Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-1216 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T21:44:05.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA Server that uses the NetBIOS (all) predefined packet filter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/367077 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-034 - http://www.securityfocus.com/bid/13954 - http://securitytracker.com/id?1014193 - https://oval.cisecurity.org/repository/search/definition/ova
cus.com/bid/13954 - http://securitytracker.com/id?1014193 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A468 - http://secunia.com/advisories/15693/
CVE ID: CVE-2005-1218 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T21:44:06.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial of service (crash) via crafted Remote Desktop Protocol (RDP) requests. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-041 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A609 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval
ition/oval%3Aorg.mitre.oval%3Adef%3A609 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A346 - http://www.securityfocus.com/bid/14259 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A618 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A376 - http://marc.info/?l=bugtraq&m=112146383919436&w=2 - http://www.us-cert.gov/cas/techalerts/TA05-221A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100092 - https://www.immunitysec.com/pipermail/dailydave/2005-July/002188.html - http://www.microsoft.com/technet/security/advisory/904797.mspx
unitysec.com/pipermail/dailydave/2005-July/002188.html - http://www.microsoft.com/technet/security/advisory/904797.mspx - http://security-protocols.com/modules.php?name=News&file=article&sid=2783 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A180 - http://www.kb.cert.org/vuls/id/490628
CVE ID: CVE-2005-1219 State: PUBLISHED Published: 2005-07-12T04:00:00 Last Updated: 2024-08-07T21:44:05.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-036 - http://www.us-cert.gov/cas/techalerts/TA05-193A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A769 - http://www.kb.cert.org/vuls/id/720742 - https://oval.cisecurity.o
/search/definition/oval%3Aorg.mitre.oval%3Adef%3A769 - http://www.kb.cert.org/vuls/id/720742 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1280 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A440 - http://secunia.com/advisories/16004/ - http://www.securityfocus.com/bid/14214 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1125 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A330
CVE ID: CVE-2005-1220 State: PUBLISHED Published: 2005-04-22T04:00:00 Last Updated: 2024-08-07T21:44:05.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shoutbox SCRIPT 3.0.2 and earlier allows remote attackers to obtain sensitive information via a direct request to db/settings.dat, which displays usernames and password hashes. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20177 - http://www.osvdb.org/15695 - http://marc.info/?l=bugtraq&m=111402253108991&w=2 - http://secunia.com/advisories/15015
CVE ID: CVE-2005-1221 State: PUBLISHED Published: 2005-04-22T04:00:00 Last Updated: 2024-08-07T21:44:06.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.asp for Ecommerce-Carts EcommPro 3.0 allows remote attackers to execute arbitrary SQL commands via the password field. Additional Analyst Notes: - CVE Program Container: References: - http://www.ihssecurity.com/download/advisory/ecomerce-cart.txt - http://marc.info/?l=bugtraq&m=111402179605925&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20200
CVE ID: CVE-2005-1222 State: PUBLISHED Published: 2005-04-22T04:00:00 Last Updated: 2024-08-07T21:44:05.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: cat_for_gen.php in Annuaire Netref 4.2 allows remote attackers to execute arbitrary PHP code by setting the ad_direct parameter to reference cat_for_gen.php, then including the code in the m_for_racine parameter, which is then written to cat_for_gen.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15717 - http://secunia.com/advisories/15040 - http://marc.info/?l=bugtraq&m=111403947305600&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20198
CVE ID: CVE-2005-1223 State: PUBLISHED Published: 2005-04-22T04:00:00 Last Updated: 2024-08-07T21:44:05.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL commands via the Admin_id field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15026 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20174 - http://marc.info/?l=bugtraq&m=111401502007772&w=2 - http://www.securitytracker.com/alerts/2005/Apr/1013762.html
CVE ID: CVE-2005-1224 State: PUBLISHED Published: 2005-04-22T04:00:00 Last Updated: 2024-08-07T21:44:05.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) nChannel parameter to default.asp, cat.asp, or detail.asp, (2) the iChannel parameter to search.asp, default.asp, result.asp, cat.asp, or detail.asp (3) the iCat parameter to cat.asp or detail.asp, (4) the iData parameter to detail.asp or result.asp, the (5) POL_ID, (6) POL_PARENT, (7) POL_CATEGORY, (8) CHA_NAME, or (9) CHA_ID parameters to inc_vote.asp, or the (10) tfm_order or (11) tfm_orderb
RENT, (7) POL_CATEGORY, (8) CHA_NAME, or (9) CHA_ID parameters to inc_vote.asp, or the (10) tfm_order or (11) tfm_orderby parameters to toppages.asp, a different set of vulnerabilities than CVE-2005-1236. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13285 - http://www.securiteam.com/windowsntfocus/5TP0O0AFFQ.html - http://www.securityfocus.com/archive/1/453316/100/0/threaded - http://www.digitalparadox.org/advisories/duppro.txt - http://marc.info/?l=bugtraq&m=111401172901705&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20197 - http://secunia.com/advisories/15031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30671
CVE ID: CVE-2005-1225 State: PUBLISHED Published: 2005-04-22T04:00:00 Last Updated: 2024-08-07T21:44:05.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Coppermine Photo Gallery 1.3.2 allows remote attackers to execute arbitrary SQL commands via the favs parameter to (1) init.inc.php or (2) zipdownload.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111402186304179&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20205 - http://secunia.com/advisories/15004 - http://www.waraxe.us/advisory-42.html
CVE ID: CVE-2005-1226 State: PUBLISHED Published: 2005-04-22T04:00:00 Last Updated: 2024-08-07T21:44:05.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Coppermine Photo Gallery 1.3.2 stores passwords in plaintext, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20206 - http://marc.info/?l=bugtraq&m=111402186304179&w=2 - http://www.waraxe.us/advisory-42.html
CVE ID: CVE-2005-1227 State: PUBLISHED Published: 2005-04-22T04:00:00 Last Updated: 2024-08-07T21:44:05.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHProjekt 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the chatroom text submission form. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15039 - http://www.osvdb.org/15720 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20212 - http://marc.info/?l=bugtraq&m=111402374504496&w=2
CVE ID: CVE-2005-1228 State: PUBLISHED Published: 2005-04-22T04:00:00 Last Updated: 2024-08-07T21:44:05.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrary directories via a .. (dot dot) in the original filename within a compressed file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=305255 - http://www.osvdb.org/15721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20199 - http://secunia.com/advisories/22033 - ht
.osvdb.org/15721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20199 - http://secunia.com/advisories/22033 - http://www.vupen.com/english/advisories/2006/3101 - http://secunia.com/advisories/21253 - http://www.debian.org/security/2005/dsa-752 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101816-1 - http://rhn.redhat.com/errata/RHSA-2005-357.html - http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov/cas/techalerts/TA06-214A.html - http://secunia.com/advisories/15047 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A382 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A170 - https://
oval%3Adef%3A382 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A170 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11057 - http://marc.info/?l=bugtraq&m=111402732406477&w=2 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt - http://secunia.com/advisories/18100 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852
CVE ID: CVE-2005-1229 State: PUBLISHED Published: 2005-04-22T04:00:00 Last Updated: 2024-08-07T21:44:05.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in cpio 2.6 and earlier allows remote attackers to write to arbitrary directories via a .. (dot dot) in a cpio file. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2007:233 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.2/SCOSA-2006.2.txt - http://secunia.com/advisories/27857 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:03.cpio.asc - http://secunia.com/advisories/17123 - http://www.osvdb.org/17
rg/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:03.cpio.asc - http://secunia.com/advisories/17123 - http://www.osvdb.org/17939 - http://secunia.com/advisories/16998 - http://www.debian.org/security/2005/dsa-846 - http://www.ubuntu.com/usn/usn-189-1 - http://www.securityfocus.com/bid/13291 - http://marc.info/?l=bugtraq&m=111403177526312&w=2 - http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html - http://secunia.com/advisories/20117 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20204 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.32/SCOSA-2005.32.txt - http://secunia.com/advisories/18395 - http://secunia.com/advisories/18290
CVE ID: CVE-2005-1230 State: PUBLISHED Published: 2005-04-22T04:00:00 Last Updated: 2024-08-07T21:44:05.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Yawcam 0.2.5 allows remote attackers to read arbitrary files via "..\" (dot dot backslash) sequences in a GET request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15052 - http://www.autistici.org/fdonato/advisory/Yawcam0.2.5-adv.txt - http://marc.info/?l=bugtraq&m=111410564915961&w=2 - http://www.osvdb.org/15732
CVE ID: CVE-2005-1231 State: PUBLISHED Published: 2005-04-24T04:00:00 Last Updated: 2024-08-07T21:44:05.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the NewTerm function in GlossaryModel.php in JAWS 0.4 allows remote attackers to inject arbitrary web script or HTML via the (1) term or (2) description. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/lists/fulldisclosure/2005/Apr/0416.html - http://www.securityfocus.com/bid/13254 - http://www.securiteam.com/unixfocus/5RP0M0AFFS.html
CVE ID: CVE-2005-1232 State: PUBLISHED Published: 2005-04-24T04:00:00 Last Updated: 2024-08-07T21:44:05.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Sun Java System Web Proxy Server (aka Sun ONE Proxy Server) 3.6 SP6 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/82356 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57763-1
CVE ID: CVE-2005-1233 State: PUBLISHED Published: 2005-04-24T04:00:00 Last Updated: 2024-08-07T21:44:06.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary web script or HTML via the (1) dir or (2) file parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/0370 - http://www.securityfocus.com/bid/13276 - http://www.securityfocus.com/bid/13282 - http://www.snkenjoi.com/secadv/secadv7.txt - http://securitytracker.com/id?1013756 - http://secunia.com/advisories/15027 - https://exchange.xforce.ibmcloud.
v7.txt - http://securitytracker.com/id?1013756 - http://secunia.com/advisories/15027 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20169 - http://www.osvdb.org/15697
CVE ID: CVE-2005-1234 State: PUBLISHED Published: 2005-04-24T04:00:00 Last Updated: 2024-08-07T21:44:05.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via the (1) u parameter to auction_rating.php or (2) ar parameter to action_offer.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.snkenjoi.com/secadv/secadv9.txt - http://www.securityfocus.com/archive/1/441190/100/0/threaded - http://www.osvdb.org/15704 - http://www.securityfocus.com/bid/13283 - http://www.osvdb.org/15705 - http://www.phpbb-auction.com/sutra5600.html - http://secunia
.securityfocus.com/bid/13283 - http://www.osvdb.org/15705 - http://www.phpbb-auction.com/sutra5600.html - http://secunia.com/advisories/15029 - http://www.aria-security.net/advisory/phpauction.txt - http://securitytracker.com/id?1013779 - http://www.securityfocus.com/bid/13284 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20203
CVE ID: CVE-2005-1235 State: PUBLISHED Published: 2005-04-24T04:00:00 Last Updated: 2024-08-07T21:44:06.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: auction_my_auctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain sensitive information via an invalid mode parameter, which leaks the full path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15029 - http://securitytracker.com/id?1013779 - http://www.osvdb.org/15706 - http://www.snkenjoi.com/secadv/secadv9.txt - http://www.phpbb-auction.com/sutra5600.html
CVE ID: CVE-2005-1236 State: PUBLISHED Published: 2005-04-24T04:00:00 Last Updated: 2024-08-07T21:44:05.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrary SQL commands via the (1) iChannel parameter to channel.asp or search.asp, (2) iData parameter to detail.asp or inc_rating.asp, (3) iCat parameter to detail.asp or type.asp, (4) DAT_PARENT parameter to inc_poll_voting.asp, or (5) iRate parameter to inc_rating.asp, a different set of vulnerabilities than CVE-2005-1224. Additional Analyst Notes: - CVE Program Container: References: - http://www.digitalparadox.
bilities than CVE-2005-1224. Additional Analyst Notes: - CVE Program Container: References: - http://www.digitalparadox.org/advisories/dup.txt - http://secunia.com/advisories/15044 - http://www.securityfocus.com/bid/13288
CVE ID: CVE-2005-1237 State: PUBLISHED Published: 2005-04-24T04:00:00 Last Updated: 2024-08-07T21:44:06.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in FlexPHPNews 0.0.3 allows remote attackers to execute arbitrary SQL commands via the newsid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15715 - https://www.exploit-db.com/exploits/3631 - http://www.securityfocus.com/bid/13297 - http://secunia.com/advisories/14905 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33362 - http://www.attrition.org/pipermail/vim/2007-April/001506.html - http://www.vupen.com/english/advisories/2005/0
s/33362 - http://www.attrition.org/pipermail/vim/2007-April/001506.html - http://www.vupen.com/english/advisories/2005/0373 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20214 - http://www.securityfocus.com/bid/23247
CVE ID: CVE-2005-1238 State: PUBLISHED Published: 2005-04-24T04:00:00 Last Updated: 2024-08-07T21:44:05.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/396628 - http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/20260
CVE ID: CVE-2005-1239 State: PUBLISHED Published: 2005-04-24T04:00:00 Last Updated: 2024-08-07T21:44:05.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the third party tool from Raz-Lee, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13310 - http://www.securityfocus.com/archive/1/396628 - http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf - https://exchange.xforce.ibmcloud.com/vulnerabiliti
com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/20260
CVE ID: CVE-2005-1240 State: PUBLISHED Published: 2005-04-24T04:00:00 Last Updated: 2024-08-07T21:44:05.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the third party tool from Castlehill, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/396628 - http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/20260
CVE ID: CVE-2005-1241 State: PUBLISHED Published: 2005-04-24T04:00:00 Last Updated: 2024-08-07T21:44:05.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the third party tool from Powertech, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/396628 - http://www.securityfocus.com/bid/13312 - http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf - https://exchange.xforce.ibmcloud.com/vulnerabili
a.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/20260
CVE ID: CVE-2005-1242 State: PUBLISHED Published: 2005-04-24T04:00:00 Last Updated: 2024-08-07T21:44:05.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the third party tool from Bsafe, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/396628 - http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/20260
CVE ID: CVE-2005-1243 State: PUBLISHED Published: 2005-04-24T04:00:00 Last Updated: 2024-08-07T21:44:05.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the third party tool from SafeStone, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/396628 - http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/20260
CVE ID: CVE-2005-1244 State: PUBLISHED Published: 2005-04-24T04:00:00 Last Updated: 2024-08-07T21:44:05.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the third party tool from NetIQ, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request. NOTE: the vendor has disputed this issue, saying that "neither NetIQ Security Manager nor our iSeries Security Solutions are vulnerable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/396628 - http://www.osvdb.org/15791 - http://www.vene
am Container: References: - http://www.securityfocus.com/archive/1/396628 - http://www.osvdb.org/15791 - http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf - http://securitytracker.com/id?1013810 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20260