Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-0721 State: PUBLISHED Published: 2005-03-12T05:00:00 Last Updated: 2024-08-07T21:21:06.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules.php in eXPerience2 allows remote attackers to execute arbitrary PHP code by modifying the file parameter to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111030766324600&w=2
CVE ID: CVE-2005-0722 State: PUBLISHED Published: 2005-03-12T05:00:00 Last Updated: 2024-08-07T21:21:06.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: eXPerience2 allows remote attackers to obtain the full path for the web root via a direct request to modules.php without any parameters, which leaks the path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111030766324600&w=2
CVE ID: CVE-2005-0723 State: PUBLISHED Published: 2005-03-12T05:00:00 Last Updated: 2024-08-07T21:21:06.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the jumpmenu function in functions.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL parameters, which is not properly cleansed in the $pageurl variable, as demonstrated using pafiledb.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111031801802851&w=2
CVE ID: CVE-2005-0724 State: PUBLISHED Published: 2005-03-12T05:00:00 Last Updated: 2024-08-07T21:21:06.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via (1) an invalid str parameter to pafiledb.php, or a direct request to (2) viewall.php, (3) stats.php, (4) search.php, (5) rate.php, (6) main.php, (7) license.php, (8) category.php, (9) download.php, (10) file.php, (11) email.php, or (12) admin.php, which reveals the path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111031801802851&w=2
CVE ID: CVE-2005-0725 State: PUBLISHED Published: 2005-03-12T05:00:00 Last Updated: 2024-08-07T21:21:06.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows remote attackers to execute arbitrary SQL commands via the articleid parameter to article.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19660 - http://marc.info/?l=bugtraq&m=111049618519821&w=2
CVE ID: CVE-2005-0726 State: PUBLISHED Published: 2005-03-12T05:00:00 Last Updated: 2024-08-07T21:21:06.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in editpost.php in UBB.threads 6.0 allows remote attackers to execute arbitrary SQL commands via the Number parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111056135818279&w=2
CVE ID: CVE-2005-0727 State: REJECTED Published: 2005-03-12T05:00:00 Last Updated: 2005-11-02T10:00:00 Description: No description available.
CVE ID: CVE-2005-0728 State: REJECTED Published: 2005-03-12T05:00:00 Last Updated: 2005-11-02T10:00:00 Description: No description available.
CVE ID: CVE-2005-0729 State: PUBLISHED Published: 2005-03-13T05:00:00 Last Updated: 2024-08-07T21:21:06.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Xpand Rally 1.1.0.0 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a message. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/xprallyfs-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/19649 - http://www.securiteam.com/windowsntfocus/5DP0G00F5Q.html - http://secunia.com/advisories/14545
CVE ID: CVE-2005-0730 State: PUBLISHED Published: 2005-03-13T05:00:00 Last Updated: 2024-08-07T21:21:06.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service via a request to a file on the floppy drive, as demonstrated using A:\a.txt. Additional Analyst Notes: - CVE Program Container: References: - http://secway.org/advisory/ad20050104.txt - http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19647 - http://secunia.com/advisories/14553
CVE ID: CVE-2005-0731 State: PUBLISHED Published: 2005-03-13T05:00:00 Last Updated: 2024-08-07T21:21:06.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to Filelist.html. Additional Analyst Notes: - CVE Program Container: References: - http://secway.org/advisory/ad20050104.txt - http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19650 - http://secunia.com/advisories/14553
CVE ID: CVE-2005-0732 State: PUBLISHED Published: 2005-03-13T05:00:00 Last Updated: 2024-08-07T21:21:06.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to obtain the full path of the web server via a request for a non-existent filename, which leaks the full path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secway.org/advisory/ad20050104.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/19652 - http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html - http://secunia.com/advisories/14553
CVE ID: CVE-2005-0733 State: PUBLISHED Published: 2005-03-13T05:00:00 Last Updated: 2024-08-07T21:21:06.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not. Additional Analyst Notes: - CVE Program Container: References: - http://secway.org/advisory/ad20050104.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/19654 - http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html - http://secunia.com/advisories/14553
CVE ID: CVE-2005-0734 State: PUBLISHED Published: 2005-03-13T05:00:00 Last Updated: 2024-08-07T21:21:06.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service (memory exhaustion and process crash) via a large number of HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19653 - http://secway.org/advisory/ad20050104.txt - http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html - http://secunia.com/advisories/14553
CVE ID: CVE-2005-0735 State: PUBLISHED Published: 2005-03-13T05:00:00 Last Updated: 2024-08-07T21:21:06.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: newsscript.pl for NewsScript allows remote attackers to gain privileges by setting the mode parameter to admin. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12761
CVE ID: CVE-2005-0736 State: PUBLISHED Published: 2005-03-13T05:00:00 Last Updated: 2024-08-07T21:21:06.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-366.html - http://www.securityfocus.com/bid/12763 - http://linux.bkbits.net:8080/linux-2.6/cset%40422dd06a1p5PsyFhoGAJseinjEq3ew?nav=index.html%7CChangeSet%40-1d - http://www.novell.com/linux/security/advisories/2005_18_kernel.html - http://lists.grok.org.uk/pipe
%7CChangeSet%40-1d - http://www.novell.com/linux/security/advisories/2005_18_kernel.html - http://lists.grok.org.uk/pipermail/full-disclosure/2005-March/032314.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9870 - http://www.redhat.com/support/errata/RHSA-2005-293.html - https://usn.ubuntu.com/95-1/
CVE ID: CVE-2005-0737 State: PUBLISHED Published: 2005-03-13T05:00:00Z Last Updated: 2024-09-17T02:01:33.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/lists/fulldisclosure/2005/Mar/0284.html - http://www.securityfocus.com/bid/12750
CVE ID: CVE-2005-0738 State: PUBLISHED Published: 2005-03-13T05:00:00 Last Updated: 2024-08-07T21:21:06.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) by deleting or moving a folder with deeply nested subfolders, which causes Microsoft Exchange Information Store service (Store.exe) to hang as a result of a large number of recursive calls. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14543 - http://support.microsoft.com/?kbid=891504
CVE ID: CVE-2005-0739 State: PUBLISHED Published: 2005-03-13T05:00:00 Last Updated: 2024-08-07T21:21:06.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could leave it vulnerable to buffer overflows, as demonstrated using modified length values that are not properly handled by the dissect_pdus and pduval_to_str functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2005:053 - http://anonsvn.ethereal.com/viewcvs/v
-200503-16.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2005:053 - http://anonsvn.ethereal.com/viewcvs/viewcvs.py?view=rev&rev=13707 - http://security.lss.hr/index.php?page=details&ID=LSS-2005-03-05 - http://www.ethereal.com/appnotes/enpa-sa-00018.html - http://www.redhat.com/support/errata/RHSA-2005-306.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9687 - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html - http://www.debian.org/security/2005/dsa-718 - http://marc.info/?l=bugtraq&m=111066805726551&w=2 - http://www.securityfocus.com/bid/12762
CVE ID: CVE-2005-0740 State: PUBLISHED Published: 2005-03-13T05:00:00 Last Updated: 2024-08-07T21:21:06.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of service (system panic) via crafted values in the TCP timestamp option, which causes invalid arguments to be used when calculating the retransmit timeout. Additional Analyst Notes: - CVE Program Container: References: - http://www.openbsd.org/errata35.html - http://secunia.com/advisories/13819 - http://securitytracker.com/id?1012861 - http://www.securityfocus.com/bid/12250
CVE ID: CVE-2005-0741 State: PUBLISHED Published: 2005-03-13T05:00:00 Last Updated: 2024-08-07T21:21:06.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a usersrecentposts action. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013420 - http://www.securityfocus.com/bid/12756
CVE ID: CVE-2005-0742 State: PUBLISHED Published: 2005-03-13T05:00:00 Last Updated: 2024-08-07T21:21:06.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Sun Java System Application Server 7 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12775 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57742-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200314-1
CVE ID: CVE-2005-0743 State: PUBLISHED Published: 2005-03-13T05:00:00 Last Updated: 2024-08-07T21:21:06.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote attackers to upload arbitrary PHP scripts, whose file extensions are not filtered. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14520 - http://www.xoops.org/modules/news/article.php?storyid=2114 - http://www.securityfocus.com/archive/1/392626 - http://www.securityfocus.com/bid/12754 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19634
CVE ID: CVE-2005-0744 State: PUBLISHED Published: 2005-03-13T05:00:00 Last Updated: 2024-08-07T21:21:06.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privileges by (1) sniffing the connection on TCP port 51100 and replaying the authentication information or (2) obtaining and replaying the PCZQX02 authentication cookie from the browser. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14527 - http://securitytracker.com/id?1013406 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19646 - http://support.novell.com/c
ecuritytracker.com/id?1013406 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19646 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096885.htm
CVE ID: CVE-2005-0745 State: PUBLISHED Published: 2005-03-13T05:00:00Z Last Updated: 2024-09-17T01:36:45.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: UTStarcom iAN-02EX VoIP Analog Terminal Adaptor (ATA) allows local users to bypass ATA access restrictions by dialing "*#26845#" and causing a device reset. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/lists/bugtraq/2005/Mar/0168.html - http://secunia.com/advisories/14544
CVE ID: CVE-2005-0746 State: PUBLISHED Published: 2005-03-13T05:00:00 Last Updated: 2024-08-07T21:21:06.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111091102023359&w=2 - http://www.infobyte.com.ar/adv/ISR-03.html - http://securitytracker.com/id?1013407 - http://secunia.com/advisories/14537 - http://www.securityfocus.com/bid/12766 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096886.htm - https://exchange
ww.securityfocus.com/bid/12766 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096886.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/19643
CVE ID: CVE-2005-0747 State: PUBLISHED Published: 2005-03-13T05:00:00 Last Updated: 2024-08-07T21:21:06.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: ApplyYourself i-Class allows remote attackers to obtain sensitive information about their own applications by reusing the hidden ID field, as demonstrated using the id parameter to ApplicantDecision.asp. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013400
CVE ID: CVE-2005-0748 State: PUBLISHED Published: 2005-03-13T05:00:00 Last Updated: 2024-08-07T21:21:06.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in initdb.php for WEBInsta Mailing list manager 1.3d allows remote attackers to execute arbitrary PHP code by modifying the absolute_path parameter to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19651 - http://www.vupen.com/english/advisories/2005/0248 - http://securitytracker.com/id?1013409 - http://secunia.com/advisories/14550 - http://www.securityfoc
isories/2005/0248 - http://securitytracker.com/id?1013409 - http://secunia.com/advisories/14550 - http://www.securityfocus.com/bid/12773
CVE ID: CVE-2005-0749 State: PUBLISHED Published: 2005-04-05T04:00:00 Last Updated: 2024-08-07T21:21:06.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: The load_elf_library in the Linux kernel before 2.6.11.6 allows local users to cause a denial of service (kernel crash) via a crafted ELF library or executable, which causes a free of an invalid pointer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12935 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10640 - http://www.redhat.com/support/errata/RHSA-2005-366.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19867 - http://s
www.redhat.com/support/errata/RHSA-2005-366.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19867 - http://secunia.com/advisories/14713/ - http://secunia.com/advisories/19607 - https://usn.ubuntu.com/103-1/ - http://www.redhat.com/support/errata/RHSA-2005-551.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532 - ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U - http://www.redhat.com/support/errata/RHSA-2005-293.html - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.6 - http://www.redhat.com/support/errata/RHSA-2005-529.html
CVE ID: CVE-2005-0750 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:21:06.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or (2) socketpair call with a negative protocol value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19844 - http://www.redhat.com/support/errata/RHSA-2005-366.html - http://www.redhat.com/support/errata/RHSA-2005-283.html - http://marc.info/?l=bugtraq&m=111204562102633&w=2 - https://o
http://www.redhat.com/support/errata/RHSA-2005-283.html - http://marc.info/?l=bugtraq&m=111204562102633&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11719 - http://www.securityfocus.com/bid/12911 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532 - http://www.redhat.com/support/errata/RHSA-2005-293.html - http://www.redhat.com/support/errata/RHSA-2005-284.html - http://lists.grok.org.uk/pipermail/full-disclosure/2005-March/032913.html
CVE ID: CVE-2005-0751 State: REJECTED Published: 2005-06-08T04:00:00Z Last Updated: 2024-09-16T22:08:57.007Z Description: No description available.
CVE ID: CVE-2005-0752 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:28:27.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascript: URL in the PLUGINSPAGE attribute of an EMBED tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13228 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100024 - http://www.mozilla.org/security/announce/mfsa2005-34.html - http://secunia.com/advisories/14938 - http://www.redhat.com/support/errata/RHSA-2005-383.html -
unce/mfsa2005-34.html - http://secunia.com/advisories/14938 - http://www.redhat.com/support/errata/RHSA-2005-383.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10279
CVE ID: CVE-2005-0753 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-07T21:28:27.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/attachment.cgi?id=54352&action=view - http://www.debian.org/security/2005/dsa-742 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20148 - http://www.novell.com/linux/security/advisories/2005_24_cvs.html - http://www.gentoo.org/security/en/glsa/glsa-20050
8 - http://www.novell.com/linux/security/advisories/2005_24_cvs.html - http://www.gentoo.org/security/en/glsa/glsa-200504-16.xml - http://secunia.com/advisories/14976/ - http://www.redhat.com/support/errata/RHSA-2005-387.html
CVE ID: CVE-2005-0754 State: PUBLISHED Published: 2005-04-24T04:00:00 Last Updated: 2024-08-07T21:28:27.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.kde.org/info/security/advisory-20050420-1.txt - http://marc.info/?l=bugtraq&m=111419664411051&w=2 - http://secunia.com/advisories/15060 - http://www.securityfocus.com/bid/13313 - ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.0-kdewebdev-kommander.diff
CVE ID: CVE-2005-0755 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-07T21:28:27.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to execute arbitrary code via a long hostname in a RAM file. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-392.html - http://www.redhat.com/support/errata/RHSA-2005-363.html - http://www.redhat.com/archives/fedora-announce-list/2005-April/msg00040.html - http://marc.info/?l=bugtraq&m=111401615202987&w=2 - http://service.real.c
edora-announce-list/2005-April/msg00040.html - http://marc.info/?l=bugtraq&m=111401615202987&w=2 - http://service.real.com/help/faq/security/050419_player/EN/ - http://www.redhat.com/support/errata/RHSA-2005-394.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11205 - http://pb.specialised.info/all/adv/real-ram-adv.txt
CVE ID: CVE-2005-0756 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T21:28:27.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to cause a denial of service (kernel crash). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18056 - http://secunia.com/advisories/17073 - https://usn.ubuntu.com/137-1/ - http://www.securityfocus.com/bid/13891 - http://secunia.com/advisories/18059 - http://www.securityfocus.com/archive/1/428058/100/0/threaded - http://www.debian.org/security/2005/dsa-922 - https://oval
ttp://www.securityfocus.com/archive/1/428058/100/0/threaded - http://www.debian.org/security/2005/dsa-922 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11119 - http://www.debian.org/security/2005/dsa-921 - http://www.redhat.com/support/errata/RHSA-2005-514.html - http://secunia.com/advisories/17002 - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2005-663.html - http://www.vupen.com/english/advisories/2005/1878