Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
http://secunia.com/advisories/18047 - http://secunia.com/advisories/18057 - http://www.vupen.com/english/advisories/2005/2931 - http://support.avaya.com/elmodocs2/security/ASA-2005-233.pdf - http://keygen.proxim.com/support/cs/Documents/802.1x_vulnerability.pdf
CVE ID: CVE-2005-3254 State: PUBLISHED Published: 2005-10-18T04:00:00Z Last Updated: 2024-09-17T02:20:34.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CGIwrap program before 3.9 on Debian GNU/Linux uses an incorrect minimum value of 100 for a UID to determine whether it can perform a seteuid operation, which could allow attackers to execute code as other system UIDs that are greater than the minimum value, which should be 1000 on Debian systems. Additional Analyst Notes: - CVE Program Container: References: - http://lists.alioth.debian.org/pipermail/secure-testing-announce/2005-August/000003.html
CVE ID: CVE-2005-3255 State: PUBLISHED Published: 2005-10-18T04:00:00 Last Updated: 2024-08-07T23:01:59.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) cgiwrap and (2) php-cgiwrap packages before 3.9 in Debian GNU/Linux provide access to debugging CGIs under the web document root, which allows remote attackers to obtain sensitive information via direct requests to those CGIs. Additional Analyst Notes: - CVE Program Container: References: - http://lists.alioth.debian.org/pipermail/secure-testing-announce/2005-August/000003.html
CVE ID: CVE-2005-3256 State: PUBLISHED Published: 2005-10-18T04:00:00 Last Updated: 2024-08-07T23:01:59.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, which allows parties with that key to decrypt the message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15155 - http://www.novell.com/linux/security/advisories/2005_28_sr.html - http://www.vupen.com/english/advisories/2005/2158 - http://www.debian.org/security/2005/dsa-889 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:226
005/2158 - http://www.debian.org/security/2005/dsa-889 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:226 - http://www.kb.cert.org/vuls/id/805121 - https://usn.ubuntu.com/211-1/ - http://www.cert.dfn.de/infoserv/dsb/dsb-2005-01.html
CVE ID: CVE-2005-3257 State: PUBLISHED Published: 2005-10-18T04:00:00 Last Updated: 2024-08-07T23:01:59.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:235 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10615 - http://www.mandriva.com/security/advisories?na
ty.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10615 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - http://secunia.com/advisories/19369 - http://secunia.com/advisories/18203 - http://secunia.com/advisories/17226 - http://www.debian.org/security/2006/dsa-1018 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334113 - http://secunia.com/advisories/19185 - http://www.securityfocus.com/bid/15122 - http://rhn.redhat.com/errata/RHBA-2007-0304.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:218 - http://secunia.com/advisories/17826 - http://www.debian.org/security/2006/dsa-1017 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:
ries/17826 - http://www.debian.org/security/2006/dsa-1017 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 - http://secunia.com/advisories/19374 - https://usn.ubuntu.com/231-1/ - http://secunia.com/advisories/17995
CVE ID: CVE-2005-3258 State: PUBLISHED Published: 2005-10-20T04:00:00 Last Updated: 2024-08-07T23:01:59.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service (segmentation fault) via certain "odd" responses. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17626 - http://securitytracker.com/id?1015085 - http://secunia.com/advisories/17287 - http://secunia.com/advisories/17513 - http://secunia.com/advisories/17338 - http://secunia.com/advisories/17645 - http://secunia.com/advisories/17271 - http://www.vupen.co
a.com/advisories/17338 - http://secunia.com/advisories/17645 - http://secunia.com/advisories/17271 - http://www.vupen.com/english/advisories/2005/2151 - http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE11-rfc1738_do_escape - http://www.novell.com/linux/security/advisories/2005_27_sr.html - http://secunia.com/advisories/17407
CVE ID: CVE-2005-3259 State: PUBLISHED Published: 2005-10-20T04:00:00 Last Updated: 2024-08-07T23:01:59.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) login field, (2) "search this thread" feature, (3) "search for posts" feature, (4) "forgot password" feature, (5) list parameter in userlistpre.php, and the (6) select, (7) categ, and (8) to parameters in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/19962 - http://www.securityfocus.com/bid/15068 - http:
otes: - CVE Program Container: References: - http://www.osvdb.org/19962 - http://www.securityfocus.com/bid/15068 - http://www.osvdb.org/19963 - http://www.osvdb.org/19966 - http://www.osvdb.org/19964 - http://marc.info/?l=bugtraq&m=112907535528616&w=2 - http://www.osvdb.org/19968 - http://www.osvdb.org/19967 - http://rgod.altervista.org/versatile100RC2.html - http://secunia.com/advisories/17174/ - http://www.osvdb.org/19965
CVE ID: CVE-2005-3260 State: PUBLISHED Published: 2005-10-20T04:00:00 Last Updated: 2024-08-07T23:01:59.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to inject arbitrary web script or HTML via (1) the url parameter in dereferrer.php and (2) the file parameter in imagewin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/19971 - http://www.osvdb.org/19970 - http://marc.info/?l=bugtraq&m=112907535528616&w=2 - http://www.osvdb.org/19969 - http://rgod.altervista.org/versatile100RC2.html - http://www.securityfocus.com/bid/1
&w=2 - http://www.osvdb.org/19969 - http://rgod.altervista.org/versatile100RC2.html - http://www.securityfocus.com/bid/15073 - http://secunia.com/advisories/17174/
CVE ID: CVE-2005-3261 State: PUBLISHED Published: 2005-10-20T04:00:00 Last Updated: 2024-08-07T23:01:59.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obtain sensitive information via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/19973 - http://www.securityfocus.com/bid/15075 - http://marc.info/?l=bugtraq&m=112907535528616&w=2 - http://rgod.altervista.org/versatile100RC2.html - http://secunia.com/advisories/17174/
CVE ID: CVE-2005-3262 State: PUBLISHED Published: 2005-10-20T04:00:00 Last Updated: 2024-08-07T23:01:59.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifiers in a UUE/XXE file, which are not properly handled when WinRAR displays diagnostic errors related to an invalid filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15062 - http://secunia.com/advisories/16973/ - http://www.rarlabs.com/rarnew.htm - http://secunia.com/secunia_research/2005-53/advisory/
CVE ID: CVE-2005-3263 State: PUBLISHED Published: 2005-10-20T04:00:00 Last Updated: 2024-08-07T23:01:59.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via an ACE archive containing a file with a long name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15062 - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0266.html - http://www.osvdb.org/19915 - http://secunia.com/advisories/16973/ - http://www.rarlabs.com/rarnew.htm - http://secunia.com/secunia_research/2005-53/advisory/
CVE ID: CVE-2005-3264 State: PUBLISHED Published: 2005-10-20T04:00:00 Last Updated: 2024-08-07T23:01:59.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in thread.php for Zeroblog 1.1f and 1.2a allows remote attackers to inject arbitrary web script or HTML via the threadID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112907042504220&w=2 - http://secunia.com/advisories/17175/ - http://www.securityfocus.com/bid/15078 - http://irannetjob.com/content/view/141/28/
CVE ID: CVE-2005-3265 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:01:59.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via (1) callto:// and (2) skype:// links, or (3) a non-standard VCARD, possibly due to an underlying error in the SysUtils.WideFmtStr Delphi routine. Additional Analyst Notes: - CVE Program Container: References: - http://www.pentest.co.uk/documents/ptl-2005-01.html - http://www.kb.cert.org/vuls/id/668193 - http://secunia.com/advisories/17305/ - http://www.vupen.com/english/advisories/2005/2197 - http://www.kb.cert.o
668193 - http://secunia.com/advisories/17305/ - http://www.vupen.com/english/advisories/2005/2197 - http://www.kb.cert.org/vuls/id/930345 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22848 - http://www.securityfocus.com/bid/15190 - http://skype.com/security/skype-sb-2005-02.html
CVE ID: CVE-2005-3266 State: REJECTED Published: 2005-10-23T04:00:00Z Last Updated: 2024-09-16T23:56:05.883Z Description: No description available.
CVE ID: CVE-2005-3267 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-07T23:01:59.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Skype client before 1.4.x.84 on Windows, before 1.3.x.17 on Mac OS, before 1.2.x.18 on Linux, and 1.1.x.6 and earlier allows remote attackers to cause a denial of service (crash) via crafted network data with a large Object Counter value, which leads to a resultant heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22850 - http://secunia.com/advisories/17305/ - http://skype.com/security/skype-sb-2005-03.html - htt
com/vulnerabilities/22850 - http://secunia.com/advisories/17305/ - http://skype.com/security/skype-sb-2005-03.html - http://marc.info/?l=bugtraq&m=113026202728568&w=2 - http://www.osvdb.org/20306 - http://www.vupen.com/english/advisories/2005/2197 - http://www.kb.cert.org/vuls/id/905177 - http://www.securityfocus.com/bid/15192 - http://securityreason.com/securityalert/115
CVE ID: CVE-2005-3268 State: PUBLISHED Published: 2005-10-20T04:00:00 Last Updated: 2024-08-07T23:01:59.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: yiff server (yiff-server) 2.14.2 on Debian GNU/Linux runs as root and does not properly verify ownership of files that it opens, which allows local users to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17242 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334616 - http://www.securityfocus.com/bid/15140 - http://www.osvdb.org/20074
CVE ID: CVE-2005-3269 State: PUBLISHED Published: 2005-10-20T04:00:00 Last Updated: 2024-08-07T23:01:59.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate Server before 7.1 SP1, (4) Sun ONE Directory Server 5.1 SP4 and earlier, and (5) Sun ONE Administration Server 5.2 allows remote attackers to cause a denial of service (admin server crash), or local users to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015538
root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015538 - http://marc.info/?l=bugtraq&m=112862037500012&w=2 - http://www.securityfocus.com/bid/15013 - http://securitytracker.com/id?1015536 - http://secunia.com/advisories/18590 - http://securityreason.com/securityalert/367 - http://www.securityfocus.com/bid/16345 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1 - http://securityreason.com/securityalert/51 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24311 - http://secunia.com/advisories/17092 - http://securitytracker.com/id?1015014 - http://www.vupen.com/english/advisories/2005/1988 - http://marc.info
ies/17092 - http://securitytracker.com/id?1015014 - http://www.vupen.com/english/advisories/2005/1988 - http://marc.info/?l=bugtraq&m=113815459026080&w=2 - http://securitytracker.com/id?1015537 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-228419-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1
CVE ID: CVE-2005-3270 State: PUBLISHED Published: 2005-10-20T04:00:00 Last Updated: 2024-08-07T23:01:59.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in DiskMountNotify for Symantec Norton AntiVirus 9.0.3 allows local users to gain privileges by modifying the PATH to reference a malicious (1) ps or (2) grep file. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=325&type=vulnerabilities - http://secunia.com/advisories/17268 - http://securitytracker.com/id?1015084 - http://www.securityfocus.com/bid/15142 - http://www.securityfocus.com/bid/15143
CVE ID: CVE-2005-3271 State: PUBLISHED Published: 2005-10-20T04:00:00 Last Updated: 2024-08-07T23:10:07.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exec in Linux kernel 2.6 does not properly clear posix-timers in multi-threaded environments, which results in a resource leak and could allow a large number of multiple local users to cause a denial of service by using more posix-timers than specified by the quota for a single user. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17917 - http://secunia.com/advisories/18056 - http://linux.bkbits.net:8080/linux-2.6/cset%40414b332fsZQvEUsfzKJIo-q2_ZH0hg - http://www.securityfocus.co
ories/18056 - http://linux.bkbits.net:8080/linux-2.6/cset%40414b332fsZQvEUsfzKJIo-q2_ZH0hg - http://www.securityfocus.com/advisories/9806 - http://www.securityfocus.com/bid/15533 - http://www.debian.org/security/2005/dsa-922 - https://usn.ubuntu.com/219-1/ - http://www.ussg.iu.edu/hypermail/linux/kernel/0409.1/1107.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:218 - http://secunia.com/advisories/17826 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219
CVE ID: CVE-2005-3272 State: PUBLISHED Published: 2005-10-20T04:00:00 Last Updated: 2024-08-07T23:10:07.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel before 2.6.12 allows remote attackers to poison the bridge forwarding table using frames that have already been dropped by filtering, which can cause the bridge to forward spoofed packets. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm - http://www.redhat.com/support/errata/RHSA-2006-0493.html - http://secunia.com/advisories/18056 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:025 - http://secunia.com/advisories/21745 - h
sories/18056 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:025 - http://secunia.com/advisories/21745 - http://www.debian.org/security/2005/dsa-922 - https://usn.ubuntu.com/219-1/ - http://linux.bkbits.net:8080/linux-2.6/cset%40429a310bRFOXOmZvKaGXW8A5Qd9F1A - http://secunia.com/advisories/20237 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10157 - http://www.securityfocus.com/bid/15536
CVE ID: CVE-2005-3273 State: PUBLISHED Published: 2005-10-20T04:00:00 Last Updated: 2024-08-07T23:10:07.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rose_rt_ioctl function in rose_route.c for Radionet Open Source Environment (ROSE) in Linux 2.6 kernels before 2.6.12, and 2.4 before 2.4.29, does not properly verify the ndigis argument for a new route, which allows attackers to trigger array out-of-bounds errors with a large number of digipeats. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18056 - http://linux.bkbits.net:8080/linux-2.6/cset%40423114bcdthRtmtdS6MsZiBVvteGCg - http://securitytracker.com/id?1014115 - http://
/linux.bkbits.net:8080/linux-2.6/cset%40423114bcdthRtmtdS6MsZiBVvteGCg - http://securitytracker.com/id?1014115 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - http://www.redhat.com/support/errata/RHSA-2006-0579.html - http://lkml.org/lkml/2005/5/23/169 - http://secunia.com/advisories/21035 - http://www.debian.org/security/2005/dsa-922 - https://usn.ubuntu.com/219-1/ - http://linux.bkbits.net:8080/linux-2.4/cset%4041e2cf515TpixcVQ8q8HvQvCv9E6zA - http://www.redhat.com/support/errata/RHSA-2006-0580.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:218 - http://www.securityfocus.com/archive/1/428028/100/0/threaded - http://secunia.com/advisories/17826 - http
KSA-2005:218 - http://www.securityfocus.com/archive/1/428028/100/0/threaded - http://secunia.com/advisories/17826 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9552 - http://www.redhat.com/support/errata/RHSA-2005-663.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 - http://www.securityfocus.com/bid/13886
CVE ID: CVE-2005-3274 State: PUBLISHED Published: 2005-10-20T04:00:00 Last Updated: 2024-10-15T14:15:02.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in ip_vs_conn_flush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, allows local users to cause a denial of service (null dereference) by causing a connection timer to expire while the connection table is being flushed before the appropriate lock is acquired. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:235 - http://secunia.com/advisories/18684 - http://secunia.com/advisori
mandriva.com/security/advisories?name=MDKSA-2005:235 - http://secunia.com/advisories/18684 - http://secunia.com/advisories/18056 - http://secunia.com/advisories/18977 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044 - http://www.securityfocus.com/bid/15528 - http://www.debian.org/security/2005/dsa-922 - http://www.securityfocus.com/archive/1/427981/100/0/threaded - https://usn.ubuntu.com/219-1/ - http://www.redhat.com/support/errata/RHSA-2006-0190.html - http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Bh=e684f066dff5628bb61ad1912de6e8058b5b4c7d - http://www.mandriva.com/secur
kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Bh=e684f066dff5628bb61ad1912de6e8058b5b4c7d - http://www.mandriva.com/security/advisories?name=MDKSA-2005:218 - http://secunia.com/advisories/17826 - http://lkml.org/lkml/2005/6/23/249 - http://lkml.org/lkml/2005/6/24/173 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11723 - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2005-663.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219
CVE ID: CVE-2005-3275 State: PUBLISHED Published: 2005-10-20T04:00:00 Last Updated: 2024-08-07T23:10:07.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NAT code (1) ip_nat_proto_tcp.c and (2) ip_nat_proto_udp.c in Linux kernel 2.6 before 2.6.13 and 2.4 before 2.4.32-rc1 incorrectly declares a variable to be static, which allows remote attackers to cause a denial of service (memory corruption) by causing two packets for the same protocol to be NATed at the same time, which leads to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2006-0140.html - http://secunia.com/advisories/18684 - http://secuni
rences: - http://www.redhat.com/support/errata/RHSA-2006-0140.html - http://secunia.com/advisories/18684 - http://secunia.com/advisories/18056 - http://secunia.com/advisories/18977 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10142 - http://secunia.com/advisories/18059 - http://secunia.com/advisories/19185 - http://secunia.com/advisories/19607 - http://www.securityfocus.com/archive/1/419522/100/0/threaded - http://www.securityfocus.com/archive/1/428058/100/0/threaded - http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044 - http://www.debian.org/security/2005/dsa-922 - h
d - http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044 - http://www.debian.org/security/2005/dsa-922 - https://usn.ubuntu.com/219-1/ - http://www.redhat.com/support/errata/RHSA-2006-0190.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:218 - http://www.securityfocus.com/archive/1/428028/100/0/threaded - http://www.debian.org/security/2005/dsa-921 - http://linux.bkbits.net:8080/linux-2.6/cset%4042e14e05d0V1d88nZlaIX1F9dCRApA - http://www.securityfocus.com/bid/15531 - http://secunia.com/advisories/17826 - ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U - http://secunia.com/advisories/17918 - http://www.securityfocus.com/archive/1/427980/10
curity/advisories/20060402-01-U - http://secunia.com/advisories/17918 - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 - http://www.redhat.com/support/errata/RHSA-2006-0191.html - http://secunia.com/advisories/18562
CVE ID: CVE-2005-3276 State: PUBLISHED Published: 2005-10-20T04:00:00 Last Updated: 2024-08-07T23:10:07.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sys_get_thread_area function in process.c in Linux 2.6 before 2.6.12.4 and 2.6.13 does not clear a data structure before copying it to userspace, which might allow a user process to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9748 - http://secunia.com/advisories/18056 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - http://www.redhat.com/support/errata/RHSA-2006-0144.h