Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-2133 State: PUBLISHED Published: 2006-05-01T23:00:00 Last Updated: 2024-08-07T17:35:31.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in BoonEx Barracuda 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) link_dir_target and (2) link_id_target parameter, possibly involving the link_edit functionality. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/04/barracuda-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26175
CVE ID: CVE-2006-2134 State: PUBLISHED Published: 2006-05-02T10:00:00 Last Updated: 2024-08-07T17:35:31.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in /includes/kb_constants.php in Knowledge Base Mod for PHPbb 2.0.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1728 - http://www.securityfocus.com/bid/17763 - http://secunia.com/advisories/19892 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26279 - http://www.vupen.com/english/advisories/2006/1585
CVE ID: CVE-2006-2135 State: PUBLISHED Published: 2006-05-02T10:00:00 Last Updated: 2024-08-07T17:35:31.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in Ruperts News allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17758 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26144 - http://www.vupen.com/english/advisories/2006/1580 - http://secunia.com/advisories/19895 - http://evuln.com/vulns/128/
CVE ID: CVE-2006-2136 State: PUBLISHED Published: 2006-05-02T10:00:00 Last Updated: 2024-08-07T17:35:31.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in AZNEWS allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17761 - http://evuln.com/vulns/126/ - http://www.vupen.com/english/advisories/2006/1579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26136 - http://secunia.com/advisories/19888 - http://securitytracker.com/id?1016036
CVE ID: CVE-2006-2137 State: PUBLISHED Published: 2006-05-02T10:00:00 Last Updated: 2024-08-07T17:35:31.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in master.php in OpenPHPNuke and 2.3.3 earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.openphpnuke.com/system/article/index.php?opnparams=B3YBZAI3BWgEbFU0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26183 - http://www.vupen.com/english/advisories/2006/1575 - http://www.osvdb.org/25140 - http://secunia.com/advisories/19893 - http://www.securityfocus.co
sh/advisories/2006/1575 - http://www.osvdb.org/25140 - http://secunia.com/advisories/19893 - http://www.securityfocus.com/bid/17772 - https://www.exploit-db.com/exploits/1727
CVE ID: CVE-2006-2138 State: PUBLISHED Published: 2006-05-02T10:00:00 Last Updated: 2024-08-07T17:35:31.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.29 allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/432398/100/0/threaded - http://www.aria-security.net/hm/neomail.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/26127 - http://securityreason.com/securityalert/827 - http://www.securityfocus.com/bid/17728 - http://secunia.com/advisories/19906 - http://ww
yreason.com/securityalert/827 - http://www.securityfocus.com/bid/17728 - http://secunia.com/advisories/19906 - http://www.vupen.com/english/advisories/2006/1590
CVE ID: CVE-2006-2139 State: PUBLISHED Published: 2006-05-02T10:00:00 Last Updated: 2024-08-07T17:35:31.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHP Newsfeed 20040723 allow remote attackers to execute arbitrary SQL commands via the (1) name parameter to (a) deltables.php, (2) select, (3) header, (4) url, (5) source, or (6) time parameters to (b) manualsubmit.php, (7) num parameter to (c) delete.php, or (8) tablename parameter to (d) searchnews.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25133 - http://www.osvdb.org/25135 - http://www.osvdb.org/25134 - http://www.osvdb.org/25132 - h
- http://www.osvdb.org/25133 - http://www.osvdb.org/25135 - http://www.osvdb.org/25134 - http://www.osvdb.org/25132 - http://www.vupen.com/english/advisories/2006/1574 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26205 - http://evuln.com/vulns/129/summary.html - http://secunia.com/advisories/19904 - http://www.securityfocus.com/bid/17757
CVE ID: CVE-2006-2140 State: PUBLISHED Published: 2006-05-02T10:00:00 Last Updated: 2024-08-07T17:35:31.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in OrbitHYIP 2.0 and earlier allow remote attackers to inject arbitrary web script via the (1) referral parameter to signup.php or (2) id parameter to members.php. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/04/orbithyip-xss.html - http://www.osvdb.org/25142 - http://www.securityfocus.com/bid/17766 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26163 - http://secunia.com/advisories/19877 - http://www.vupen.com/eng
ps://exchange.xforce.ibmcloud.com/vulnerabilities/26163 - http://secunia.com/advisories/19877 - http://www.vupen.com/english/advisories/2006/1583 - http://www.osvdb.org/25141
CVE ID: CVE-2006-2141 State: PUBLISHED Published: 2006-05-02T10:00:00 Last Updated: 2024-08-07T17:35:31.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in popup_image in Collaborative Portal Server (CPS) 3.4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the pos argument. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/04/cps-340-xss.html - http://www.vupen.com/english/advisories/2006/1589 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26155 - http://www.securityfocus.com/bid/17774 - http://secunia.com/advisories/19879 - http://www.osvdb.org/25
abilities/26155 - http://www.securityfocus.com/bid/17774 - http://secunia.com/advisories/19879 - http://www.osvdb.org/25144
CVE ID: CVE-2006-2142 State: PUBLISHED Published: 2006-05-02T10:00:00 Last Updated: 2024-08-07T17:35:31.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in classes/adodbt/sql.php in Limbo CMS 1.04 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the classes_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/446142/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26196 - http://www.securityfocus.com/bid/17760 - http://secunia.com/advisories/19891 - http://www.vupen.com/english/advisories/2006/1584 - https://www.exploit-db
17760 - http://secunia.com/advisories/19891 - http://www.vupen.com/english/advisories/2006/1584 - https://www.exploit-db.com/exploits/1729 - http://www.osvdb.org/25155
CVE ID: CVE-2006-2143 State: PUBLISHED Published: 2006-05-02T10:00:00 Last Updated: 2024-08-07T17:35:31.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in TextFileBB 1.0.16 allow remote attackers to inject arbitrary web script or HTML via Javascript events such as "onmouseover" in the (1) color, (2) size, or (3) url bbcode tags. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/828 - http://securitytracker.com/id?1016013 - http://www.securityfocus.com/bid/17750 - http://secunia.com/advisories/19883 - http://www.securityfocus.com/archive/1/432461/100/0/threaded - https://
id/17750 - http://secunia.com/advisories/19883 - http://www.securityfocus.com/archive/1/432461/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26129 - http://www.osvdb.org/25123
CVE ID: CVE-2006-2144 State: PUBLISHED Published: 2006-05-02T10:00:00 Last Updated: 2024-08-07T17:35:31.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in kopf.php in DMCounter 0.9.2-b allows remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25152 - http://www.securityfocus.com/archive/1/432572/100/0/threaded - http://securityreason.com/securityalert/826 - http://www.securityfocus.com/bid/17756 - http://www.vupen.com/english/advisories/2006/1599 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0181.html - http:/
//www.vupen.com/english/advisories/2006/1599 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0181.html - http://securitytracker.com/id?1016014 - http://secunia.com/advisories/19918 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26207
CVE ID: CVE-2006-2145 State: PUBLISHED Published: 2006-05-02T10:00:00 Last Updated: 2024-08-07T17:43:27.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) topic or (2) id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19896 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26139 - http://evuln.com/vulns/127/summary.html - http://www.securityfocus.com/bid/17759 - http://securitytracker.com/id?1016037 - http://www.osvdb.org/25163
CVE ID: CVE-2006-2146 State: PUBLISHED Published: 2006-05-02T10:00:00 Last Updated: 2024-08-07T17:43:27.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to inject arbitrary web script or HTML via the (1) poster_name, (2) poster_email, (3) poster_homepage, or (4) message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19896 - http://evuln.com/vulns/127/summary.html - http://www.osvdb.org/25164 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26138 - http://www.securityfocus.com/bid/17759 - http://securitytracker.c
//exchange.xforce.ibmcloud.com/vulnerabilities/26138 - http://www.securityfocus.com/bid/17759 - http://securitytracker.com/id?1016037
CVE ID: CVE-2006-2147 State: PUBLISHED Published: 2006-05-02T20:00:00 Last Updated: 2024-08-07T17:43:27.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: resmgrd in resmgr for SUSE Linux and other distributions does not properly handle when access to a USB device is granted by using "usb:<bus>,<dev>" notation, which grants access to all USB devices and allows local users to bypass intended restrictions. NOTE: this is a different vulnerability than CVE-2005-4788. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17752 - http://lists.suse.com/archive/suse-security-announce/2006-Feb/0008.html - http://www.debian.org/security/2006/dsa
7752 - http://lists.suse.com/archive/suse-security-announce/2006-Feb/0008.html - http://www.debian.org/security/2006/dsa-1047 - http://secunia.com/advisories/19887 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26160 - http://www.vupen.com/english/advisories/2006/1592 - http://secunia.com/advisories/19898
CVE ID: CVE-2006-2148 State: PUBLISHED Published: 2006-05-02T21:00:00 Last Updated: 2024-08-07T17:43:27.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in client.c in CGI:IRC (CGIIRC) before 0.5.8 might allow remote attackers to execute arbitrary code via (1) cookies or (2) the query string. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1607 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26173 - http://cvs.cgiirc.org/chngview?cn=283 - http://secunia.com/advisories/19985 - http://cvs.cgiirc.org/chngview?cn=263 - http://secunia.com/advisories/19922 - http://cvs.cgiirc.org/timeline?
es/19985 - http://cvs.cgiirc.org/chngview?cn=263 - http://secunia.com/advisories/19922 - http://cvs.cgiirc.org/timeline?d=300&e=2006-Apr-30&c=2&px=&s=0&dm=1&x=1&m=1 - http://www.securityfocus.com/bid/17799 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365680 - http://www.debian.org/security/2006/dsa-1052
CVE ID: CVE-2006-2149 State: PUBLISHED Published: 2006-05-03T10:00:00 Last Updated: 2024-08-07T17:43:27.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in sources/lostpw.php in Aardvark Topsites PHP 4.2.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the CONFIG[path] parameter, as demonstrated by including a GIF that contains PHP code. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1732 - http://www.securityfocus.com/bid/17940 - http://secunia.com/advisories/19911 - http://www.vupen.com/english/advisories/2006/1587 - http://w
focus.com/bid/17940 - http://secunia.com/advisories/19911 - http://www.vupen.com/english/advisories/2006/1587 - http://www.osvdb.org/25158 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26189
CVE ID: CVE-2006-2150 State: PUBLISHED Published: 2006-05-03T10:00:00 Last Updated: 2024-08-07T17:43:27.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in top/list.php in phpBB TopList 1.3.8 and earlier allows remote attackers to include arbitrary files via the returnpath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26172 - http://www.securityfocus.com/archive/1/432453/100/0/threaded - http://www.osvdb.org/25294
CVE ID: CVE-2006-2151 State: PUBLISHED Published: 2006-05-03T10:00:00 Last Updated: 2024-08-07T17:43:27.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in toplist.php in phpBB TopList 1.3.8 and earlier, when register_globals is enabled, allows remote attackers to include arbitrary files via the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26172 - http://www.osvdb.org/25260 - https://www.exploit-db.com/exploits/1724 - http://www.vupen.com/english/advisories/2006/1601 - https://www.exploit-db.com/exploits/1722 - http://secunia.com/advisorie
p://www.vupen.com/english/advisories/2006/1601 - https://www.exploit-db.com/exploits/1722 - http://secunia.com/advisories/19884
CVE ID: CVE-2006-2152 State: PUBLISHED Published: 2006-05-03T10:00:00 Last Updated: 2024-08-07T17:43:27.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook 2.4.0 and earlier, when register_globals is enabled, allows remote attackers to include arbitrary files via the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1725 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26217 - https://www.exploit-db.com/exploits/1723 - http://www.vupen.com/english/advisories/2006/1600 - http://www.securityfocus.com/bid/17745
ploit-db.com/exploits/1723 - http://www.vupen.com/english/advisories/2006/1600 - http://www.securityfocus.com/bid/17745 - http://secunia.com/advisories/19905
CVE ID: CVE-2006-2153 State: PUBLISHED Published: 2006-05-03T10:00:00 Last Updated: 2024-08-07T17:43:27.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HTM_PASSWD in DirectAdmin Hosting Management allows remote attackers to inject arbitrary web script or HTML via the domain parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.aria-security.net/advisory/hm/directadmin.txt - http://secunia.com/advisories/19885 - http://www.securityfocus.com/archive/1/432459/100/0/threaded - http://securityreason.com/securityalert/830 - http://www.vupen.com/english/advisories/2006/1576
CVE ID: CVE-2006-2154 State: PUBLISHED Published: 2006-05-03T10:00:00 Last Updated: 2024-08-07T17:43:27.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 does not drop privileges before opening files, which allows local users to execute arbitrary code via the File>Open dialog. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26226 - http://www.vupen.com/english/advisories/2006/1612 - http://secunia.com/advisories/19850 - http://www.securityfocus.com/bid/17798 - http://kb.dantz.com/display/2n/articleDirect/index.asp?aid=
/advisories/19850 - http://www.securityfocus.com/bid/17798 - http://kb.dantz.com/display/2n/articleDirect/index.asp?aid=9507&r=0.7344324
CVE ID: CVE-2006-2155 State: PUBLISHED Published: 2006-05-03T10:00:00 Last Updated: 2024-08-07T17:43:27.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 allows local users to execute arbitrary code by replacing the Retrospect.exe file, possibly due to improper file permissions. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1612 - http://secunia.com/advisories/19850 - http://kb.dantz.com/display/2n/articleDirect/index.asp?aid=9507&r=0.7344324 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26227
CVE ID: CVE-2006-2156 State: PUBLISHED Published: 2006-05-03T10:00:00 Last Updated: 2024-08-07T17:43:27.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in help/index.php in X7 Chat 2.0 and earlier allows remote attackers to include arbitrary files via .. (dot dot) sequences in the help_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17777 - http://www.vupen.com/english/advisories/2006/1608 - http://www.securityfocus.com/archive/1/432716/100/0/threaded - https://www.exploit-db.com/exploits/1738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26218 - http://secunia.com/adv
//www.exploit-db.com/exploits/1738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26218 - http://secunia.com/advisories/19886 - http://securityreason.com/securityalert/829 - http://www.osvdb.org/25149
CVE ID: CVE-2006-2157 State: PUBLISHED Published: 2006-05-03T10:00:00 Last Updated: 2024-08-07T17:43:27.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in gallery.php in Plogger Beta 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, when the level is set to "slideshow". NOTE: This is a different vulnerability than CVE-2005-4246. Additional Analyst Notes: - CVE Program Container: References: - http://retrogod.altervista.org/plogger_b21_sql_xpl.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26273
CVE ID: CVE-2006-2158 State: PUBLISHED Published: 2006-05-03T10:00:00 Last Updated: 2024-08-07T17:43:27.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dynamic variable evaluation vulnerability in index.php in Stadtaus Guestbook Script 1.7 and earlier, when register_globals is enabled, allows remote attackers to modify arbitrary program variables via parameters, which are evaluated as PHP variable variables, as demonstrated by performing PHP remote file inclusion using the include_files array parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19957 - http://www.securityfocus.com/bid/17845 - https://exchange.xforce.ibmclou
rences: - http://secunia.com/advisories/19957 - http://www.securityfocus.com/bid/17845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26252 - http://retrogod.altervista.org/gbs_17_xpl_pl.html - http://www.stadtaus.com/forum/t-2600.html - http://www.vupen.com/english/advisories/2006/1660
CVE ID: CVE-2006-2159 State: PUBLISHED Published: 2006-05-03T10:00:00 Last Updated: 2024-08-07T17:43:27.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in help.php in Russcom Network Loginphp allows remote attackers to spoof e-mails and inject MIME headers via CRLF sequences in the email address. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25214 - http://secunia.com/advisories/19930 - http://www.securityfocus.com/archive/1/432729/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26250 - http://www.securityfocus.com/bid/17787
CVE ID: CVE-2006-2160 State: PUBLISHED Published: 2006-05-03T10:00:00 Last Updated: 2024-08-07T17:43:27.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Russcom Network Loginphp (Russcom.Loginphp) allows remote attackers to inject arbitrary web script or HTML via the username field when registering. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26249 - http://secunia.com/advisories/19930 - http://www.securityfocus.com/bid/17785 - http://www.securityfocus.com/archive/1/432729/100/0/threaded - http://www.osvdb.org/25213
CVE ID: CVE-2006-2161 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in (1) TZipBuilder 1.79.03.01, (2) Abakt 0.9.2 and 0.9.3-beta1, (3) CAM UnZip 4.0 and 4.3, and possibly other products, allows user-assisted attackers to execute arbitrary code via a ZIP archive that contains a file with a long file name. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2006-26/advisory - http://www.securityfocus.com/archive/1/433257/100/0/threaded - http://www.vupen.com/english/advisories/2006/1687 - http://www.securityfocus.com/bid/17880 - h
1/433257/100/0/threaded - http://www.vupen.com/english/advisories/2006/1687 - http://www.securityfocus.com/bid/17880 - http://www.vupen.com/english/advisories/2006/1865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26435 - http://secunia.com/advisories/19945 - http://securitytracker.com/id?1016107 - http://securityreason.com/securityalert/853 - http://secunia.com/advisories/20068 - http://secunia.com/advisories/19946 - http://secunia.com/secunia_research/2006-31/advisory/ - http://securitytracker.com/id?1016064 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26275 - http://marc.info/?l=full-disclosure&m=114771024009857&w=2 - http://www.vupen.com/english/advisories/2006/1805 -
/26275 - http://marc.info/?l=full-disclosure&m=114771024009857&w=2 - http://www.vupen.com/english/advisories/2006/1805 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26549 - http://www.securityfocus.com/archive/1/434520/100/0/threaded - http://www.xs4all.nl/~edienske/abakt/releases.html#0.9.3-RC1 - http://secunia.com/secunia_research/2006-34/advisory/ - http://www.securityfocus.com/archive/1/434019/100/0/threaded