Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-2428 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:29:59.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive information such as (1) the password hash in the HTTPPassword field, (2) the password change date in the HTTPPasswordChangeDate field, (3) the client platform in the ClntPltfrm field, (4) the client machine name in the ClntMachine field, and (5) the client Lotus Domino release in the ClntBld field, a different vulnerabi
chine name in the ClntMachine field, and (5) the client Lotus Domino release in the ClntBld field, a different vulnerability than CVE-2005-2696. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112240869130356&w=2 - http://www.securityfocus.com/bid/14389 - https://www.exploit-db.com/exploits/39495/ - http://www-1.ibm.com/support/docview.wss?uid=swg21212934 - http://securitytracker.com/id?1014584 - http://www.osvdb.org/18462 - http://www.cybsec.com/vuln/default_configuration_information_disclosure_lotus_domino.pdf - http://www.securiteam.com/securitynews/5FP0E15GLQ.html - http://secunia.com/advisories/16231/ - https://exchange.xforce.ibmcloud.com/
curiteam.com/securitynews/5FP0E15GLQ.html - http://secunia.com/advisories/16231/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/21556
CVE ID: CVE-2005-2429 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:29:59.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox, when opening Microsoft Word documents, does not properly set the permissions on shared sections, which allows remote attackers to write arbitrary data to open applications in Microsoft Office. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24346 - http://marc.info/?l=bugtraq&m=112248181422193&w=2 - http://secunia.com/advisories/16256 - http://www.osvdb.org/18484
CVE ID: CVE-2005-2430 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:29:59.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) forum_id or (2) group_id parameter to forum.php, (3) project_task_id parameter to task.php, (4) id parameter to detail.php, (5) the text field on the search page, (6) group_id parameter to qrs.php, (7) form, (8) rows, (9) cols or (10) wrap parameter to notepad.php, or the login field on the login form. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/18
login field on the login form. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/18300 - http://secunia.com/advisories/20622 - http://marc.info/?l=bugtraq&m=112259845904350&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21558 - http://secunia.com/advisories/16253/ - http://www.osvdb.org/18301 - http://www.osvdb.org/18304 - http://www.debian.org/security/2006/dsa-1094 - http://www.osvdb.org/18303 - http://www.osvdb.org/18302 - http://www.securityfocus.com/bid/14405 - http://www.osvdb.org/18299
CVE ID: CVE-2005-2431 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:29:59.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) lost password and (2) account pending features in GForge 4.5 do not properly set a limit on the number of e-mails sent to an e-mail address, which allows remote attackers to send a large number of messages to arbitrary e-mail addresses (aka mail bomb). Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112259845904350&w=2
CVE ID: CVE-2005-2432 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:30:00.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1) members or (2) admin. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16274 - http://www.osvdb.org/18316 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21576 - http://marc.info/?l=bugtraq&m=112291396731712&w=2 - http://marc.info/?l=bugtraq&m=112258115325054&w=2 - http://securitytracker.com/id?1014607 - http://www.securityfocus.com/bid/14403
CVE ID: CVE-2005-2433 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:29:59.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: PhpList allows remote attackers to obtain sensitive information via a direct request to (1) about.php, (2) connect.php, (3) domainstats.php or (4) usercheck.php in public_html/lists/admin directory, (5) attributes.php, (6) dbcheck.php, (7) importcsv.php, (8) user.php, (9) usermgt.php, or (10) users.php in admin/commonlib/pages directory, (11) helloworld.php, or (12) sidebar.php in public_html/lists/admin/plugins directory, or (13) main.php in public_html/lists/admin/plugsins/defaultplugin directory, which reveal the path in an
ins directory, or (13) main.php in public_html/lists/admin/plugsins/defaultplugin directory, which reveal the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/18329 - http://www.osvdb.org/18323 - http://www.osvdb.org/18321 - http://www.osvdb.org/18326 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21579 - http://www.osvdb.org/18322 - http://www.osvdb.org/18325 - http://www.osvdb.org/18327 - http://www.osvdb.org/18328 - http://www.osvdb.org/18318 - http://www.osvdb.org/18324 - http://www.osvdb.org/18317 - http://marc.info/?l=bugtraq&m=112258115325054&w=2 - http://www.osvdb.org/18320 - http://www.osvdb.org/18319
CVE ID: CVE-2005-2434 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:30:01.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys WRT54G router uses the same private key and certificate for every router, which allows remote attackers to sniff the SSL connection and obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14407 - http://marc.info/?l=bugtraq&m=112258422806340&w=2 - http://securitytracker.com/id?1014596 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21635 - http://secunia.com/advisories/16271
CVE ID: CVE-2005-2435 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:29:59.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in browse.php in Website Baker Project allows remote attackers to inject arbitrary web script or HTML via the dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14404 - http://marc.info/?l=bugtraq&m=112260471228762&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21631 - http://secunia.com/advisories/16263 - http://www.osvdb.org/18342
CVE ID: CVE-2005-2436 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:29:59.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: browse.php in Website Baker Project allows remote attackers to obtain sensitive data via (1) a directory that does not exist in the dir parameter or (2) a direct request to certain php files, which reveal the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112260471228762&w=2 - http://www.osvdb.org/18344 - http://secunia.com/advisories/16263 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21633 - http://www.osvdb.org/18343
CVE ID: CVE-2005-2437 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:29:59.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Website Baker Project does not properly verify the file extensions of uploaded files, which allows remote attackers to upload and execute arbitrary PHP code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/21634 - http://www.osvdb.org/18345 - http://marc.info/?l=bugtraq&m=112260471228762&w=2 - http://secunia.com/advisories/16263 - http://www.securityfocus.com/bid/14406
CVE ID: CVE-2005-2438 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:29:59.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in UseBB 0.5.1 and earlier allows remote attackers to inject arbitrary Javascript via the BBCode color value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/21651 - http://www.usebb.net/community/topic.php?id=605 - http://www.securityfocus.com/bid/14412 - http://marc.info/?l=bugtraq&m=112264706213040&w=2 - http://www.hardened-php.net/advisory_122005.60.html
CVE ID: CVE-2005-2439 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:29:59.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in UseBB 0.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search function. Additional Analyst Notes: - CVE Program Container: References: - http://www.usebb.net/community/topic.php?id=605 - http://www.securityfocus.com/bid/14413 - http://marc.info/?l=bugtraq&m=112264706213040&w=2 - http://www.hardened-php.net/advisory_122005.60.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/21652
CVE ID: CVE-2005-2440 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:30:01.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.asp in Thomson Web Skill Vantage Manager allows remote attackers to execute arbitrary SQL commands via the svmPassword parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/18330 - http://marc.info/?l=bugtraq&m=112258777107822&w=2 - http://secunia.com/advisories/16268/ - http://www.securityfocus.com/bid/14409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21637
CVE ID: CVE-2005-2441 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:29:59.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and HTML via the (1) UserName parameter to profile.php or (2) UserID parameter to login.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14423 - http://www.securityfocus.com/archive/1/426874/100/0/threaded - http://secunia.com/advisories/16220 - http://www.osvdb.org/18662 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21680 - http://www.osvdb.org/18663
0 - http://www.osvdb.org/18662 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21680 - http://www.osvdb.org/18663 - http://marc.info/?l=bugtraq&m=112300586019568&w=2 - http://securitytracker.com/id?1014614
CVE ID: CVE-2005-2442 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:29:59.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Application Scripting (XAS) vulnerability in SPI Dynamics WebInspect 5.0.196 allows remote attackers to inject Javascript from one application into another. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/21541 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/035414.html - http://securitytracker.com/id?1014582 - http://marc.info/?l=bugtraq&m=112264765216499&w=2 - http://marc.info/?l=bugtraq&m=112239353829324&w=2 - http://www.securityfocus
arc.info/?l=bugtraq&m=112264765216499&w=2 - http://marc.info/?l=bugtraq&m=112239353829324&w=2 - http://www.securityfocus.com/bid/14385 - http://secunia.com/advisories/16191
CVE ID: CVE-2005-2443 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:29:59.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kshout 2.x and 3.x stores settings.dat under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.soulblack.com.ar/repo/papers/advisory/kshout_advisory.txt - http://marc.info/?l=bugtraq&m=112274114623893&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24352
CVE ID: CVE-2005-2444 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:29:59.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trillian Pro 3.1 build 121, when checking Yahoo e-mail, stores the password in plaintext in a world readable file and does not delete the file after login, which allows local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16289 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21667 - http://marc.info/?l=bugtraq&m=112274667603628&w=2
CVE ID: CVE-2005-2445 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:30:01.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewPrd.asp in Product Cart 2.6 allows remote attackers to execute arbitrary SQL commands via the idcategory parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/17329 - http://marc.info/?l=bugtraq&m=112274710020521&w=2 - http://secunia.com/advisories/14833 - http://securitytracker.com/id?1014129 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21672 - http://www.securityfocus.com/bid/13881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20
vulnerabilities/21672 - http://www.securityfocus.com/bid/13881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20956 - http://www.osvdb.org/18508
CVE ID: CVE-2005-2446 State: REJECTED Published: 2005-08-03T04:00:00 Last Updated: 2005-11-02T10:00:00 Description: No description available.
CVE ID: CVE-2005-2447 State: REJECTED Published: 2005-08-03T04:00:00 Last Updated: 2005-11-02T10:00:00 Description: No description available.
CVE ID: CVE-2005-2448 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:30:01.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple "endianness errors" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a denial of service (invalid behavior in applications) on big-endian systems. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16140 - http://www.securityfocus.com/bid/24600 - http://marc.info/?l=bugtraq&m=112198499417250&w=2 - http://secunia.com/advisories/16363 - http://www.securityfocus.com/bid/14415 - http://www.debian.org/security/2005/dsa-813 - https://oval.cisecurity.org/repository/s
www.securityfocus.com/bid/14415 - http://www.debian.org/security/2005/dsa-813 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11263 - http://www.debian.org/security/2007/dsa-1318 - http://secunia.com/advisories/16155
CVE ID: CVE-2005-2449 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:30:00.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in sandbox before 1.2.11 allows local users to create or overwrite arbitrary files via symlink attack on sandboxpids.tmp. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200507-22.xml - http://secunia.com/advisories/16214 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21519 - http://bugs.gentoo.org/show_bug.cgi?id=96782 - http://securitytracker.com/id?1014574 - http://www.securityfocus.com/bid/14375
CVE ID: CVE-2005-2450 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:30:01.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://security.gentoo.org/glsa/glsa-200507-25.xml - http://www.osvdb.org/18258 - http://secunia.com/advisories/16250 - http://secunia.com/advisories/16180 - http://marc.info/?l=bugt
w.osvdb.org/18258 - http://secunia.com/advisories/16250 - http://secunia.com/advisories/16180 - http://marc.info/?l=bugtraq&m=112230864412932&w=2 - http://www.osvdb.org/18259 - http://secunia.com/advisories/16229 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000987 - http://secunia.com/advisories/16296 - http://www.osvdb.org/18257 - http://secunia.com/advisories/16458 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21555 - http://sourceforge.net/project/shownotes.php?release_id=344514 - http://www.securityfocus.com/bid/14359
CVE ID: CVE-2005-2451 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:30:00.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.0 through 12.4 and IOS XR before 3.2, with IPv6 enabled, allows remote attackers on a local network segment to cause a denial of service (device reload) and possibly execute arbitrary code via a crafted IPv6 packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/18332 - http://www.kb.cert.org/vuls/id/930892 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21591 - http://www.us-cert.gov/cas/techalerts/TA05-210A.html - http://securitytracker.com/id?1014598 - http://www.ci
ies/21591 - http://www.us-cert.gov/cas/techalerts/TA05-210A.html - http://securitytracker.com/id?1014598 - http://www.cisco.com/warp/public/707/cisco-sa-20050729-ipv6.shtml - http://archives.neohapsis.com/archives/fulldisclosure/2005-07/0663.html - http://www.securityfocus.com/bid/14414 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5445 - http://secunia.com/advisories/16272
CVE ID: CVE-2005-2452 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:29:59.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: libtiff up to 3.7.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image header with a zero "YCbCr subsampling" value, which causes a divide-by-zero error in (1) tif_strip.c and (2) tif_tile.c, a different vulnerability than CVE-2004-0804. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.ubuntu.com/show_bug.cgi?id=12008 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:143 - http://secunia.com/advisories/16486 - http://www.mandriva.com/security/a
a.com/security/advisories?name=MDKSA-2005:143 - http://secunia.com/advisories/16486 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:144 - https://usn.ubuntu.com/156-1/ - http://secunia.com/advisories/16266 - http://www.securityfocus.com/bid/14417 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:142
CVE ID: CVE-2005-2453 State: PUBLISHED Published: 2005-08-04T04:00:00 Last Updated: 2024-08-07T22:29:59.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in NetworkActiv Web Server 1.0, 2.0.0.6, 3.0.1.1, and 3.5.13, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the query string. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16301 - http://securitytracker.com/id?1014624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21696 - http://www.securityfocus.com/bid/14473 - http://secunia.com/secunia_research/2005-31/advisory/ - http://www.osv
/21696 - http://www.securityfocus.com/bid/14473 - http://secunia.com/secunia_research/2005-31/advisory/ - http://www.osvdb.org/18525
CVE ID: CVE-2005-2454 State: PUBLISHED Published: 2006-10-18T22:00:00 Last Updated: 2024-08-07T22:29:59.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Notes 6.5.4 and 6.5.5, and 7.0.0 and 7.0.1, uses insecure default permissions (Everyone/Full Control) for the "Notes" folder and all children, which allows local users to gain privileges and modify, add, or delete files in that folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4093 - http://secunia.com/secunia_research/2005-29/advisory/ - http://www.osvdb.org/29761 - http://www.kb.cert.org/vuls/id/383092 - http://secunia.com/advisories/19537 - http:/
ory/ - http://www.osvdb.org/29761 - http://www.kb.cert.org/vuls/id/383092 - http://secunia.com/advisories/19537 - http://www.securityfocus.com/archive/1/449126/100/0/threaded - http://secunia.com/advisories/27342 - http://www.securityfocus.com/bid/20612 - http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21246773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29660 - http://securitytracker.com/id?1017086
CVE ID: CVE-2005-2455 State: PUBLISHED Published: 2005-08-04T04:00:00 Last Updated: 2024-08-07T22:30:00.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Greasemonkey before 0.3.5 allows remote web servers to (1) read arbitrary files via a GET request to a file:// URL in the GM_xmlhttpRequest API function, (2) list installed scripts using GM_scripts, or obtain sensitive information via (3) GM_setValue and GM_getValue. Additional Analyst Notes: - CVE Program Container: References: - http://greasemonkey.mozdev.org/changes/0.3.5.html - http://secunia.com/advisories/16128 - http://www.vupen.com/english/advisories/2005/1147 - http://mozdev.org/pipermail/greasemonkey/2005-July/004022
es/16128 - http://www.vupen.com/english/advisories/2005/1147 - http://mozdev.org/pipermail/greasemonkey/2005-July/004022.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/21453 - http://greaseblog.blogspot.com/2005/07/mandatory-greasemonkey-update.html - http://mozdev.org/pipermail/greasemonkey/2005-July/004000.html - http://www.securityfocus.com/bid/14336 - http://securitytracker.com/id?1014529 - http://www.osvdb.org/18154 - http://www.securiteam.com/securitynews/5CP0P20GBK.html
CVE ID: CVE-2005-2456 State: PUBLISHED Published: 2005-08-04T04:00:00 Last Updated: 2024-08-07T22:30:01.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index overflow in the xfrm_sk_policy_insert function in xfrm_user.c in Linux kernel 2.6 allows local users to cause a denial of service (oops or deadlock) and possibly execute arbitrary code via a p->dir value that is larger than XFRM_POLICY_OUT, which is used as an index in the sock->sk_policy array. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_50_kernel.html - http://secunia.com/advisories/18056 - https://usn.ubuntu.com/169-1/ - http://secunia.com
dvisories/2005_50_kernel.html - http://secunia.com/advisories/18056 - https://usn.ubuntu.com/169-1/ - http://secunia.com/advisories/16500 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - http://secunia.com/advisories/17073 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10858 - http://secunia.com/advisories/18059 - http://www.debian.org/security/2005/dsa-922 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21710 - http://www.securityfocus.com/bid/14477 - http://www.mail-archive.com/netdev%40vger.kernel.org/msg00520.html - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=8da3e25b2c4c1f305fd8