Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-1729 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T21:59:24.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell eDirectory 8.7.3 allows remote attackers to cause a denial of service (application crash) via a URL containing an MS-DOS device name such as AUX, CON, PRN, COM1, or LPT1. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014177 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097766.htm - http://www.cirt.dk/advisories/cirt-33-advisory.pdf - http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034536.html - http://secunia.com/advisories/15676
CVE ID: CVE-2005-1730 State: PUBLISHED Published: 2007-03-03T23:00:00 Last Updated: 2024-08-07T21:59:24.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in the OpenSSL ASN.1 parser, as used in Novell iManager 2.0.2, allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted packets, as demonstrated by "OpenSSL ASN.1 brute forcer." NOTE: this issue might overlap CVE-2004-0079, CVE-2004-0081, or CVE-2004-0112. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/0744 - http://www.cirt.dk/advisories/cirt-32-advisory.pdf - http://www.securityfocus.com/bid/8732 - http:
dvisories/2005/0744 - http://www.cirt.dk/advisories/cirt-32-advisory.pdf - http://www.securityfocus.com/bid/8732 - http://www.securityfocus.com/data/vulnerabilities/exploits/ASN.1-Brute.c
CVE ID: CVE-2005-1731 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:16:02 Description: No description available.
CVE ID: CVE-2005-1732 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cookie Cart allows remote attackers to read the Order Notification list via the testmycgi and path parameters to testmy.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15448 - http://securitytracker.com/id?1014026 - http://www.soulblack.com.ar/repo/papers/cookiec_advisory.txt - http://marc.info/?l=bugtraq&m=111686721022831&w=2
CVE ID: CVE-2005-1733 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cookie Cart stores the password file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and encrypted passwords via a direct request to passwd.txt. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014026 - http://www.soulblack.com.ar/repo/papers/cookiec_advisory.txt - http://marc.info/?l=bugtraq&m=111686721022831&w=2
CVE ID: CVE-2005-1734 State: PUBLISHED Published: 2005-05-24T04:00:00Z Last Updated: 2024-09-16T18:49:26.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PROMS before 0.11 allow remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013992 - http://projects.electricmonk.nl/proms.php?action=ReleaseOverview&project_id=2&release_id=91 - http://projects.electricmonk.nl//files/PROMS/proms-0.11.tar.gz
CVE ID: CVE-2005-1735 State: PUBLISHED Published: 2005-05-24T04:00:00Z Last Updated: 2024-09-16T23:00:55.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PROMS before 0.11 allow remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013992 - http://projects.electricmonk.nl/proms.php?action=ReleaseOverview&project_id=2&release_id=91 - http://projects.electricmonk.nl//files/PROMS/proms-0.11.tar.gz
CVE ID: CVE-2005-1736 State: PUBLISHED Published: 2005-05-24T04:00:00Z Last Updated: 2024-09-16T17:38:04.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: PROMS 0.11 does not properly handle "certain combinations of rights," which gives more rights to users than intended. Additional Analyst Notes: - CVE Program Container: References: - http://projects.electricmonk.nl/proms.php?action=ReleaseOverview&project_id=2&release_id=91 - http://projects.electricmonk.nl//files/PROMS/proms-0.11.tar.gz
CVE ID: CVE-2005-1737 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unknown vulnerabilities in PROMS 0.11 allow "non-authorized users" to (1) view or modify the project member list or (2) modify the todos list. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013992 - http://projects.electricmonk.nl/proms.php?action=ReleaseOverview&project_id=2&release_id=91 - http://projects.electricmonk.nl//files/PROMS/proms-0.11.tar.gz
CVE ID: CVE-2005-1738 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the logPrintBadfile function in delbadfiles.c Iron Bars SHell (ibsh) before 0.3d allows users to "access files outside the home directory" and possibly execute arbitrary code via certain inputs that are not properly handled in a syslog call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13720 - http://sourceforge.net/project/shownotes.php?release_id=329340 - http://secunia.com/advisories/15473
CVE ID: CVE-2005-1739 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XWD Decoder in ImageMagick before 6.2.2.3, and GraphicsMagick before 1.1.6-r1, allows remote attackers to cause a denial of service (infinite loop) via an image with a zero color mask. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16775 - http://security.gentoo.org/glsa/glsa-200505-16.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2005:107 - http://www.securityfocus.com/bid/13705 - http://www.osvdb.org/16774 - http://www.redhat.com/support/errata/RHSA-2005-480.html - ht
.securityfocus.com/bid/13705 - http://www.osvdb.org/16774 - http://www.redhat.com/support/errata/RHSA-2005-480.html - https://usn.ubuntu.com/132-1/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A960 - http://bugs.gentoo.org/show_bug.cgi?id=90423 - http://secunia.com/advisories/15429 - http://secunia.com/advisories/15446 - http://secunia.com/advisories/15453 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11667
CVE ID: CVE-2005-1740 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files to execute arbitrary commands, or overwrite arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13715 - http://security.gentoo.org/glsa/glsa-200505-18.xml - http://www.vupen.com/english/advisories/2005/0598 - http://www.zataz.net/adviso/net-snmp-05182005.txt - http://secunia.com/advisories/15471 - http://sec
isories/2005/0598 - http://www.zataz.net/adviso/net-snmp-05182005.txt - http://secunia.com/advisories/15471 - http://securitytracker.com/id?1014039 - http://www.osvdb.org/16778 - http://secunia.com/advisories/16999 - http://secunia.com/advisories/18635 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11659 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:025 - http://www.redhat.com/support/errata/RHSA-2005-395.html - http://www.redhat.com/support/errata/RHSA-2005-373.html - http://secunia.com/advisories/17135
CVE ID: CVE-2005-1741 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gearbox Software Halo: Combat Evolved 1.6 allows remote attackers to cause a denial of service (infinite loop) via malformed data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13728 - http://securitytracker.com/id?1014067 - http://www.vupen.com/english/advisories/2005/0616 - http://secunia.com/advisories/15501 - http://www.securityfocus.com/archive/1/398833 - http://aluigi.altervista.org/adv/haloloop-adv.txt
CVE ID: CVE-2005-1742 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and WebLogic Express 8.1 SP2 and SP3 allows users with the Monitor security role to "shrink or reset JDBC connection pools." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15486 - http://www.vupen.com/english/advisories/2005/0602 - http://securitytracker.com/id?1014049 - http://dev2dev.bea.com/pub/advisory/125 - http://www.securityfocus.com/bid/13717
CVE ID: CVE-2005-1743 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and WebLogic Express 8.1 through Service Pack 3 and 7.0 through Service Pack 5 does not properly handle when a security provider throws an exception, which may cause WebLogic to use incorrect identity for the thread, or to fail to audit security exceptions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15486 - http://www.vupen.com/english/advisories/2005/0603 - http://securitytracker.com/id?1014049 - http://www.securityfocus.com/bid/13717 - http://dev2dev.bea
visories/2005/0603 - http://securitytracker.com/id?1014049 - http://www.securityfocus.com/bid/13717 - http://dev2dev.bea.com/pub/advisory/126
CVE ID: CVE-2005-1744 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows those users to continue to access the application without having to log in again, which may be in violation of newly changed security constraints or role mappings. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/0604 - http://secunia.com/advisories/15486 - http://dev2dev.bea.com/pub/advisory/127 - http://securitytracker.com/id?10
/0604 - http://secunia.com/advisories/15486 - http://dev2dev.bea.com/pub/advisory/127 - http://securitytracker.com/id?1014049 - http://www.securityfocus.com/bid/13717
CVE ID: CVE-2005-1745 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UserLogin control in BEA WebLogic Portal 8.1 through Service Pack 3 prints the password to standard output when an incorrect login attempt is made, which could make it easier for attackers to guess the correct password. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15486 - http://securitytracker.com/id?1014049 - http://dev2dev.bea.com/pub/advisory/128 - http://www.securityfocus.com/bid/13717 - http://www.vupen.com/english/advisories/2005/0605
CVE ID: CVE-2005-1746 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cluster cookie parsing code in BEA WebLogic Server 7.0 through Service Pack 5 attempts to contact any host or port specified in a cookie, even when it is not in the cluster, which allows remote attackers to cause a denial of service (cluster slowdown) via modified cookies. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15486 - http://www.vupen.com/english/advisories/2005/0606 - http://securitytracker.com/id?1014049 - http://www.securityfocus.com/bid/13717 - http://dev2dev.bea
visories/2005/0606 - http://securitytracker.com/id?1014049 - http://www.securityfocus.com/bid/13717 - http://dev2dev.bea.com/pub/advisory/129
CVE ID: CVE-2005-1747 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 6, allow remote attackers to inject arbitrary web script or HTML, and possibly gain administrative privileges, via the (1) j_username or (2) j_password parameters in the login page (LoginForm.jsp), (3) parameters to the error page in the Administration Console, (4) unknown vectors in the Server Console while the administrator has an active session to obtain the ADMINCONSOLESESSION cook
known vectors in the Server Console while the administrator has an active session to obtain the ADMINCONSOLESESSION cookie, or (5) an alternate vector in the Server Console that does not require an active session but also leaks the username and password. Additional Analyst Notes: - CVE Program Container: References: - http://www.appsecinc.com/resources/alerts/general/BEA-002.html - http://marc.info/?l=bugtraq&m=111695921212456&w=2 - http://dev2dev.bea.com/pub/advisory/130 - http://secunia.com/advisories/15486 - http://marc.info/?l=bugtraq&m=111722380313416&w=2 - http://securitytracker.com/id?1014049 - http://www.vupen.com/english/advisories/2005/0607 - http://marc.info/?l=bugtraq&m=111695844
ritytracker.com/id?1014049 - http://www.vupen.com/english/advisories/2005/0607 - http://marc.info/?l=bugtraq&m=111695844803328&w=2 - http://www.securityfocus.com/bid/13717 - http://www.appsecinc.com/resources/alerts/general/BEA-001.html - http://www.acrossecurity.com/aspr/ASPR-2005-05-24-2-PUB.txt - http://marc.info/?l=bugtraq&m=111722298705561&w=2 - http://www.acrossecurity.com/aspr/ASPR-2005-05-24-1-PUB.txt
CVE ID: CVE-2005-1748 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 5, allows remote anonymous binds, which may allow remote attackers to view user entries or cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15486 - http://www.vupen.com/english/advisories/2005/0608 - http://securitytracker.com/id?1014049 - http://www.securityfocus.com/bid/13717 - http://dev2dev.bea.com/pub/advisory/131
CVE ID: CVE-2005-1749 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in BEA WebLogic Server and WebLogic Express 6.1 Service Pack 4 allows remote attackers to cause a denial of service (CPU consumption from thread looping). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15486 - http://www.vupen.com/english/advisories/2005/0609 - http://www.securityfocus.com/bid/13717 - http://dev2dev.bea.com/pub/advisory/132
CVE ID: CVE-2005-1750 State: PUBLISHED Published: 2005-05-25T04:00:00 Last Updated: 2024-08-07T21:59:24.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.asp in ezdwc NewsletterEz 3.0 allows remote attackers to execute arbitrary SQL commands via the password parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13730 - http://www.under9round.com/nez.txt - http://securitytracker.com/id?1014038 - http://secunia.com/advisories/15469
CVE ID: CVE-2005-1751 State: PUBLISHED Published: 2005-05-25T04:00:00 Last Updated: 2024-08-07T21:59:24.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack on the .shtool.$$ temporary file, a different vulnerability than CVE-2005-1759. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-789 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9639 - http://bugs.gentoo.org/show_bug.cgi?id=93782 - http://secunia.com/advisories/15668 - http://secunia.com/advisories/15496 - http:
ugs.gentoo.org/show_bug.cgi?id=93782 - http://secunia.com/advisories/15668 - http://secunia.com/advisories/15496 - http://securitytracker.com/id?1014059 - http://www.securityfocus.com/bid/13767 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A345 - http://www.zataz.net/adviso/shtool-05252005.txt - http://www.redhat.com/support/errata/RHSA-2005-564.html - http://www.gentoo.org/security/en/glsa/glsa-200506-08.xml - http://marc.info/?l=bugtraq&m=111955937622637&w=2
CVE ID: CVE-2005-1752 State: PUBLISHED Published: 2006-05-21T16:00:00 Last Updated: 2024-08-07T21:59:24.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: viewFile.php in the scm component of Gforge before 4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file_name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13845 - http://www.securityfocus.com/bid/13716 - http://marc.info/?l=bugtraq&m=111695779919830&w=2
CVE ID: CVE-2005-1753 State: PUBLISHED Published: 2006-05-21T16:00:00 Last Updated: 2024-08-07T21:59:24.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: ReadMessage.jsp in JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to view other users' e-mail attachments via a direct request to /mailboxesdir/username@domainname. NOTE: Sun and Apache dispute this issue. Sun states: "The report makes references to source code and files that do not exist in the mentioned products. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111697083812367&w=2 - http://tomcat.apache.org/security-5.html
CVE ID: CVE-2005-1754 State: PUBLISHED Published: 2006-05-21T16:00:00 Last Updated: 2024-08-07T21:59:24.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to read arbitrary files via a full pathname in the argument to the Download parameter. NOTE: Sun and Apache dispute this issue. Sun states: "The report makes references to source code and files that do not exist in the mentioned products. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111697083812367&w=2 - http://www.securityfocus.com/bid/13753 - http://tomcat.apache.org/security-5.html
CVE ID: CVE-2005-1755 State: PUBLISHED Published: 2006-05-21T16:00:00 Last Updated: 2024-08-07T21:59:24.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in poll_vote.php in PHP Poll Creator 1.01 allows remote attackers to execute arbitrary PHP code via the relativer_pfad parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16846 - http://secunia.com/advisories/15510 - http://www.svt.nukleon.us/lab/svadvisory6.txt - http://marc.info/?l=bugtraq&m=111704581329860&w=2 - http://securitytracker.com/id?1014061
CVE ID: CVE-2005-1756 State: PUBLISHED Published: 2005-06-15T04:00:00 Last Updated: 2024-08-07T21:59:24.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the ModWeb agent for Novell NetMail 3.52 before 3.52C allows remote attackers to inject arbitrary web script or HTML via calendar display fields. Additional Analyst Notes: - CVE Program Container: References: - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971588.htm - http://www.vupen.com/english/advisories/2005/0727 - http://www.osvdb.org/17240 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971590.htm - http://secunia.com/advisories/15644 - http://www.securit
/support.novell.com/cgi-bin/search/searchtid.cgi?/2971590.htm - http://secunia.com/advisories/15644 - http://www.securityfocus.com/bid/13926 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971591.htm - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097957.htm
CVE ID: CVE-2005-1757 State: PUBLISHED Published: 2005-06-15T04:00:00 Last Updated: 2024-08-07T21:59:24.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Modweb agent for Novell NetMail 3.52 before 3.52C, when renaming folders, may allow attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971588.htm - http://www.vupen.com/english/advisories/2005/0727 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971590.htm - http://secunia.com/advisories/15644 - http://www.securityfocus.com/bid/13926 - http://support.novell.com/cgi-bin/search/searchtid.c
nia.com/advisories/15644 - http://www.securityfocus.com/bid/13926 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971591.htm - http://www.osvdb.org/17241 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097957.htm
CVE ID: CVE-2005-1758 State: PUBLISHED Published: 2005-06-15T04:00:00 Last Updated: 2024-08-07T21:59:24.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the IMAP command continuation function in Novell NetMail 3.52 before 3.52C may allow remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971588.htm - http://www.vupen.com/english/advisories/2005/0727 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971590.htm - http://www.osvdb.org/17239 - http://secunia.com/advisories/15644 - http://www.securityfocus.com/bid/13926 - http://support.nove
www.osvdb.org/17239 - http://secunia.com/advisories/15644 - http://www.securityfocus.com/bid/13926 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971591.htm - http://www.securityfocus.com/bid/14718 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097957.htm
CVE ID: CVE-2005-1759 State: PUBLISHED Published: 2005-06-26T04:00:00 Last Updated: 2024-08-07T21:59:24.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in shtool 2.0.1 and earlier allows local users to modify or create arbitrary files via a symlink attack on temporary files after they have been created, a different vulnerability than CVE-2005-1751. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=93782 - http://secunia.com/advisories/15668 - http://www.securityfocus.com/bid/13767 - http://www.gentoo.org/security/en/glsa/glsa-200506-08.xml - http://marc.info/?l=bugtraq&m=111955937622637&w=2
CVE ID: CVE-2005-1760 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T21:59:24.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A623 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9522 - http://www.securityfocus.com/bid/13936 - http://secunia.com/advisories/15675 - http://securitytracke