Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
69 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11615 - http://secunia.com/advisories/27582 - http://scary.beasts.org/security/CESA-2007-006.html
CVE ID: CVE-2005-4873 State: PUBLISHED Published: 2008-03-24T10:00:00 Last Updated: 2024-08-08T00:01:23.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the phpcups PHP module for CUPS 1.1.23rc1 might allow context-dependent attackers to execute arbitrary code via vectors that result in long function parameters, as demonstrated by the cups_get_dest_options function in phpcups.c. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41497 - http://www.cups.org/str.php?L1102
CVE ID: CVE-2005-4874 State: PUBLISHED Published: 2008-03-28T23:00:00 Last Updated: 2024-08-08T00:01:23.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XMLHttpRequest object in Mozilla 1.7.8 supports the HTTP TRACE method, which allows remote attackers to obtain (1) proxy authentication passwords via a request with a "Max-Forwards: 0" header or (2) arbitrary local passwords on the web server that hosts this object. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=297078 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41553 - https://bugzilla.mozilla.org/show_bug.cgi?id=302489
CVE ID: CVE-2005-4875 State: PUBLISHED Published: 2008-05-19T10:00:00 Last Updated: 2024-08-08T00:01:23.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the phpinfo function and prints values of unspecified environment variables. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42457 - http://bugs.typo3.org/view.php?id=1250 - http://typo3.org/teams/security/security-bulletins/typo3-20050725-1/
CVE ID: CVE-2005-4876 State: PUBLISHED Published: 2008-08-14T22:00:00 Last Updated: 2024-08-08T00:01:23.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.2.2, and possibly other versions before 2.3.0 Beta 2, allows remote attackers to inject arbitrary web script or HTML via the username parameter, a different vulnerability than CVE-2005-4877. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44689 - http://www.igniterealtime.org/issues/browse/JM-430
CVE ID: CVE-2005-4877 State: PUBLISHED Published: 2008-08-14T22:00:00 Last Updated: 2024-08-08T00:01:23.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.3.0 Beta 2 allows remote attackers to inject arbitrary web script or HTML via Javascript events in the username parameter, a different vulnerability than CVE-2005-4876. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44690 - http://www.igniterealtime.org/issues/browse/JM-430
CVE ID: CVE-2005-4878 State: PUBLISHED Published: 2009-02-18T20:00:00 Last Updated: 2024-08-08T00:01:23.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.6b20 and (2) base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.2, and unspecified other console scripts in these products, allow remote attackers to inject arbitrary web script or HTML via the sig[1] parameter and possibly other parameters, a different vulnerability than CVE-2007-6156. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.
y than CVE-2007-6156. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48848 - http://www.osvdb.org/24306 - http://secunia.com/advisories/17523 - http://www.debian.org/security/2005/dsa-893 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=336788
CVE ID: CVE-2005-4879 State: PUBLISHED Published: 2009-03-31T17:00:00 Last Updated: 2024-08-08T00:01:23.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in jax_guestbook.php in Jax Guestbook 3.1 and 3.31 allow remote attackers to inject arbitrary web script or HTML via the (1) gmt_ofs and (2) language parameters. NOTE: the page parameter is already covered by CVE-2006-1913. NOTE: it was later reported that 3.50 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.securityfocus.com/vulnerabilities/exploits/28523.html - http://www.securityfocus.com/bid/28523 - http://secunia.com/ad
s.securityfocus.com/vulnerabilities/exploits/28523.html - http://www.securityfocus.com/bid/28523 - http://secunia.com/advisories/16337 - http://lostmon.blogspot.com/2005/08/jax-php-scripts-multiple.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43562
CVE ID: CVE-2005-4880 State: PUBLISHED Published: 2009-03-31T17:00:00Z Last Updated: 2024-09-17T03:37:59.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jax Guestbook 3.1 and 3.31 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain IP addresses of users via a direct request to (1) guestbook, (2) guestbook_ips2block, (3) ips2block, and (4) formmailer/logfile.csv. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16337 - http://lostmon.blogspot.com/2005/08/jax-php-scripts-multiple.html
CVE ID: CVE-2005-4881 State: PUBLISHED Published: 2009-10-19T19:27:00 Last Updated: 2024-08-08T00:01:23.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: The netlink subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.13-rc1 does not initialize certain padding fields in structures, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors, related to the (1) tc_fill_qdisc, (2) tcf_fill_node, (3) neightbl_fill_info, (4) neightbl_fill_param_info, (5) neigh_fill_info, (6) rtnetlink_fill_ifinfo, (7) rtnetlink_fill_iwinfo, (8) vif_delete, (9) ipmr_destroy_unres, (10) ipmr_cache_alloc_unres, (11) ipmr_cache_resolve,
7) rtnetlink_fill_iwinfo, (8) vif_delete, (9) ipmr_destroy_unres, (10) ipmr_cache_alloc_unres, (11) ipmr_cache_resolve, (12) inet6_fill_ifinfo, (13) tca_get_fill, (14) tca_action_flush, (15) tcf_add_notify, (16) tc_dump_action, (17) cbq_dump_police, (18) __nlmsg_put, (19) __rta_fill, (20) __rta_reserve, (21) inet6_fill_prefix, (22) rsvp_dump, and (23) cbq_dump_ovl functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/09/17/9 - http://www.openwall.com/lists/oss-security/2009/09/17/1 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=30e744716c4a6cc4e8ecaaddf68f20057c03dc8d - http://git.kern
/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=30e744716c4a6cc4e8ecaaddf68f20057c03dc8d - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9ef1d4c7c7aca1cd436612b6ca785b726ffb8ed8 - http://secunia.com/advisories/37084 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.13/ChangeLog-2.6.13-rc1 - http://www.redhat.com/support/errata/RHSA-2009-1522.html - http://secunia.com/advisories/37909 - http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.6 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=3408cce0c2f380884070896420ca566704452fb5 - https://oval.cisecurity.org/repository/search/definition/oval%3
Ba=commit%3Bh=3408cce0c2f380884070896420ca566704452fb5 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11744 - https://bugzilla.redhat.com/show_bug.cgi?id=521601 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8a47077a0b5aa2649751c46e7a27884e6686ccbf - http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html - http://marc.info/?l=git-commits-head&m=112002138324380 - http://www.openwall.com/lists/oss-security/2009/09/06/2 - http://www.openwall.com/lists/oss-security/2009/09/07/2 - http://www.openwall.com/lists/oss-security/2009/09/05/2 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.
tp://www.openwall.com/lists/oss-security/2009/09/05/2 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=0f3f2328f63c521fe4b435f148687452f98b2349 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b3563c4fbff906991a1b4ef4609f99cca2a0de6a
CVE ID: CVE-2005-4882 State: PUBLISHED Published: 2009-11-20T19:00:00Z Last Updated: 2024-09-17T02:27:05.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: tftpd in Philippe Jounin Tftpd32 2.74 and earlier, as used in Wyse Simple Imager (WSI) and other products, allows remote attackers to cause a denial of service (daemon crash) via a long filename in a TFTP read (aka RRQ or get) request, a different vulnerability than CVE-2002-2226. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2005-01/0386.html - http://www.kb.cert.org/vuls/id/632633 - http://secway.org/advisory/ad20050108.txt - http://www.osvdb.org/12898
86.html - http://www.kb.cert.org/vuls/id/632633 - http://secway.org/advisory/ad20050108.txt - http://www.osvdb.org/12898 - http://securitytracker.com/id?1012856
CVE ID: CVE-2005-4883 State: PUBLISHED Published: 2009-11-20T19:00:00Z Last Updated: 2024-09-16T20:22:53.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Philippe Jounin Tftpd32 before 2.80 allows remote attackers to cause a denial of service (daemon crash) via invalid "connect frames." Additional Analyst Notes: - CVE Program Container: References: - http://pagesperso-orange.fr/philippe.jounin/tftpd32_news.html
CVE ID: CVE-2005-4884 State: PUBLISHED Published: 2010-01-25T21:00:00Z Last Updated: 2024-09-17T02:32:30.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle OLAP component in Oracle Database Server 10.1.0.4 (10g) allows remote authenticated attackers to affect availability via unknown vectors, aka DB02. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html
CVE ID: CVE-2005-4885 State: PUBLISHED Published: 2010-01-28T20:00:00Z Last Updated: 2024-09-16T23:01:22.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on certain Sun StorEdge 6130 (SE6130) Controller Arrays allows remote attackers to delete data via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200971-1
CVE ID: CVE-2005-4886 State: PUBLISHED Published: 2010-02-26T19:00:00 Last Updated: 2024-08-08T00:01:23.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: The selinux_parse_skb_ipv6 function in security/selinux/hooks.c in the Linux kernel before 2.6.12-rc4 allows remote attackers to cause a denial of service (OOPS) via vectors associated with an incorrect call to the ipv6_skip_exthdr function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56614 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0d3d077cd4f1154e63a9858e47fe3fb1ad0c03e5 - http://www.openwall.com/lists/oss-securit
rvalds/linux-2.6.git%3Ba=commit%3Bh=0d3d077cd4f1154e63a9858e47fe3fb1ad0c03e5 - http://www.openwall.com/lists/oss-security/2010/02/22/3 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.12/ChangeLog-2.6.12-rc4 - https://bugzilla.redhat.com/show_bug.cgi?id=160117
CVE ID: CVE-2005-4887 State: PUBLISHED Published: 2010-04-05T15:15:00Z Last Updated: 2024-09-16T16:43:38.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: NWFTPD.nlm before 5.06.05 in the FTP server in Novell NetWare 6.5 SP5 allows attackers to have an unspecified impact via vectors related to passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1 - https://bugzilla.novell.com/show_bug.cgi?id=133977
CVE ID: CVE-2005-4888 State: PUBLISHED Published: 2010-04-05T15:15:00Z Last Updated: 2024-09-17T02:07:16.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: NWFTPD.nlm before 5.06.04 in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (excessive stale connections) by establishing many FTP sessions, which persist in the Not-Logged-In state after each session is completed. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1 - https://bugzilla.novell.com/show_bug.cgi?id=97819
CVE ID: CVE-2005-4889 State: PUBLISHED Published: 2010-06-08T18:00:00 Last Updated: 2024-08-08T00:01:23.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of an executable file during deletion of the file in an RPM package removal, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid or (2) setgid file, a related issue to CVE-2010-2059. Additional Analyst Notes: - CVE Program Container: References: - http://distrib-coffee.ipsl.jussieu.fr/pub/mirrors/rpm/files/rpm/rpm-4.4/rpm-4.4.3.tar.gz - http://www.mandriva.com/security/advisories?name=MDVSA-2010:180 - https://bugz
/rpm/files/rpm/rpm-4.4/rpm-4.4.3.tar.gz - http://www.mandriva.com/security/advisories?name=MDVSA-2010:180 - https://bugzilla.redhat.com/show_bug.cgi?id=598775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59426 - https://bugzilla.redhat.com/show_bug.cgi?id=125517
CVE ID: CVE-2005-4890 State: PUBLISHED Published: 2019-11-04T18:38:09 Last Updated: 2024-08-08T00:01:23.403Z Vendors: Red Hat Products: shadow, sudo Problem Types: tty hijacking possible in "su" via TIOCSTI ioctl Description: There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/12/15/5 - https://security-tracker.debian.org/tracker/CVE-2005-4890 - https://bugzilla.redha
com/lists/oss-security/2014/12/15/5 - https://security-tracker.debian.org/tracker/CVE-2005-4890 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2005-4890 - https://access.redhat.com/security/cve/cve-2005-4890 - http://www.openwall.com/lists/oss-security/2012/11/06/8 - http://www.openwall.com/lists/oss-security/2013/05/20/3 - http://www.openwall.com/lists/oss-security/2013/11/28/10 - http://www.openwall.com/lists/oss-security/2013/11/29/5 - http://www.openwall.com/lists/oss-security/2014/10/20/9 - http://www.openwall.com/lists/oss-security/2014/10/21/1 - http://www.openwall.com/lists/oss-security/2016/02/25/6
CVE ID: CVE-2005-4891 State: PUBLISHED Published: 2020-01-15T16:09:27 Last Updated: 2024-08-08T00:01:23.502Z Vendors: Simple Machine Forum Products: Simple Machine Forum Problem Types: SQL Injection Description: Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers to inject arbitrary SQL statements. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/11/14/10 - https://securiteam.com/exploits/5HP0N0KG0O/
CVE ID: CVE-2005-4892 State: REJECTED Published: 2020-11-05T19:54:34 Last Updated: 2020-11-05T19:54:34 Description: No description available.
CVE ID: CVE-2005-4893 State: REJECTED Published: 2020-11-05T19:54:55 Last Updated: 2020-11-05T19:54:55 Description: No description available.
CVE ID: CVE-2005-4894 State: REJECTED Published: 2020-11-05T19:55:18 Last Updated: 2020-11-05T19:55:18 Description: No description available.
CVE ID: CVE-2005-4895 State: PUBLISHED Published: 2012-07-25T19:00:00Z Last Updated: 2024-09-16T17:18:40.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in TCMalloc (tcmalloc.cc) in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected. Additional Analyst Notes: - CVE Program Container: References: - http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/ - http://code.google.com/p/gperftools/source/browse/tags/perftools-0.4/ChangeLog
CVE ID: CVE-2005-4900 State: PUBLISHED Published: 2016-10-14T16:00:00 Last Updated: 2024-08-08T00:01:23.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: SHA-1 is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of SHA-1 in TLS 1.2. NOTE: this CVE exists to provide a common identifier for referencing this SHA-1 issue; the existence of an identifier is not, by itself, a technology recommendation. Additional Analyst Notes: - CVE Program Container: References: - https://sites.google.com/site/itstheshappening - http://www.securityfocus.com/bid/12577 - http://shattered.io/ - https://www.
://sites.google.com/site/itstheshappening - http://www.securityfocus.com/bid/12577 - http://shattered.io/ - https://www.schneier.com/blog/archives/2005/08/new_cryptanalyt.html - http://www.cwi.nl/news/2017/cwi-and-google-announce-first-collision-industry-security-standard-sha-1 - http://ia.cr/2007/474 - https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html - https://security.googleblog.com/2015/12/an-update-on-sha-1-certificates-in.html - https://www.schneier.com/blog/archives/2005/02/sha1_broken.html - https://arstechnica.com/security/2017/02/at-deaths-door-for-years-widely-used-sha1-function-is-now-dead/ - https://kc.mcafee.com/corporate/index?page=content&id=SB10340
CVE ID: CVE-2006-0001 State: PUBLISHED Published: 2006-09-12T23:00:00 Last Updated: 2024-08-07T16:18:20.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted PUB file, which causes an overflow when parsing fonts. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A590 - http://www.kb.cert.org/vuls/id/406236 - http://securityreason.com/securityalert/1548 - http://securitytracker.com/id?1016825 - http://www.securityfocus.com/bid/19951 - http
ityreason.com/securityalert/1548 - http://securitytracker.com/id?1016825 - http://www.securityfocus.com/bid/19951 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-054 - http://www.us-cert.gov/cas/techalerts/TA06-255A.html - http://secunia.com/advisories/21863 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28648 - http://www.securityfocus.com/archive/1/446630/100/100/threaded - http://www.vupen.com/english/advisories/2006/3565 - http://www.securityfocus.com/archive/1/445824/100/0/threaded - http://www.computerterrorism.com/research/ct12-09-2006-2.htm - http://www.securityfocus.com/archive/1/446630/100/100/threaded
CVE ID: CVE-2006-0002 State: PUBLISHED Published: 2006-01-10T22:00:00 Last Updated: 2024-08-07T16:18:20.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1082 - http://support.avaya.com/elmodocs2/security/ASA-2006
g/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1082 - http://support.avaya.com/elmodocs2/security/ASA-2006-004.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1165 - http://securitytracker.com/id?1015460 - http://www.securityfocus.com/archive/1/421520/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22878 - http://securityreason.com/securityalert/331 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1485 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval
tion/oval%3Aorg.mitre.oval%3Adef%3A1485 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1316 - http://www.vupen.com/english/advisories/2006/0119 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-003 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1456 - http://securityreason.com/securityalert/330 - http://www.securityfocus.com/bid/16197 - http://www.securityfocus.com/archive/1/421518/100/0/threaded - http://secunia.com/advisories/18368 - http://www.kb.cert.org/vuls/id/252146 - http://www.us-cert.gov/cas/techalerts/TA06-010A.html - http://securitytracker.com/id?1015461
CVE ID: CVE-2006-0003 State: PUBLISHED Published: 2006-04-12T00:00:00 Last Updated: 2024-08-07T16:18:20.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2452 - http://www.securityfocus.com/archive/1/475108/100/100/threaded - http://www.securityfocus.com/archive/1/487216/100/200/threaded - http://www.securityfoc
hive/1/475108/100/100/threaded - http://www.securityfocus.com/archive/1/487216/100/200/threaded - http://www.securityfocus.com/archive/1/487219/100/200/threaded - http://www.securityfocus.com/archive/1/475104/100/100/threaded - http://secunia.com/advisories/19583 - http://www.hitachi-support.com/security_e/vuls_e/HS06-013_e/01-e.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1323 - http://www.securityfocus.com/bid/20797 - http://securitytracker.com/id?1015894 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25006 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1511 - http://www.us-cert.gov/cas/techa
//oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1511 - http://www.us-cert.gov/cas/techalerts/TA06-101A.html - http://www.hitachi-support.com/security_e/vuls_e/HS06-013_e/index-e.html - http://www.securityfocus.com/bid/17462 - https://www.exploit-db.com/exploits/2164 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1778 - https://www.exploit-db.com/exploits/2052 - http://secunia.com/advisories/20719 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1204 - http://www.kb.cert.org/vuls/id/234812 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-014 - http: