Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-3144 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T23:01:58.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service via long HTTP headers. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=359700 - http://www.securityfocus.com/bid/14972 - http://secunia.com/advisories/16975
CVE ID: CVE-2005-3145 State: PUBLISHED Published: 2005-10-05T04:00:00Z Last Updated: 2024-09-16T20:17:02.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service (resource consumption) by connecting to sblim-sfcb but not sending any data. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=359700 - http://secunia.com/advisories/16975
CVE ID: CVE-2005-3146 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T23:01:57.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434 - http://www.us.debian.org/security/2006/dsa-1022 - http://sourceforge.net/project/shownotes.php?release_id=352676 - http://secunia.com/advisories/19489 - http://www.securityfocus.com/bid/14985 - http://secunia.com/advisories/17025 - http://www.securityfocus.com/advisories
- http://www.securityfocus.com/bid/14985 - http://secunia.com/advisories/17025 - http://www.securityfocus.com/advisories/9384
CVE ID: CVE-2005-3147 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T23:01:57.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434 - http://www.us.debian.org/security/2006/dsa-1022 - http://sourceforge.net/project/shownotes.php?release_id=352676 - http://secunia.com/advisories/19489 - http://secunia.com/advisories/17025 - http://www.securityfocus.com/advisories/9384
CVE ID: CVE-2005-3148 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T23:01:57.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434 - http://www.us.debian.org/security/2006/dsa-1022 - http://sourceforge.net/project/shownotes.php?release_id=352676 - http://secunia.com/advisories/19489 - http://secunia.com/advis
sourceforge.net/project/shownotes.php?release_id=352676 - http://secunia.com/advisories/19489 - http://secunia.com/advisories/17025 - http://www.securityfocus.com/advisories/9384
CVE ID: CVE-2005-3149 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T23:01:59.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Uim 0.4.x before 0.4.9.1 and 0.5.0 and earlier does not properly handle the LIBUIM_VANILLA environment variable when a suid or sgid application is linked to libuim, such as immodule for Qt, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://lists.freedesktop.org/pipermail/uim/2005-September/001347.html - http://www.securityfocus.com/bid/15007 - http://www.vupen.com/english/advisories/2005/1947 - http://lists.freedesktop.org/pipermail/uim/2005-September/001346.ht
http://www.vupen.com/english/advisories/2005/1947 - http://lists.freedesktop.org/pipermail/uim/2005-September/001346.html - http://securitytracker.com/id?1015002 - http://secunia.com/advisories/17058 - http://secunia.com/advisories/17572 - http://www.vupen.com/english/advisories/2005/1946 - http://www.debian.org/security/2005/dsa-895 - http://www.gentoo.org/security/en/glsa/glsa-200510-03.xml - http://secunia.com/advisories/17043 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=331620
CVE ID: CVE-2005-3150 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T23:01:59.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the Log_Flush function in Weex 2.6.1.5, 2.6.1, and possibly other versions allows remote FTP servers to execute arbitrary code via format strings in filenames. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17081 - http://secunia.com/advisories/17028 - http://secunia.com/advisories/17112 - http://www.debian.org/security/2005/dsa-855 - http://www.gentoo.org/security/en/glsa/glsa-200510-09.xml - http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/86833 -
5 - http://www.gentoo.org/security/en/glsa/glsa-200510-09.xml - http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/86833 - http://www.securityfocus.com/bid/14999
CVE ID: CVE-2005-3151 State: PUBLISHED Published: 2005-10-05T04:00:00Z Last Updated: 2024-09-17T03:27:34.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in blenderplay in Blender Player 2.37a allows attackers to execute arbitrary code via a long command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17013 - http://www.securiteam.com/exploits/5BP0T2KGVA.html - http://www.securityfocus.com/bid/14983
CVE ID: CVE-2005-3152 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T23:01:57.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the redir parameter to (1) cart.php or (2) index.php, or (3) the searchStr parameter in a viewCat action to index.php. Note: vectors (1) and (2) were later reported to affect 3.0.7-pl1. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24177 - http://bugs.cubecart.com/?do=details&id=363 - http://bugs.cubecart.com/?do=details&i
bmcloud.com/vulnerabilities/24177 - http://bugs.cubecart.com/?do=details&id=363 - http://bugs.cubecart.com/?do=details&id=459 - http://lostmon.blogspot.com/2005/09/cubecart-303-multiple-variable-cross.html - http://securitytracker.com/id?1014984 - http://securityreason.com/securityalert/35 - http://lostmon.blogspot.com/2006/01/cubecart-307-pl1-indexphp-multiple.html - http://www.securityfocus.com/bid/14962
CVE ID: CVE-2005-3153 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T23:01:57.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: login.php in myBloggie 2.1.3 beta and earlier allows remote attackers to bypass a whitelist regular expression and conduct SQL injection attacks via a username parameter with SQL after a null character, which causes the whitelist check to succeed but injects the SQL into a query string, a different vulnerability than CVE-2005-2838. NOTE: it is possible that this is actually a bug in PHP code, in which case this should not be treated as a myBloggie vulnerability. Additional Analyst Notes: - CVE Program Container: References: -
is should not be treated as a myBloggie vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014995 - http://rgod.altervista.org/mybloggie213b.html - http://marc.info/?l=bugtraq&m=112818273307878&w=2 - http://securityreason.com/securityalert/42 - http://www.osvdb.org/19935 - http://mywebland.com/forums/showtopic.php?t=399
CVE ID: CVE-2005-3154 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T23:01:57.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the logging functionality in BitDefender AntiVirus 7.2 through 9 allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in file or directory name. Additional Analyst Notes: - CVE Program Container: References: - http://kb.bitdefender.com/KB261-en--Filename-Format-String-Vulnerability.html - http://secunia.com/advisories/16991 - http://securityreason.com/securityalert/45 - http://www.securityfocus.com/bid/14968 - http://shadock.net/sec
ies/16991 - http://securityreason.com/securityalert/45 - http://www.securityfocus.com/bid/14968 - http://shadock.net/secubox/BitDefenderLoggingFunc.html
CVE ID: CVE-2005-3155 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T23:01:58.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15006 - http://securitytracker.com/id?1014999 - http://secunia.com/advisories/17010 - http://www.mailenable.com/hotfix/
CVE ID: CVE-2005-3156 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T23:01:58.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in printfaq.php in EasyGuppy (Guppy for Windows) 4.5.4 and 4.5.5 allows remote attackers to read arbitrary files via ".." sequences in the pg parameter, which is cleansed for XSS but not directory traversal. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112812059917394&w=2
CVE ID: CVE-2005-3157 State: PUBLISHED Published: 2005-10-06T04:00:00 Last Updated: 2024-08-07T23:01:57.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to execute arbitrary SQL commands via the msg_send parameter, a different vulnerability than CVE-2005-3158 and CVE-2005-3159. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16994 - http://rgod.altervista.org/phpfusion600109.html - http://marc.info/?l=bugtraq&m=112793982604963&w=2 - http://www.php-fusion.co.uk/news.php?readmore=259
CVE ID: CVE-2005-3158 State: PUBLISHED Published: 2005-10-06T04:00:00 Last Updated: 2024-08-07T23:01:58.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in messages.php in PHP-Fusion 6.00.106 and 6.00.107 allows remote attackers to execute arbitrary SQL commands via the (1) pm_email_notify and (2) pm_save_sent parameters, a different vulnerability than CVE-2005-3157 and CVE-2005-3159. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112801702000944&w=2 - http://www.gnucitizen.org/writings/php-fusion-messages.php-sql-injection-vulnerability.xhtml
CVE ID: CVE-2005-3159 State: PUBLISHED Published: 2005-10-06T04:00:00 Last Updated: 2024-08-07T23:01:57.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in messages.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the msg_view parameter, a different vulnerability than CVE-2005-3157 and CVE-2005-3158. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14489 - http://www.osvdb.org/18708 - http://marc.info/?l=bugtraq&m=112811077320676&w=2 - http://www.s4a.cc/forum/archive/index.php/t-3585.html
CVE ID: CVE-2005-3160 State: PUBLISHED Published: 2005-10-06T04:00:00 Last Updated: 2024-08-07T23:01:58.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in photogallery.php in PHP-Fusion allow remote attackers to execute arbitrary SQL commands via the (1) album and (2) photo parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17048 - http://www.osvdb.org/19841
CVE ID: CVE-2005-3161 State: PUBLISHED Published: 2005-10-06T04:00:00 Last Updated: 2024-08-07T23:01:58.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHP-Fusion before 6.00.110 allow remote attackers to execute arbitrary SQL commands via (1) the activate parameter in register.php and (2) the cat_id parameter in faq.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/19867 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22532 - http://www.osvdb.org/19866 - http://www.securityfocus.com/bid/15018 - http://secunia.com/secunia_research/2005-52/advisory/ - http://www.php-fusion.co.uk/news.php?
urityfocus.com/bid/15018 - http://secunia.com/secunia_research/2005-52/advisory/ - http://www.php-fusion.co.uk/news.php?readmore=261 - http://securityreason.com/securityalert/54 - http://secunia.com/advisories/17055
CVE ID: CVE-2005-3162 State: REJECTED Published: 2005-10-06T04:00:00 Last Updated: 2005-11-02T10:00:00 Description: No description available.
CVE ID: CVE-2005-3163 State: PUBLISHED Published: 2005-10-06T04:00:00Z Last Updated: 2024-09-16T18:59:27.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Polipo 0.9.8 and earlier allows attackers to read files outside of the web root. Additional Analyst Notes: - CVE Program Container: References: - http://www.pps.jussieu.fr/~jch/software/polipo/CHANGES.text - http://www.securityfocus.com/bid/14970
CVE ID: CVE-2005-3164 State: PUBLISHED Published: 2005-10-06T04:00:00 Last Updated: 2024-08-07T23:01:58.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4.1.0 through 4.1.36, as used in Hitachi Cosminexus Application Server and standalone, does not properly handle when a connection is broken before request body data is sent in a POST request, which can lead to an information leak when "unsuitable request body data" is used for a different request, possibly related to Java Servlet pages. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://secunia.com/advisor
lyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://secunia.com/advisories/30908 - http://support.apple.com/kb/HT2163 - http://www.securityfocus.com/bid/15003 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1 - http://www.vupen.com/english/advisories/2008/1981/references - http://secunia.com/advisories/30899 - http://www.vupen.com/english/advisories/2008/1979/references - http://secunia.com/advisories/17019 - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://secunia.com/advisories/30802 - http://jvn.jp/jp/JVN%2379314822/index.html - http://www.hitachi-support.com/security_e/vuls_e/HS05-019_e/0
ories/30802 - http://jvn.jp/jp/JVN%2379314822/index.html - http://www.hitachi-support.com/security_e/vuls_e/HS05-019_e/01-e.html - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2005-3165 State: PUBLISHED Published: 2005-10-06T04:00:00Z Last Updated: 2024-09-17T01:31:24.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrary web script or HTML via (1) <math> tags or (2) Extension or <nowiki> sections that "bypass HTML style attribute restrictions" that are intended to protect against XSS vulnerabilities in Internet Explorer clients. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=352777 - http://secunia.com/advisories/16932 - http://lwn.net/Articles/153906
forge.net/project/shownotes.php?release_id=352777 - http://secunia.com/advisories/16932 - http://lwn.net/Articles/153906/
CVE ID: CVE-2005-3166 State: PUBLISHED Published: 2005-10-06T04:00:00 Last Updated: 2024-08-07T23:01:59.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in "edit submission handling" for MediaWiki 1.4.x before 1.4.10 and 1.3.x before 1.3.16 allows remote attackers to cause a denial of service (corruption of the previous submission) via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_22_sr.html - http://www.osvdb.org/19956 - http://sourceforge.net/project/shownotes.php?release_id=358163
CVE ID: CVE-2005-3167 State: PUBLISHED Published: 2005-10-06T04:00:00 Last Updated: 2024-08-07T23:01:58.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in MediaWiki before 1.4.11 does not properly remove certain CSS inputs (HTML inline style attributes) that are processed as active content by Internet Explorer, which allows remote attackers to conduct cross-site scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15024 - http://sourceforge.net/project/shownotes.php?release_id=361505 - http://secunia.com/advisories/17074 - http://www.novell.com/linux/security/advisories/20
ownotes.php?release_id=361505 - http://secunia.com/advisories/17074 - http://www.novell.com/linux/security/advisories/2005_27_sr.html
CVE ID: CVE-2005-3168 State: PUBLISHED Published: 2005-10-06T04:00:00Z Last Updated: 2024-09-16T23:11:30.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SECEDIT command on Microsoft Windows 2000 before Update Rollup 1 for SP4, when using a security template to set Access Control Lists (ACLs) on folders, does not apply ACLs on folders that are listed after a long folder entry, which could result in less secure permissions than specified by the template. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/kb/834424/ - http://support.microsoft.com/kb/900345
CVE ID: CVE-2005-3169 State: PUBLISHED Published: 2005-10-06T04:00:00Z Last Updated: 2024-09-16T19:21:08.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 2000 before Update Rollup 1 for SP4, when the "audit directory service access" policy is enabled, does not record a 565 event message for File Delete Child operations on an Active Directory object in the security event log, which could allow attackers to conduct unauthorized activities without detection. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/kb/833873 - http://support.microsoft.com/kb/900345
CVE ID: CVE-2005-3170 State: PUBLISHED Published: 2005-10-06T04:00:00Z Last Updated: 2024-12-05T20:28:56.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets Layer (LDAPS) even when the Certificate Authority (CA) is not trusted, which could allow attackers to trick users into believing that they are accessing a trusted site. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://support.microsoft.com/kb/883639 - http://support.microsoft.com/kb/900345
CVE ID: CVE-2005-3171 State: PUBLISHED Published: 2005-10-06T04:00:00Z Last Updated: 2024-09-16T18:03:41.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 2000 before Update Rollup 1 for SP4 records Event ID 1704 to indicate that Group Policy security settings were successfully updated, even when the processing fails such as when Ntuser.pol cannot be accessed, which could cause system administrators to believe that the system is compliant with the specified settings. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/kb/884559 - http://support.microsoft.com/kb/900345
CVE ID: CVE-2005-3172 State: PUBLISHED Published: 2005-10-06T04:00:00Z Last Updated: 2024-09-17T00:50:51.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WideCharToMultiByte function in Microsoft Windows 2000 before Update Rollup 1 for SP4 does not properly convert strings with Japanese composite characters in the last character, which could prevent the string from being null terminated and lead to data corruption or enable buffer overflow attacks. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/kb/824867 - http://support.microsoft.com/kb/900345
CVE ID: CVE-2005-3173 State: PUBLISHED Published: 2005-10-06T04:00:00Z Last Updated: 2024-09-17T03:48:25.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 2000 before Update Rollup 1 for SP4 does not apply group policies if the user logs on using UPN credentials with a trailing dot, which prevents Windows 2000 from finding the correct domain controller and could allow the user to bypass intended restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/kb/821102 - http://support.microsoft.com/kb/900345
CVE ID: CVE-2005-3174 State: PUBLISHED Published: 2005-10-06T04:00:00Z Last Updated: 2024-09-16T19:40:22.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 2000 before Update Rollup 1 for SP4 allows users to log on to the domain, even when their password has expired, if the fully qualified domain name (FQDN) is 8 characters long. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/kb/830847 - http://support.microsoft.com/kb/900345
CVE ID: CVE-2005-3175 State: PUBLISHED Published: 2005-10-06T04:00:00Z Last Updated: 2024-09-16T18:33:44.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 2000 before Update Rollup 1 for SP4 allows a local administrator to unlock a computer even if it has been locked by a domain administrator, which allows the local administrator to access the session as the domain administrator. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/kb/842742 - http://support.microsoft.com/kb/900345
CVE ID: CVE-2005-3176 State: PUBLISHED Published: 2005-10-06T04:00:00Z Last Updated: 2024-09-17T00:40:35.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services client in a security log event if the client connects successfully, which could make it easier for attackers to escape detection. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/kb/891076 - http://support.microsoft.com/kb/900345
CVE ID: CVE-2005-3177 State: PUBLISHED Published: 2005-10-06T04:00:00Z Last Updated: 2024-09-16T17:03:46.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: CHKDSK in Microsoft Windows 2000 before Update Rollup 1 for SP4, Windows XP, and Windows Server 2003, when running in fix mode, does not properly handle security descriptors if the master file table contains a large number of files or if the descriptors do not satisfy certain NTFS conventions, which could cause ACLs for some files to be reverted to less secure defaults, or cause security descriptors to be removed. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/kb/831374 - http://
moved. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/kb/831374 - http://support.microsoft.com/kb/831375 - http://support.microsoft.com/kb/900345