Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-4009 State: PUBLISHED Published: 2006-08-07T19:00:00 Last Updated: 2024-08-07T18:48:39.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in war.php in Virtual War (Vwar) 1.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/442101/100/0/threaded - http://www.securityfocus.com/archive/1/443171/100/0/threaded - http://securityreason.com/securityalert/1331 - http://www.securityfocus.com/bid/19327 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28200
CVE ID: CVE-2006-4010 State: PUBLISHED Published: 2006-08-07T19:00:00 Last Updated: 2024-08-07T18:48:39.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in war.php in Virtual War (Vwar) 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter. NOTE: other vectors are covered by CVE-2006-3139. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/442101/100/0/threaded - http://www.securityfocus.com/archive/1/443171/100/0/threaded - http://www.securityfocus.com/archive/1/488118/100/200/threaded - http://archives.neohapsis.com/archives/bugtraq/2008-02/0186.html
.securityfocus.com/archive/1/488118/100/200/threaded - http://archives.neohapsis.com/archives/bugtraq/2008-02/0186.html - http://securityreason.com/securityalert/1331 - http://www.securityfocus.com/bid/19327 - http://www.securityfocus.com/bid/27772 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40481
CVE ID: CVE-2006-4011 State: PUBLISHED Published: 2006-08-07T19:00:00 Last Updated: 2024-08-07T18:48:39.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako eSupport 2.3.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the subd parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2115 - http://secunia.com/advisories/21330 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28199 - http://www.securityfocus.com/bid/19315
CVE ID: CVE-2006-4012 State: PUBLISHED Published: 2006-08-07T19:00:00 Last Updated: 2024-08-07T18:48:39.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in circeOS SaveWeb Portal 3.4 allow remote attackers to execute arbitrary PHP code via a URL in the SITE_Path parameter to (1) poll/poll.php or (2) poll/view_polls.php. NOTE: the menu_dx.php vector is already covered by CVE-2005-2687. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19306 - http://www.securityfocus.com/archive/1/442004/100/0/threaded - http://securityreason.com/securityalert/1336 - https://www.exploit-db.com/exp
ocus.com/archive/1/442004/100/0/threaded - http://securityreason.com/securityalert/1336 - https://www.exploit-db.com/exploits/2113 - http://www.vupen.com/english/advisories/2006/3124 - http://secunia.com/advisories/16522 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28182
CVE ID: CVE-2006-4013 State: PUBLISHED Published: 2006-08-07T19:00:00 Last Updated: 2024-08-07T18:57:46.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Symantec Brightmail AntiSpam (SBAS) before 6.0.4, when the Control Center is allowed to connect from any computer, allow remote attackers to read and overwrite certain files via directory traversal sequences in (1) DATABLOB-GET and (2) DATABLOB-SAVE requests. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016600 - http://www.osvdb.org/27590 - http://www.securityfocus.com/bid/19182 - http://www.osvdb.org/27589 - http://securityrespo
http://www.osvdb.org/27590 - http://www.securityfocus.com/bid/19182 - http://www.osvdb.org/27589 - http://securityresponse.symantec.com/avcenter/security/Content/2006.07.27.html - http://www.vupen.com/english/advisories/2006/3018 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28058 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28059 - http://secunia.com/advisories/21223
CVE ID: CVE-2006-4014 State: PUBLISHED Published: 2006-08-07T19:00:00 Last Updated: 2024-08-07T18:57:44.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Brightmail AntiSpam (SBAS) before 6.0.4, when the Control Center is allowed to connect from any computer, allows remote attackers to cause a denial of service (application freeze) "by sending invalid posts". Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016600 - http://www.securityfocus.com/bid/19182 - http://securityresponse.symantec.com/avcenter/security/Content/2006.07.27.html - http://www.vupen.com/english/advisories/2006/3018 - http://secunia.com/advisories/21223
CVE ID: CVE-2006-4015 State: PUBLISHED Published: 2006-08-07T19:00:00 Last Updated: 2024-08-07T18:57:46.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hewlett-Packard (HP) ProCurve 3500yl, 6200yl, and 5400zl switches with software before K.11.33 allow remote attackers to cause a denial of service (possibly memory leak or system crash) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/442033/100/0/threaded - http://www.vupen.com/english/advisories/2006/3136 - http://www.securityfocus.com/bid/19310 - http://securityreason.com/securityalert/1335 - http://www.securityfocus.com/archive/1/442033/100/0/threa
com/bid/19310 - http://securityreason.com/securityalert/1335 - http://www.securityfocus.com/archive/1/442033/100/0/threaded - http://secunia.com/advisories/21316 - http://securitytracker.com/id?1016623
CVE ID: CVE-2006-4016 State: PUBLISHED Published: 2006-08-07T19:00:00 Last Updated: 2024-08-07T18:57:44.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in /toendaCMS in toendaCMS stable 1.0.3 and earlier, and unstable 1.1 and earlier, allows remote attackers to inject arbitrary web script or HTML via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.majorsecurity.de/index_en2.php?major_rls=major_rls27 - http://www.securityfocus.com/archive/1/442100 - http://securitytracker.com/id?1016636 - http://secunia.com/advisories/21344 - http://securityreason.com/securityalert/1337 - http://www.securityf
m/id?1016636 - http://secunia.com/advisories/21344 - http://securityreason.com/securityalert/1337 - http://www.securityfocus.com/bid/19329 - http://www.vupen.com/english/advisories/2006/3151
CVE ID: CVE-2006-4017 State: PUBLISHED Published: 2006-08-07T19:00:00 Last Updated: 2024-08-07T18:57:44.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the search module in Inter Network Marketing (INM) CMS G3 allows remote attackers to inject arbitrary web script or HTML via the search_string parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/442007/100/200/threaded - http://www.vupen.com/english/advisories/2006/3137 - http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0031.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28163 - http://www.securi
chives/fulldisclosure/2006-08/0031.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28163 - http://www.securityfocus.com/bid/19302 - http://www.securityfocus.com/bid/19324 - http://secunia.com/advisories/21331
CVE ID: CVE-2006-4018 State: PUBLISHED Published: 2006-08-08T20:00:00 Last Updated: 2024-08-07T18:57:44.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3175 - http://www.securityfocus.com/archive/1/442681/100/0/threaded - http://secunia.com/advisories/21562 - http://www.novell.com/linux/security/advisories/2006_46_clamav.html -
/threaded - http://secunia.com/advisories/21562 - http://www.novell.com/linux/security/advisories/2006_46_clamav.html - http://secunia.com/advisories/21368 - http://secunia.com/advisories/21433 - http://security.gentoo.org/glsa/glsa-200608-13.xml - http://secunia.com/advisories/21497 - http://kolab.org/security/kolab-vendor-notice-10.txt - http://www.debian.org/security/2006/dsa-1153 - http://secunia.com/advisories/21443 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:138 - http://www.securityfocus.com/bid/19381 - http://securitytracker.com/id?1016645 - http://www.overflow.pl/adv/clamav_upx_heap.txt - http://www.clamav.net/security/0.88.4.html - https://exchange.xforce.ibmcloud
/www.overflow.pl/adv/clamav_upx_heap.txt - http://www.clamav.net/security/0.88.4.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28286 - http://www.trustix.org/errata/2006/0046/ - http://secunia.com/advisories/21457 - http://secunia.com/advisories/21374 - http://www.vupen.com/english/advisories/2006/3275
CVE ID: CVE-2006-4019 State: PUBLISHED Published: 2006-08-11T21:00:00 Last Updated: 2024-08-07T18:57:43.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows remote attackers to overwrite arbitrary program variables and read or write the attachments and preferences of other users. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21586 - https://issues.rpath.com/browse/RPL-577 - http://www.vupen.com/english/advisories/2007/2732 - http://www.debian.org/security/2006/dsa-1154 - http://secunia.com/advisories/21354 - http://secunia.com/advisories/2
2 - http://www.debian.org/security/2006/dsa-1154 - http://secunia.com/advisories/21354 - http://secunia.com/advisories/22487 - http://securitytracker.com/id?1016689 - http://www.novell.com/linux/security/advisories/2006_23_sr.html - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://www.vupen.com/english/advisories/2006/3271 - http://secunia.com/advisories/21444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28365 - http://secunia.com/advisories/22080 - http://attrition.org/pipermail/vim/2006-August/000970.html - http://www.securityfocus.com/bid/19486 - http://www.redhat.com/support/errata/RHSA-2006-0668.html - http://www.squirrelmail.org/patches/sqm1.
cus.com/bid/19486 - http://www.redhat.com/support/errata/RHSA-2006-0668.html - http://www.squirrelmail.org/patches/sqm1.4.7-expired-post-fix-full.patch - http://www.squirrelmail.org/security/issue/2006-08-11 - http://secunia.com/advisories/22104 - http://www.securityfocus.com/archive/1/442993/100/0/threaded - http://www.securityfocus.com/archive/1/442980/100/0/threaded - http://marc.info/?l=full-disclosure&m=115532449024178&w=2 - http://www.osvdb.org/27917 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11533 - http://docs.info.apple.com/article.html?artnum=306172 - http://www.securityfocus.com/bid/25159 - ftp://patches.sgi.com/support/free/security/a
.com/article.html?artnum=306172 - http://www.securityfocus.com/bid/25159 - ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc - http://www.mandriva.com/security/advisories?name=MDKSA-2006:147 - http://secunia.com/advisories/26235
CVE ID: CVE-2006-4020 State: PUBLISHED Published: 2006-08-08T20:00:00 Last Updated: 2024-08-07T18:57:43.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments an index past the end of an array and triggers a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016984 - http://www.plain-text.info/sscanf_bug.txt - http://www.php.net/release_5_1_5.php - http://www.securityfocus.com/bid/19415 - http://secunia.com/advisories/21768 -
- http://www.php.net/release_5_1_5.php - http://www.securityfocus.com/bid/19415 - http://secunia.com/advisories/21768 - http://secunia.com/advisories/21403 - http://www.redhat.com/support/errata/RHSA-2006-0669.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:144 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11062 - http://secunia.com/advisories/21847 - http://www.novell.com/linux/security/advisories/2006_20_sr.html - http://secunia.com/advisories/22487 - http://www.ubuntu.com/usn/usn-342-1 - http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm - http://secunia.com/advisories/22039 - http://rhn.redhat.com/errata/RHSA-2006-0
com/elmodocs2/security/ASA-2006-221.htm - http://secunia.com/advisories/22039 - http://rhn.redhat.com/errata/RHSA-2006-0688.html - http://bugs.php.net/bug.php?id=38322 - http://secunia.com/advisories/21683 - http://secunia.com/advisories/23247 - http://secunia.com/advisories/21467 - http://www.novell.com/linux/security/advisories/2006_19_sr.html - http://secunia.com/advisories/22004 - http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm - http://secunia.com/advisories/22538 - http://www.redhat.com/support/errata/RHSA-2006-0682.html - http://secunia.com/advisories/21546 - http://secunia.com/advisories/21608 - http://secunia.com/advisories/22440 - http://secunia.com/advisories/22069 -
546 - http://secunia.com/advisories/21608 - http://secunia.com/advisories/22440 - http://secunia.com/advisories/22069 - http://www.securityfocus.com/archive/1/442438/30/0/threaded - http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm - http://www.novell.com/linux/security/advisories/2006_22_sr.html - http://www.vupen.com/english/advisories/2006/3193 - http://www.php.net/ChangeLog-5.php#5.1.5 - ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc - http://security.gentoo.org/glsa/glsa-200608-28.xml - http://securityreason.com/securityalert/1341 - http://rhn.redhat.com/errata/RHSA-2006-0736.html - http://www.novell.com/linux/security/advisories/2006_52_php.html
CVE ID: CVE-2006-4021 State: PUBLISHED Published: 2006-08-17T21:00:00 Last Updated: 2024-08-07T18:57:43.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cryptographic module in ScatterChat 1.0.x allows attackers to identify patterns in large numbers of messages by identifying collisions using a birthday attack on the custom padding mechanism for ECB mode encryption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19485 - http://www.securityfocus.com/archive/1/443038/100/100/threaded - http://www.scatterchat.com/advisories/2006-01_tech.html - http://www.scatterchat.com/advisories/2006-01_non_tech.html - http://securityreason
t.com/advisories/2006-01_tech.html - http://www.scatterchat.com/advisories/2006-01_non_tech.html - http://securityreason.com/securityalert/1396
CVE ID: CVE-2006-4022 State: PUBLISHED Published: 2006-08-09T00:00:00 Last Updated: 2024-08-07T18:57:43.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intel 2100 PRO/Wireless Network Connection driver PROSet before 7.1.4.6 allows local users to corrupt memory and execute code via "requests for capabilities from higher-level protocol drivers or user-level applications" involving crafted frames, a different issue than CVE-2006-3992. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/824500 - http://support.intel.com/support/wireless/wlan/pro2100/sb/CS-023067.htm - http://www.securityfocus.com/bid/19299 - http://securitytracker.com/i
m/support/wireless/wlan/pro2100/sb/CS-023067.htm - http://www.securityfocus.com/bid/19299 - http://securitytracker.com/id?1016621 - http://www.vupen.com/english/advisories/2006/3099
CVE ID: CVE-2006-4023 State: PUBLISHED Published: 2006-08-09T00:00:00 Last Updated: 2024-08-07T18:57:43.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ip2long function in PHP 5.1.4 and earlier may incorrectly validate an arbitrary string and return a valid network IP address, which allows remote attackers to obtain network information and facilitate other attacks, as demonstrated using SQL injection in the X-FORWARDED-FOR Header in index.php in MiniBB 2.0. NOTE: it could be argued that the ip2long behavior represents a risk for security-relevant issues in a way that is similar to strcpy's role in buffer overflows, in which case this would be a class of implementation bug
in a way that is similar to strcpy's role in buffer overflows, in which case this would be a class of implementation bugs that would require separate CVE items for each PHP application that uses ip2long in a security-relevant manner. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/441708/100/100/threaded - http://www.securityfocus.com/archive/1/441529/100/100/threaded - http://retrogod.altervista.org/php_ip2long.htm - http://securitytracker.com/id?1016609
CVE ID: CVE-2006-4024 State: PUBLISHED Published: 2006-08-09T00:00:00 Last Updated: 2024-08-07T18:57:44.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FESTAHES_Load function in pce/hes.c in Festalon 0.5.0 through 0.5.5 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative LoadAddr value in a HES file, which is used as an offset in a memcpy operation and leads to a buffer underflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3177 - http://www.securityfocus.com/bid/19402 - http://aluigi.altervista.org/adv/festahc-adv.txt - http://secunia.com/a
/3177 - http://www.securityfocus.com/bid/19402 - http://aluigi.altervista.org/adv/festahc-adv.txt - http://secunia.com/advisories/21367
CVE ID: CVE-2006-4025 State: PUBLISHED Published: 2006-08-09T00:00:00 Last Updated: 2024-08-07T18:57:44.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profile.php in XennoBB 2.1.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the (1) bday_day, (2) bday_month, and (3) bday_year parameters in the personal section. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28257 - http://secunia.com/advisories/21409 - http://www.securityfocus.com/bid/19374 - http://securitytracker.com/id?1016643 - http://www.securityfocus.com/archive/1/442423/100/0/thr
ityfocus.com/bid/19374 - http://securitytracker.com/id?1016643 - http://www.securityfocus.com/archive/1/442423/100/0/threaded - http://www.vupen.com/english/advisories/2006/3190 - http://securityreason.com/securityalert/1344
CVE ID: CVE-2006-4026 State: PUBLISHED Published: 2006-08-09T00:00:00 Last Updated: 2024-08-07T18:57:44.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in SAPID CMS 123 rc3 allows remote attackers to execute arbitrary PHP code via a URL in the (1) root_path parameter in usr/extensions/get_infochannel.inc.php and the (2) GLOBALS["root_path"] parameter in usr/extensions/get_tree.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016650 - http://secunia.com/advisories/21410 - http://www.securityfocus.com/archive/1/442425/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilit
21410 - http://www.securityfocus.com/archive/1/442425/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28250 - http://www.securityfocus.com/bid/19383 - http://securityreason.com/securityalert/1346 - http://www.vupen.com/english/advisories/2006/3191 - https://www.exploit-db.com/exploits/2128
CVE ID: CVE-2006-4028 State: PUBLISHED Published: 2006-08-09T20:00:00 Last Updated: 2024-08-07T18:57:46.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in WordPress before 2.0.4 have unknown impact and remote attack vectors. NOTE: due to lack of details, it is not clear how these issues are different from CVE-2006-3389 and CVE-2006-3390, although it is likely that 2.0.4 addresses an unspecified issue related to "Anyone can register" functionality (user registration for guests). Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3071 - http://secunia.com/advisories/21447 - http://ww
ainer: References: - http://www.vupen.com/english/advisories/2006/3071 - http://secunia.com/advisories/21447 - http://www.securityfocus.com/bid/19247 - http://wordpress.org/development/2006/07/wordpress-204/ - http://secunia.com/advisories/21309 - http://unknowngenius.com/blog/archives/2006/07/27/followup-on-wordpress/ - http://security.gentoo.org/glsa/glsa-200608-19.xml - http://bugs.gentoo.org/show_bug.cgi?id=142142 - http://unknowngenius.com/blog/archives/2006/07/26/critical-announcement-to-all-wordpress-users/ - http://www.osvdb.org/27633
CVE ID: CVE-2006-4029 State: PUBLISHED Published: 2006-08-09T20:00:00 Last Updated: 2024-08-07T18:57:44.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in sipd.dll in AGEphone 1.24 and 1.38.1 allows remote attackers to execute arbitrary code via a crafted UDP SIP packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/441086/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27944 - http://www.securityfocus.com/bid/19148 - http://securityreason.com/securityalert/1345 - http://vuln.sg/agephone1381-en.html - http://securitytracker.com/id?1016577 - http://marc.info/?l=full-di
tyalert/1345 - http://vuln.sg/agephone1381-en.html - http://securitytracker.com/id?1016577 - http://marc.info/?l=full-disclosure&m=115383213602413&w=2 - http://secunia.com/advisories/21175 - http://www.vupen.com/english/advisories/2006/2959
CVE ID: CVE-2006-4030 State: PUBLISHED Published: 2006-08-16T21:00:00 Last Updated: 2024-08-07T18:57:46.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the stats module in Gallery 1.5.1-RC2 and earlier allows remote attackers to obtain sensitive information via unspecified attack vectors, related to "two file exposure bugs." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19453 - http://secunia.com/advisories/21502 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325285 - http://www.vupen.com/english/advisories/2006/3250 - http://www.debian.org/security/2006/dsa-1148 - http://secunia.com/advisori
/www.vupen.com/english/advisories/2006/3250 - http://www.debian.org/security/2006/dsa-1148 - http://secunia.com/advisories/16594
CVE ID: CVE-2006-4031 State: PUBLISHED Published: 2006-08-09T22:00:00 Last Updated: 2024-08-07T18:57:46.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21259 - http://secunia.com/advisories/21627 - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://www.novell.com/linux/security/advisories/2006_23_sr.html - http://lists.apple.com/archiv