Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-1662 State: PUBLISHED Published: 2005-05-18T04:00:00 Last Updated: 2024-08-07T21:59:23.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Jeuce Personal Web Server 2.13 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/windowsntfocus/5JP011PEKY.html - http://www.securityfocus.com/bid/12183 - http://www.osvdb.org/12718 - http://secunia.com/advisories/13732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18787 - http://securitytracker.com/id?1012791
CVE ID: CVE-2005-1663 State: PUBLISHED Published: 2005-05-18T04:00:00 Last Updated: 2024-08-07T21:59:23.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jeuce Personal Web Server 2.13 allows remote attackers to cause a denial of service (server crash) via a GET request beginning with "://". Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/windowsntfocus/5JP011PEKY.html - http://www.osvdb.org/12719 - http://www.securityfocus.com/bid/12183 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18791 - http://secunia.com/advisories/13732 - http://securitytracker.com/id?1012791
CVE ID: CVE-2005-1664 State: PUBLISHED Published: 2005-05-18T04:00:00 Last Updated: 2024-08-07T21:59:24.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __VIEWSTATE functionality in Microsoft ASP.NET 1.x allows remote attackers to conduct replay attacks to (1) apply a ViewState generated from one view to a different view, (2) reuse ViewState information after the application's state has changed, or (3) use the ViewState to conduct attacks or expose content to third parties. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111513127704270&w=2 - http://scottonwriting.net/sowblog/posts/3747.aspx - http://marc.info/?l=bugtraq&m=111
?l=bugtraq&m=111513127704270&w=2 - http://scottonwriting.net/sowblog/posts/3747.aspx - http://marc.info/?l=bugtraq&m=111532887612517&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20409 - http://secunia.com/advisories/15241 - http://www.osvdb.org/16196
CVE ID: CVE-2005-1665 State: PUBLISHED Published: 2005-05-18T04:00:00 Last Updated: 2024-08-07T21:59:23.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __VIEWSTATE functionality in Microsoft ASP.NET 1.x, when not cryptographically signed, allows remote attackers to cause a denial of service (CPU consumption) via deeply nested markup. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111513127704270&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20408 - http://scottonwriting.net/sowblog/posts/3747.aspx - http://www.osvdb.org/16195 - http://secunia.com/advisories/15241
CVE ID: CVE-2005-1666 State: PUBLISHED Published: 2005-05-18T04:00:00 Last Updated: 2024-08-07T21:59:23.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Orenosv HTTP/FTP Server 0.8.1 allow remote authenticated users to cause a denial of service (server crash) and possibly execute arbitrary code via long arguments to FTP commands such as MKD, RMD, or DELE, which are processed by the (1) ftp_xlate_path, (2) ftp_is_canonical, or (3) os_fn_nativize functions, or (4) a long SSI command that is processed by the parse_cmd function in cgissi.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16165 - http://securitytr
ssi.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16165 - http://securitytracker.com/id?1013923 - http://www.osvdb.org/16166 - http://www.securiteam.com/windowsntfocus/5FP0H00FPS.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/20510 - http://www.securityfocus.com/bid/13546 - http://www.securityfocus.com/bid/13549 - http://www.security.org.sg/vuln/orenosv081.html - http://www.vupen.com/english/advisories/2005/0499 - http://hp.vector.co.jp/authors/VA027031/orenosv/index_en.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/20512 - http://secunia.com/advisories/15302
CVE ID: CVE-2005-1667 State: PUBLISHED Published: 2005-05-18T04:00:00 Last Updated: 2024-08-07T21:59:24.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: DataTrac Activity Console 1.1 allows remote attackers to cause a denial of service via a long HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15291 - http://www.osvdb.org/16168 - https://www.exploit-db.com/exploits/983 - http://www.securiteam.com/windowsntfocus/5FP052AFPA.html - http://www.securityfocus.com/bid/13558
CVE ID: CVE-2005-1668 State: PUBLISHED Published: 2005-05-18T04:00:00Z Last Updated: 2024-09-16T18:48:49.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: YusASP Web Asset Manager 1.0 allows remote attackers to gain privileges via a direct request to assetmanager.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/windowsntfocus/5OP0115FPQ.html - http://www.securityfocus.com/bid/13501 - http://www.osvdb.org/16198
CVE ID: CVE-2005-1669 State: PUBLISHED Published: 2005-06-16T04:00:00Z Last Updated: 2024-09-17T02:36:06.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Opera 8.0 Final Build 1095 allows remote attackers to inject arbitrary web script or HTML via "javascript:" URLs when a new window or frame is opened, which allows remote attackers to bypass access restrictions and perform unauthorized actions on other domains. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15411 - http://secunia.com/secunia_research/2005-5/advisory/
CVE ID: CVE-2005-1670 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-07T21:59:24.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Extreme BlackDiamond 10808 and 8800 switches running ExtremeWare XOS 11.1 before 11.1.3.3, 11.0 before 11.0.2.4, and 10.x allows remote authenticated users to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.extremenetworks.com/services/documentation/FieldNotices_FN0215-Security_Alert_EXOS.asp - http://secunia.com/advisories/15438 - http://www.vupen.com/english/advisories/2005/0572 - http://www.kb.cert.org/vuls/id/937838
CVE ID: CVE-2005-1671 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-07T21:59:23.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and writes all output to a single ypager.log file, even when there are multiple users, and does not properly warn later users that the feature has been enabled, which allows local users to obtain sensitive information from other users. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111643475210982&w=2
CVE ID: CVE-2005-1672 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-07T21:59:23.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web script or HTML via the (1) find parameter to index.php, (2) name or (3) message field of a chat request, or (4) the message body when opening a trouble ticket. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/398457 - http://www.gulftech.org/?node=research&article_id=00076-05172005
CVE ID: CVE-2005-1673 State: PUBLISHED Published: 2005-05-19T04:00:00Z Last Updated: 2024-09-17T00:35:59.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Help Center Live allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to index.php, (2) tid parameter to view.php, fid parameter to (3) download.php or (4) chat_download.php, (5) status parameter to icon.php, TICKET_tid parameter to (6) index.php or (7) view.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.gulftech.org/?node=research&article_id=00076-05172005 - http://www.securityfocus.com/archive/1/398457/2005-05-15/2005-05
gulftech.org/?node=research&article_id=00076-05172005 - http://www.securityfocus.com/archive/1/398457/2005-05-15/2005-05-21/0
CVE ID: CVE-2005-1674 State: PUBLISHED Published: 2005-05-19T04:00:00Z Last Updated: 2025-01-16T18:10:58.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Request Forgery (CSRF) vulnerability in Help Center Live allows remote attackers to perform actions as the administrator via a link or IMG tag to view.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.gulftech.org/?node=research&article_id=00076-05172005 - http://www.securityfocus.com/archive/1/398457/2005-05-15/2005-05-21/0
CVE ID: CVE-2005-1675 State: PUBLISHED Published: 2005-05-25T04:00:00Z Last Updated: 2024-09-17T02:57:01.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 installs the client installation directories with insecure EVERYBODY permissions, which allows local users to gain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15421 - http://www.kb.cert.org/vuls/id/443370 - http://www.kb.cert.org/vuls/id/JGEI-6BCRBX
CVE ID: CVE-2005-1676 State: PUBLISHED Published: 2005-05-25T04:00:00Z Last Updated: 2024-09-16T23:56:31.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allow remote attackers to inject arbitrary web script or HTML via the (1) picture columns embedded within SharePoint lists or (2) drop-down menus in a SharePoint list. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15421 - http://www.kb.cert.org/vuls/id/514386 - http://www.kb.cert.org/vu
r: References: - http://secunia.com/advisories/15421 - http://www.kb.cert.org/vuls/id/514386 - http://www.kb.cert.org/vuls/id/372618 - http://www.kb.cert.org/vuls/id/JGEI-6BCRCC
CVE ID: CVE-2005-1677 State: PUBLISHED Published: 2005-05-25T04:00:00 Last Updated: 2024-08-07T21:59:23.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allows remote attackers to bypass restrictions on COM objects. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15421 - http://www.kb.cert.org/vuls/id/155610 - http://www.kb.cert.org/vuls/id/JGEI-6BCRCM
CVE ID: CVE-2005-1678 State: PUBLISHED Published: 2005-05-25T04:00:00Z Last Updated: 2024-09-16T22:46:56.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display file extensions on attached or embedded files in a compound document, which may allow remote attackers to trick users into executing malicious code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15421 - http://www.kb.cert.org/vuls/id/232232 - http://www.kb.cert.org/vuls/id/JGEI-6BCRD6
CVE ID: CVE-2005-1679 State: PUBLISHED Published: 2005-05-25T04:00:00 Last Updated: 2024-08-07T21:59:24.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the error directive in picasm 1.12b and earlier allows attackers to execute arbitrary code via a long error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111661253517089&w=2 - http://www.securityfocus.com/bid/13698 - http://www.co.jyu.fi/~trossi/pic/
CVE ID: CVE-2005-1680 State: PUBLISHED Published: 2005-05-25T04:00:00 Last Updated: 2024-08-07T21:59:24.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSL-502T, DSL-504T, DSL-562T, and DSL-G604T, when /cgi-bin/firmwarecfg is executed, allows remote attackers to bypass authentication (1) if their IP address already exists in /var/tmp/fw_ip or (2) if their request is the first, which causes /var/tmp/fw_ip to be created and contain their IP address. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111652806030943&w=2 - http://www.vupen.com/english/advisories/2005/0573
CVE ID: CVE-2005-1681 State: PUBLISHED Published: 2005-05-25T04:00:00 Last Updated: 2024-08-07T21:59:24.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the include_location parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014008 - http://www.osvdb.org/16692 - http://secunia.com/advisories/15420 - http://marc.info/?l=bugtraq&m=111653168810937&w=2
CVE ID: CVE-2005-1682 State: PUBLISHED Published: 2005-05-25T04:00:00 Last Updated: 2024-08-07T21:59:24.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: JavaMail API, as used by Solstice Internet Mail Server POP3 2.0, does not properly validate the message number in the MimeMessage constructor in javax.mail.internet.InternetHeaders, which allows remote authenticated users to read other users' e-mail messages by modifying the msgno parameter. NOTE: Sun disputes this issue, stating "The report makes references to source code and files that do not exist in the mentioned products. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisor
entioned products. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/0574 - http://marc.info/?l=bugtraq&m=111653029605189&w=2
CVE ID: CVE-2005-1683 State: PUBLISHED Published: 2005-05-25T04:00:00 Last Updated: 2024-08-07T21:59:24.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted mcw file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111653088303057&w=2 - http://www.securityfocus.com/bid/13687 - http://www.securityfocus.com/archive/1/398649
CVE ID: CVE-2005-1684 State: PUBLISHED Published: 2005-05-25T04:00:00 Last Updated: 2024-08-07T21:59:24.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in default.asp for episodex guestbook allows remote attackers to inject arbitrary web script or HTML via the Name field and other fields. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111661380018313&w=2
CVE ID: CVE-2005-1685 State: PUBLISHED Published: 2005-05-25T04:00:00 Last Updated: 2024-08-07T21:59:24.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: episodex guestbook allows remote attackers to bypass authentication and edit scripts via a direct request to admin.asp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111661380018313&w=2
CVE ID: CVE-2005-1686 State: PUBLISHED Published: 2005-05-25T04:00:00 Last Updated: 2024-08-07T21:59:24.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers in the filename. NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email clients could be configured to provide a file name as an argument to gedit, so there is a valid attack that crosses security boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/e
es security boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-499.html - http://www.debian.org/security/2005/dsa-753 - https://usn.ubuntu.com/138-1/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9845 - http://marc.info/?l=bugtraq&m=111661117701398&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1245 - http://security.gentoo.org/glsa/glsa-200506-09.xml - http://www.novell.com/linux/security/advisories/2005_36_sudo.html
CVE ID: CVE-2005-1687 State: PUBLISHED Published: 2005-05-25T04:00:00 Last Updated: 2024-08-07T21:59:24.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in wp-trackback.php in Wordpress 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the tb_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200506-04.xml - http://marc.info/?l=bugtraq&m=111661517716733&w=2 - http://bugs.gentoo.org/show_bug.cgi?id=88926
CVE ID: CVE-2005-1688 State: PUBLISHED Published: 2005-05-25T04:00:00 Last Updated: 2025-01-16T18:43:51.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-includes/, or (3) wp-admin/, which reveal the path in an error message. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://marc.info/?l=bugtraq&m=111661517716733&w=2
CVE ID: CVE-2005-1689 State: PUBLISHED Published: 2005-07-17T04:00:00 Last Updated: 2024-08-07T21:59:24.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014461 - http://www.securityfocus.com/archive/1/446940/100/0/threaded - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-003-recvauth.txt - http://www.gentoo.org/security/en/glsa/glsa-200507-11.xml - http://www.redhat.com/support/errata/RHSA-2005-567.
th.txt - http://www.gentoo.org/security/en/glsa/glsa-200507-11.xml - http://www.redhat.com/support/errata/RHSA-2005-567.html - http://www.novell.com/linux/security/advisories/2005_17_sr.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/21055 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101810-1 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000993 - http://www.redhat.com/support/errata/RHSA-2005-562.html - http://www.vupen.com/english/advisories/2006/3776 - http://www.turbolinux.com/security/2005/TLSA-2005-78.txt - http://www.securityfocus.com/archive/1/446940/100/0/threaded - http://www.securityfocus.com/bid/14239 - ftp://patches.sgi.com/support/free/sec
us.com/archive/1/446940/100/0/threaded - http://www.securityfocus.com/bid/14239 - ftp://patches.sgi.com/support/free/security/advisories/20050703-01-U.asc - http://secunia.com/advisories/16041 - https://usn.ubuntu.com/224-1/ - http://secunia.com/advisories/22090 - http://www.debian.org/security/2005/dsa-757 - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://secunia.com/advisories/17135 - http://www.kb.cert.org/vuls/id/623332 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9819 - http://marc.info/?l=bugtraq&m=112119974704542&w=2 - http://secunia.com/advisories/17899 - http://www.vupen.com/english/advisories/2005/1066 -
gtraq&m=112119974704542&w=2 - http://secunia.com/advisories/17899 - http://www.vupen.com/english/advisories/2005/1066 - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html - http://www.trustix.org/errata/2005/0036
CVE ID: CVE-2005-1690 State: REJECTED Published: 2005-06-29T04:00:00 Last Updated: 2005-11-02T10:00:00 Description: No description available.
CVE ID: CVE-2005-1691 State: PUBLISHED Published: 2005-07-26T04:00:00Z Last Updated: 2024-09-17T01:01:56.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Internet Graphics Server in SAP before 6.40 Patch 11 allows remote attackers to read arbitrary files via ".." sequences in an HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.corsaire.com/advisories/c050503-001.txt
CVE ID: CVE-2005-1692 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in gxine 0.4.1 through 0.4.4, and other versions down to 0.3, allows remote attackers to execute arbitrary code via a ram file with a URL whose hostname contains format string specifiers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13707 - http://www.0xbadexworm.org/adv/gxinefmt.txt - http://www.osvdb.org/16747 - http://www.vupen.com/english/advisories/2005/0626 - http://security.gentoo.org/glsa/glsa-200505-19.xml - http://cvs.sourceforge.net/vie
n.com/english/advisories/2005/0626 - http://security.gentoo.org/glsa/glsa-200505-19.xml - http://cvs.sourceforge.net/viewcvs.py/xine/gnome-xine/ChangeLog?rev=HEAD&content-type=text/vnd.viewcvs-markup - http://secunia.com/advisories/15451 - http://marc.info/?l=bugtraq&m=111670637812128&w=2
CVE ID: CVE-2005-1693 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, BrightStor ARCserve Backup (BAB) r11.1, Vet Antivirus, Zonelabs ZoneAlarm Security Suite, and ZoneAlarm Antivirus, allows remote attackers to gain privileges via a compressed VBA directory with a project name length of -1, which leads to a heap-based buffer overflow. Additional Analyst Notes: -
BA directory with a project name length of -1, which leads to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32896 - http://marc.info/?l=bugtraq&m=111686576416450&w=2 - http://securitytracker.com/id?1014050 - http://secunia.com/advisories/15470 - http://www.rem0te.com/public/images/vet.pdf - http://www.securityfocus.com/bid/13710 - http://crm.my-etrust.com/login.asp?username=guest&target=DOCUMENT&openparameter=1588 - http://secunia.com/advisories/15479
CVE ID: CVE-2005-1694 State: PUBLISHED Published: 2005-05-24T04:00:00 Last Updated: 2024-08-07T21:59:24.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Xanthia.php in the Xanthia module in PostNuke 0.750 allow remote attackers to execute arbitrary SQL commands via the (1) name or (2) module parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111670823128472&w=2 - http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2691