Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-2431 State: PUBLISHED Published: 2006-05-17T10:00:00 Last Updated: 2024-08-07T17:51:04.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the 500 Internal Server Error page on the SOAP port (8880/tcp) in IBM WebSphere Application Server 5.0.2 and earlier, 5.1.x before 5.1.1.12, and 6.0.2 up to 6.0.2.7, allows remote attackers to inject arbitrary web script or HTML via the URI, which is contained in a FAULTACTOR element on this page. NOTE: some sources have reported the element as "faultfactor," but this is likely erroneous. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmclou
is is likely erroneous. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30055 - http://www.niscc.gov.uk/niscc/docs/re-20061031-00727.pdf?lang=en - http://www-1.ibm.com/support/search.wss?rs=0&q=PK16602&apar=only - http://www-1.ibm.com/support/search.wss?rs=0&q=PK26181&apar=only - http://www.osvdb.org/25371 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012064 - http://www.securityfocus.com/bid/21018 - http://www-1.ibm.com/support/docview.wss?rs=0&dc=DB550&q1=PK16492&uid=swg1PK22416&loc=en_US&cs=utf-8&lang= - http://securityreason.com/securityalert/910 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg240
s=utf-8&lang= - http://securityreason.com/securityalert/910 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012163 - http://www.securityfocus.com/archive/1/450704/100/0/threaded - http://www.vupen.com/english/advisories/2006/1736 - http://secunia.com/advisories/20032 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html - http://securitytracker.com/id?1017170 - http://www.attrition.org/pipermail/vim/2006-November/001112.html
CVE ID: CVE-2006-2432 State: PUBLISHED Published: 2006-05-17T10:00:00 Last Updated: 2024-08-07T17:51:04.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server 5.0.2 (or any earlier cumulative fix) and 5.1.1 (or any earlier cumulative fix) allows EJB access on Solaris systems via a crafted LTPA token. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=PK19195&apar=only - http://www.osvdb.org/25375 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006881 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006879 - http://securityreason.com/securityalert/910 - http://www.vupen.
w-1.ibm.com/support/docview.wss?rs=180&uid=swg27006879 - http://securityreason.com/securityalert/910 - http://www.vupen.com/english/advisories/2006/1736 - http://www.vupen.com/english/advisories/2006/2552 - http://secunia.com/advisories/20032 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html
CVE ID: CVE-2006-2433 State: PUBLISHED Published: 2006-05-17T10:00:00 Last Updated: 2024-08-07T17:51:04.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM WebSphere Application Server 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5, and 6.0.2.7 has unknown impact and attack vectors related to the "administrative console". Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=PK17838&apar=only - http://securityreason.com/securityalert/910 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876 - http://www.vupen.com/english/advisories/2006/1736 - http://secunia.com/advisories/20032 - http://arch
&uid=swg27006876 - http://www.vupen.com/english/advisories/2006/1736 - http://secunia.com/advisories/20032 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html
CVE ID: CVE-2006-2434 State: PUBLISHED Published: 2006-05-17T10:00:00 Last Updated: 2024-08-07T17:51:04.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in WebSphere 5.1.1 (or any earlier cumulative fix) Common Configuration Mode + CommonArchive and J2EE Models might allow attackers to obtain sensitive information via the trace. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006879 - http://securityreason.com/securityalert/910 - http://www.vupen.com/english/advisories/2006/1736 - http://www.vupen.com/english/advisories/2006/2552 - http://secunia.com/advisories/20032 - http://ar
visories/2006/1736 - http://www.vupen.com/english/advisories/2006/2552 - http://secunia.com/advisories/20032 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html
CVE ID: CVE-2006-2435 State: PUBLISHED Published: 2006-05-17T10:00:00 Last Updated: 2024-08-07T17:51:04.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM WebSphere Application Server 5.0.2 and earlier, and 5.1.1 and earlier, has unknown impact and attack vectors related to "Inserting certain script tags in urls [that] may allow unintended execution of scripts." Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=PK15571&apar=only - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006881 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006879 - http://securityreason.com
wss?rs=180&uid=swg27006881 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006879 - http://securityreason.com/securityalert/910 - http://www.vupen.com/english/advisories/2006/1736 - http://www.vupen.com/english/advisories/2006/2552 - http://secunia.com/advisories/20032 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html
CVE ID: CVE-2006-2436 State: PUBLISHED Published: 2006-05-17T10:00:00 Last Updated: 2024-08-07T17:51:04.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebSphere Application Server 5.0.2 (or any earlier cumulative fix) stores admin and LDAP passwords in plaintext in the FFDC logs when a login to WebSphere fails, which allows attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=PK17589&apar=only - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006881 - http://securityreason.com/securityalert/910 - http://www.vupen.com/english/advisories/2006/1736 - http://secunia.com/advisories/2
curityreason.com/securityalert/910 - http://www.vupen.com/english/advisories/2006/1736 - http://secunia.com/advisories/20032 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html
CVE ID: CVE-2006-2437 State: PUBLISHED Published: 2006-05-17T10:00:00 Last Updated: 2024-08-07T17:51:04.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: The viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers to obtain the source code for file under the web root via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/908 - http://www.securityfocus.com/archive/1/434145 - http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0384.html - http://www.vupen.com/english/advisories/2006/1831 - http://www.securityfocus.com/bid/18007
CVE ID: CVE-2006-2438 State: PUBLISHED Published: 2006-05-17T10:00:00 Last Updated: 2024-08-07T17:51:04.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers to read arbitrary files under other web roots via the contextpath parameter. NOTE: this issue can produce resultant path disclosure when the parameter is invalid. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/908 - http://www.securityfocus.com/archive/1/434145 - http://archives.neohapsis.com/archives/fulldisclosur
securityalert/908 - http://www.securityfocus.com/archive/1/434145 - http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0384.html - http://www.vupen.com/english/advisories/2006/1831 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26494 - http://www.securityfocus.com/bid/18007 - http://securitytracker.com/id?1016110 - http://secunia.com/advisories/20125 - http://www.osvdb.org/25571
CVE ID: CVE-2006-2439 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:51:04.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in ZipCentral 4.01 allows remote user-assisted attackers to execute arbitrary code via a ZIP archive containing a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20179 - http://secunia.com/secunia_research/2006-35/advisory/ - http://www.osvdb.org/25830 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26737 - http://securitytracker.com/id?1016176 - http://www.vupen.com/english/advisories/2006/2049 - http://www.securityfocus.com/bid/1
/securitytracker.com/id?1016176 - http://www.vupen.com/english/advisories/2006/2049 - http://www.securityfocus.com/bid/18160 - http://www.securityfocus.com/archive/1/435416/100/0/threaded
CVE ID: CVE-2006-2440 State: PUBLISHED Published: 2006-05-18T10:00:00 Last Updated: 2024-08-07T17:51:04.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the libMagick component of ImageMagick 6.0.6.2 might allow attackers to execute arbitrary code via an image index array that triggers the overflow during filename glob expansion by the ExpandFilenames function. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9481 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345595 - http://www.debian.org/security/2006/dsa-1168 - http://secunia.com/advisori
debian.org/cgi-bin/bugreport.cgi?bug=345595 - http://www.debian.org/security/2006/dsa-1168 - http://secunia.com/advisories/24284 - http://secunia.com/advisories/21719 - http://www.redhat.com/support/errata/RHSA-2007-0015.html - http://secunia.com/advisories/24186 - ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc
CVE ID: CVE-2006-2441 State: PUBLISHED Published: 2006-05-18T10:00:00 Last Updated: 2024-08-07T17:51:04.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pioneers meta-server before 0.9.55, when the server-console is not installed, allows remote attackers to cause a denial of service (crash) via certain requests from an older gnocatan client to create a new game. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/tracker/index.php?func=detail&aid=1425705&group_id=5095&atid=305095 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=351986
CVE ID: CVE-2006-2442 State: PUBLISHED Published: 2006-05-18T10:00:00 Last Updated: 2024-08-07T17:51:04.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: kphone 4.2 creates .qt/kphonerc with world-readable permissions, which allows local users to read usernames and SIP passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2006:089 - http://www.securityfocus.com/bid/18049 - http://www.vupen.com/english/advisories/2006/1862 - http://www.debian.org/security/2006/dsa-1062 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=337830
CVE ID: CVE-2006-2443 State: PUBLISHED Published: 2006-05-18T10:00:00 Last Updated: 2024-08-07T17:51:04.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Debian package of knowledgetree 2.0.7 creates environment.php with world-readable permissions, which allows local users to obtain sensitive information such as the username and password for the KnowledgeTree database. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=348306
CVE ID: CVE-2006-2444 State: PUBLISHED Published: 2006-05-25T10:00:00 Last Updated: 2024-08-07T17:51:04.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service (crash) via unspecified remote attack vectors that cause failures in snmp_trap_decode that trigger (1) frees of random memory or (2) frees of previously-freed memory (double-free) by snmp_trap_decode as well as its calling function, as demonstrated via certain test cases of the PROTOS SNMP test suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/su
of the PROTOS SNMP test suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2006-0437.html - http://www.novell.com/linux/security/advisories/2006_42_kernel.html - http://securitytracker.com/id?1016153 - http://www.redhat.com/support/errata/RHSA-2006-0617.html - http://secunia.com/advisories/20716 - http://secunia.com/advisories/21605 - http://www.novell.com/linux/security/advisories/2006_47_kernel.html - http://www.osvdb.org/25750 - http://secunia.com/advisories/21136 - http://www.debian.org/security/2006/dsa-1183 - http://secunia.com/advisories/20182 - http://www.ubuntu.com/usn/usn-302-1 - http://www.vupen.com/english/advisories/
3 - http://secunia.com/advisories/20182 - http://www.ubuntu.com/usn/usn-302-1 - http://www.vupen.com/english/advisories/2006/1916 - http://secunia.com/advisories/22082 - http://secunia.com/advisories/21983 - http://www.novell.com/linux/security/advisories/2006_64_kernel.html - http://secunia.com/advisories/21035 - http://secunia.com/advisories/22174 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.18 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11318 - http://www.redhat.com/support/errata/RHSA-2006-0580.html - http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm - http://secunia.com/advisories/22822 - http://secunia.com/advisories
port.avaya.com/elmodocs2/security/ASA-2006-180.htm - http://secunia.com/advisories/22822 - http://secunia.com/advisories/20225 - http://www.securityfocus.com/bid/18081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26594 - http://secunia.com/advisories/21498 - http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm - http://www.kb.cert.org/vuls/id/681569 - http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git%3Ba=commit%3Bh=1db6b5a66e93ff125ab871d6b3f7363412cc87e8 - http://secunia.com/advisories/22093 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:087 - http://www.debian.org/security/2006/dsa-1184 - http://secunia.com/advisories/21179
CVE ID: CVE-2006-2445 State: PUBLISHED Published: 2006-06-23T10:00:00 Last Updated: 2024-08-07T17:51:04.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in run_posix_cpu_timers in Linux kernel before 2.6.16.21 allows local users to cause a denial of service (BUG_ON crash) by causing one CPU to attach a timer to a process that is exiting. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20703 - http://www.vupen.com/english/advisories/2006/2451 - http://www.novell.com/linux/security/advisories/2006_42_kernel.html - http://www.securityfocus.com/archive/1/438168/100/0/threaded - http://www.osvdb.org/26947 - https://excha
_kernel.html - http://www.securityfocus.com/archive/1/438168/100/0/threaded - http://www.osvdb.org/26947 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27380 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:123 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:151 - http://marc.info/?l=linux-kernel&m=115015841413687 - http://www.trustix.org/errata/2006/0037 - http://www.ubuntu.com/usn/usn-311-1 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.21 - http://www.securityfocus.com/bid/18615 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=30f1e3dd8c72abda343bcf415f7d8894a02b4290 - http://secunia.com/advisories/208
l/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=30f1e3dd8c72abda343bcf415f7d8894a02b4290 - http://secunia.com/advisories/20831 - http://secunia.com/advisories/21045 - http://secunia.com/advisories/20991 - http://secunia.com/advisories/21179
CVE ID: CVE-2006-2446 State: PUBLISHED Published: 2006-08-15T22:00:00 Last Updated: 2024-08-07T17:51:04.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition between the kfree_skb and __skb_unlink functions in the socket buffer handling in Linux kernel 2.6.9, and possibly other versions, allows remote attackers to cause a denial of service (crash), as demonstrated using the TCP stress tests from the LTP test suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2007:025 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=192779 - http://www.debian.org/security/2006/dsa-1183 - http://secunia.c
://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=192779 - http://www.debian.org/security/2006/dsa-1183 - http://secunia.com/advisories/22082 - http://www.redhat.com/support/errata/RHSA-2006-0575.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9117 - http://secunia.com/advisories/21465 - http://www.securityfocus.com/bid/19475 - http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm - http://secunia.com/advisories/22417 - http://secunia.com/advisories/22093 - http://www.debian.org/security/2006/dsa-1184
CVE ID: CVE-2006-2447 State: PUBLISHED Published: 2006-06-06T21:00:00 Last Updated: 2024-08-07T17:51:04.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote attackers to execute arbitrary commands via a crafted message that is not properly handled when invoking spamd with the virtual pop username. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20482 - http://www.securityfocus.com/archive/1/436288/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9184 - http://www.trustix.org/errata/20
//oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9184 - http://www.trustix.org/errata/2006/0034/ - http://www.gentoo.org/security/en/glsa/glsa-200606-09.xml - http://secunia.com/advisories/20692 - http://secunia.com/advisories/20566 - http://www.securityfocus.com/bid/18290 - http://secunia.com/advisories/20430 - http://www.nabble.com/ANNOUNCE%3A-Apache-SpamAssassin-3.1.3-available%21-t1736096.html - http://www.redhat.com/support/errata/RHSA-2006-0543.html - http://www.vupen.com/english/advisories/2006/2148 - http://secunia.com/advisories/20531 - http://securitytracker.com/id?1016230 - http://www.debian.org/security/2006/dsa-1090 - https://exchange.xforce.ibmcl
1 - http://securitytracker.com/id?1016230 - http://www.debian.org/security/2006/dsa-1090 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27008 - http://secunia.com/advisories/20443 - http://securitytracker.com/id?1016235 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:103
CVE ID: CVE-2006-2448 State: PUBLISHED Published: 2006-06-23T10:00:00 Last Updated: 2024-08-07T17:51:04.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel before 2.6.16.21 and 2.6.17, when running on PowerPC, does not perform certain required access_ok checks, which allows local users to read arbitrary kernel memory on 64-bit systems (signal_64.c) and cause a denial of service (crash) and possibly read kernel memory on 32-bit systems (signal_32.c). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20703 - http://www.vupen.com/english/advisories/2006/2451 - http://www.novell.com/linux/security/advisories/2006_42_kernel.htm
- http://www.vupen.com/english/advisories/2006/2451 - http://www.novell.com/linux/security/advisories/2006_42_kernel.html - http://www.securityfocus.com/archive/1/438168/100/0/threaded - http://www.novell.com/linux/security/advisories/2006_47_kernel.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10040 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7c85d1f9d358b24c5b05c3a2783a78423775a080 - http://www.trustix.org/errata/2006/0037 - http://www.redhat.com/support/errata/RHSA-2006-0575.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=194215 - http://www.ubuntu.com/usn/usn-311-1 - http://www.kernel.or
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=194215 - http://www.ubuntu.com/usn/usn-311-1 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.21 - http://secunia.com/advisories/21465 - http://secunia.com/advisories/20831 - http://secunia.com/advisories/21498 - http://www.securityfocus.com/bid/18616 - http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm - http://secunia.com/advisories/22417 - http://secunia.com/advisories/20991 - http://secunia.com/advisories/21179
CVE ID: CVE-2006-2449 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T17:51:04.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21662 - http://secunia.com/advisories/20890 - http://secunia.com/advisories/20674 - http://www.osvdb.org/26511 - http://secunia.com/advisories/20702 - http://www.redhat.com/support/errata/RHSA-2006-0548.html - http://securitytracker.com/id?1016297 - http://www.mandriva.com/security/
edhat.com/support/errata/RHSA-2006-0548.html - http://securitytracker.com/id?1016297 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:106 - https://usn.ubuntu.com/301-1/ - http://secunia.com/advisories/20602 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27181 - http://secunia.com/advisories/20869 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9844 - http://www.vupen.com/english/advisories/2006/2355 - http://secunia.com/advisories/20660 - http://www.debian.org/security/2006/dsa-1156 - http://www.securityfocus.com/archive/1/437133/100/0/threaded - http://www.novell.com/linux/security/advisories/2006_39_kdm.html - http://www.kde.or
m/archive/1/437133/100/0/threaded - http://www.novell.com/linux/security/advisories/2006_39_kdm.html - http://www.kde.org/info/security/advisory-20060614-1.txt - http://www.gentoo.org/security/en/glsa/glsa-200606-23.xml - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.444467 - http://secunia.com/advisories/20785 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:105 - http://www.securityfocus.com/archive/1/437322/100/0/threaded - http://www.securityfocus.com/bid/18431
CVE ID: CVE-2006-2450 State: PUBLISHED Published: 2006-07-14T22:00:00 Last Updated: 2024-08-07T17:51:04.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Type 1 - None", which is accepted even if it is not offered by the server, a different issue than CVE-2006-2369. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2006_42_kernel.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=376824 - http://secunia.com/advisories/24525 - http://www.vupen.com/english/ad