Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-1245 State: PUBLISHED Published: 2005-04-24T04:00:00 Last Updated: 2024-08-07T21:44:05.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.2, when using HTML Tidy ($wgUseTidy), allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20210 - http://www.osvdb.org/15719 - http://secunia.com/advisories/14993 - http://www.securityfocus.com/bid/13301 - http://sourceforge.net/project/shownotes.php?release_id=322146
CVE ID: CVE-2005-1246 State: PUBLISHED Published: 2005-04-25T04:00:00 Last Updated: 2024-08-07T21:44:06.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the snmppd_log function in snmppd_util.c for snmppd 0.4.5 and earlier may allow remote attackers to cause a denial of service or execute arbitrary code via format string specifiers that are not properly handled in a syslog call. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0022.html - http://secunia.com/advisories/15120 - http://x82.inetcop.org/h0me/adv1sor1es/INCSA.2005-0x82-027-SNMPPD.txt
CVE ID: CVE-2005-1247 State: PUBLISHED Published: 2005-04-25T04:00:00 Last Updated: 2024-08-07T21:44:06.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: webadmin.exe in Novell Nsure Audit 1.0.1 allows remote attackers to cause a denial of service via malformed ASN.1 packets in corrupt client certificates to an SSL server, as demonstrated using an exploit for the OpenSSL ASN.1 parsing vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0126.html - http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0021.html - http://www.cirt.dk/advisories/cirt-31-advisory.pdf - http://support.
eohapsis.com/archives/vulnwatch/2005-q2/0021.html - http://www.cirt.dk/advisories/cirt-31-advisory.pdf - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097379.htm
CVE ID: CVE-2005-1248 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-07T21:44:06.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple iTunes before 4.8 allows remote attackers to execute arbitrary code via a crafted MPEG4 file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15310 - http://www.ngssoftware.com/advisories/itunes.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/20498 - http://www.osvdb.org/16243 - http://lists.apple.com/archives/security-announce/2005/May/msg00003.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17304 -
/2005/May/msg00003.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17304 - http://www.securityfocus.com/bid/13565 - http://securitytracker.com/id?1013927 - http://www.vupen.com/english/advisories/2005/0504 - http://docs.info.apple.com/article.html?artnum=301596
CVE ID: CVE-2005-1249 State: PUBLISHED Published: 2005-05-25T04:00:00 Last Updated: 2024-08-07T21:44:05.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMAP daemon (IMAPD32.EXE) in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (CPU consumption) via an LSUB command with a large number of null characters, which causes an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html - http://www.securityfocus.com/bid/13727 - http://www.idefense.com/application/poi/display?id=245&type=vulnerabilities - http://securitytracker.com/id?1014047
CVE ID: CVE-2005-1250 State: PUBLISHED Published: 2005-06-22T04:00:00 Last Updated: 2024-08-07T21:44:05.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the logon screen of the web front end (NmConsole/Login.asp) for IpSwitch WhatsUp Professional 2005 SP1 allows remote attackers to execute arbitrary SQL commands via the (1) User Name field (sUserName parameter) or (2) Password (sPassword parameter). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2005-13/advisory/ - http://www.idefense.com/application/poi/display?id=268&type=vulnerabilities - http://www.ipswitch.com/forums/shwmessage.aspx?Forum
.idefense.com/application/poi/display?id=268&type=vulnerabilities - http://www.ipswitch.com/forums/shwmessage.aspx?ForumID=20&MessageID=7699 - http://www.corsaire.com/advisories/c050323-001.txt
CVE ID: CVE-2005-1252 State: PUBLISHED Published: 2005-05-25T04:00:00 Last Updated: 2024-08-07T21:44:05.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote attackers to read arbitrary files via "..\" (dot dot backslash) sequences in the query string argument in a GET request to a non-existent .jsp file. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=242&type=vulnerabilities - http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html - http
play?id=242&type=vulnerabilities - http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html - http://www.securityfocus.com/bid/13727 - http://securitytracker.com/id?1014047
CVE ID: CVE-2005-1254 State: PUBLISHED Published: 2005-05-25T04:00:00 Last Updated: 2024-08-07T21:44:05.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the IMAP server for Ipswitch IMail 8.12 and 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to cause a denial of service (crash) via a SELECT command with a large argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html - http://www.securityfocus.com/bid/13727 - http://securitytracker.com/id?1014047 - http://www.idefense.com/application/poi/display?id=241&t
tyfocus.com/bid/13727 - http://securitytracker.com/id?1014047 - http://www.idefense.com/application/poi/display?id=241&type=vulnerabilities
CVE ID: CVE-2005-1255 State: PUBLISHED Published: 2005-05-25T04:00:00 Last Updated: 2024-08-07T21:44:06.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allow remote attackers to execute arbitrary code via a LOGIN command with (1) a long username argument or (2) a long username argument that begins with a special character. Additional Analyst Notes: - CVE Program Container: References: - http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html - http://www.securityfocus.com/bid/13727 -
tp://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html - http://www.securityfocus.com/bid/13727 - http://securitytracker.com/id?1014047 - http://www.idefense.com/application/poi/display?id=243&type=vulnerabilities
CVE ID: CVE-2005-1256 State: PUBLISHED Published: 2005-05-25T04:00:00 Last Updated: 2024-08-07T21:44:05.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the IMAP daemon (IMAPD32.EXE) in IMail 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to execute arbitrary code via a STATUS command with a long mailbox name. Additional Analyst Notes: - CVE Program Container: References: - http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html - http://www.securityfocus.com/bid/13727 - http://securitytracker.com/id?1014047 - http://www.idefense.com/applica
.html - http://www.securityfocus.com/bid/13727 - http://securitytracker.com/id?1014047 - http://www.idefense.com/application/poi/display?id=244&type=vulnerabilities
CVE ID: CVE-2005-1260 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-07T21:44:05.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a "decompression bomb"). Additional Analyst Notes: - CVE Program Container: References: - http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_158801__Updated_bzip2_packages_fix_security_issues.html - https://usn.ubuntu.com/127-1/ - http://www.securityfocus.com/bid/13657 - http://www.debian.org/security/2005/dsa-741 - http://www.securityfocus.com/bid/26444 - http://secunia.com/a
/bid/13657 - http://www.debian.org/security/2005/dsa-741 - http://www.securityfocus.com/bid/26444 - http://secunia.com/advisories/15447 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10700 - http://secunia.com/advisories/27274 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200191-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A749 - http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info.apple.com/article.html?artnum=307041 - http://www.vupen.com/english/advisories/2007/3525 - http://www.vupen.com/english/advisories/2007/3868 - ftp://patches.sgi.com/support/fre
com/english/advisories/2007/3525 - http://www.vupen.com/english/advisories/2007/3868 - ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc - http://secunia.com/advisories/27643 - http://secunia.com/advisories/19183 - http://www.redhat.com/support/errata/RHSA-2005-474.html - http://www.us-cert.gov/cas/techalerts/TA07-319A.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103118-1
CVE ID: CVE-2005-1261 State: PUBLISHED Published: 2005-05-11T04:00:00 Last Updated: 2024-08-07T21:44:06.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message (IM) with a large URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13590 - http://www.securityfocus.com/archive/1/426078/100/0/threaded - http://www.vupen.com/english/advisories/2005/0519 - http://gaim.sourceforge.net/security/index.php?id=16 - http://www.redhat.com/support/errata/RHSA-2005-429.html - https://oval.cisecurity.o
forge.net/security/index.php?id=16 - http://www.redhat.com/support/errata/RHSA-2005-429.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10725 - http://www.redhat.com/support/errata/RHSA-2005-432.html
CVE ID: CVE-2005-1262 State: PUBLISHED Published: 2005-05-11T04:00:00 Last Updated: 2024-08-07T21:44:05.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed MSN message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426078/100/0/threaded - http://www.securityfocus.com/bid/13591 - http://www.vupen.com/english/advisories/2005/0519 - http://gaim.sourceforge.net/security/index.php?id=17 - http://www.redhat.com/support/errata/RHSA-2005-429.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre
redhat.com/support/errata/RHSA-2005-429.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10861 - http://www.novell.com/linux/security/advisories/2005_36_sudo.html
CVE ID: CVE-2005-1263 State: PUBLISHED Published: 2005-05-11T04:00:00 Last Updated: 2024-08-07T21:44:06.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to execute arbitrary code via an ELF binary that, in certain conditions involving the create_elf_tables function, causes a negative length argument to pass a signed integer comparison, leading to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1122 - http://www.v
References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1122 - http://www.vupen.com/english/advisories/2005/0524 - http://www.isec.pl/vulnerabilities/isec-0023-coredump.txt - http://secunia.com/advisories/19185 - http://secunia.com/advisories/19607 - http://www.securityfocus.com/archive/1/428058/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2005-472.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10909 - http://www.securityfocus.com/bid/13589 - http://www.securityfocus.com/archive/1/397966 - http://www.securityfocus.com/archive/1/428028/100/0/threaded - http://www.redhat.com/support/errata
m/archive/1/397966 - http://www.securityfocus.com/archive/1/428028/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2005-551.html - ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U - http://www.redhat.com/support/errata/RHSA-2005-529.html - http://www.securityfocus.com/archive/1/427980/100/0/threaded
CVE ID: CVE-2005-1264 State: PUBLISHED Published: 2005-05-17T04:00:00 Last Updated: 2024-08-07T21:44:05.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589. Additional Analyst Notes: - CVE Program Container: References: - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.10 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10264 - http://www.vupen.com/english/advisories/2005/0557
rg/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10264 - http://www.vupen.com/english/advisories/2005/0557 - http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0045.html - http://www.securityfocus.com/bid/13651 - http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0046.html - http://www.redhat.com/support/errata/RHSA-2005-420.html - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://marc.info/?l=linux-kernel&m=111630512512222
CVE ID: CVE-2005-1265 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T21:44:05.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mmap function in the Linux Kernel 2.6.10 can be used to create memory maps with a start address beyond the end address, which allows local users to cause a denial of service (kernel crash). Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014152 - http://secunia.com/advisories/18056 - http://secunia.com/advisories/17073 - https://usn.ubuntu.com/137-1/ - http://www.debian.org/security/2005/dsa-922 - http://www.redhat.com/support/errata/RHSA-2005-514.html - https://oval.cisecuri
//www.debian.org/security/2005/dsa-922 - http://www.redhat.com/support/errata/RHSA-2005-514.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10466 - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://www.securityfocus.com/bid/13893
CVE ID: CVE-2005-1266 State: PUBLISHED Published: 2005-06-22T04:00:00 Last Updated: 2024-08-07T21:44:06.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service (CPU consumption and slowdown) via a message with a long Content-Type header without any boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://www.vuxml.org/freebsd/cc4ce06b-e01c-11d9-a8bd-000cf18bbe54.html - http://www.securityfocus.com/bid/13978 - http://bugs.gentoo.org/show_bug.cgi?id=94722 - http://www.debian.org/security/2005/dsa-736 - http://mail-archives.apache.org/mod_mbox/spamassassin-announce
?id=94722 - http://www.debian.org/security/2005/dsa-736 - http://mail-archives.apache.org/mod_mbox/spamassassin-announce/200506.mbox/%3c17072.35054.586017.822288%40proton.pathname.com%3e - http://security.gentoo.org/glsa/glsa-200506-17.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10901 - http://www.redhat.com/support/errata/RHSA-2005-498.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:106
CVE ID: CVE-2005-1267 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T21:44:05.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13906 - http://secunia.com/advisories/17118 - http://www.trustix.org/errata/2005/0028/ - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=159208 - http://secunia.com/advisories/15634/ - http://www.redhat.com
tps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=159208 - http://secunia.com/advisories/15634/ - http://www.redhat.com/support/errata/RHSA-2005-505.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11148 - http://www.redhat.com/archives/fedora-announce-list/2005-June/msg00007.html - http://www.securityfocus.com/archive/1/430292/100/0/threaded - http://www.debian.org/security/2005/dsa-854
CVE ID: CVE-2005-1268 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-07T21:44:05.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remote attackers to cause a denial of service (child process crash) via a CRL that causes a buffer overflow of one null byte. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://www.novell.com/linux/security/advisories/2005_46_apache.html - http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm - http:/
om/linux/security/advisories/2005_46_apache.html - http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm - http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1714 - http://www.securityfocus.com/archive/1/428138/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2005:129 - http://secunia.com/advisories/19185 - http://securityreason.com/securityalert/604 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9589 - http://www.securityfocus.com/archive/1/428138/100/0/threaded - https://oval.cisecurity.org/repository/search/d
%3A9589 - http://www.securityfocus.com/archive/1/428138/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1747 - http://secunia.com/advisories/19072 - http://rhn.redhat.com/errata/RHSA-2005-582.html - http://www.securityfocus.com/bid/14366 - http://www.debian.org/security/2005/dsa-805 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=163013 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1346 - http://www.vupen.com/english/advisories/2006/0789 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936a
en.com/english/advisories/2006/0789 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.ht
449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.
.org%3E - https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2005-1269 State: PUBLISHED Published: 2005-06-14T04:00:00 Last Updated: 2024-08-07T21:44:06.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gaim before 1.3.1 allows remote attackers to cause a denial of service (application crash) via a Yahoo! message with non-ASCII characters in a file name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426078/100/0/threaded - http://gaim.sourceforge.net/security/?id=18 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A744 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9544 - http://www.mandri
%3A744 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9544 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:099 - http://www.redhat.com/support/errata/RHSA-2005-518.html - http://www.debian.org/security/2005/dsa-734 - http://www.securityfocus.com/bid/13931 - https://usn.ubuntu.com/139-1/ - http://security.gentoo.org/glsa/glsa-200506-11.xml - http://www.novell.com/linux/security/advisories/2005_36_sudo.html
CVE ID: CVE-2005-1270 State: PUBLISHED Published: 2005-04-28T04:00:00 Last Updated: 2024-08-07T21:44:05.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) check_update.sh and (2) rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13399 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20279 - http://secunia.com/advisories/15127 - http://www.osvdb.org/15861 - http://www.gentoo.org/security/en/glsa/glsa-200504-25.xml
CVE ID: CVE-2005-1271 State: REJECTED Published: 2005-05-12T04:00:00 Last Updated: 2005-11-02T10:00:00 Description: No description available.