Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
org/dist/httpd/CHANGES_1.3 - http://secunia.com/advisories/19185 - http://www.apache.org/dist/httpd/CHANGES_2.0 - http://secunia.com/advisories/14530 - http://www.vupen.com/english/advisories/2006/4680 - http://securityreason.com/securityalert/604 - http://secunia.com/advisories/17487 - http://www.securityfocus.com/archive/1/428138/100/0/threaded - http://secunia.com/advisories/19317 - http://docs.info.apple.com/article.html?artnum=302847 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00612828 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1629 - http://securitytracker.com/id?1014323 - http://secunia.com/advisories/19072 - https://oval.ci
.mitre.oval%3Adef%3A1629 - http://securitytracker.com/id?1014323 - http://secunia.com/advisories/19072 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1237 - http://www.securiteam.com/securityreviews/5GP0220G0U.html - http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf - http://www-1.ibm.com/support/search.wss?rs=0&q=PK16139&apar=only - http://www.debian.org/security/2005/dsa-805 - http://secunia.com/advisories/19073 - http://marc.info/?l=apache-httpd-announce&m=112931556417329&w=3 - http://www.securityfocus.com/bid/15647 - https://secure-support.novell.com/KanisaPlatform/Publishing/741/3222109_f.SAL_Public.html - http://www1.itrc.hp.com/ser
https://secure-support.novell.com/KanisaPlatform/Publishing/741/3222109_f.SAL_Public.html - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00612828 - http://www.securityfocus.com/bid/14106 - http://seclists.org/lists/bugtraq/2005/Jun/0025.html - http://www.debian.org/security/2005/dsa-803 - http://secunia.com/advisories/23074 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102197-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1526 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11452 - http://www.vupen.com/english/advis
val.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11452 - http://www.vupen.com/english/advisories/2006/0789 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55
c7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://li
ache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2005-2089 State: PUBLISHED Published: 2005-06-30T04:00:00 Last Updated: 2024-08-07T22:15:37.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft IIS 5.0 and 6.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes IIS to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/v
uest Smuggling." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42899 - http://www.securiteam.com/securityreviews/5GP0220G0U.html - http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf - http://seclists.org/lists/bugtraq/2005/Jun/0025.html
CVE ID: CVE-2005-2090 State: PUBLISHED Published: 2005-06-30T04:00:00 Last Updated: 2024-08-07T22:15:37.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling." Additional Analyst Notes: - CVE Program Container: Reference
t as a separate HTTP request, aka "HTTP Request Smuggling." Additional Analyst Notes: - CVE Program Container: References: - http://www.fujitsu.com/global/support/software/security/products-f/interstage-200703e.html - http://tomcat.apache.org/security-4.html - http://secunia.com/advisories/30908 - http://lists.vmware.com/pipermail/security-announce/2008/000003.html - http://www.vupen.com/english/advisories/2007/2732 - http://www.securityfocus.com/bid/13873 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1 - http://www.vupen.com/english/advisories/2007/3087 - http://secunia.com/advisories/30899 - http://secunia.com/advisories/29242 - http://www.vupen.com/english/advisories/2
- http://secunia.com/advisories/30899 - http://secunia.com/advisories/29242 - http://www.vupen.com/english/advisories/2008/1979/references - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://www.vupen.com/english/advisories/2008/0065 - http://www.securityfocus.com/archive/1/500412/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html - http://secunia.com/advisories/33668 - http://www.securityfocus.com/archive/1/485938/100/0/threaded - http://www.securityfocus.com/archive/1/500396/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2007-0360.html - http://www.vupen.com/english/advisories/2009/0233 - https://oval.ci
/www.redhat.com/support/errata/RHSA-2007-0360.html - http://www.vupen.com/english/advisories/2009/0233 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10499 - http://secunia.com/advisories/28365 - http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm - http://tomcat.apache.org/security-6.html - http://www.vupen.com/english/advisories/2007/3386 - http://www.securiteam.com/securityreviews/5GP0220G0U.html - http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf - http://www.redhat.com/support/errata/RHSA-2007-0327.html - http://secunia.com/advisories/27037 - http://securitytracker.com/id?1014365 - http://docs.info.apple.com/article.html?art
ttp://secunia.com/advisories/27037 - http://securitytracker.com/id?1014365 - http://docs.info.apple.com/article.html?artnum=306172 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://tomcat.apache.org/security-5.html - http://www.securityfocus.com/bid/25159 - http://secunia.com/advisories/26660 - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://seclists.org/lists/bugtraq/2005/Jun/0025.html - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx - http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540 - http://sec
nseblog/archive/2009/01/23.aspx - http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540 - http://secunia.com/advisories/26235 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a37
55a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%
tps://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2005-2091 State: PUBLISHED Published: 2005-06-30T04:00:00 Last Updated: 2024-08-07T22:15:37.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere 5.1 and WebSphere 5.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes WebSphere to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling." Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.
t, aka "HTTP Request Smuggling." Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/securityreviews/5GP0220G0U.html - http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf - http://seclists.org/lists/bugtraq/2005/Jun/0025.html - http://securitytracker.com/id?1014367 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42898
CVE ID: CVE-2005-2092 State: PUBLISHED Published: 2005-06-30T04:00:00 Last Updated: 2024-08-07T22:15:37.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA Systems WebLogic 8.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes WebLogic to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?
HTTP Request Smuggling." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014366 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42901 - http://www.securiteam.com/securityreviews/5GP0220G0U.html - http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf - http://seclists.org/lists/bugtraq/2005/Jun/0025.html
CVE ID: CVE-2005-2093 State: PUBLISHED Published: 2005-06-30T04:00:00 Last Updated: 2024-08-07T22:15:37.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle 9i Application Server (Oracle9iAS) 9.0.2 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Application Server to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling." Additional Analyst Notes: - CVE Program Container: References: - h
separate HTTP request, aka "HTTP Request Smuggling." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42902 - http://www.securiteam.com/securityreviews/5GP0220G0U.html - http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf - http://seclists.org/lists/bugtraq/2005/Jun/0025.html
CVE ID: CVE-2005-2094 State: PUBLISHED Published: 2005-06-30T04:00:00 Last Updated: 2024-08-07T22:15:37.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun SunONE web server 6.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes SunONE to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1
TTP Request Smuggling." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014369 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42903 - http://www.securiteam.com/securityreviews/5GP0220G0U.html - http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf - http://seclists.org/lists/bugtraq/2005/Jun/0025.html
CVE ID: CVE-2005-2095 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:15:37.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: options_identities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the $_POST variable, which allows remote attackers to modify or read the preferences of other users, conduct cross-site scripting XSS) attacks, and write arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://www.securityfocus.com/bid/14254 - http://www.securityfocus.com/archive/1/405200 - http://www.gulftech.org/?node=research&article_
ityfocus.com/bid/14254 - http://www.securityfocus.com/archive/1/405200 - http://www.gulftech.org/?node=research&article_id=00090-07142005 - http://www.securityfocus.com/archive/1/405202 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=163047 - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/21359 - http://www.redhat.com/support/errata/RHSA-2005-595.html - http://www.debian.org/security/2005/dsa-756 - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html - http://www.squirrelmail.org/security/issue/2005-07-13 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval
irrelmail.org/security/issue/2005-07-13 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10500
CVE ID: CVE-2005-2096 State: PUBLISHED Published: 2005-07-06T04:00:00 Last Updated: 2024-08-07T22:15:37.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101989-1 - http://www.debian.org/security/2006/dsa-1026 - http://secunia.com/advisories/17236 - http://www.securityfocus.com/archive/1/482505/100/0/t
org/security/2006/dsa-1026 - http://secunia.com/advisories/17236 - http://www.securityfocus.com/archive/1/482505/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24064 - http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:16.zlib.asc - http://secunia.com/advisories/15949 - http://www.debian.org/security/2005/dsa-797 - http://www.gentoo.org/security/en/glsa/glsa-200509-18.xml - http://securitytracker.com/id?1014398 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:196 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1542 - http://www.
KSA-2005:196 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1542 - http://www.securityfocus.com/archive/1/464745/100/0/threaded - http://www.ubuntulinux.org/usn/usn-151-3 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1262 - http://www.securityfocus.com/archive/1/482601/100/0/threaded - http://secunia.com/advisories/18507 - http://secunia.com/advisories/17054 - https://usn.ubuntu.com/148-1/ - http://www.securityfocus.com/bid/14162 - http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html - http://www.securityfocus.com/archive/1/421411/100/0/threaded - http://secunia.com/advisories/31492 - http://www.mand
l - http://www.securityfocus.com/archive/1/421411/100/0/threaded - http://secunia.com/advisories/31492 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:070 - http://www.redhat.com/support/errata/RHSA-2008-0629.html - http://secunia.com/advisories/17225 - http://www.vupen.com/english/advisories/2007/1267 - http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html - http://www.securityfocus.com/archive/1/421411/100/0/threaded - http://secunia.com/advisories/18406 - http://www.securityfocus.com/archive/1/482950/100/0/threaded - http://secunia.com/advisories/24788 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:112 - http://secunia.com/advisories/32706 - https://ova
88 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:112 - http://secunia.com/advisories/32706 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11500 - http://secunia.com/advisories/17326 - http://www.vupen.com/english/advisories/2005/0978 - http://www.securityfocus.com/archive/1/482503/100/0/threaded - http://www.securityfocus.com/archive/1/482949/100/0/threaded - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://secunia.com/advisories/17516 - http://www.debian.org/security/2005/dsa-740 - http://www.vupen.com/english/advisories/2006/0144 - http://support.apple.com/kb/HT3298 - https://bugzilla.redhat.com/bugz
ttp://www.vupen.com/english/advisories/2006/0144 - http://support.apple.com/kb/HT3298 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162391 - http://www.redhat.com/support/errata/RHSA-2005-569.html - http://security.gentoo.org/glsa/glsa-200507-05.xml - http://secunia.com/advisories/19597 - http://support.avaya.com/elmodocs2/security/ASA-2006-016.htm - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt - http://secunia.com/advisories/19550 - http://secunia.com/advisories/18377 - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680 - http://www.kb.cert.org/vuls/id/680620 - http://www.
html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680 - http://www.kb.cert.org/vuls/id/680620 - http://www.securityfocus.com/archive/1/482571/100/0/threaded
CVE ID: CVE-2005-2097 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-07T22:15:37.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-706.html - http://secunia.com/advisories/17277 - http://www.redhat.com/support/errata/RHSA-2005-671.html - https://oval.cise
html - http://secunia.com/advisories/17277 - http://www.redhat.com/support/errata/RHSA-2005-671.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10280 - http://www.debian.org/security/2006/dsa-1136 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:138 - http://www.novell.com/linux/security/advisories/2005_19_sr.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1 - http://secunia.com/advisories/18398 - http://www.securityfocus.com/archive/1/427053/100/0/threaded - http://www.debian.org/security/2006/dsa-936 - https://usn.ubuntu.com/163-1/ - http://www.vupen.com/english/advisories/2007/2280 - http://www.redhat.com/su
6/dsa-936 - https://usn.ubuntu.com/163-1/ - http://www.vupen.com/english/advisories/2007/2280 - http://www.redhat.com/support/errata/RHSA-2005-670.html - http://secunia.com/advisories/18407 - http://secunia.com/advisories/25729 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.42/SCOSA-2005.42.txt - http://www.debian.org/security/2005/dsa-780 - http://www.securityfocus.com/bid/14529 - http://www.securityfocus.com/archive/1/427990/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2005-708.html - http://secunia.com/advisories/21339
CVE ID: CVE-2005-2098 State: PUBLISHED Published: 2005-08-22T04:00:00 Last Updated: 2024-08-07T22:15:37.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KEYCTL_JOIN_SESSION_KEYRING operation in the Linux kernel before 2.6.12.5 contains an error path that does not properly release the session management semaphore, which allows local users or remote attackers to cause a denial of service (semaphore hang) via a new session keyring (1) with an empty name string, (2) with a long name string, (3) with the key quota reached, or (4) ENOMEM. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/169-1/ - http://www.securityfocus.com/bid/14521 - http
es: - CVE Program Container: References: - https://usn.ubuntu.com/169-1/ - http://www.securityfocus.com/bid/14521 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - http://secunia.com/advisories/17073 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9638 - http://www.redhat.com/support/errata/RHSA-2005-514.html - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5 - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://secunia.com/advisories/16355/
CVE ID: CVE-2005-2099 State: PUBLISHED Published: 2005-08-22T04:00:00 Last Updated: 2024-08-07T22:15:37.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 2.6.12.5 does not properly destroy a keyring that is not instantiated properly, which allows local users or remote attackers to cause a denial of service (kernel oops) via a keyring with a payload that is not empty, which causes the creation to fail, leading to a null dereference in the keyring destructor. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/169-1/ - http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - http://securitytracker.com/id?1014644