Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-6238 State: PUBLISHED Published: 2006-12-03T18:00:00Z Last Updated: 2024-09-16T20:02:43.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AutoFill feature in Apple Safari 2.0.4 does not properly verify that all automatically populated form fields are visible to the user, which allows remote attackers to obtain sensitive information, such as usernames and passwords, via input fields of zero width, a variant of CVE-2006-6077. Additional Analyst Notes: - CVE Program Container: References: - http://tearesolutions.com/2006/11/how_to_steal_passwords_from_safaris_autofill.html - http://secunia.com/advisories/23066 - http://www.securityfocus.com/bid/21329
CVE ID: CVE-2006-6239 State: PUBLISHED Published: 2006-12-03T18:00:00 Last Updated: 2024-08-07T20:19:35.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: webadmin in MailEnable NetWebAdmin Professional 2.32 and Enterprise 2.32 allows remote attackers to authenticate using an empty password. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4713 - http://secunia.com/advisories/23105 - http://www.mailenable.com/hotfix/ - http://securitytracker.com/id?1017287
CVE ID: CVE-2006-6240 State: PUBLISHED Published: 2006-12-03T18:00:00 Last Updated: 2024-08-07T20:19:35.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Sorin Chitu Telnet-FTP Server 1.0 allows remote authenticated users to list contents of arbitrary directories and download arbitrary files via a .. (dot dot) sequence in an FTP command argument, as demonstrated by RETR (GET) or STOR (PUT). NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22921 - https://exchange.xforce.ibmcloud.com/
otes: - CVE Program Container: References: - http://secunia.com/advisories/22921 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30582 - http://www.securityfocus.com/bid/21339 - http://www.vupen.com/english/advisories/2006/4765
CVE ID: CVE-2006-6241 State: PUBLISHED Published: 2006-12-03T18:00:00 Last Updated: 2024-08-07T20:19:35.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sorin Chitu Telnet-FTP Server 1.0 allows remote authenticated users to cause a denial of service (crash) via consecutive RETR commands. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22921 - http://www.securityfocus.com/bid/21340 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30584 - http://www.vupen.com/english/advisories/2006/4765
CVE ID: CVE-2006-6242 State: PUBLISHED Published: 2006-12-03T18:00:00 Last Updated: 2024-08-07T20:19:35.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Serendipity 1.0.3 and earlier allow remote attackers to read or include arbitrary local files via a .. (dot dot) sequence in the serendipity[charset] parameter in (1) include/lang.inc.php; or to plugins/ scripts (2) serendipity_event_bbcode/serendipity_event_bbcode.php, (3) serendipity_event_browsercompatibility/serendipity_event_browsercompatibility.php, (4) serendipity_event_contentrewrite/serendipity_event_contentrewrite.php, (5) serendipity_event_creativecommons/serendipity_e
rendipity_event_contentrewrite/serendipity_event_contentrewrite.php, (5) serendipity_event_creativecommons/serendipity_event_creativecommons.php, (6) serendipity_event_emoticate/serendipity_event_emoticate.php, (7) serendipity_event_entryproperties/serendipity_event_entryproperties.php, (8) serendipity_event_karma/serendipity_event_karma.php, (9) serendipity_event_livesearch/serendipity_event_livesearch.php, (10) serendipity_event_mailer/serendipity_event_mailer.php, (11) serendipity_event_nl2br/serendipity_event_nl2br.php, (12) serendipity_event_s9ymarkup/serendipity_event_s9ymarkup.php, (13) serendipity_event_searchhighlight/serendipity_event_searchhighlight.php, (14) serendipity_event_spa
_s9ymarkup.php, (13) serendipity_event_searchhighlight/serendipity_event_searchhighlight.php, (14) serendipity_event_spamblock/serendipity_event_spamblock.php, (15) serendipity_event_spartacus/serendipity_event_spartacus.php, (16) serendipity_event_statistics/serendipity_plugin_statistics.php, (17) serendipity_event_templatechooser/serendipity_event_templatechooser.php, (18) serendipity_event_textile/serendipity_event_textile.php, (19) serendipity_event_textwiki/serendipity_event_textwiki.php, (20) serendipity_event_trackexits/serendipity_event_trackexits.php, (21) serendipity_event_weblogping/serendipity_event_weblogping.php, (22) serendipity_event_xhtmlcleanup/serendipity_event_xhtmlcleanu
ity_event_weblogping/serendipity_event_weblogping.php, (22) serendipity_event_xhtmlcleanup/serendipity_event_xhtmlcleanup.php, (23) serendipity_plugin_comments/serendipity_plugin_comments.php, (24) serendipity_plugin_creativecommons/serendipity_plugin_creativecommons.php, (25) serendipity_plugin_entrylinks/serendipity_plugin_entrylinks.php, (26) serendipity_plugin_eventwrapper/serendipity_plugin_eventwrapper.php, (27) serendipity_plugin_history/serendipity_plugin_history.php, (28) serendipity_plugin_recententries/serendipity_plugin_recententries.php, (29) serendipity_plugin_remoterss/serendipity_plugin_remoterss.php, (30) serendipity_plugin_shoutbox/serendipity_plugin_shoutbox.php, and and (
_remoterss/serendipity_plugin_remoterss.php, (30) serendipity_plugin_shoutbox/serendipity_plugin_shoutbox.php, and and (31) serendipity_plugin_templatedropdown/serendipity_plugin_templatedropdown.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21367 - http://www.vupen.com/english/advisories/2006/4782 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30615 - https://www.exploit-db.com/exploits/2869 - http://www.s9y.org/forums/viewtopic.php?t=7922
CVE ID: CVE-2006-6243 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T20:19:35.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) did parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4779 - http://securityreason.com/securityalert/1959 - http://www.aria-security.com/forum/showthread.php?t=46 - http://secunia.com/advisories/23147 - http://www.securityfocus.com/archive/1/453029/100/0/threaded - http://www.securityfocus.com/bid/21289
CVE ID: CVE-2006-6244 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T20:19:35.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Coalescent Systems freePBX (formerly Asterisk Management Portal) before 2.2.0rc1 allows attackers to execute arbitrary commands via shell metacharacters in (1) CALLERID(name) or (2) CALLERID(number). Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=121515&release_id=467129 - http://www.freepbx.org/trac/changeset/2076 - http://secunia.com/advisories/23124 - http://www.securityfocus.com/bid/21359 - http://www.vupen.com/english/advisories/2006/3019
CVE ID: CVE-2006-6245 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T20:19:35.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Photo Organizer (PO) 2.32b and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4766 - http://po.shaftnet.org/po_stable_changelog - http://secunia.com/advisories/23176 - http://www.securityfocus.com/bid/21351 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30576
CVE ID: CVE-2006-6246 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T20:19:35.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Photo Organizer 2.32b and earlier does not properly check the ownership of certain objects, which allows remote attackers to gain unauthorized access via vectors related to (1) camera del, (2) camera edit, (3) folder/album deletion, (4) photo.move, (5) content.indexer, (6) folder.content, and possibly other operations. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.shaftnet.org/task/113 - http://www.vupen.com/english/advisories/2006/4766 - http://po.shaftnet.org/po_stable_changelog - http://secuni
ask/113 - http://www.vupen.com/english/advisories/2006/4766 - http://po.shaftnet.org/po_stable_changelog - http://secunia.com/advisories/23176 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30577 - http://www.securityfocus.com/bid/21351
CVE ID: CVE-2006-6247 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T20:19:35.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Uapplication UPhotoGallery 1.1 allow remote attackers to execute arbitrary SQL commands via the ci parameter to (1) slideshow.asp or (2) thumbnails.asp. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1950 - http://www.securityfocus.com/archive/1/459187/100/0/threaded - http://www.securityfocus.com/bid/21319 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30556 - http://www.securityfocus.com/archive/1/452827/100/0/threaded
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/30556 - http://www.securityfocus.com/archive/1/452827/100/0/threaded - http://www.aria-security.com/forum/showthread.php?t=53
CVE ID: CVE-2006-6248 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T20:19:35.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in GPhotos 1.5 allows remote attackers to obtain sensitive information via an invalid rep parameter, which reveals the full path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30390 - http://www.securityfocus.com/archive/1/452025/100/200/threaded - http://www.securityfocus.com/archive/1/452099/100/200/threaded - http://securityreason.com/securityalert/1951
CVE ID: CVE-2006-6249 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T20:19:35.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Chama Cargo 4.36 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21361 - http://www.ipa.go.jp/security/vuln/documents/2006/JVN_08494205_ChamaCargo.html - http://secunia.com/advisories/23149 - http://jvn.jp/jp/JVN%2308494205/index.html - http://www.vupen.com/english/advisories/2006/4780 - https://exchange.xforce.ibmcloud.com/vulnerabilit
94205/index.html - http://www.vupen.com/english/advisories/2006/4780 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30622
CVE ID: CVE-2006-6250 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T20:19:35.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of service (crash) via an M3U Playlist file containing extended ASCII, which causes the Unicode converter to be invoked. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30563 - https://www.exploit-db.com/exploits/2861
CVE ID: CVE-2006-6251 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T20:19:35.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long string in an M3U file, aka an "M3U UNC Name" attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21363 - https://www.exploit-db.com/exploits/2872 - http://secunia.com/advisories/23182 - https://www.exploit-db.com/exploits/2870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30629 - http://www.vupen.com/english/advisories/2006/4783 - http://www.kb.cert
hange.xforce.ibmcloud.com/vulnerabilities/30629 - http://www.vupen.com/english/advisories/2006/4783 - http://www.kb.cert.org/vuls/id/311192
CVE ID: CVE-2006-6252 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T20:19:35.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service (CPU consumption) via a long string composed of ":D" sequences, which are interpreted as emoticons. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452645/100/0/threaded - http://www.securityfocus.com/archive/1/452620/100/0/threaded
CVE ID: CVE-2006-6253 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T20:19:35.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cahier de texte 2.0 stores sensitive information under the web root, possibly with insufficient access control, which might allow remote attackers to obtain all users' passwords via a direct request for administration/dump.sql. Additional Analyst Notes: - CVE Program Container: References: - http://acid-root.new.fr/poc/15061124.txt - http://securityreason.com/securityalert/1961 - http://www.vupen.com/english/advisories/2006/4701 - http://secunia.com/advisories/23122 - http://www.securityfocus.com/archive/1/452600/100/0/threade
advisories/2006/4701 - http://secunia.com/advisories/23122 - http://www.securityfocus.com/archive/1/452600/100/0/threaded - http://www.securityfocus.com/bid/21283
CVE ID: CVE-2006-6254 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T20:19:35.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed content (source code) of files via the chemin parameter, as demonstrated using directory traversal sequences to obtain the MySQL username and password from conn_cahier_de_texte.php. NOTE: it is not clear whether the scope of this issue extends above the web document root, and whether directory traversal is the primary vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://acid-root.new.fr/poc/1506112
mary vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://acid-root.new.fr/poc/15061124.txt - http://securityreason.com/securityalert/1961 - http://www.vupen.com/english/advisories/2006/4701 - http://secunia.com/advisories/23122 - http://www.securityfocus.com/archive/1/452600/100/0/threaded - http://www.securityfocus.com/bid/21283
CVE ID: CVE-2006-6255 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T20:19:35.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Program E is an AIML chatterbot, allows remote attackers to upload and execute arbitrary PHP code via a filename with a .php extension in the filename parameter and code in the moreinfo parameter, which is saved to a filename under descriptions/, which is accessible via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21284 - https://exchange.xforce.ibmcloud
Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21284 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44729 - https://www.exploit-db.com/exploits/2843
CVE ID: CVE-2006-6256 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T20:19:35.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the file manager in admin/bro_main.php in AlternC 0.9.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a folder name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452988/100/0/threaded - http://www.securityfocus.com/bid/21355 - http://securityreason.com/securityalert/1965 - http://www.ground418.org/exploits/read.php?file=06-alternC-095.txt - http://secunia.com/advisories/23144 - https://exchang
tp://www.ground418.org/exploits/read.php?file=06-alternC-095.txt - http://secunia.com/advisories/23144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30625 - http://www.vupen.com/english/advisories/2006/4851 - http://dev.alternc.org/trac/alternc/changeset/1739 - https://dev.alternc.org/trac/alternc/milestone/0.9.6
CVE ID: CVE-2006-6257 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T20:19:35.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: The file manager in AlternC 0.9.5 and earlier, when warnings are enabled in PHP, allows remote attackers to obtain sensitive information via certain folder names such as ones composed of JavaScript code, which reveal the path in a warning message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452988/100/0/threaded - http://www.securityfocus.com/bid/21355 - http://securityreason.com/securityalert/1965 - http://www.ground418.org/exploits/read.php?file=06-alternC-095.txt -
55 - http://securityreason.com/securityalert/1965 - http://www.ground418.org/exploits/read.php?file=06-alternC-095.txt - http://secunia.com/advisories/23144 - http://www.vupen.com/english/advisories/2006/4851
CVE ID: CVE-2006-6258 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T20:19:35.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: The phpmyadmin subsystem in AlternC 0.9.5 and earlier transmits the SQL password in cleartext in a cookie, which might allow remote attackers to obtain the password by sniffing or by conducting a cross-site scripting (XSS) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452988/100/0/threaded - http://www.securityfocus.com/bid/21355 - http://securityreason.com/securityalert/1965 - http://www.ground418.org/exploits/read.php?file=06-alternC-095.txt - http://secunia.c
ityreason.com/securityalert/1965 - http://www.ground418.org/exploits/read.php?file=06-alternC-095.txt - http://secunia.com/advisories/23144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30625 - http://www.vupen.com/english/advisories/2006/4851
CVE ID: CVE-2006-6259 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T20:19:35.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in (a) class/functions.php and (b) class/m_bro.php in AlternC 0.9.5 and earlier allow remote attackers to (1) create arbitrary files and directories via a .. (dot dot) in the "create name" field and (2) read arbitrary files via a .. (dot dot) in the "web root" field when configuring a subdomain. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452988/100/0/threaded - http://dev.alternc.org/trac/alternc/changeset/1742 - http://ww
//www.securityfocus.com/archive/1/452988/100/0/threaded - http://dev.alternc.org/trac/alternc/changeset/1742 - http://www.securityfocus.com/bid/21355 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30626 - http://securityreason.com/securityalert/1965 - http://dev.alternc.org/trac/alternc/changeset/1737 - http://www.ground418.org/exploits/read.php?file=06-alternC-095.txt - http://secunia.com/advisories/23144 - http://dev.alternc.org/trac/alternc/changeset/1738 - http://www.vupen.com/english/advisories/2006/4851 - https://dev.alternc.org/trac/alternc/milestone/0.9.6
CVE ID: CVE-2006-6260 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T20:19:35.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.asp in Redbinaria Sistema Integrado de Administracion de Portales (SIAP) allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452642/100/0/threaded - http://www.securityfocus.com/bid/21286 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30484 - http://www.securityfocus.com/bid/21346 - http://securityreason.com/securityalert/1957
CVE ID: CVE-2006-6261 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T20:19:35.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Quintessential Player 4.50.1.82 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) M3u or (2) M3u-8 file; or a (3) crafted PLS file with a long value in the (a) NumberofEntries, (b) Length (aka Length1), (c) Filename (aka File1), (d) Title (aka Title1) field, or other unspecified fields. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2860 - http://www.securityfocus.com/bid/21331 -
CVE Program Container: References: - https://www.exploit-db.com/exploits/2860 - http://www.securityfocus.com/bid/21331 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30559
CVE ID: CVE-2006-6262 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T20:19:35.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in mboard.php in PHPJunkYard (aka Klemen Stirn) MBoard 1.22 and earlier allows remote attackers to create arbitrary empty files via a .. (dot dot) in the orig_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4769 - http://www.mayhemiclabs.com/wiki/wikka.php?wakka=MHL2006004 - http://securityreason.com/securityalert/1988 - http://www.mayhemiclabs.com/advisories/MHL-2006-004.txt - http://www.securityfocus.com/bid/21304 -
securityalert/1988 - http://www.mayhemiclabs.com/advisories/MHL-2006-004.txt - http://www.securityfocus.com/bid/21304 - http://www.securityfocus.com/archive/1/452772/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30558 - http://secunia.com/advisories/23129
CVE ID: CVE-2006-6263 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T20:19:35.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Teredo clients, when source routing is enabled, recognize a Routing header in an encapsulated IPv6 packet and send the packet to the next hop, which might allow remote attackers to bypass policies of certain Internet gateways that drop all source-routed packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/avcenter/reference/Teredo_Security.pdf - http://www.securityfocus.com/archive/1/452996/100/0/threaded - http://www.securityfocus.com/archive/1/452989/100/0/threaded
CVE ID: CVE-2006-6264 State: PUBLISHED Published: 2006-12-04T11:00:00 Last Updated: 2024-08-07T20:19:35.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Teredo creates trusted peer entries for arbitrary incoming source Teredo addresses, even if the low 32 bits represent an intranet address, which might allow remote attackers to send IPv4 traffic to intranet hosts that use non-RFC1918 addresses, bypassing IPv4 ingress filtering. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/avcenter/reference/Teredo_Security.pdf - http://www.securityfocus.com/archive/1/452996/100/0/threaded - http://www.securityfocus.com/archive/1/452989/100/0/threaded