Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-4163 State: PUBLISHED Published: 2006-08-16T21:00:00 Last Updated: 2024-08-07T18:57:46.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in cls_fast_template.php in myWebland miniBloggie 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fname parameter. NOTE: another researcher was unable to find a way to execute code after including it via a URL. CVE analysis as of 20060816 was inconclusive Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/443160/100/0/threaded - http://www.securityfocus.com/archive/1/442966/100/0/threaded - http:/
ecurityfocus.com/archive/1/443160/100/0/threaded - http://www.securityfocus.com/archive/1/442966/100/0/threaded - http://www.securityfocus.com/bid/19476
CVE ID: CVE-2006-4164 State: PUBLISHED Published: 2006-08-16T21:00:00 Last Updated: 2024-08-07T18:57:46.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc/header.inc.php in phpPrintAnalyzer 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ficStyle parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28322 - http://www.vupen.com/english/advisories/2006/3258 - http://www.securityfocus.com/bid/19474 - https://www.exploit-db.com/exploits/2168
CVE ID: CVE-2006-4165 State: PUBLISHED Published: 2006-08-16T21:00:00 Last Updated: 2024-08-07T18:57:46.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in NetCommons 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/jp/JVN%2351301450/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28351 - http://www.securityfocus.com/bid/19497 - http://secunia.com/advisories/21445
CVE ID: CVE-2006-4166 State: PUBLISHED Published: 2006-08-16T21:00:00 Last Updated: 2024-08-07T18:57:46.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the image parameter to (1) image.php or (2) image.php2. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/443353/100/0/threaded - http://www.securityfocus.com/archive/1/442818/100/0/threaded - http://securityreason.com/securityalert/1393 - http://securitytracker.com/id?1016682 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2831
m/securityalert/1393 - http://securitytracker.com/id?1016682 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28317 - http://www.securityfocus.com/archive/1/445089/100/0/threaded - https://www.exploit-db.com/exploits/2158
CVE ID: CVE-2006-4168 State: PUBLISHED Published: 2007-06-14T19:00:00 Last Updated: 2024-08-07T18:57:46.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the exif_data_load_data_entry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2007_39_libexif.html - http://secunia.com/advisories/25717/ - http://secunia.com/advisories/26083 - http://www.novell.com/linux/
libexif.html - http://secunia.com/advisories/25717/ - http://secunia.com/advisories/26083 - http://www.novell.com/linux/security/advisories/2007_14_sr.html - http://www.securityfocus.com/bid/24461 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34851 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:128 - http://www.debian.org/security/2007/dsa-1310 - http://sourceforge.net/project/shownotes.php?release_id=515385 - http://security.gentoo.org/glsa/glsa-200706-09.xml - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=543 - http://www.securitytracker.com/id?1018240 - http://www.ubuntu.com/usn/usn-478-1 - https://rhn.redhat.com/errata/RHSA-2007-0501.html -
uritytracker.com/id?1018240 - http://www.ubuntu.com/usn/usn-478-1 - https://rhn.redhat.com/errata/RHSA-2007-0501.html - http://secunia.com/advisories/25746 - http://secunia.com/advisories/25768 - http://secunia.com/advisories/25645 - http://secunia.com/advisories/25674 - http://secunia.com/advisories/25842 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9349 - http://osvdb.org/35379 - http://secunia.com/advisories/25820 - http://secunia.com/advisories/25932 - http://www.vupen.com/english/advisories/2007/2165 - https://issues.rpath.com/browse/RPL-1482 - http://www.securityfocus.com/archive/1/472046/100/0/threaded - http://secunia.com/advisories/25642
CVE ID: CVE-2006-4169 State: PUBLISHED Published: 2007-07-15T22:00:00 Last Updated: 2024-08-07T18:57:46.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the G/PGP (GPG) Plugin 2.0, and 2.1dev before 20070614, for Squirrelmail allow remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the help parameter to (1) gpg_help.php or (2) gpg_help_base.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26035 - http://secunia.com/advisories/26424 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=555 - http://osvdb.org/37933 - http:
sories/26424 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=555 - http://osvdb.org/37933 - http://osvdb.org/37932 - http://www.securityfocus.com/bid/24874 - http://www.vupen.com/english/advisories/2007/2513 - http://security.gentoo.org/glsa/glsa-200708-08.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/35362
CVE ID: CVE-2006-4170 State: REJECTED Published: 2006-10-10T01:00:00Z Last Updated: 2024-09-16T18:03:02.849Z Description: No description available.
CVE ID: CVE-2006-4172 State: PUBLISHED Published: 2006-09-26T01:43:00 Last Updated: 2024-08-07T18:57:46.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow vulnerability in the i386_set_ldt call in FreeBSD 5.5, and possibly earlier versions down to 5.2, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2006-4178. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29132 - http://www.securityfocus.com/archive/1/446945/100/0/threaded - http://securitytracker.com/id?1016926 - http://secunia.com/adviso
ww.securityfocus.com/archive/1/446945/100/0/threaded - http://securitytracker.com/id?1016926 - http://secunia.com/advisories/22064 - http://www.securityfocus.com/bid/20158 - http://securitytracker.com/id?1016928 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=414 - http://archives.neohapsis.com/archives/bugtraq/2006-09/0376.html
CVE ID: CVE-2006-4175 State: PUBLISHED Published: 2007-03-26T23:00:00 Last Updated: 2024-08-07T18:57:46.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to cause a denial of service (crash) via malformed queries, probably malformed BER queries, which trigger a free of uninitialized memory locations. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33189 - http://www.vupen.com/english/advisories/2007/1090 - http://www.osvdb.org/33524 - http://secunia.com/advisories/
/33189 - http://www.vupen.com/english/advisories/2007/1090 - http://www.osvdb.org/33524 - http://secunia.com/advisories/24634 - http://www.securitytracker.com/id?1017814 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=491 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102853-1 - http://www.securityfocus.com/bid/23117
CVE ID: CVE-2006-4177 State: PUBLISHED Published: 2006-10-24T20:00:00 Last Updated: 2024-08-07T18:57:46.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the NCP engine in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted NCP over IP packet that causes NCP to read more data than intended. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20664 - http://secunia.com/advisories/22506 - http://securitytracker.com/id?1017104 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=426 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2976
idefense.com/intelligence/vulnerabilities/display.php?id=426 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29768 - http://www.vupen.com/english/advisories/2006/4142 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974600.htm
CVE ID: CVE-2006-4178 State: PUBLISHED Published: 2006-09-26T01:43:00 Last Updated: 2024-08-07T18:57:46.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the i386_set_ldt call in FreeBSD 5.5, and possibly earlier versions down to 5.2, allows local users to cause a denial of service (crash) via unspecified arguments that use negative signed integers to cause the bzero function to be called with a large length parameter, a different vulnerability than CVE-2006-4172. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016927 - http://secunia.com/advisories/22064 - http://www.securityfocus.com/bid/20158 - http:
://securitytracker.com/id?1016927 - http://secunia.com/advisories/22064 - http://www.securityfocus.com/bid/20158 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=415 - http://www.securityfocus.com/archive/1/446946/100/0/threaded
CVE ID: CVE-2006-4180 State: REJECTED Published: 2006-09-12T21:00:00Z Last Updated: 2024-09-16T17:23:53.415Z Description: No description available.
CVE ID: CVE-2006-4181 State: PUBLISHED Published: 2006-11-28T02:00:00 Last Updated: 2024-08-07T18:57:46.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU Radius 1.2 and 1.3 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23087 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=443 - http://security.gentoo.org/glsa/glsa-200612-17.xml - http://www.vupen.com/english/advisories/2006/4712 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30508 - h
xml - http://www.vupen.com/english/advisories/2006/4712 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30508 - http://www.securityfocus.com/bid/21303 - http://securitytracker.com/id?1017285
CVE ID: CVE-2006-4182 State: PUBLISHED Published: 2006-10-16T23:00:00 Last Updated: 2024-08-07T18:57:46.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanning service crash) and execute arbitrary code via a crafted Portable Executable (PE) file that leads to a heap-based buffer overflow when less memory is allocated than expected. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4750 - http://www.vupen.com/english/advisories/2006/4034 - http://secunia.com/advisories/22488 - http://s
dvisories/2006/4750 - http://www.vupen.com/english/advisories/2006/4034 - http://secunia.com/advisories/22488 - http://secunia.com/advisories/22370 - http://www.kb.cert.org/vuls/id/180864 - http://www.novell.com/linux/security/advisories/2006_60_clamav.html - http://docs.info.apple.com/article.html?artnum=304829 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:184 - http://secunia.com/advisories/22626 - http://www.vupen.com/english/advisories/2006/4136 - http://secunia.com/advisories/22421 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=422 - http://www.vupen.com/english/advisories/2006/4264 - http://secunia.com/advisories/23155 - http://kolab.org/security
22 - http://www.vupen.com/english/advisories/2006/4264 - http://secunia.com/advisories/23155 - http://kolab.org/security/kolab-vendor-notice-13.txt - http://www.securityfocus.com/bid/20535 - http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html - http://security.gentoo.org/glsa/glsa-200610-10.xml - http://www.us-cert.gov/cas/techalerts/TA06-333A.html - http://securitytracker.com/id?1017068 - http://www.debian.org/security/2006/dsa-1196 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29607 - http://secunia.com/advisories/22551 - http://secunia.com/advisories/22537 - http://secunia.com/advisories/22498
CVE ID: CVE-2006-4183 State: PUBLISHED Published: 2007-07-18T23:00:00 Last Updated: 2024-08-07T18:57:46.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft DirectX SDK (February 2006) and probably earlier, including 9.0c End User Runtimes, allows context-dependent attackers to execute arbitrary code via a crafted Targa file with a run-length-encoding (RLE) compression that produces more data than expected when decoding. Additional Analyst Notes: - CVE Program Container: References: - http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=52 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=
tion=com_remository&Itemid=2&func=fileinfo&id=52 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=562 - http://www.securitytracker.com/id?1018420 - http://www.securityfocus.com/bid/24963 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35492 - http://secunia.com/advisories/26131 - http://www.securityfocus.com/archive/1/474058/100/0/threaded - http://www.vupen.com/english/advisories/2007/2577
CVE ID: CVE-2006-4184 State: PUBLISHED Published: 2006-08-17T00:00:00 Last Updated: 2024-08-07T18:57:46.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmartLine DeviceLock before 5.73 Build 305 does not properly enforce access control lists (ACL) in raw mode, which allows local users to bypass NTFS controls and obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/443193/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28384 - http://securityreason.com/securityalert/1392 - http://www.protect-me.com/dl/whatsnew.html - http://secunia.com/advisories/21494 - http://www.securityfo
ityalert/1392 - http://www.protect-me.com/dl/whatsnew.html - http://secunia.com/advisories/21494 - http://www.securityfocus.com/bid/19500
CVE ID: CVE-2006-4185 State: PUBLISHED Published: 2006-08-17T00:00:00 Last Updated: 2024-08-07T18:57:46.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the NCPENGINE in Novell eDirectory 8.7.3.8 allows local users to cause a denial of service (CPU consumption) via unspecified vectors, as originally demonstrated using a Nessus scan. Additional Analyst Notes: - CVE Program Container: References: - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973826.htm - http://www.securityfocus.com/bid/19498 - http://securitytracker.com/id?1016695 - http://secunia.com/advisories/21496 - http://www.osvdb.org/28369
CVE ID: CVE-2006-4186 State: PUBLISHED Published: 2006-08-17T00:00:00 Last Updated: 2024-08-07T18:57:46.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iManager in eMBoxClient.jar in Novell eDirectory 8.7.3.8 writes passwords in plaintext to a log file, which allows local users to obtain passwords by reading the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19499 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973826.htm - http://securitytracker.com/id?1016695 - http://secunia.com/advisories/21496 - http://www.osvdb.org/28370
CVE ID: CVE-2006-4187 State: PUBLISHED Published: 2006-08-17T00:00:00 Last Updated: 2024-08-07T18:57:46.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP-UX B.11.00, B.11.11 and B.11.23, when running in trusted mode, allows local users to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21984 - http://www.securityfocus.com/bid/19528 - http://www.securityfocus.com/archive/1/443303/100/0/threaded - http://www.securityfocus.com/archive/1/443303/100/0/threaded - http://securitytracker.com/id?1016697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2
1/443303/100/0/threaded - http://securitytracker.com/id?1016697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28391 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5553 - http://support.avaya.com/elmodocs2/security/ASA-2006-183.htm - http://secunia.com/advisories/21475 - http://www.vupen.com/english/advisories/2006/3293
CVE ID: CVE-2006-4188 State: PUBLISHED Published: 2006-08-17T00:00:00 Last Updated: 2024-08-07T18:57:46.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the LP subsystem in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00746980 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28440 - http://support.avaya.com/elmodocs2/security/ASA-2006-184.htm - http://secunia.com/advisories/21499 - http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00746980 - h
06-184.htm - http://secunia.com/advisories/21499 - http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00746980 - http://secunia.com/advisories/21898 - http://www.vupen.com/english/advisories/2006/3291 - http://www.securityfocus.com/bid/19535 - http://securitytracker.com/alerts/2006/Aug/1016698.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5500
CVE ID: CVE-2006-4189 State: PUBLISHED Published: 2006-08-17T01:00:00 Last Updated: 2024-08-07T18:57:46.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) index.php, (2) aemodule.php, (3) browse.php, (4) cc.php, (5) click.php, (6) faq.php, (7) gallery.php, (8) im.php, (9) inbox.php, (10) join_form.php, (11) logout.php, (12) messages_inbox.php, and many other scripts. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016692 - http://www.osvdb.org/28501 - http://www.osvdb.org/
gram Container: References: - http://securitytracker.com/id?1016692 - http://www.osvdb.org/28501 - http://www.osvdb.org/28492 - http://www.securityfocus.com/bid/21182 - http://www.osvdb.org/28527 - http://www.osvdb.org/28525 - http://www.osvdb.org/28517 - http://www.osvdb.org/28499 - http://www.osvdb.org/28526 - http://www.osvdb.org/28502 - http://www.osvdb.org/28515 - http://www.osvdb.org/28511 - http://www.osvdb.org/28521 - http://www.osvdb.org/28479 - http://www.osvdb.org/28516 - http://www.osvdb.org/28508 - http://www.osvdb.org/28507 - http://www.osvdb.org/28504 - http://www.osvdb.org/28510 - http://www.osvdb.org/28514 - http://www.osvdb.org/28522 - http://www.osvdb.org/28505 - http://ww
//www.osvdb.org/28510 - http://www.osvdb.org/28514 - http://www.osvdb.org/28522 - http://www.osvdb.org/28505 - http://www.osvdb.org/28529 - http://www.osvdb.org/28500 - http://www.osvdb.org/28478 - http://www.osvdb.org/28509 - http://www.osvdb.org/28485 - http://www.osvdb.org/28512 - http://www.osvdb.org/28528 - http://www.osvdb.org/28513 - http://secunia.com/advisories/21535 - http://www.osvdb.org/28498 - http://www.osvdb.org/28493 - http://www.osvdb.org/28523 - http://www.osvdb.org/28503 - http://www.vupen.com/english/advisories/2006/3346 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28363 - http://www.osvdb.org/28496 - http://www.osvdb.org/28473 - http://www.osvdb.org/28506 - htt
d.com/vulnerabilities/28363 - http://www.osvdb.org/28496 - http://www.osvdb.org/28473 - http://www.osvdb.org/28506 - http://www.osvdb.org/28524 - http://www.osvdb.org/28520 - http://www.osvdb.org/28530 - http://www.osvdb.org/28519 - http://www.osvdb.org/28474
CVE ID: CVE-2006-4190 State: PUBLISHED Published: 2006-08-17T01:00:00 Last Updated: 2024-08-07T18:57:46.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in autohtml.php in the AutoHTML module for PHP-Nuke allows local users to include arbitrary files via a .. (dot dot) in the name parameter for a modload operation. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1398 - http://www.lezr.com/vb/showthread.php?p=104324 - http://www.securityfocus.com/bid/19525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28388 - http://www.securityfocus.com/archive/1/443289/100/0/threaded
CVE ID: CVE-2006-4191 State: PUBLISHED Published: 2006-08-17T01:00:00 Last Updated: 2024-08-07T18:57:46.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the langfilenew parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by header.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21293 - http://securityreason.com/securityalert/1411 - https://www.exploit-db.com/exploits
http://secunia.com/advisories/21293 - http://securityreason.com/securityalert/1411 - https://www.exploit-db.com/exploits/2178 - http://www.securityfocus.com/bid/19501 - http://www.securityfocus.com/archive/1/443167/100/0/threaded - http://retrogod.altervista.org/xmb_196_sql.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28356 - http://www.securityfocus.com/bid/19494 - https://docs.xmbforum2.com/index.php?title=Security_Issue_History
CVE ID: CVE-2006-4192 State: PUBLISHED Published: 2006-08-17T01:00:00 Last Updated: 2024-08-07T18:57:46.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via (1) long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load_it.cpp and (2) crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp, as demonstrated by crafted AMF files. Additional Analyst Notes: - CVE Program Container: References: - http://s
ile.cpp, as demonstrated by crafted AMF files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21418 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28309 - http://security.gentoo.org/glsa/glsa-200612-04.xml - http://www.securityfocus.com/bid/19448 - http://www.ubuntu.com/usn/usn-521-1 - http://www.novell.com/linux/security/advisories/2006_23_sr.html - http://aluigi.altervista.org/adv/mptho-adv.txt - http://secunia.com/advisories/22658 - http://www.securityfocus.com/archive/1/442721/100/100/threaded - http://secunia.com/advisories/23555 - http://secunia.com/advisories/22080 - http://www.vupen.com/english/advisories/2006/4310 - http://cgit