Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-0935 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL commands via the (1) idpages parameter to pages.php or the (2) id2 parameter to products1.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.hackerscenter.com/Archive/view.asp?id=1774 - http://www.osvdb.org/15057 - http://marc.info/?l=bugtraq&m=111221890614271&w=2 - http://securitytracker.com/id?1013563 - http://secunia.com/advisories/14711 - http://www.securityfocus.com/bid/12903 - htt
tp://securitytracker.com/id?1013563 - http://secunia.com/advisories/14711 - http://www.securityfocus.com/bid/12903 - http://www.osvdb.org/15058
CVE ID: CVE-2005-0936 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:29.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in products1h.php in ESMI PayPal Storefront allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.hackerscenter.com/Archive/view.asp?id=1774 - http://marc.info/?l=bugtraq&m=111221890614271&w=2 - http://www.securityfocus.com/bid/12904 - http://securitytracker.com/id?1013563 - http://secunia.com/advisories/14711 - http://www.osvdb.org/15059
CVE ID: CVE-2005-0937 State: PUBLISHED Published: 2005-03-30T05:00:00 Last Updated: 2024-08-07T21:28:28.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Some futex functions in futex.c for Linux kernel 2.6.x perform get_user calls while holding the mmap_sem semaphore, which could allow local users to cause a deadlock condition in do_page_fault by triggering get_user faults while another thread is executing mmap or other functions. Additional Analyst Notes: - CVE Program Container: References: - http://linux.bkbits.net:8080/linux-2.6/cset%40421cfc11zFsK9gxvSJ2t__FCmuUd3Q - http://lkml.org/lkml/2005/2/22/123 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.m
t__FCmuUd3Q - http://lkml.org/lkml/2005/2/22/123 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10037 - http://www.redhat.com/support/errata/RHSA-2005-420.html - http://www.securityfocus.com/archive/1/427980/100/0/threaded
CVE ID: CVE-2005-0938 State: PUBLISHED Published: 2005-03-30T05:00:00 Last Updated: 2024-08-07T21:28:29.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ublog Reload 1.0 through 1.0.4 stores ublogreload.mdb under the web root, which allows remote attackers to read usernames and hashed passwords via a direct request to ublogreload.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013603 - http://www.persianhacker.net/news/news-2945.html - http://marc.info/?l=bugtraq&m=111214393101387&w=2 - http://secunia.com/advisories/14725
CVE ID: CVE-2005-0940 State: REJECTED Published: 2005-02-28T05:00:00 Last Updated: 2005-11-02T10:00:00 Description: No description available.
CVE ID: CVE-2005-0941 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:28:28.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-375.html - http://www.securityfocus.com/bid/13092 - http://www
erences: - http://www.redhat.com/support/errata/RHSA-2005-375.html - http://www.securityfocus.com/bid/13092 - http://www.novell.com/linux/security/advisories/2005_21_sr.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9106 - http://www.gentoo.org/security/en/glsa/glsa-200504-13.xml - http://www.securityfocus.com/archive/1/395516 - http://www.openoffice.org/issues/show_bug.cgi?id=46388 - http://secunia.com/advisories/17027
CVE ID: CVE-2005-0942 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:28:28.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XP Server process (xp_server) in Sybase Adaptive Server Enterprise (ASE) XP Server 12.x before 12.5.3 ESD#1 allows attackers to cause a denial of service (process crash) via malformed data sent to the XP Server TCP port. Additional Analyst Notes: - CVE Program Container: References: - http://www.ngssoftware.com/advisories/sybase-ase.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/19354 - http://www.securityfocus.com/archive/1/393851 - http://marc.info/?l=bugtraq&m=111272918117194&w=2 - http://www.sybase.com/deta
/www.securityfocus.com/archive/1/393851 - http://marc.info/?l=bugtraq&m=111272918117194&w=2 - http://www.sybase.com/detail/1%2C6904%2C1033894%2C00.html - http://secunia.com/advisories/13632 - http://www.sybase.com/detail?id=1034520 - http://www.sybase.com/detail?id=1034752 - http://www.securityfocus.com/bid/12080 - http://archives.neohapsis.com/archives/bugtraq/2004-12/0315.html
CVE ID: CVE-2005-0943 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:28:29.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service (device reload or drop user connection) via a crafted HTTPS packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20050330-vpn3k.shtml - http://www.securityfocus.com/bid/12948 - http://secunia.com/advisories/14784 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19903
CVE ID: CVE-2005-0944 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:28:29.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Microsoft Jet DB engine (msjet40.dll) 4.00.8618.0, related to insufficient data validation, allows remote attackers to execute arbitrary code via a crafted mdb file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/442610/100/100/threaded - http://marc.info/?l=bugtraq&m=111231465920199&w=2 - http://www.securityfocus.com/archive/1/442446/100/100/threaded - http://www.hexview.com/docs/20050331-1.txt - http://blogs.securiteam.com/?p=535 - http://www.k
442446/100/100/threaded - http://www.hexview.com/docs/20050331-1.txt - http://blogs.securiteam.com/?p=535 - http://www.kb.cert.org/vuls/id/176380
CVE ID: CVE-2005-0945 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:28:29.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ACS Blog 1.1.1 allows remote attackers to inject arbitrary web script or HTML via onmouseover or onload events in (1) img, (2) link, or (3) mail tags. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14744/ - http://securitytracker.com/id?1013584 - http://marc.info/?l=bugtraq&m=111214069029812&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19864
CVE ID: CVE-2005-0946 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:28:28.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in phpCoin 1.2.1b and earlier allows remote attackers to execute arbitrary SQL commands via the (1) term/keywords field on the search page, (2) username or (3) e-mail field on the forgot password page, or (4) domain name on the ordering new package page. Additional Analyst Notes: - CVE Program Container: References: - http://www.gulftech.org/?node=research&article_id=00065-03292005 - http://marc.info/?l=bugtraq&m=111214190111520&w=2 - http://www.securityfocus.com/bid/12917
CVE ID: CVE-2005-0947 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:28:29.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in auxpage.php in phpCoin 1.2.1b and earlier allows remote attackers to read and execute arbitrary files via a .. (dot dot) in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.gulftech.org/?node=research&article_id=00065-03292005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19896 - http://marc.info/?l=bugtraq&m=111214190111520&w=2 - http://www.securityfocus.com/bid/12917
CVE ID: CVE-2005-0948 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:28:29.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ad_click.asp for PortalApp allows remote attackers to execute arbitrary SQL commands via the banner_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14749 - http://marc.info/?l=bugtraq&m=111213291118273&w=2 - http://securitytracker.com/id?1013591 - http://icis.digitalparadox.org/~dcrab/portalapp.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/19892 - http://www.securityfocus.com/bid/12936
CVE ID: CVE-2005-0949 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:28:29.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in content.asp in Iatek PortalApp allow remote attackers to inject arbitrary web script or HTML via the (1) contenttype or (2) keywords parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14749 - http://marc.info/?l=bugtraq&m=111213291118273&w=2 - http://securitytracker.com/id?1013591 - http://icis.digitalparadox.org/~dcrab/portalapp.txt - http://www.securityfocus.com/bid/12936 - https://exchange.xforce.ibmcloud.com/vulner
lparadox.org/~dcrab/portalapp.txt - http://www.securityfocus.com/bid/12936 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19891
CVE ID: CVE-2005-0950 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:28:29.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in FastStone 4in1 Browser 1.2 allows remote attackers to read arbitrary files via a (1) ... (triple dot) or (2) ..\ (dot dot backslash) in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013596 - http://www.autistici.org/fdonato/advisory/FastStone4in1Browser1.2-adv.txt - http://marc.info/?l=bugtraq&m=111213034206802&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19900 - http://www.securityfocus.com/bid/12937 - http://secunia.
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19900 - http://www.securityfocus.com/bid/12937 - http://secunia.com/advisories/14743
CVE ID: CVE-2005-0951 State: REJECTED Published: 2005-04-03T05:00:00 Last Updated: 2005-04-26T09:00:00 Description: No description available.
CVE ID: CVE-2005-0952 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:28:29.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in pafiledb.php in PaFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://digitalparadox.org/advisories/pafdb.txt - http://www.securityfocus.com/archive/1/448017/100/100/threaded - http://marc.info/?l=bugtraq&m=111221940107161&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29394
CVE ID: CVE-2005-0953 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:28:29.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1154 - http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_158801__Updated_bzip2_packages_fix_security_issues.html - http://www.
.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_158801__Updated_bzip2_packages_fix_security_issues.html - http://www.securityfocus.com/bid/26444 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-004.txt.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/19926 - http://www.debian.org/security/2005/dsa-730 - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10902 - http://secunia.com/advisories/27274 - http://www.securityfocus.com/archive/1/456430/30/8730/threaded - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200191-1 - http://lists.apple.com/arch
56430/30/8730/threaded - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200191-1 - http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info.apple.com/article.html?artnum=307041 - http://www.vupen.com/english/advisories/2007/3525 - http://www.vupen.com/english/advisories/2007/3868 - http://secunia.com/advisories/29940 - ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc - http://secunia.com/advisories/27643 - http://www.securityfocus.com/bid/12954 - http://secunia.com/advisories/19183 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:026 - http://www.redhat.com/support/errata/RHSA-2005-474.html - http://www.us-cert
m/security/advisories?name=MDKSA-2006:026 - http://www.redhat.com/support/errata/RHSA-2005-474.html - http://www.us-cert.gov/cas/techalerts/TA07-319A.html - http://marc.info/?l=bugtraq&m=111229375217633&w=2 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103118-1
CVE ID: CVE-2005-0954 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:28:29.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows Explorer and Internet Explorer in Windows 2000 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a malformed Windows Metafile (WMF) file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111231106513788&w=2 - http://www.securityfocus.com/bid/9892 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15507 - http://www.securiteam.com/windowsntfocus/5CP081FFFY.html
CVE ID: CVE-2005-0955 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:28:29.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in InterAKT MX Shop 1.1.1 allows remote attackers to execute arbitrary SQL commands via the id_ctg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111230101127767&w=2 - http://www.securityfocus.com/bid/12957 - http://secunia.com/advisories/14793 - http://icis.digitalparadox.org/~dcrab/mxmk.txt
CVE ID: CVE-2005-0956 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:35:58.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in InterAKT MX Kart 1.1.2 allow remote attackers to execute arbitrary SQL commands via the (1) idp, (2) id_ctg, or (3) id_man parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111230101127767&w=2 - http://secunia.com/advisories/14793 - http://icis.digitalparadox.org/~dcrab/mxmk.txt
CVE ID: CVE-2005-0957 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:35:58.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bay Technical Associates RPC-3 Telnet Host 3.05 allows remote attackers to bypass authentication by pressing the escape and enter keys at the username prompt. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111230568025271&w=2 - http://www.securityfocus.com/bid/12955 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19921
CVE ID: CVE-2005-0958 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:35:58.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enabled, allows remote attackers to execute arbitrary code via the CWD command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12947 - http://www.tripbit.org/advisories/TA-040305.txt - http://unl0ck.org/files/papers/mtftpd.txt - http://www.securiteam.com/exploits/5KP0W0AF5K.html
CVE ID: CVE-2005-0959 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:35:59.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the mt_do_dir function in YepYep mtftpd 0.0.3 may allow attackers to execute arbitrary code via a long path. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12947 - http://www.tripbit.org/advisories/TA-040305.txt
CVE ID: CVE-2005-0960 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:35:58.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in the SACK functionality in (1) tcp_input.c and (2) tcp_usrreq.c OpenBSD 3.5 and 3.6 allow remote attackers to cause a denial of service (memory exhaustion or system crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.openbsd.org/errata35.html#sack - http://securitytracker.com/id?1013611 - http://www.securityfocus.com/bid/12951 - http://www.openbsd.org/errata.html#sack
CVE ID: CVE-2005-0961 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:35:58.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Horde 3.0.4 before 3.0.4-RC2 allows remote attackers to inject arbitrary web script or HTML via the parent frame title. Additional Analyst Notes: - CVE Program Container: References: - http://lists.horde.org/archives/announce/2005/000176.html - http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.515.2.49&r2=1.515.2.93&ty=h - http://www.novell.com/linux/security/advisories/2005_16_sr.html - http://secunia.com/advisories/14730
CVE ID: CVE-2005-0962 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:35:58.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php for Lighthouse Squirrelcart allows remote attackers to execute arbitrary SQL commands via the (1) crn parameter in a show action or (2) rn parameter in a show_detail action. Additional Analyst Notes: - CVE Program Container: References: - http://digitalparadox.org/advisories/sqc.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/19904 - http://www.securityfocus.com/bid/12944 - http://secunia.com/advisories/14770
CVE ID: CVE-2005-0963 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:35:58.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: An error in the Toshiba ACPI BIOS 1.6 causes the BIOS to only examine the first slot in the Master Boot Record (MBR) table for an active partition, which prevents the system from booting even though the MBR is not malformed. NOTE: it has been debated as to whether or not this issue poses a security vulnerability, since administrative privileges would be required, and other DoS attacks are possible with such privileges. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=11122970820862
rivileges. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111229708208629&w=2 - http://marc.info/?l=bugtraq&m=111229803502643&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19895 - http://marc.info/?l=bugtraq&m=111214319914810&w=2
CVE ID: CVE-2005-0964 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:35:58.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Kerio Personal Firewall 4.1.2 and earlier allows local users to bypass firewall rules via a malicious process that impersonates a legitimate process that has fewer restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12946 - http://secunia.com/advisories/14717 - http://www.kerio.com/security_advisory.html#0503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19893 - http://securitytracker.com/id?1013607
CVE ID: CVE-2005-0965 State: PUBLISHED Published: 2005-04-04T04:00:00 Last Updated: 2024-08-07T21:35:58.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gaim_markup_strip_html function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application crash) via a string that contains malformed HTML, which causes an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:071 - http://www.securityfocus.com/archive/1/426078/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11292 - http://se
00/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11292 - http://secunia.com/advisories/14815 - http://www.securityfocus.com/bid/12999 - http://www.redhat.com/support/errata/RHSA-2005-365.html - http://marc.info/?l=bugtraq&m=111238715307356&w=2 - http://gaim.sourceforge.net/security/index.php?id=13 - http://www.novell.com/linux/security/advisories/2005_36_sudo.html
CVE ID: CVE-2005-0966 State: PUBLISHED Published: 2005-04-04T04:00:00 Last Updated: 2024-08-07T21:35:58.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows (1) remote attackers to inject arbitrary Gaim markup via irc_msg_kick, irc_msg_mode, irc_msg_part, irc_msg_quit, (2) remote attackers to inject arbitrary Pango markup and pop up empty dialog boxes via irc_msg_invite, or (3) malicious IRC servers to cause a denial of service (application crash) by injecting certain Pango markup into irc_msg_badmode, irc_msg_banned, irc_msg_unknown, irc_msg_nochan functions. Additional Analyst Notes: - CVE Program Conta
rc_msg_badmode, irc_msg_banned, irc_msg_unknown, irc_msg_nochan functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:071 - http://www.securityfocus.com/archive/1/426078/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9185 - http://secunia.com/advisories/14815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19939 - http://www.securityfocus.com/bid/13003 - http://gaim.sourceforge.net/security/index.php?id=14 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19937 - http://www.redhat.com/support/errata/RHSA-2005-365.html - http://marc.info/?l=bug
e.ibmcloud.com/vulnerabilities/19937 - http://www.redhat.com/support/errata/RHSA-2005-365.html - http://marc.info/?l=bugtraq&m=111238715307356&w=2 - http://sourceforge.net/project/shownotes.php?group_id=235&release_id=317750 - http://www.novell.com/linux/security/advisories/2005_36_sudo.html