Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tyfocus.com/bid/19624 - http://secunia.com/advisories/21592 - http://www.securityfocus.com/archive/1/443637/100/0/threaded - http://www.osvdb.org/28041 - http://securityreason.com/securityalert/1442 - http://www.osvdb.org/28042
CVE ID: CVE-2006-4294 State: PUBLISHED Published: 2006-09-09T00:00:00 Last Updated: 2024-08-07T19:06:07.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in viewfile in TWiki 4.0.0 through 4.0.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3524 - http://www.securityfocus.com/bid/19907 - http://securitytracker.com/id?1016805 - http://secunia.com/advisories/21829 - http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2006-4294
CVE ID: CVE-2006-4295 State: PUBLISHED Published: 2006-08-23T01:00:00 Last Updated: 2024-08-07T19:06:06.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ascan_6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script or HTML via the email parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2006/08/panda-activescan-xss-vulnerability.html - http://www.securityfocus.com/bid/19471 - http://www.osvdb.org/29147 - http://securitytracker.com/id?1016696
CVE ID: CVE-2006-4296 State: PUBLISHED Published: 2006-08-23T01:00:00 Last Updated: 2024-08-07T19:06:06.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in classes/Tar.php in bigAPE-Backup component (com_babackup) for Mambo 1.1 allows remote attackers to include arbitrary files via the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28468 - http://www.securityfocus.com/bid/19616 - https://www.exploit-db.com/exploits/2225 - http://secunia.com/advisories/21574 - http://www.vupen.com/english/advisories/2006/3
/www.exploit-db.com/exploits/2225 - http://secunia.com/advisories/21574 - http://www.vupen.com/english/advisories/2006/3340
CVE ID: CVE-2006-4297 State: PUBLISHED Published: 2006-08-23T01:00:00 Last Updated: 2024-08-07T19:06:06.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in shopping_cart.php in osCommerce before 2.2 Milestone 2 060817 allows remote attackers to execute arbitrary SQL commands via id array parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28434 - http://securitytracker.com/id?1016719 - http://www.securityfocus.com/archive/1/444780/100/0/threaded - http://www.gulftech.org/?node=research&article_id=00110-08172006 - http://www.securityfocus.com/bid/19774 - http://forums.oscom
www.gulftech.org/?node=research&article_id=00110-08172006 - http://www.securityfocus.com/bid/19774 - http://forums.oscommerce.com/index.php?showtopic=223556&pid=918371 - http://www.securityfocus.com/bid/19644
CVE ID: CVE-2006-4298 State: PUBLISHED Published: 2006-08-23T01:00:00 Last Updated: 2024-08-07T19:06:07.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in cache.php in osCommerce before 2.2 Milestone 2 060817 allow remote attackers to determine existence of arbitrary files and disclose the installation path via a .. (dot dot) in unspecified parameters in the (1) tep_cache_also_purchased, (2) tep_cache_manufacturers_box, and (3) tep_cache_categories_box functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.gulftech.org/?node=research&article_id=00110-08172006 - http://forums.oscommerce.com/index.php?
References: - http://www.gulftech.org/?node=research&article_id=00110-08172006 - http://forums.oscommerce.com/index.php?showtopic=223556&pid=918371 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28435
CVE ID: CVE-2006-4299 State: PUBLISHED Published: 2006-08-23T01:00:00 Last Updated: 2024-08-07T19:06:06.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in tiki-searchindex.php in TikiWiki 1.9.4 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19654 - http://secunia.com/advisories/22100 - http://www.vupen.com/english/advisories/2006/3351 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
sories/22100 - http://www.vupen.com/english/advisories/2006/3351 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28498 - http://security.gentoo.org/glsa/glsa-200609-16.xml - http://secunia.com/advisories/21536 - http://www.osvdb.org/28071
CVE ID: CVE-2006-4300 State: PUBLISHED Published: 2006-08-23T01:00:00 Last Updated: 2024-08-07T19:06:07.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/443923/100/0/threaded - https://www.exploit-db.com/exploits/2228 - http://securityreason.com/securityalert/1440 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28470 - http://www.securityfocus.com/bid/19609/info - https://www.exploit-db.com/exploits/2232 - http://sec
nerabilities/28470 - http://www.securityfocus.com/bid/19609/info - https://www.exploit-db.com/exploits/2232 - http://secunia.com/advisories/18488/
CVE ID: CVE-2006-4301 State: PUBLISHED Published: 2006-08-23T01:00:00 Last Updated: 2024-08-07T19:06:07.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple DirectX Media Image DirectX Transforms ActiveX COM Objects from (a) dxtmsft.dll and (b) dxtmsft3.dll, including (1) DXImageTransform.Microsoft.MaskFilter.1, (2) DXImageTransform.Microsoft.Chroma.1, and (3) DX3DTransform.Microsoft.Shapes.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29524 - http://securityreason.com/securityalert/1439 - http://xsec.org
ram Container: References: - http://www.osvdb.org/29524 - http://securityreason.com/securityalert/1439 - http://xsec.org/index.php?module=releases&act=view&type=1&id=17 - http://www.securityfocus.com/archive/1/443907/100/0/threaded - https://www.exploit-db.com/exploits/4251 - http://www.securityfocus.com/bid/19640 - http://www.osvdb.org/29525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28516
CVE ID: CVE-2006-4302 State: PUBLISHED Published: 2006-08-23T01:00:00 Last Updated: 2024-08-07T19:06:06.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Plug-in J2SE 1.3.0_02 through 5.0 Update 5, and Java Web Start 1.0 through 1.2 and J2SE 1.4.2 through 5.0 Update 5, allows remote attackers to exploit vulnerabilities by specifying a JRE version that contain vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102557-1 - http://www.securityfocus.com/bid/8879 - http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm - http://www.osvdb.org/28109 - http://www.securityfocus.com/arch
//support.avaya.com/elmodocs2/security/ASA-2006-205.htm - http://www.osvdb.org/28109 - http://www.securityfocus.com/archive/1/382413 - http://securitytracker.com/id?1016732 - http://securitytracker.com/id?1016733 - http://www.securityfocus.com/bid/11757 - http://www.vupen.com/english/advisories/2006/3354 - http://secunia.com/advisories/21570
CVE ID: CVE-2006-4303 State: PUBLISHED Published: 2006-08-23T01:00:00 Last Updated: 2024-08-07T19:06:06.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in (1) libnsl and (2) TLI/XTI API routines in Sun Solaris 10 allows remote attackers to cause a denial of service ("tight loop" and CPU consumption for listener applications) via unknown vectors related to TCP fusion (do_tcp_fusion). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28420 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102576-1 - http://securitytracker.com/id?1016706
CVE ID: CVE-2006-4304 State: PUBLISHED Published: 2006-08-24T00:00:00 Last Updated: 2024-08-07T19:06:07.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before 20060902 allows remote attackers to cause a denial of service (panic), obtain sensitive information, and possibly execute arbitrary code via crafted Link Control Protocol (LCP) packets with an option length that exceeds the overall length, which triggers the overflow in (1) pppoe and (2) ippp. NOTE: this issue was originally incorrectly reported for the ppp driver. Additional Analyst Notes
1) pppoe and (2) ippp. NOTE: this issue was originally incorrectly reported for the ppp driver. Additional Analyst Notes: - CVE Program Container: References: - http://security.FreeBSD.org/patches/SA-06:18/ppp4x.patch - http://www.securityfocus.com/bid/19684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28562 - http://security.FreeBSD.org/advisories/FreeBSD-SA-06:18.ppp.asc - http://www.openbsd.org/errata38.html#sppp - http://secunia.com/advisories/21731 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-019.txt.asc - http://securitytracker.com/id?1016745 - http://www.openbsd.org/errata.html#sppp - http://secunia.com/advisories/21587
CVE ID: CVE-2006-4305 State: PUBLISHED Published: 2006-08-30T01:00:00 Last Updated: 2024-08-07T19:06:07.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name when connecting via a WebDBM client. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28636 - http://www.symantec.com/enterprise/research/SYMSA-2006-009.txt - http://www.debian.org/security/2006/dsa-1190 - http://www.securityfocus.com/archive/1/444601/100/0/threaded - http://secunia.com/advisories/21677 - http://secunia.com/advisorie
w.securityfocus.com/archive/1/444601/100/0/threaded - http://secunia.com/advisories/21677 - http://secunia.com/advisories/22518 - http://dev.mysql.com/doc/maxdb/changes/changes_7.6.00.32.html - http://securitytracker.com/id?1016766 - http://www.vupen.com/english/advisories/2006/3410 - http://www.securityfocus.com/bid/19660
CVE ID: CVE-2006-4306 State: PUBLISHED Published: 2006-08-23T19:00:00 Last Updated: 2024-08-07T19:06:07.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Solaris 8 and 9 before 20060821 allows local users to execute arbitrary commands via unspecified vectors, involving the default Role-Based Access Control (RBAC) settings in the "File System Management" profile. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016726 - http://secunia.com/advisories/21581 - http://www.securityfocus.com/bid/19643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28551 - http://support.avaya.com/elmodocs2/security
com/bid/19643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28551 - http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1527 - http://www.vupen.com/english/advisories/2006/3355 - http://secunia.com/advisories/22295 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102514-1
CVE ID: CVE-2006-4307 State: PUBLISHED Published: 2006-08-23T19:00:00 Last Updated: 2024-08-07T19:06:07.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the format command in Sun Solaris 8 and 9 before 20060821 allows local users to modify arbitrary files via unspecified vectors involving profiles that permit running format with elevated privileges, a different issue than CVE-2006-4306 and CVE-2006-4319. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016726 - http://secunia.com/advisories/21581 - http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm - http://www.vupen.com/english/advisories/20
sories/21581 - http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm - http://www.vupen.com/english/advisories/2006/3355 - http://secunia.com/advisories/22295 - http://www.securityfocus.com/bid/19647 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102514-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1573
CVE ID: CVE-2006-4308 State: PUBLISHED Published: 2006-08-23T19:00:00 Last Updated: 2024-08-07T19:06:06.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6, Blackboard Learning and Community Portal Suite 6.2.3.23, and Blackboard Vista 4 allow remote attackers to inject arbitrary Javascript, VBScript, or HTML via (1) data, (2) vbscript, and (3) malformed javascript URIs in various HTML tags when posting to the Discussion Board. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19308 - http://www.securityfocus.com/archive/1/444885/100/0/threaded - http
ferences: - http://www.securityfocus.com/bid/19308 - http://www.securityfocus.com/archive/1/444885/100/0/threaded - http://www.vupen.com/english/advisories/2006/3366 - http://www.securityfocus.com/archive/1/444062/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28537 - http://www.securityfocus.com/archive/1/444116/100/0/threaded - http://secunia.com/advisories/21577 - http://securitytracker.com/id?1016735
CVE ID: CVE-2006-4309 State: PUBLISHED Published: 2006-08-23T19:00:00 Last Updated: 2024-08-07T19:06:07.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: VNC server on the AK-Systems Windows Terminal 1.2.5 ExVLP is not password protected, which allows remote attackers to login and view RDP or Citrix sessions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28532 - http://www.securityfocus.com/archive/1/444060/100/0/threaded - http://www.securityfocus.com/bid/19659 - http://securityreason.com/securityalert/1438
CVE ID: CVE-2006-4310 State: PUBLISHED Published: 2006-08-23T19:00:00 Last Updated: 2024-08-07T19:06:07.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FTP response, when attempting to connect with a username and password via the FTP URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444064/100/0/threaded - http://secunia.com/advisories/23235 - http://www.debian.org/security/2006/dsa-1225 - http://www.securityfocus.com/bid/19678 - http://www.debian.org/security/2006/dsa-1227 - http://secunia.com/advisories/23202 - http://
curityfocus.com/bid/19678 - http://www.debian.org/security/2006/dsa-1227 - http://secunia.com/advisories/23202 - http://secunia.com/advisories/23197 - http://securityreason.com/securityalert/1444 - http://www.debian.org/security/2006/dsa-1224
CVE ID: CVE-2006-4311 State: PUBLISHED Published: 2006-08-23T19:00:00 Last Updated: 2024-08-07T19:06:06.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Sonium Enterprise Adressbook 0.2 allows remote attackers to execute arbitrary PHP code via the folder parameter in multiple files in the plugins directory, as demonstrated by plugins/1_Adressbuch/delete.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19597 - http://www.vupen.com/english/advisories/2006/3334 - http://secunia.com/advisories/21553 - http://www.securityfocus.com/archive/1/443701/100/0/threaded - https://exchange.xforc
p://secunia.com/advisories/21553 - http://www.securityfocus.com/archive/1/443701/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28464 - http://www.bb-pcsecurity.de/Websecurity/342/org/Sonium_Enterprise_Adressbook_Version_0.2_%28folder%29_RFI.htm
CVE ID: CVE-2006-4312 State: PUBLISHED Published: 2006-08-23T22:00:00 Last Updated: 2024-08-07T19:06:07.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module (FWSM) 3.1(x) up to 3.1(1.6), causes the EXEC password, local user passwords, and the enable password to be changed to a "non-random value" under certain circumstances, which causes administrators to be locked out and might allow attackers to gain access. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/ad
tackers to gain access. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3367 - http://securitytracker.com/id?1016740 - http://www.cisco.com/warp/public/707/cisco-sa-20060823-firewall.shtml - http://www.securityfocus.com/bid/19681 - http://www.osvdb.org/28143 - http://securitytracker.com/id?1016738 - http://securitytracker.com/id?1016739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28540 - http://secunia.com/advisories/21616
CVE ID: CVE-2006-4313 State: PUBLISHED Published: 2006-08-23T22:00:00 Last Updated: 2024-08-07T19:06:07.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2) MKD, (3) CDUP, (4) RNFR, (5) SIZE, and (6) RMD FTP commands to modify files or create and delete directories via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3368 - http://www.osvdb.org/28138 - http://securitytracker.com/id?1016737 - http://www.securityfocus.com/bid/19680
2006/3368 - http://www.osvdb.org/28138 - http://securitytracker.com/id?1016737 - http://www.securityfocus.com/bid/19680 - http://www.osvdb.org/28139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28539 - http://www.cisco.com/warp/public/707/cisco-sa-20060823-vpn3k.shtml - http://secunia.com/advisories/21617
CVE ID: CVE-2006-4314 State: PUBLISHED Published: 2006-08-23T22:00:00 Last Updated: 2024-08-07T19:06:07.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: The manager server in Symantec Enterprise Security Manager (ESM) 6 and 6.5.x allows remote attackers to cause a denial of service (hang) via a malformed ESM agent request. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016728 - http://www.symantec.com/avcenter/security/Content/2006.08.21a.html - http://secunia.com/advisories/21548 - http://www.securityfocus.com/bid/19580 - http://www.vupen.com/english/advisories/2006/3353 - http://www.osvdb.org/28108 - http://securityreason.com/
/bid/19580 - http://www.vupen.com/english/advisories/2006/3353 - http://www.osvdb.org/28108 - http://securityreason.com/securityalert/1437 - http://www.securityfocus.com/archive/1/444068/100/0/threaded
CVE ID: CVE-2006-4315 State: PUBLISHED Published: 2006-08-23T22:00:00 Last Updated: 2024-08-07T19:06:07.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in multiple SSH Tectia products, including Client/Server/Connector 5.0.0 and 5.0.1 and Client/Server before 4.4.5, and Manager 2.12 and earlier, when running on Windows, might allow local users to gain privileges via a malicious program file under "Program Files" or its subdirectories. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19679 - http://securitytracker.com/id?1016743 - http://www.ssh.com/company/news/2006/english/security/ar
tyfocus.com/bid/19679 - http://securitytracker.com/id?1016743 - http://www.ssh.com/company/news/2006/english/security/article/775/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/28566
CVE ID: CVE-2006-4316 State: PUBLISHED Published: 2006-08-23T22:00:00 Last Updated: 2024-08-07T19:06:07.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSH Tectia Management Agent 2.1.2 allows local users to gain root privileges by running a program called sshd, which is obtained from a process listing when the "Restart" action is selected from the Management server GUI, which causes the agent to locate the pathname of the user's program and restart it with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28561 - http://www.ssh.com/company/news/2006/english/security/article/776/ - http://www
rce.ibmcloud.com/vulnerabilities/28561 - http://www.ssh.com/company/news/2006/english/security/article/776/ - http://www.securityfocus.com/bid/19677 - http://www.osvdb.org/28159 - http://securitytracker.com/id?1016744 - http://secunia.com/advisories/21559
CVE ID: CVE-2006-4317 State: PUBLISHED Published: 2006-08-24T01:00:00 Last Updated: 2024-08-07T19:06:07.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in attachment.php in WoltLab Burning Board (WBB) 2.3.5 allows remote attackers to inject arbitrary web script or HTML via a GIF image that contains URL-encoded Javascript. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1443 - http://www.securityfocus.com/bid/19639 - http://secunia.com/advisories/21580 - http://www.securityfocus.com/archive/1/443876/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28481
CVE ID: CVE-2006-4318 State: PUBLISHED Published: 2006-08-24T01:00:00 Last Updated: 2024-08-07T19:06:07.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in WFTPD Server 3.23 allows remote attackers to execute arbitrary code via long SIZE commands. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0608-exploits/wftpd_exp.c - http://secunia.com/advisories/21547 - http://www.vupen.com/english/advisories/2006/3357 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28523 - https://www.exploit-db.com/exploits/2233 - http://securitytracker.com/id?1016723 - http://www.securityfocus.com/bid/19617 - http://www.osvdb.org/2
/exploits/2233 - http://securitytracker.com/id?1016723 - http://www.securityfocus.com/bid/19617 - http://www.osvdb.org/28134
CVE ID: CVE-2006-4319 State: PUBLISHED Published: 2006-08-24T01:00:00 Last Updated: 2024-08-07T19:06:07.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format (such as the "File System Management" RBAC profile) to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2006-4307. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28519 - http://www.securityfocus.com/bid/19657 - http://secunia.com/advisories/21581 - http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm - http://www.vupen