Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-3853 State: PUBLISHED Published: 2006-08-08T22:00:00 Last Updated: 2024-08-07T18:48:39.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IBM Informix Dynamic Server (IDS) before 9.40.TC7 and 10.00 before 10.00.TC3, when running on Windows, allows remote attackers to execute arbitrary code via a long username. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg21242921 - http://www.securityfocus.com/archive/1/443149/100/0/threaded - http://www.securityfocus.com/archive/1/443133/100/0/threaded - http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf -
hive/1/443133/100/0/threaded - http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf - http://www.osvdb.org/27685 - http://secunia.com/advisories/21301 - http://www.securityfocus.com/bid/19264 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28122 - http://www.vupen.com/english/advisories/2006/3077
CVE ID: CVE-2006-3854 State: PUBLISHED Published: 2006-08-17T01:00:00 Last Updated: 2024-08-07T18:48:39.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC7, 9.40.TC8, 10.00.TC4, and 10.00.TC5, when running on Windows, allows remote attackers to execute arbitrary code via a long username, which causes an overflow in vsprintf when displaying in the resulting error message. NOTE: this issue is due to an incomplete fix for CVE-2006-3853. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/443150/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28381 -
p://www.securityfocus.com/archive/1/443150/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28381 - http://www.securityfocus.com/archive/1/443133/100/0/threaded - http://securityreason.com/securityalert/1409 - http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf
CVE ID: CVE-2006-3855 State: PUBLISHED Published: 2006-08-08T22:00:00 Last Updated: 2024-08-07T18:48:39.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated users to execute arbitrary C code via the DllMain or _init function in a library, aka "C code UDR." Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg21242921 - http://www.securityfocus.com/archive/1/443133/100/0/threaded - http://www.securityfocus.com/archive/1/443184/100/0/threaded - http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf
archive/1/443184/100/0/threaded - http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/28129 - http://secunia.com/advisories/21301 - http://www.securityfocus.com/bid/19264 - http://www.vupen.com/english/advisories/2006/3077 - http://www.osvdb.org/27689
CVE ID: CVE-2006-3856 State: PUBLISHED Published: 2006-08-08T22:00:00 Last Updated: 2024-08-07T18:48:39.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows local users to cause a denial of service (crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg21242921 - http://www.securityfocus.com/archive/1/443133/100/0/threaded - http://www.osvdb.org/27690 - http://www.securityfocus.com/archive/1/443210/100/0/threaded - http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf - http:/
/443210/100/0/threaded - http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf - http://secunia.com/advisories/21301 - http://www.securityfocus.com/bid/19264 - http://www.vupen.com/english/advisories/2006/3077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28131
CVE ID: CVE-2006-3857 State: PUBLISHED Published: 2006-08-08T22:00:00 Last Updated: 2024-08-07T18:48:39.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in IBM Informix Dynamic Server (IDS) before 9.40.TC6 and 10.00 before 10.00.TC3 allow remote authenticated users to execute arbitrary code via (1) the getname function, as used by (a) _sq_remview, (b) _sq_remproc, (c) _sq_remperms, (d) _sq_distfetch, and (e) _sq_dcatalog; and the (2) SET DEBUG FILE, (3) IFX_FILE_TO_FILE, (4) FILETOCLOB, (5) LOTOFILE, and (6) DBINFO functions (product defect IDs 171649, 171367, 171387, 171391, 171906, 172179). Additional Analyst Notes: - CVE Program Container: Referenc
defect IDs 171649, 171367, 171387, 171391, 171906, 172179). Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27693 - http://www-1.ibm.com/support/docview.wss?uid=swg21242921 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28119 - http://www.osvdb.org/27683 - http://www.securityfocus.com/archive/1/443133/100/0/threaded - http://www.osvdb.org/27687 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28127 - http://www.securityfocus.com/archive/1/443210/100/0/threaded - http://www.osvdb.org/27681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28118 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28126 - http://www.databasesecurity.c
d.com/vulnerabilities/28118 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28126 - http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/28157 - http://secunia.com/advisories/21301 - http://www.securityfocus.com/bid/19264 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28120 - http://www.vupen.com/english/advisories/2006/3077 - http://www.osvdb.org/27688 - http://www.osvdb.org/27682
CVE ID: CVE-2006-3858 State: PUBLISHED Published: 2006-08-08T22:00:00 Last Updated: 2024-08-07T18:48:39.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory (product defects 171893, 171894, 173772). Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg21242921 - http://www.securityfocus.com/archive/1/443133/100/0/threaded - http://www.securityfocus.com/archive/1/443195/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabili
readed - http://www.securityfocus.com/archive/1/443195/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28132 - http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf - http://secunia.com/advisories/21301 - http://www.securityfocus.com/bid/19264 - http://www.osvdb.org/27691 - http://www.vupen.com/english/advisories/2006/3077
CVE ID: CVE-2006-3859 State: PUBLISHED Published: 2006-08-17T01:00:00 Last Updated: 2024-08-07T18:48:39.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Informix Dynamic Server (IDS) allows remote authenticated users to create and overwrite arbitrary files via the (1) LOTOFILE and (2) trl_tracefile_set functions, and the (3) "SET DEBUG FILE" commands. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1408 - http://www.securityfocus.com/archive/1/443133/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28383 - http://www.securityfocus.com/archive/1/443216/100/0/threaded - http://www.databasesecurity.
.com/vulnerabilities/28383 - http://www.securityfocus.com/archive/1/443216/100/0/threaded - http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf
CVE ID: CVE-2006-3860 State: PUBLISHED Published: 2006-08-17T01:00:00 Last Updated: 2024-08-07T18:48:39.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows allows remote authenticated users to execute arbitrary commands via the (1) "SET DEBUG FILE" SQL command, and the (2) start_onpload and (3) dbexp functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27686 - http://www-1.ibm.com/support/docview.wss?uid=swg21242921 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28121 - http://securityreason.com/securityalert/1407 - http://www.securityfocus.com/a
force.ibmcloud.com/vulnerabilities/28121 - http://securityreason.com/securityalert/1407 - http://www.securityfocus.com/archive/1/443133/100/0/threaded - http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/28124 - http://secunia.com/advisories/21301 - http://www.securityfocus.com/bid/19264 - http://www.securityfocus.com/archive/1/443185/100/0/threaded - http://www.vupen.com/english/advisories/2006/3077
CVE ID: CVE-2006-3861 State: PUBLISHED Published: 2006-08-08T22:00:00 Last Updated: 2024-08-07T18:48:39.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 does not use database creation permissions, which allows remote authenticated users to create arbitrary databases. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/443192/100/0/threaded - http://www-1.ibm.com/support/docview.wss?uid=swg21242921 - http://www.securityfocus.com/archive/1/443133/100/0/threaded - http://www.osvdb.org/27692 - http://www.databasesecurity.com/informix/DatabaseHackersHandb
ive/1/443133/100/0/threaded - http://www.osvdb.org/27692 - http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/28148 - http://secunia.com/advisories/21301 - http://www.securityfocus.com/bid/19264 - http://www.vupen.com/english/advisories/2006/3077
CVE ID: CVE-2006-3862 State: PUBLISHED Published: 2006-08-08T22:00:00 Last Updated: 2024-08-07T18:48:39.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC5 through 9.40.xC7 and 10.00.TC1 through 10.00.xC3 allows attackers to execute arbitrary code via the SQLIDEBUG environment variable (envariable). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28158 - http://www-1.ibm.com/support/docview.wss?uid=swg21242921 - http://www.osvdb.org/27694 - http://www.securityfocus.com/archive/1/443133/100/0/threaded - http://www.securityfocus.com/archive/1/443165/10
/27694 - http://www.securityfocus.com/archive/1/443133/100/0/threaded - http://www.securityfocus.com/archive/1/443165/100/0/threaded - http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf - http://secunia.com/advisories/21301 - http://www.securityfocus.com/bid/19264 - http://www.vupen.com/english/advisories/2006/3077
CVE ID: CVE-2006-3863 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-3864 State: PUBLISHED Published: 2006-10-10T22:00:00 Last Updated: 2024-08-07T18:48:39.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in mso.dll in Microsoft Office 2000, XP, and 2003, and Microsoft PowerPoint 2000, XP, and 2003, allows remote user-assisted attackers to execute arbitrary code via a malformed record in a (1) .DOC, (2) .PPT, or (3) .XLS file that triggers memory corruption, related to an "array boundary condition" (possibly an array index overflow), a different vulnerability than CVE-2006-3434, CVE-2006-3650, and CVE-2006-3868. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.or
006-3650, and CVE-2006-3868. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A632 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.vupen.com/english/advisories/2006/3981 - http://www.osvdb.org/29429 - http://www.kb.cert.org/vuls/id/176556 - http://secway.org/advisory/AD20061010.txt - http://www.securityfocus.com/bid/20384 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-062 - http://securitytracker.com/id?1017034 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.securityfocus.com/archive/1/448268/100/0/threa
http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.securityfocus.com/archive/1/448268/100/0/threaded - http://secunia.com/advisories/22339 - http://support.microsoft.com/kb/922581
CVE ID: CVE-2006-3865 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-3866 State: REJECTED Published: 2006-09-19T21:00:00Z Last Updated: 2024-09-17T00:10:52.880Z Description: No description available.
CVE ID: CVE-2006-3867 State: PUBLISHED Published: 2006-10-10T22:00:00 Last Updated: 2024-08-07T18:48:39.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attackers to execute arbitrary code via a crafted Lotus 1-2-3 file, a different vulnerability than CVE-2006-2387 and CVE-2006-3875. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20345 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-059 - http://securit
9179/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-059 - http://securitytracker.com/id?1017031 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.vupen.com/english/advisories/2006/3978 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A481 - http://www.kb.cert.org/vuls/id/821772
CVE ID: CVE-2006-3868 State: PUBLISHED Published: 2006-10-10T22:00:00 Last Updated: 2024-08-07T18:48:39.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Office XP and 2003 allows remote user-assisted attackers to execute arbitrary code via a malformed Smart Tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29430 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.vupen.com/english/advisories/2006/3981 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-062 - http://securitytracker.com/id?1017034 - http://www.kb.cert.org/vuls/id/807780 - http://www
ritybulletins/2006/ms06-062 - http://securitytracker.com/id?1017034 - http://www.kb.cert.org/vuls/id/807780 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://secunia.com/advisories/22339 - http://www.securityfocus.com/bid/20320 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A740
CVE ID: CVE-2006-3869 State: PUBLISHED Published: 2006-08-23T01:00:00 Last Updated: 2024-08-07T18:48:39.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060824, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL on a website that uses HTTP 1.1 compression. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28893 - http://www.securityfocus.com/bid/19667 - http://securitytracker.com/id?1016731 - http://www.osvdb.org/2
bilities/28893 - http://www.securityfocus.com/bid/19667 - http://securitytracker.com/id?1016731 - http://www.osvdb.org/28132 - http://www.microsoft.com/technet/security/advisory/923762.mspx - http://support.microsoft.com/kb/923762/ - http://secunia.com/advisories/21557 - http://www.nsfocus.com/english/homepage/research/0608.htm - http://www.securityfocus.com/archive/1/444241/100/0/threaded - http://www.kb.cert.org/vuls/id/821156 - http://www.vupen.com/english/advisories/2006/3356 - http://securityreason.com/securityalert/1441 - http://www.securityfocus.com/archive/1/444319/100/0/threaded - http://www.securityfocus.com/archive/1/444046/100/0/threaded - https://exchange.xforce.ibmcloud.com/vul
100/0/threaded - http://www.securityfocus.com/archive/1/444046/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28522
CVE ID: CVE-2006-3870 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-3871 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-3872 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-3873 State: PUBLISHED Published: 2006-09-12T23:00:00 Last Updated: 2024-08-07T18:48:39.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060912, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL in a GZIP-encoded website that was the target of an HTTP redirect, due to an incomplete fix for CVE-2006-3869. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28893 - https://docs.microsoft.com/en-us/secu
tainer: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28893 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042 - http://securityreason.com/securityalert/1555 - http://www.securityfocus.com/archive/1/445835/100/0/threaded - http://research.eeye.com/html/advisories/published/AD20060912.html - http://weblog.infoworld.com/techwatch/archives/007870.html - http://securitytracker.com/id?1016839 - http://www.securityfocus.com/bid/19987 - http://www.osvdb.org/30834
CVE ID: CVE-2006-3874 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-3875 State: PUBLISHED Published: 2006-10-10T22:00:00 Last Updated: 2024-08-07T18:48:39.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attackers to execute arbitrary code via a crafted COLINFO record in an XLS file, a different vulnerability than CVE-2006-2387 and CVE-2006-3867. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A486 - http://www.securityfocus.com/bid/20391 - http://www.securityfocus.com/archive/1/449179/100/0/thr
itre.oval%3Adef%3A486 - http://www.securityfocus.com/bid/20391 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.kb.cert.org/vuls/id/252500 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-059 - http://securitytracker.com/id?1017031 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.vupen.com/english/advisories/2006/3978
CVE ID: CVE-2006-3876 State: PUBLISHED Published: 2006-10-10T21:00:00 Last Updated: 2024-08-07T18:48:39.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via a crafted Data record in a PPT file, a different vulnerability than CVE-2006-3435 and CVE-2006-4694. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.kb.cert.org/vuls/id/938196 - https://oval.cisecurity.org/repository/search/definition/oval%3Aor
/0/threaded - http://www.kb.cert.org/vuls/id/938196 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A453 - http://www.securityfocus.com/bid/20322 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.vupen.com/english/advisories/2006/3977 - http://www.osvdb.org/29447 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-058 - http://securitytracker.com/id?1017030
CVE ID: CVE-2006-3877 State: PUBLISHED Published: 2006-10-10T22:00:00 Last Updated: 2024-08-07T18:48:39.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified "crafted file," a different vulnerability than CVE-2006-3435, CVE-2006-4694, and CVE-2006-3876. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20325 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.kb.cert.org/vuls/id/205948 - https://oval.ci
- http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.kb.cert.org/vuls/id/205948 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A568 - http://www.us-cert.gov/cas/techalerts/TA07-044A.html - http://www.securityfocus.com/archive/1/449179/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015 - http://www.vupen.com/english/advisories/2006/3977 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A220 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-058 - http://www.osvdb.org/29448 - http://securitytracker.com/id?1017030
CVE ID: CVE-2006-3878 State: PUBLISHED Published: 2006-07-27T00:00:00 Last Updated: 2024-08-07T18:48:39.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opsware Network Automation System (NAS) 6.0 installs /etc/init.d/mysql with insecure permissions, which allows local users to read the root password for the MySQL MAX database or gain privileges by modifying /etc/init.d/mysql. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444223/100/0/threaded - http://www.securityfocus.com/archive/1/441024/100/0/threaded - http://www.securityfocus.com/bid/19126 - http://securitytracker.com/id?1016566 - http://securityreason.com/securit
ded - http://www.securityfocus.com/bid/19126 - http://securitytracker.com/id?1016566 - http://securityreason.com/securityalert/1289 - http://secunia.com/advisories/21192 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27995 - http://www.securityfocus.com/archive/1/441296/100/0/threaded
CVE ID: CVE-2006-3879 State: PUBLISHED Published: 2006-07-27T00:00:00 Last Updated: 2024-08-07T18:48:39.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the loadChunk function in loaders/load_gt2.c in libmikmod in Mikmod Sound System 3.2.2 allows remote attackers to cause a denial of service via a GRAOUMF TRACKER (GT2) module file with a large (0xffffffff) comment length value in an XCOM chunk. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2967 - http://www.securityfocus.com/bid/19134 - http://aluigi.altervista.org/adv/lmmgt2ho-adv.txt - http://secunia.com/advisories/21196 - http://www.security
id/19134 - http://aluigi.altervista.org/adv/lmmgt2ho-adv.txt - http://secunia.com/advisories/21196 - http://www.securityfocus.com/archive/1/441006/100/0/threaded - http://securityreason.com/securityalert/1288 - http://aluigi.org/poc/lmmgt2ho.zip