Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-3604 State: PUBLISHED Published: 2006-07-14T20:00:00 Last Updated: 2024-08-07T18:39:53.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to bypass access restrictions for (1) admin/aindex.asp or (2) admin/aindex.html via a .. (dot dot) and encoded / (%2f) sequence in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.digitalarmaments.com/2006300687985463.html - http://www.securityfocus.com/archive/1/439648/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27656 - http://www.securityfocus.com/bid/18948 - http
/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27656 - http://www.securityfocus.com/bid/18948 - http://secunia.com/advisories/20994 - http://www.securityfocus.com/archive/1/450478/100/0/threaded - http://www.securityfocus.com/archive/1/440893/100/100/threaded
CVE ID: CVE-2006-3605 State: PUBLISHED Published: 2006-07-14T20:00:00 Last Updated: 2024-08-07T18:39:52.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Transition property on an uninitialized DXImageTransform.Microsoft.RevealTrans.1 ActiveX Object, which triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27057 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27713 - http://www.vupen.com/english/advisories/2006/2793 - http://www.securityfocus.com/bid/18960 - http://browserfun.blogspot.com/2006/07/mobb-13
m/english/advisories/2006/2793 - http://www.securityfocus.com/bid/18960 - http://browserfun.blogspot.com/2006/07/mobb-13-revealtrans-transition.html
CVE ID: CVE-2006-3606 State: PUBLISHED Published: 2006-07-14T21:00:00 Last Updated: 2024-08-07T18:39:52.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Solaris X Inter Client Exchange library (libICE) on Solaris 8 and 9 allows context-dependent attackers to cause a denial of service (application crash) to applications that use the library. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016495 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2033 - http://www.vupen.com/english/advisories/2006/2800 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27734
%3A2033 - http://www.vupen.com/english/advisories/2006/2800 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27734 - http://www.securityfocus.com/bid/18974 - http://secunia.com/advisories/21048 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102503-1
CVE ID: CVE-2006-3607 State: PUBLISHED Published: 2006-07-14T21:00:00 Last Updated: 2024-08-07T18:39:52.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Script) 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the city parameter in (a) insertmember.php, and (2) a PHPSESSID cookie in (b) lostpassword.php, (c) gen_confirm_mem.php, and (d) index.php. Additional Analyst Notes: - CVE Program Container: References: - http://ellsec.org/print.php?type=N&item_id=141 - http://www.securityfocus.com/bid/18735 - http://www.securityfocus.com/archive/1/4
sec.org/print.php?type=N&item_id=141 - http://www.securityfocus.com/bid/18735 - http://www.securityfocus.com/archive/1/438705/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27461 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27460
CVE ID: CVE-2006-3608 State: PUBLISHED Published: 2006-07-14T21:00:00 Last Updated: 2024-08-07T18:39:52.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gallery module in Simone Vellei Flatnuke 2.5.7 and earlier, when Gallery uploads are enabled, does not restrict the extensions of uploaded files that begin with a GIF header, which allows remote authenticated users to execute arbitrary PHP code via an uploaded .php file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21051 - http://retrogod.altervista.org/flatnuke257_adv.html - http://www.securityfocus.com/archive/1/439975/100/0/threaded - http://www.securityfocus.com/archive
atnuke257_adv.html - http://www.securityfocus.com/archive/1/439975/100/0/threaded - http://www.securityfocus.com/archive/1/442421/100/0/threaded - http://www.securityfocus.com/bid/18966 - http://securitytracker.com/id?1016499 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27731
CVE ID: CVE-2006-3609 State: PUBLISHED Published: 2006-07-14T21:00:00 Last Updated: 2024-08-07T18:39:52.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to inject arbitrary web script or HTML via the page_name parameter with an IMG tag containing a javascript URI in the SRC attribute. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2808 - http://www.securityfocus.com/archive/1/439970/100/0/threaded - http://secunia.com/advisories/21052 - http://securitytracker.com/id?1016490 - https://exchange.xforce.ibmcloud
hreaded - http://secunia.com/advisories/21052 - http://securitytracker.com/id?1016490 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27718
CVE ID: CVE-2006-3610 State: PUBLISHED Published: 2006-07-14T21:00:00 Last Updated: 2024-08-07T18:39:52.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to obtain sensitive information (partial database schema) via a modified page_name parameter, which reflects portions of an SQL query in the result. NOTE: it is not clear whether the information is target-specific. If not, then this issue is not an exposure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/439970/100/0/threaded
CVE ID: CVE-2006-3611 State: PUBLISHED Published: 2006-07-14T21:00:00 Last Updated: 2024-08-07T18:39:53.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[template] parameter, as demonstrated by injecting PHP sequences into a log file, which is then included by pm.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.phorum.org/phorum5/read.php?14%2C114358 - http://www.vupen.com/english/advisories/2006/2794 - http://www.securityfocus.com/archive/1/439976/100/0/threaded -
58 - http://www.vupen.com/english/advisories/2006/2794 - http://www.securityfocus.com/archive/1/439976/100/0/threaded - http://retrogod.altervista.org/phorum5_local_incl_xpl.html
CVE ID: CVE-2006-3612 State: PUBLISHED Published: 2006-07-14T21:00:00Z Last Updated: 2024-09-16T21:04:30.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Phorum 5.1.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.phorum.org/phorum5/read.php?14%2C114358
CVE ID: CVE-2006-3613 State: PUBLISHED Published: 2006-07-14T21:00:00 Last Updated: 2024-08-07T18:39:53.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Chamberland Technology ezWaiter 3.0 Online and possibly Enterprise Software (aka enterprise edition) allow remote attackers to inject arbitrary web script or HTML via the (1) itemfor (aka "Who is this item for?") and (2) special (aka "Special Instructions") parameters to item.php, which is accessed from showorder.php, or (3) unspecified parameters to the login form at login.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmclo
login form at login.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27587 - http://www.securityfocus.com/bid/18746 - http://www.securityfocus.com/archive/1/438792/100/0/threaded
CVE ID: CVE-2006-3614 State: PUBLISHED Published: 2006-07-14T21:00:00 Last Updated: 2024-08-07T18:39:52.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to trigger a SQL error via the page_name parameter, possibly due to a SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27719 - http://www.vupen.com/english/advisories/2006/2808 - http://www.securityfocus.com/archive/1/439970/100/0/threaded - http://secunia.com/advisories/21052 - http://securitytracker.com/id?1016490
CVE ID: CVE-2006-3615 State: PUBLISHED Published: 2006-07-14T21:00:00 Last Updated: 2024-08-07T18:39:52.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Phorum 5.1.14, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via unspecified vectors related to an uninitialized variable. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2006-07/0200.html - http://secunia.com/advisories/21043 - http://www.osvdb.org/27164 - http://www.phorum.org/phorum5/read.php?14%2C114358 - http://www.vupen.com/english/advisories/2006/2794 - http://www
64 - http://www.phorum.org/phorum5/read.php?14%2C114358 - http://www.vupen.com/english/advisories/2006/2794 - http://www.osvdb.org/27167 - http://retrogod.altervista.org/phorum5_local_incl_xpl.html - http://archives.neohapsis.com/archives/bugtraq/2006-07/0191.html
CVE ID: CVE-2006-3616 State: PUBLISHED Published: 2006-07-14T21:00:00 Last Updated: 2024-08-07T18:39:52.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Carbonize Lazarus Guestbook 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the show parameter in codes-english.php and (2) the img parameter in picture.php, after the name of an existing file. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27090 - http://www.osvdb.org/27089 - http://securitytracker.com/id?1016486 - http://www.securityfocus.com/bid/18956 - https://exchange.xforce.ibmcloud.com/vuln
tp://securitytracker.com/id?1016486 - http://www.securityfocus.com/bid/18956 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27716 - http://www.vupen.com/english/advisories/2006/2784 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27714 - http://secunia.com/advisories/21034 - http://www.securityfocus.com/archive/1/439904/100/0/threaded
CVE ID: CVE-2006-3617 State: PUBLISHED Published: 2006-07-14T21:00:00 Last Updated: 2024-08-07T18:39:53.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) message (aka comments), (3) website, and (4) email parameters, which bypasses XSS protection mechanisms that check for SCRIPT tags but not others, as demonstrated by a javascript URI in an onMouseOver attribute and the src attribute in an iframe tag. NOTE: some vectors might overlap CVE-2006-2975, although the use of alternate mani
d the src attribute in an iframe tag. NOTE: some vectors might overlap CVE-2006-2975, although the use of alternate manipulations makes it unclear. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27006 - http://www.securityfocus.com/archive/1/439486/100/0/threaded - http://www.neosecurityteam.net/index.php?action=advisories&id=23
CVE ID: CVE-2006-3618 State: PUBLISHED Published: 2006-07-14T21:00:00 Last Updated: 2024-08-07T18:39:53.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) website, (4) comments, (5) rate, and (6) private parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27624 - http://www.securityfocus.com/archive/1/439486/100/0/threaded - http://www.neosecurityteam.net/index.php?action=advisories&id=23
CVE ID: CVE-2006-3619 State: PUBLISHED Published: 2006-07-25T19:00:00 Last Updated: 2024-08-07T18:39:54.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in FastJar 0.93, as used in Gnu GCC 4.1.1 and earlier, and 3.4.6 and earlier, allows user-assisted attackers to overwrite arbitrary files via a .jar file containing filenames with "../" sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15669 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27806 - http://www.vupen.com/english/advisories/2005/2686 - ht
ml - https://exchange.xforce.ibmcloud.com/vulnerabilities/27806 - http://www.vupen.com/english/advisories/2005/2686 - http://secunia.com/advisories/25098 - http://security.gentoo.org/glsa/glsa-200711-23.xml - http://secunia.com/advisories/25894 - http://rhn.redhat.com/errata/RHSA-2007-0473.html - http://www.vupen.com/english/advisories/2007/3229 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:066 - http://www.debian.org/security/2006/dsa-1170 - http://www.redhat.com/support/errata/RHSA-2007-0220.html - http://www.vupen.com/english/advisories/2006/2866 - http://secunia.com/advisories/25633 - http://support.avaya.com/elmodocs2/security/ASA-2007-189.htm - https://oval.cisecurity.o
/secunia.com/advisories/25633 - http://support.avaya.com/elmodocs2/security/ASA-2007-189.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9617 - http://secunia.com/advisories/26909 - http://secunia.com/advisories/29334 - http://secunia.com/advisories/27706 - http://lists.debian.org/debian-gcc/2006/05/msg00317.html - http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359 - http://secunia.com/advisories/21797 - ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc - http://secunia.com/advisories/25281 - http://secunia.com/advisories/17839 - http://secunia.com/advisories/21100 - http://www.securitytracker.com/id?1017987 - http://www.osvd
com/advisories/17839 - http://secunia.com/advisories/21100 - http://www.securitytracker.com/id?1017987 - http://www.osvdb.org/21337
CVE ID: CVE-2006-3620 State: PUBLISHED Published: 2006-07-14T23:00:00 Last Updated: 2024-08-07T18:39:52.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to inject arbitrary web script or HTML via the toid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27729 - http://www.securityfocus.com/archive/1/443294/100/100/threaded - http://securitytracker.com/id?1016485 - http://www.securityfocus.com/bid/18970
CVE ID: CVE-2006-3621 State: PUBLISHED Published: 2006-07-14T23:00:00 Last Updated: 2024-08-07T18:39:53.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to execute arbitrary SQL commands via the toid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27730 - http://www.securityfocus.com/archive/1/443294/100/100/threaded - http://securitytracker.com/id?1016485 - http://www.securityfocus.com/bid/18970
CVE ID: CVE-2006-3622 State: PUBLISHED Published: 2006-07-14T23:00:00 Last Updated: 2024-08-07T18:39:52.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: The showtopic module in Koobi Pro CMS 5.6 allows remote attackers to obtain sensitive information via a ' (single quote) in the p parameter, which displays the path in an error message. NOTE: it is not clear whether this is SQL injection or a forced SQL error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/443294/100/100/threaded - http://securitytracker.com/id?1016485
CVE ID: CVE-2006-3623 State: PUBLISHED Published: 2006-07-14T23:00:00 Last Updated: 2024-08-07T18:39:53.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Framework Service component in McAfee ePolicy Orchestrator agent 3.5.0.x and earlier allows remote attackers to create arbitrary files via a .. (dot dot) in the directory and filename in a PropsResponse (PackageType) request. Additional Analyst Notes: - CVE Program Container: References: - http://www.eeye.com/html/research/advisories/AD20060713.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27738 - http://secunia.com/advisories/21037 - http://www.vupen.com/english/advisories/20
ce.ibmcloud.com/vulnerabilities/27738 - http://secunia.com/advisories/21037 - http://www.vupen.com/english/advisories/2006/2796 - http://www.osvdb.org/27158 - http://www.securityfocus.com/bid/18979 - http://www.securityfocus.com/archive/1/440077/100/0/threaded - http://securitytracker.com/id?1016501
CVE ID: CVE-2006-3624 State: PUBLISHED Published: 2006-07-14T23:00:00 Last Updated: 2024-08-07T18:39:54.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in FLV Players 8 allow remote attackers to inject arbitrary web script or HTML via the url parameter to (1) player.php or (2) popup.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27727 - http://www.securityfocus.com/archive/1/439886/100/0/threaded - http://www.securityfocus.com/bid/18954
CVE ID: CVE-2006-3625 State: PUBLISHED Published: 2006-07-14T23:00:00 Last Updated: 2024-08-07T18:39:53.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: FLV Players 8 allows remote attackers to obtain sensitive information via (1) a direct request to paginate.php or (2) an invalid p parameter to player.php, which reveal the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27726 - http://www.securityfocus.com/archive/1/439886/100/0/threaded
CVE ID: CVE-2006-3626 State: PUBLISHED Published: 2006-07-15T01:06:00 Last Updated: 2024-08-07T18:39:53.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PR_SET_DUMPABLE in a way that causes /proc/self/environ to become setuid root. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27790 - http://www.vupen.com/english/advisories/2006/2816 - http://www.novell.com/linux/security/advisories/2006_17_sr.html - http://www.novell.com/linux/security/advisories/2006_42_kernel.html - http://secunia.com/advis
isories/2006_17_sr.html - http://www.novell.com/linux/security/advisories/2006_42_kernel.html - http://secunia.com/advisories/21123 - http://www.redhat.com/support/errata/RHSA-2006-0617.html - http://secunia.com/advisories/21057 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10060 - http://secunia.com/advisories/21605 - http://www.novell.com/linux/security/advisories/2006_47_kernel.html - http://secunia.com/advisories/21073 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.5 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=0cb8f20d000c25118947fcafa81606300ced35f8%3Bhp=243a94af0427b2630fb85f489a5419410da
orvalds/linux-2.6.git%3Ba=blobdiff%3Bh=0cb8f20d000c25118947fcafa81606300ced35f8%3Bhp=243a94af0427b2630fb85f489a5419410dac3bfc%3Bhb=18b0bbd8ca6d3cb90425aa0d77b99a762c6d6de3%3Bf=fs/proc/base.c - http://secunia.com/advisories/22174 - http://www.osvdb.org/27120 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:124 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047907.html - https://usn.ubuntu.com/319-1/ - http://www.debian.org/security/2006/dsa-1111 - http://secunia.com/advisories/21498 - http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm - http://secunia.com/advisories/21041 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=198973 - http://www.security
http://secunia.com/advisories/21041 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=198973 - http://www.securityfocus.com/bid/18992 - http://www.ubuntu.com/usn/usn-319-2 - http://secunia.com/advisories/21119 - http://www.novell.com/linux/security/advisories/2006_49_kernel.html - http://www.securityfocus.com/archive/1/440300/100/0/threaded - http://secunia.com/advisories/21179
CVE ID: CVE-2006-3627 State: PUBLISHED Published: 2006-07-18T21:00:00 Last Updated: 2024-08-07T18:39:53.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the GSM BSSMAP dissector in Wireshark (aka Ethereal) 0.10.11 to 0.99.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P - http://rhn.redhat.com/errata/RHSA-2006-0602.html - http://www.novell.com/linux/security/advisories/2006_20_sr.html - http://secunia.com/advisories/21121 - http://secunia.com/advisories/21078 - http://security.g
visories/2006_20_sr.html - http://secunia.com/advisories/21121 - http://secunia.com/advisories/21078 - http://security.gentoo.org/glsa/glsa-200607-09.xml - http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm - http://secunia.com/advisories/21598 - http://secunia.com/advisories/21467 - http://secunia.com/advisories/22089 - http://secunia.com/advisories/21204 - http://www.securityfocus.com/archive/1/440576/100/0/threaded - http://www.vupen.com/english/advisories/2006/2850 - http://www.wireshark.org/security/wnpa-sec-2006-01.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11307 - http://secunia.com/advisories/21107 - http://www.mandriva.com
ry/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11307 - http://secunia.com/advisories/21107 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:128 - http://secunia.com/advisories/21488 - https://issues.rpath.com/browse/RPL-512 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27821 - http://www.securityfocus.com/bid/19051
CVE ID: CVE-2006-3628 State: PUBLISHED Published: 2006-07-18T21:00:00 Last Updated: 2024-08-07T18:39:53.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in Wireshark (aka Ethereal) 0.10.x to 0.99.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) ANSI MAP, (2) Checkpoint FW-1, (3) MQ, (4) XML, and (5) NTP dissectors. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P - http://rhn.redhat.com/errata/RHSA-2006-0602.html - http://www.novell.com/linux/security/advisories/2006_20_sr.html - http://secunia.com/advi