Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-2126 State: PUBLISHED Published: 2005-10-21T04:00:00 Last Updated: 2024-08-07T22:15:37.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4, when "Enable Folder View for FTP Sites" is enabled and the user manually initiates a file transfer, allows user-assisted, remote FTP servers to overwrite files in arbitrary locations via crafted filenames. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/415828 - http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf - http://securitytracker.com/id?1015036 - https://oval.cisecu
tp://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf - http://securitytracker.com/id?1015036 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1284 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-044 - http://secunia.com/advisories/17223 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1416 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1146 - http://secunia.com/advisories/17172 - http://www.securiteam.com/windowsntfocus/6M00I0KEAU.html - http://secunia.com/advisories/17163
CVE ID: CVE-2005-2127 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-07T22:15:37.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, as originally demonstrated using the (1) DDS Library Shape Control (Msdds.dll) COM object, and other objects including (2) Blnmgrps.dll, (3) Ciodm.dll, (4) Comsvcs.dll, (5) Danim.dll, (6) Htmlmarq.ocx, (7) Mdt2dd.dll (as demonstrated using a heap corr
.dll, (3) Ciodm.dll, (4) Comsvcs.dll, (5) Danim.dll, (6) Htmlmarq.ocx, (7) Mdt2dd.dll (as demonstrated using a heap corruption attack with uninitialized memory), (8) Mdt2qd.dll, (9) Mpg4ds32.ax, (10) Msadds32.ax, (11) Msb1esen.dll, (12) Msb1fren.dll, (13) Msb1geen.dll, (14) Msdtctm.dll, (15) Mshtml.dll, (16) Msoeacct.dll, (17) Msosvfbr.dll, (18) Mswcrun.dll, (19) Netshell.dll, (20) Ole2disp.dll, (21) Outllib.dll, (22) Psisdecd.dll, (23) Qdvd.dll, (24) Repodbc.dll, (25) Shdocvw.dll, (26) Shell32.dll, (27) Soa.dll, (28) Srchui.dll, (29) Stobject.dll, (30) Vdt70.dll, (31) Vmhelper.dll, and (32) Wbemads.dll, aka a variant of the "COM Object Instantiation Memory Corruption vulnerability." Additio
lper.dll, and (32) Wbemads.dll, aka a variant of the "COM Object Instantiation Memory Corruption vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/959049 - http://isc.sans.org/diary.php?date=2005-08-18 - http://www.securityfocus.com/archive/1/470690/100/0/threaded - http://securityreason.com/securityalert/72 - http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf - http://www.us-cert.gov/cas/techalerts/TA05-347A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-052 - http://www.securityfocus.com/bid/15061 - http://secunia.com/advisories/17223 - https://oval.cisecurity.org/repository/search
://www.securityfocus.com/bid/15061 - http://secunia.com/advisories/17223 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1454 - http://secunia.com/advisories/16480 - http://www.microsoft.com/technet/security/advisory/906267.mspx - https://exchange.xforce.ibmcloud.com/vulnerabilities/34754 - http://secunia.com/advisories/17172 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1538 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21895 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1535 - http://www.securityfocus.com/bid/14594 - https://oval.cisecurity.org/repository/
on/oval%3Aorg.mitre.oval%3Adef%3A1535 - http://www.securityfocus.com/bid/14594 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1468 - http://secunia.com/advisories/17509 - http://www.us-cert.gov/cas/techalerts/TA06-220A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1464 - http://www.kb.cert.org/vuls/id/740372 - http://www.kb.cert.org/vuls/id/898241 - http://securitytracker.com/id?1014727 - http://www.us-cert.gov/cas/techalerts/TA05-284A.html - http://www.vupen.com/english/advisories/2005/1450 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1155
CVE ID: CVE-2005-2128 State: PUBLISHED Published: 2005-10-11T04:00:00 Last Updated: 2024-08-07T22:15:37.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a crafted strn element with a modified length value. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17160 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1267 - http://www.eeye.com/html/research/advisories/AD20051011a.html - http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf - http://www.kb.cert.org
arch/advisories/AD20051011a.html - http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf - http://www.kb.cert.org/vuls/id/995220 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1149 - http://www.osvdb.org/18822 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-050 - http://secunia.com/advisories/17172 - http://secunia.com/advisories/17509 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1434 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1424 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1231
rg.mitre.oval%3Adef%3A1424 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1231 - http://www.us-cert.gov/cas/techalerts/TA05-284A.html - http://www.securityfocus.com/bid/15063
CVE ID: CVE-2005-2132 State: PUBLISHED Published: 2005-08-03T04:00:00 Last Updated: 2024-08-07T22:15:37.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: RPC portmapper (rpcbind) in SCO UnixWare 7.1.1 m5, 7.1.3 mp5, and 7.1.4 mp2 allows remote attackers or local users to cause a denial of service (lack of response) via multiple invalid portmap requests. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.31/SCOSA-2005.31.txt - http://secunia.com/advisories/16228 - http://marc.info/?l=bugtraq&m=112247187722821&w=2 - http://www.securityfocus.com/bid/14360
CVE ID: CVE-2005-2133 State: REJECTED Published: 2005-07-05T04:00:00 Last Updated: 2005-09-08T09:00:00 Description: No description available.
CVE ID: CVE-2005-2134 State: PUBLISHED Published: 2005-07-05T04:00:00Z Last Updated: 2024-09-17T01:01:35.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) clcs and (2) emuxki drivers in NetBSD 1.6 through 2.0.2 allow local users to cause a denial of service (kernel crash) by using the set-parameters ioctl on an audio device to change the block size and set the pause state to "unpaused" in the same ioctl, which causes a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2005-002.txt.asc
CVE ID: CVE-2005-2135 State: PUBLISHED Published: 2005-07-05T04:00:00Z Last Updated: 2024-09-17T00:46:46.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in verify.asp in EtoShop Dynamic Biz Website Builder (QuickWeb) 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) T1 or (2) T2 parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15818
CVE ID: CVE-2005-2136 State: PUBLISHED Published: 2005-07-05T04:00:00 Last Updated: 2024-08-07T22:15:37.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Raritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set (1) world-readable permissions for /etc/shadow and (2) world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/lists/bugtraq/2005/Jun/0251.html - http://secunia.com/advisories/15853 - http://www.securityfocus.com/bid/14084
CVE ID: CVE-2005-2137 State: PUBLISHED Published: 2005-07-05T04:00:00Z Last Updated: 2024-09-16T20:52:20.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in NateOn Messenger 3.0 allows remote attackers to list arbitrary directories via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15819 - http://www.osvdb.org/17619 - http://www.securityfocus.com/bid/14100
CVE ID: CVE-2005-2138 State: PUBLISHED Published: 2005-07-05T04:00:00Z Last Updated: 2024-09-16T19:45:44.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Comdev eCommerce 3.0 and 3.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the onMouseOver event of an "A" tag in a review message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15865 - http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=64
CVE ID: CVE-2005-2139 State: PUBLISHED Published: 2005-07-05T04:00:00 Last Updated: 2024-08-07T22:15:37.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in user_check.php for Pavsta Auto Site allows remote attackers to execute arbitrary PHP code via the sitepath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014321 - http://www.osvdb.org/17631 - http://secunia.com/advisories/15873 - http://www.vupen.com/english/advisories/2005/0930
CVE ID: CVE-2005-2140 State: PUBLISHED Published: 2005-07-05T04:00:00Z Last Updated: 2024-09-17T03:54:22.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in default.asp for FSboard 2.0 allows remote attackers to read arbitrary files via ".." sequences in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14111
CVE ID: CVE-2005-2141 State: PUBLISHED Published: 2005-07-05T04:00:00 Last Updated: 2024-08-07T22:15:37.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: TCP Chat 1.0 allows remote attackers to cause a denial of service (crash) via a long string to the chat service, possibly triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014371 - http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=65 - http://addict3d.org/index.php?page=viewarticle&type=security&ID=4377
CVE ID: CVE-2005-2142 State: PUBLISHED Published: 2005-07-05T04:00:00Z Last Updated: 2024-09-17T00:41:01.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Golden FTP Server 2.60 allows remote authenticated attackers to list arbitrary directories via a "\.." (backslash dot dot) in an LS (LIST) command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15840
CVE ID: CVE-2005-2143 State: PUBLISHED Published: 2005-07-05T04:00:00Z Last Updated: 2024-09-16T19:30:14.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Front Page allows attackers to cause a denial of service (crash) via a crafted style tag in a web page. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014352 - http://www.freewebs.com/xxosfilexx/HungFPage.html
CVE ID: CVE-2005-2144 State: PUBLISHED Published: 2005-07-05T04:00:00Z Last Updated: 2024-09-16T22:51:57.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prevx Pro 2005 1.0 allows local users to bypass file protection and modify files by using MapViewOfFile to perform memory mapping on the file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15885 - http://securitytracker.com/id?1014346
CVE ID: CVE-2005-2145 State: PUBLISHED Published: 2005-07-05T04:00:00Z Last Updated: 2024-09-16T21:08:09.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel driver in Prevx Pro 2005 1.0 does not verify the source of certain messages, which allows local users to bypass protection by sending certain messages to the driver, as demonstrated by sending an "allow" message to bypass a warning message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15885 - http://securitytracker.com/id?1014346
CVE ID: CVE-2005-2146 State: PUBLISHED Published: 2005-07-05T04:00:00 Last Updated: 2024-08-07T22:15:37.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure permissions when generating the Secure Shell host identification key, which allows local users to access the key and spoof the server. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15894 - http://www.ssh.com/company/newsroom/article/653/
CVE ID: CVE-2005-2147 State: PUBLISHED Published: 2005-07-06T04:00:00Z Last Updated: 2024-09-16T22:03:30.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname in the id parameter to the (1) upload or (2) attachment viewer scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.hardened-php.net/advisory-012005.php - http://secunia.com/advisories/15752 - http://www.securityfocus.com/bid/13990 - http://www.debian.org/security/2005/dsa-739
CVE ID: CVE-2005-2148 State: PUBLISHED Published: 2005-07-06T04:00:00 Last Updated: 2024-08-07T22:15:37.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cacti 0.8.6e and earlier does not perform proper input validation to protect against common attacks, which allows remote attackers to execute arbitrary commands or SQL by sending a legitimate value in a POST request or cookie, then specifying the attack string in the URL, which causes the get_request_var function to return the wrong value in the $_REQUEST variable, which is cleansed while the original malicious $_GET value remains unmodified, as demonstrated in (1) graph_image.php and (2) graph.php. Additional Analyst Notes: -
us $_GET value remains unmodified, as demonstrated in (1) graph_image.php and (2) graph.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.cacti.net/downloads/patches/0.8.6e/cacti-0.8.6f_security.patch - https://exchange.xforce.ibmcloud.com/vulnerabilities/21270 - http://www.hardened-php.net/advisory-032005.php - http://www.securityfocus.com/archive/1/404047/30/30/threaded - http://www.securityfocus.com/archive/1/404054 - http://sourceforge.net/mailarchive/forum.php?forum_id=10360&max_rows=25&style=flat&viewmonth=200507&viewday=1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21266 - http://www.vupen.com/english/advisories/2005/0951 - http://www.debian.o
ange.xforce.ibmcloud.com/vulnerabilities/21266 - http://www.vupen.com/english/advisories/2005/0951 - http://www.debian.org/security/2005/dsa-764 - http://www.securityfocus.com/bid/14128 - http://secunia.com/advisories/15490 - http://securitytracker.com/id?1014361 - http://www.securityfocus.com/bid/14129 - http://www.hardened-php.net/advisory-042005.php
CVE ID: CVE-2005-2149 State: PUBLISHED Published: 2005-07-06T04:00:00 Last Updated: 2024-08-07T22:15:37.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: config.php in Cacti 0.8.6e and earlier allows remote attackers to set the no_http_headers switch, then modify session information to gain privileges and disable the use of addslashes to conduct SQL injection attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.cacti.net/downloads/patches/0.8.6e/cacti-0.8.6f_security.patch - http://www.hardened-php.net/advisory-052005.php - http://www.securityfocus.com/bid/14130 - http://sourceforge.net/mailarchive/forum.php?forum_id=10360&max_rows=25&style=flat&
://www.securityfocus.com/bid/14130 - http://sourceforge.net/mailarchive/forum.php?forum_id=10360&max_rows=25&style=flat&viewmonth=200507&viewday=1 - http://www.vupen.com/english/advisories/2005/0951 - http://www.debian.org/security/2005/dsa-764 - http://securitytracker.com/id?1014361 - http://www.securityfocus.com/archive/1/404040
CVE ID: CVE-2005-2150 State: PUBLISHED Published: 2005-07-11T04:00:00 Last Updated: 2024-08-07T22:15:37.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which allows remote attackers to (1) list Windows services via svcctl or (2) read eventlogs via eventlog. Additional Analyst Notes: - CVE Program Container: References: - http://www.hsc.fr/ressources/presentations/null_sessions/ - http://marc.info/?l=bugtraq&m=112076409813099&w=2 - http://securitytracker.com/id?1014417 - http://www.securityfocus.com/bid/14177 - https://exchange.
112076409813099&w=2 - http://securitytracker.com/id?1014417 - http://www.securityfocus.com/bid/14177 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21286 - http://www.securityfocus.com/bid/14178 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21288 - http://secunia.com/advisories/14189
CVE ID: CVE-2005-2151 State: PUBLISHED Published: 2005-07-06T04:00:00 Last Updated: 2024-08-07T22:15:37.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy Framework (SPF) records, which could allow attackers to cause memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15901 - http://www.courier-mta.org/?changelog.html
CVE ID: CVE-2005-2152 State: PUBLISHED Published: 2005-07-06T04:00:00 Last Updated: 2024-08-07T22:15:37.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Geeklog before 1.3.11 allows remote attackers to execute arbitrary SQL commands via user comments for an article. Additional Analyst Notes: - CVE Program Container: References: - http://www.geeklog.net/article.php/geeklog-1.3.11sr1 - http://secunia.com/advisories/15914 - http://www.hardened-php.net/advisory-062005.php - http://securitytracker.com/id?1014381
CVE ID: CVE-2005-2153 State: PUBLISHED Published: 2005-07-06T04:00:00Z Last Updated: 2024-09-17T03:32:54.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote attackers to execute arbitrary SQL commands via the ticket variable. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014373 - http://www.securityfocus.com/bid/14127 - http://seclists.org/lists/bugtraq/2005/Jul/0009.html
CVE ID: CVE-2005-2154 State: PUBLISHED Published: 2005-07-06T04:00:00Z Last Updated: 2024-09-16T22:40:05.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta and earlier allows remote attackers to include and possibly execute arbitrary local files via the inc parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014373 - http://www.securityfocus.com/bid/14127 - http://seclists.org/lists/bugtraq/2005/Jul/0009.html
CVE ID: CVE-2005-2155 State: PUBLISHED Published: 2005-07-06T04:00:00Z Last Updated: 2024-09-17T03:37:30.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote attackers to execute arbitrary code via the serverPath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15893
CVE ID: CVE-2005-2156 State: PUBLISHED Published: 2005-07-06T04:00:00 Last Updated: 2024-08-07T22:15:37.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the prevnext parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14133 - http://sourceforge.net/project/shownotes.php?group_id=66322&release_id=339317
CVE ID: CVE-2005-2157 State: PUBLISHED Published: 2005-07-06T04:00:00 Last Updated: 2024-08-07T22:15:37.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in survey.inc.php for nabopoll 1.2 allows remote attackers to execute arbitrary PHP code via the path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15910 - http://www.vupen.com/english/advisories/2005/0954 - http://securitytracker.com/id?1014355
CVE ID: CVE-2005-2158 State: PUBLISHED Published: 2005-07-06T04:00:00 Last Updated: 2024-08-07T22:15:37.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: A regression error in the embedded HSQLDB in JBoss jBPM 2.0 allows remote attackers to execute arbitrary comands, a re-introduction of a vulnerability that was originally identified by CVE-2003-0845. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112051548512338&w=2 - http://www.illegalaccess.org/java/jboss.php
CVE ID: CVE-2005-2159 State: PUBLISHED Published: 2005-07-06T04:00:00 Last Updated: 2024-08-07T22:15:37.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: mshftp.dll in PlanetDNS PlanetFileServer 2.0.1.3 allows remote attackers to cause a denial of service (application crash) via a long request. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112051398718830&w=2 - http://www.securityfocus.com/bid/14138
CVE ID: CVE-2005-2160 State: PUBLISHED Published: 2005-07-06T04:00:00 Last Updated: 2024-08-07T22:15:37.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: IMail stores usernames and passwords in cleartext in a cookie, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112060187204457&w=2
CVE ID: CVE-2005-2161 State: PUBLISHED Published: 2005-07-06T04:00:00 Last Updated: 2024-08-07T22:15:37.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpBB 2.0.16 allows remote attackers to inject arbitrary web script or HTML via nested [url] tags. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112059951605939&w=2 - http://www.debian.org/security/2005/dsa-768 - http://www.securitylab.ru/55612.html