Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-1964 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in utilit.php for Ovidentia Portal allows remote attackers to execute arbitrary PHP code via the babInstallPath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15658 - http://securitytracker.com/id?1014149
CVE ID: CVE-2005-1965 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in siteframe.php for Broadpool Siteframe allows remote attackers to execute arbitrary code via a URL in the LOCAL_PATH parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13928 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20973 - http://secunia.com/advisories/15657 - http://www.osvdb.org/17246 - http://securitytracker.com/id?1014150 - http://list.broadpool.com/pipermail/siteframe-announce/2005-June/000020.html
CVE ID: CVE-2005-1966 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: The eTrace_validaddr function in eTrace plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the etrace_host parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111868460811287&w=2 - http://www.securityfocus.com/bid/13934
CVE ID: CVE-2005-1967 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ProductCart Ecommerce before 2.7 allow remote attackers to execute arbitrary SQL commands via the (1) idcategory parameter to viewPrd.asp, (2) lid parameter to editCategories.asp, (3) icd parameter to modCustomCardPaymentOpt.asp, or (4) idccr parameter to OptionFieldsEdit.asp. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014129 - http://echo.or.id/adv/adv16-theday-2005.txt
CVE ID: CVE-2005-1968 State: PUBLISHED Published: 2005-06-14T04:00:00Z Last Updated: 2024-09-16T22:19:46.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ProductCart Ecommerce before 2.7 allows remote attackers to inject arbitrary web script or HTML via the error parameter to techErr.asp. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014129 - http://echo.or.id/adv/adv16-theday-2005.txt
CVE ID: CVE-2005-1969 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Pragma Systems Telnetserver 6.0 allows remote attackers to inject arbitrary web script or HTML, and hide activities in log files, via a "<!--" (HTML comment) in a session. Additional Analyst Notes: - CVE Program Container: References: - http://www.rgod.altervista.org/pragma.html - http://secunia.com/advisories/15642 - http://securitytracker.com/id?1014127
CVE ID: CVE-2005-1970 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec pcAnywhere 10.5x and 11.x before 11.5, with "Launch with Windows" enabled, allows local users with physical access to execute arbitrary commands via the Caller Properties feature. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15673 - http://www.securityfocus.com/bid/13933 - http://securitytracker.com/id?1014178 - http://securityresponse.symantec.com/avcenter/security/Content/2005.06.10.html
CVE ID: CVE-2005-1971 State: PUBLISHED Published: 2005-06-14T04:00:00Z Last Updated: 2024-09-16T17:18:51.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in InteractivePHP FusionBB .11 Beta and earlier allows remote attackers to include arbitrary local files via ".." sequences in the language parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.gulftech.org/?node=research&article_id=00081-06132005 - http://www.interactivephp.com/misc/CHANGELOG.html
CVE ID: CVE-2005-1972 State: PUBLISHED Published: 2005-06-14T04:00:00Z Last Updated: 2024-09-16T23:01:48.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in InteractivePHP FusionBB .11 Beta and earlier allow remote attackers to execute arbitrary SQL commands via (1) the username, which is not properly handled by the insertUser function, or (2) the bb_session_id value in a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.gulftech.org/?node=research&article_id=00081-06132005 - http://www.interactivephp.com/misc/CHANGELOG.html
CVE ID: CVE-2005-1973 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Java Web Start in Java 2 Platform Standard Edition (J2SE) 5.0 and 5.0 Update 1 allows applications to assign permissions to themselves and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112870351003598&w=2 - http://marc.info/?l=bugtraq&m=112870351003598&w=2 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101748-1 - http://www.securityfocus.com/bid/13945 - http://www.securityfocus.com/bid/13958 - http://securityreason.com/securityalert/61
CVE ID: CVE-2005-1974 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Java 2 Platform, Standard Edition (J2SE) 5.0 and 5.0 Update 1 and J2SE 1.4.2 up to 1.4.2_07, as used in multiple products and platforms including (1) HP-UX and (2) APC PowerChute, allows applications to assign permissions to themselves and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17272 - http://www.vupen.com/english/advisories/2005/2150 - http://marc.info/?l=bugtraq&m=112861772130119&w=2 - http://nam-en.apc.com/cgi-bin/nam_en.cf
glish/advisories/2005/2150 - http://marc.info/?l=bugtraq&m=112861772130119&w=2 - http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=7638 - http://securitytracker.com/id?1015643 - http://marc.info/?l=bugtraq&m=112992075412844&w=2 - http://marc.info/?l=bugtraq&m=112992075412844&w=2 - http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101799-1 - http://www.securityfocus.com/bid/13958 - http://marc.info/?l=bugtraq&m=112861772130119&w=2 - http://securityreason.com/securityalert/56 - http://www.novell.com/linux/security/advisories/2005_32_java2.html - http://sunsolve.
urityreason.com/securityalert/56 - http://www.novell.com/linux/security/advisories/2005_32_java2.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101749-1
CVE ID: CVE-2005-1975 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T22:06:57.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Annuaire 1Two 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter to index.php, or the (2) site_id, (3) nom, (4) email, or (5) commentaire parameters in commentaires.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014187 - http://secunia.com/advisories/15708 - http://www.securityfocus.com/bid/13612 - http://www.securityfocus.com/bid/13960 - http://www.securityfocus.com/b
15708 - http://www.securityfocus.com/bid/13612 - http://www.securityfocus.com/bid/13960 - http://www.securityfocus.com/bid/13961 - http://www.hackisknowledge.org/Advisories/Annuaire%201Two%20v1.0/Annuaire%201Two%20v1.0.html
CVE ID: CVE-2005-1976 State: PUBLISHED Published: 2006-06-05T18:00:00Z Last Updated: 2024-09-16T19:50:43.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell NetMail 3.5.2a, 3.5.2b, and 3.5.2c, when running on Linux, sets the owner and group ID to 500 for certain files, which could allow users or groups with that ID to execute arbitrary code or cause a denial of service by modifying those files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14005 - http://secunia.com/advisories/15763 - http://www.osvdb.org/17456 - http://securitytracker.com/id?1014251 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098022.htm
CVE ID: CVE-2005-1978 State: PUBLISHED Published: 2005-10-11T04:00:00 Last Updated: 2024-08-07T22:06:57.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17161 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A576 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1261 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A126
org.mitre.oval%3Adef%3A1261 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1269 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-051 - http://www.securityfocus.com/bid/15057 - http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf - http://secunia.com/advisories/17223 - http://secunia.com/advisories/17172 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1499 - http://www.kb.cert.org/vuls/id/950516 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A816 - http://secunia.com/advisories/17509 - http://www.us-cert.gov/cas/techalerts/TA05-284A
val%3Aorg.mitre.oval%3Adef%3A816 - http://secunia.com/advisories/17509 - http://www.us-cert.gov/cas/techalerts/TA05-284A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1466
CVE ID: CVE-2005-1979 State: PUBLISHED Published: 2005-10-11T04:00:00 Last Updated: 2024-08-07T22:06:57.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service exception and exit) via an "unexpected protocol command during the reconnection request," which is not properly handled by the Transaction Internet Protocol (TIP) functionality. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17161 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1134 - https://oval.cisecurity.org/reposit
val.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1134 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1283 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1513 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-051 - http://securitytracker.com/id?1015037 - http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1550 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1338 - http://secunia.com/advisories/17223 - http://www.ide
g/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1338 - http://secunia.com/advisories/17223 - http://www.idefense.com/application/poi/display?id=320&type=vulnerabilities - http://secunia.com/advisories/17172 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A686 - http://secunia.com/advisories/17509 - http://www.securityfocus.com/bid/15058
CVE ID: CVE-2005-1980 State: PUBLISHED Published: 2005-10-11T04:00:00 Last Updated: 2024-08-07T22:06:57.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service hang) via a crafted Transaction Internet Protocol (TIP) message that causes DTC to repeatedly connect to a target IP and port number after an error occurs, aka the "Distributed TIP Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17161 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1253 - https://docs.mic
s/17161 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1253 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-051 - http://securitytracker.com/id?1015037 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1413 - http://www.idefense.com/application/poi/display?id=319&type=vulnerabilities - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1136 - http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf - http://secunia.com/advisories/17223 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1203 - http://secu
sories/17223 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1203 - http://secunia.com/advisories/17172 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1325 - http://secunia.com/advisories/17509 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1182 - http://www.securityfocus.com/bid/15059
CVE ID: CVE-2005-1981 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:06:57.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Microsoft Windows 2000 Server and Windows Server 2003 domain controllers allows remote authenticated users to cause a denial of service (system crash) via a crafted Kerberos message. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100095 - http://secunia.com/advisories/16368/ - http://www.kb.cert.org/vuls/id/610133 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef
://www.kb.cert.org/vuls/id/610133 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100101 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-042 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100097 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100103 - http://securitytracker.com/id?1014642 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100099 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100105
CVE ID: CVE-2005-1982 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:06:57.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain controller when PKINIT smart card authentication is being used. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100104 - http://secunia.com/advisories/16368/ - https://oval.cisecurity.o
earch/definition/oval%3Aorg.mitre.oval%3Adef%3A100104 - http://secunia.com/advisories/16368/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100102 - http://www.securityfocus.com/bid/14520 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100098 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100100 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100096 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-042 - http://www.kb.cert.org/vuls/id/477341 - http://securitytracker.com/id?1014642 - https://oval.cis
lletins/2005/ms05-042 - http://www.kb.cert.org/vuls/id/477341 - http://securitytracker.com/id?1014642 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100106
CVE ID: CVE-2005-1983 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:06:57.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/1354 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A497 - http://www.hsc.fr/ress
54 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A497 - http://www.hsc.fr/ressources/presentations/null_sessions/ - http://www.osvdb.org/18605 - http://www.frsirt.com/english/alerts/20050814.ZotobA.php - http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0384.html - http://www.kb.cert.org/vuls/id/998653 - http://www.securityfocus.com/bid/14513 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A267 - http://www.ciac.org/ciac/bulletins/p-266.shtml - http://securitytracker.com/id?1014640 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21602 - http://www.us-cert.gov/cas/techalerts/TA05-221A.html - h
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21602 - http://www.us-cert.gov/cas/techalerts/TA05-221A.html - http://secunia.com/advisories/16372 - http://xforce.iss.net/xforce/alerts/id/202 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100073 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-039 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A160 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A474 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A783 - http://www.securiteam.com/windowsntfocu
.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A783 - http://www.securiteam.com/windowsntfocus/5YP0E00GKW.html
CVE ID: CVE-2005-1984 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:06:57.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via a malicious message. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A256 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100077 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
/oval%3Aorg.mitre.oval%3Adef%3A100077 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1405 - http://secunia.com/advisories/16356/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-043 - http://www.securityfocus.com/bid/14514 - http://www.us-cert.gov/cas/techalerts/TA05-221A.html - http://securitytracker.com/id?1014638 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1045 - http://www.kb.cert.org/vuls/id/220821
CVE ID: CVE-2005-1985 State: PUBLISHED Published: 2005-10-13T04:00:00 Last Updated: 2024-08-07T22:06:57.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Client Service for NetWare (CSNW) on Microsoft Windows 2000 SP4, XP SP1 and Sp2, and Server 2003 SP1 and earlier, allows remote attackers to execute arbitrary code due to an "unchecked buffer" when processing certain crafted network messages. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A910 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1544 - https://oval.cisecurity.org/repos
/oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1544 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1106 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-046 - http://secunia.com/advisories/17165 - http://www.osvdb.org/19922 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1210 - http://www.securityfocus.com/bid/15066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21700 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1536 - http://securitytracker.com/id?1015041
CVE ID: CVE-2005-1987 State: PUBLISHED Published: 2005-10-13T04:00:00 Last Updated: 2024-08-07T22:06:57.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/19905 - http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ907245 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval
fault.aspx?scid=kb%3B%5BLN%5D%3BQ907245 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A581 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1406 - http://www.kb.cert.org/vuls/id/883460 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A848 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1515 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22495 - http://secunia.com/advisories/17167 - http://www.securityfocus.com/bid/15067 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1420 - https://do
com/bid/15067 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1420 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-048 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1201 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1130 - http://www.us-cert.gov/cas/techalerts/TA05-284A.html - http://securitytracker.com/id?1015038 - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0289.html - http://marc.info/?l=bugtraq&m=112915118302012&w=2 - http://securitytracker.com/id?1015039