvloc.sys in Novell Client for Windows before 4.91 SP3 allows remote attackers to cause an unspecified denial of service via a crafted packet to port 427 that triggers an access of pageable or invalid addresses using a higher interrupt request level (IRQL) than necessary. Additional Analyst Notes: - CVE Program Container: References: - https://secure-support.novell.com/KanisaPlatform/Publishing/859/3480790_f.SAL_Public.html - http://www.vupen.com/english/advisories/2006/4840 - http://www.securityfocus.com/bid/21430 - http://s
.SAL_Public.html - http://www.vupen.com/english/advisories/2006/4840 - http://www.securityfocus.com/bid/21430 - http://secunia.com/advisories/23244
CVE ID: CVE-2006-6308 State: PUBLISHED Published: 2006-12-06T20:00:00 Last Updated: 2024-08-07T20:19:35.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec LiveState 7.1 Agent for Windows allows local users to gain privileges by stopping the shstart.exe process and open "Web Self-Service" from the system tray icon, which will open a browser window running with elevated privileges. NOTE: several third-party researchers have noted that administrator privileges may be necessary to terminate shstart.exe. If this is the case, then no privilege escalation occurs, and this is not a vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://www.securit
urs, and this is not a vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/453653/100/0/threaded - http://www.securityfocus.com/archive/1/453551/100/0/threaded - http://www.securityfocus.com/archive/1/453569/100/0/threaded - http://securitytracker.com/id?1017332 - http://www.securityfocus.com/archive/1/453587/100/0/threaded - http://www.securityfocus.com/archive/1/453481/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30728
CVE ID: CVE-2006-6309 State: PUBLISHED Published: 2006-12-06T20:00:00 Last Updated: 2024-08-07T20:19:35.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple array index errors in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to read arbitrary memory locations and cause a denial of service (crash) via a large index value in unspecified messages, a different issue than CVE-2006-5855. Additional Analyst Notes: - CVE Program Container: References: - http://www.tippingpoint.com/security/advisories/TSRT-06-14.html - http://securityreason.com/securityalert/1979 - http://www-1.ibm.com/support/docview.wss?uid=swg21250261 - http://www.s
- http://securityreason.com/securityalert/1979 - http://www-1.ibm.com/support/docview.wss?uid=swg21250261 - http://www.securityfocus.com/archive/1/453544/100/0/threaded
CVE ID: CVE-2006-6310 State: PUBLISHED Published: 2006-12-06T20:00:00 Last Updated: 2024-08-07T20:19:35.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (crash) via an invalid src attribute value ("?") in an HTML frame tag that is in a frameset tag with a large rows attribute. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21447 - http://www.osvdb.org/31325 - http://downloads.securityfocus.com/vulnerabilities/explo
/www.securityfocus.com/bid/21447 - http://www.osvdb.org/31325 - http://downloads.securityfocus.com/vulnerabilities/exploits/21447.html
CVE ID: CVE-2006-6311 State: PUBLISHED Published: 2006-12-06T20:00:00 Last Updated: 2024-08-07T20:19:35.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0.2900.2180 allows remote attackers to cause a denial of service via a style attribute in an HTML table tag with a width value that is dynamically calculated using JavaScript. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1968 - http://www.securityfocus.com/archive/1/453642/100/0/threaded - http://www.securityfocus.com/archive/1/453643/100/0/threaded - http://www.securityfocus.com/bid/21466 - http://www.securityfocus.com/archive/1/453772/1
chive/1/453643/100/0/threaded - http://www.securityfocus.com/bid/21466 - http://www.securityfocus.com/archive/1/453772/100/0/threaded - http://www.osvdb.org/31326
CVE ID: CVE-2006-6318 State: PUBLISHED Published: 2006-12-28T20:00:00 Last Updated: 2024-08-07T20:19:35.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: The show_elog_list function in elogd.c in elog 2.6.2 and earlier allows remote authenticated users to cause a denial of service (daemon crash) by attempting to access a logbook whose name begins with "global," which results in a NULL pointer dereference. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4423 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=397875 - http://secunia.com/advisories/2
english/advisories/2006/4423 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=397875 - http://secunia.com/advisories/23580 - http://securitytracker.com/id?1017450 - http://www.osvdb.org/30272 - http://www.debian.org/security/2006/dsa-1242 - http://secunia.com/advisories/22800 - http://securityreason.com/securityalert/2060 - http://www.securityfocus.com/bid/21028 - http://archives.neohapsis.com/archives/fulldisclosure/2006-11/0198.html - http://www.securityfocus.com/archive/1/451351
CVE ID: CVE-2006-6328 State: PUBLISHED Published: 2006-12-06T21:00:00 Last Updated: 2024-08-07T20:19:35.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php for TorrentFlux 2.2 allows remote attackers to create or overwrite arbitrary files via sequences in the alias_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23400582 - https://www.exploit-db.com/exploits/2786 - http://secunia.com/advisories/22880
CVE ID: CVE-2006-6329 State: PUBLISHED Published: 2006-12-06T21:00:00 Last Updated: 2024-08-07T20:19:35.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php for TorrentFlux 2.2 allows remote attackers to delete files by specifying the target filename in the delfile parameter. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23400582 - https://www.exploit-db.com/exploits/2786 - http://secunia.com/advisories/22880
CVE ID: CVE-2006-6330 State: PUBLISHED Published: 2006-12-06T21:00:00 Last Updated: 2024-08-07T20:19:35.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23400582 - https://www.exploit-db.com/exploits/2786 - http://secunia.com/advisories/22880
CVE ID: CVE-2006-6331 State: PUBLISHED Published: 2006-12-06T21:00:00 Last Updated: 2024-08-07T20:19:35.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: metaInfo.php in TorrentFlux 2.2, when $cfg["enable_file_priority"] is false, allows remote attackers to execute arbitrary commands via shell metacharacters (backticks) in the torrent parameter to (1) details.php and (2) startpop.php. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi/11_missed_security_fixes.dpatch?bug=400582%3Bmsg=71%3Batt=1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23400582 - http://secunia.com/advisories/23270