Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-0489 State: PUBLISHED Published: 2006-05-31T10:00:00 Last Updated: 2024-08-07T21:13:54.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: The /proc handling (proc/base.c) Linux kernel 2.4 before 2.4.17 allows local users to cause a denial of service via unknown vectors that cause an invalid access of free memory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://www.debian.org/security/2006/dsa-1082 - http://www.securityfocus.com/bid/18173 - http://www.debian.org/security/2006/dsa-1070 - http://www.debian.org/security/2006/dsa-1067 - http://www.debian.org/security/2006/dsa-1069 - http://secunia.com/advi
- http://www.debian.org/security/2006/dsa-1067 - http://www.debian.org/security/2006/dsa-1069 - http://secunia.com/advisories/20202 - http://secunia.com/advisories/20338 - http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes
CVE ID: CVE-2005-0490 State: PUBLISHED Published: 2005-02-21T05:00:00 Last Updated: 2024-08-07T21:13:54.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by (1) the Curl_input_ntlm function in http_ntlm.c during NTLM authentication or (2) the Curl_krb_kauth and krb4_auth functions in krb4.c during Kerberos authentication. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-discl
Kerberos authentication. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=110959085507755&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000940 - http://www.idefense.com/application/poi/display?id=202&type=vulnerabilities - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10273 - http://www.securityfocus.com/bid/12616 - http://www.securityfocus.com/bid/12615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19423 - http://www.idefense.com/application/poi/display?id=203&type=vulnerabilities - http://www.mandriva.com/security/advisories?name=MDKSA-2005:048 - http://www.gentoo.org/s
?id=203&type=vulnerabilities - http://www.mandriva.com/security/advisories?name=MDKSA-2005:048 - http://www.gentoo.org/security/en/glsa/glsa-200503-20.xml - http://www.redhat.com/support/errata/RHSA-2005-340.html - http://www.novell.com/linux/security/advisories/2005_11_curl.html
CVE ID: CVE-2005-0491 State: PUBLISHED Published: 2005-02-21T05:00:00 Last Updated: 2024-08-07T21:13:54.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a long type 77 request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14327 - http://www.securityfocus.com/bid/12594 - http://marc.info/?l=bugtraq&m=110887325425794&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19398
CVE ID: CVE-2005-0492 State: PUBLISHED Published: 2005-02-21T05:00:00 Last Updated: 2024-08-07T21:13:54.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat Reader 6.0.3 and 7.0.0 allows remote attackers to cause a denial of service (application crash) via a PDF file that contains a negative Count value in the root page node. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14813 - http://www.adobe.com/support/techdocs/331468.html - http://marc.info/?l=bugtraq&m=110879063511486&w=2 - http://www.vupen.com/english/advisories/2005/0310 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19946
CVE ID: CVE-2005-0493 State: PUBLISHED Published: 2005-02-21T05:00:00 Last Updated: 2024-08-07T21:13:54.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in bizmail.cgi in Biz Mail Form before 2.2 allows remote attackers to bypass the email check and send spam e-mail via CRLF sequences and forged mail headers in the email parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110876655521321&w=2
CVE ID: CVE-2005-0494 State: PUBLISHED Published: 2005-02-21T05:00:00 Last Updated: 2024-08-07T21:13:54.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a does not properly validate the password before performing changes, which allows remote attackers on the LAN to gain access via a direct POST request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19387 - http://secunia.com/advisories/14353 - http://marc.info/?l=bugtraq&m=110886937131507&w=2
CVE ID: CVE-2005-0495 State: PUBLISHED Published: 2005-02-21T05:00:00 Last Updated: 2024-08-07T21:13:54.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the (1) sn1, (2) year, or (3) page parameter to zboard.php or (4) filename to view_image.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19420 - http://marc.info/?l=bugtraq&m=110884332105513&w=2 - http://securitytracker.com/id?1013243
CVE ID: CVE-2005-0496 State: PUBLISHED Published: 2005-02-21T05:00:00 Last Updated: 2024-08-07T21:13:54.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arkeia Network Backup Client 5.x contains hard-coded credentials that effectively serve as a back door, which allows remote attackers to access the file system and possibly execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20667 - http://metasploit.com/research/arkeia_agent/ - http://securitytracker.com/id?1013256 - http://marc.info/?l=bugtraq&m=110900879826004&w=2
CVE ID: CVE-2005-0497 State: PUBLISHED Published: 2005-02-21T05:00:00 Last Updated: 2024-08-07T21:13:54.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: ADP Elite System Max 9000 allows remote authenticated users to gain privileges by uploading a .profile that sets the ADPROOT environment variable to the root directory. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110901051420503&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20622
CVE ID: CVE-2005-0498 State: PUBLISHED Published: 2005-02-21T05:00:00 Last Updated: 2024-08-07T21:13:54.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gigafast router (aka CompUSA router) allows remote attackers to gain sensitive information and bypass the login page via a direct request to backup.cfg, which reveals the administrator password in plaintext. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110900986022760&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19422
CVE ID: CVE-2005-0499 State: PUBLISHED Published: 2005-02-21T05:00:00 Last Updated: 2024-08-07T21:13:54.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gigafast router (aka CompUSA router) with the DNS proxy option enabled allows remote attackers to cause a denial of service via malformed DNS queries. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110900986022760&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19426
CVE ID: CVE-2005-0500 State: PUBLISHED Published: 2005-02-21T05:00:00 Last Updated: 2024-08-07T21:13:54.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to spoof the domain name of a URL in a titlebar for a script-initiated popup window, which could facilitate phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=110895997201027&w=2 - http://secunia.com/advisories/14335 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19452 - http://www.securityfocus.com/bid/12602
CVE ID: CVE-2005-0501 State: PUBLISHED Published: 2005-02-21T05:00:00 Last Updated: 2024-08-07T21:13:54.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Bontago 1.1 and earlier allows remote attackers to execute arbitrary code via a long nickname. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19406 - http://aluigi.altervista.org/adv/bontagobof-adv.txt - http://secunia.com/advisories/14350 - http://www.securityfocus.com/bid/12603
CVE ID: CVE-2005-0502 State: PUBLISHED Published: 2005-02-21T05:00:00 Last Updated: 2024-08-07T21:13:54.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Xinkaa 1.0.3 and earlier allows remote attackers to read arbitrary files via (1) ../ and (2) ..\ characters in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/xinkaa-adv.txt - http://secunia.com/advisories/14349 - http://www.securityfocus.com/bid/12606 - http://www.vupen.com/english/advisories/2005/0189 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19404
CVE ID: CVE-2005-0503 State: PUBLISHED Published: 2005-02-21T05:00:00 Last Updated: 2024-08-07T21:13:54.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://lists.freedesktop.org/archives/uim/2005-February/000996.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:046 - http://www.securityfocus.com/bid/12604 - http://secunia.com/advisories/13981
CVE ID: CVE-2005-0504 State: PUBLISHED Published: 2005-02-22T05:00:00 Last Updated: 2024-08-07T21:13:54.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the MoxaDriverIoctl function for the moxa serial driver (moxa.c) in Linux 2.2.x, 2.4.x, and 2.6.x before 2.6.22 allows local users to execute arbitrary code via a certain modified length value. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://www.securityfocus.com/bid/12195 - http://www.debian.org/security/2006/dsa-1082 - http://www.redhat.com/support/errata/RHSA-2008-0237.html - http://secunia.com/advisories/26651 - http://www.debian.org/security/
ww.redhat.com/support/errata/RHSA-2008-0237.html - http://secunia.com/advisories/26651 - http://www.debian.org/security/2006/dsa-1070 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030660.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9770 - http://www.debian.org/security/2006/dsa-1067 - http://www.redhat.com/support/errata/RHSA-2005-551.html - http://www.debian.org/security/2006/dsa-1069 - http://secunia.com/advisories/17002 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 - http://www.redhat.com/support/errata/RHSA-2005-529.html - http://www.redhat.com/support/errata/RHSA-2005-663.html - http://www.vupen.com/englis
upport/errata/RHSA-2005-529.html - http://www.redhat.com/support/errata/RHSA-2005-663.html - http://www.vupen.com/english/advisories/2005/1878 - http://www.ubuntu.com/usn/usn-508-1 - http://secunia.com/advisories/20202 - http://securitytracker.com/id?1013273 - http://secunia.com/advisories/30112 - http://secunia.com/advisories/20338
CVE ID: CVE-2005-0505 State: PUBLISHED Published: 2005-02-22T05:00:00 Last Updated: 2024-08-07T21:13:54.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Information Resource Manager (IRM) before 1.5.2.1 allows remote attackers to have "potentially serious" impact, related to LDAP logins. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14342 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19419 - http://sourceforge.net/project/shownotes.php?release_id=306629
CVE ID: CVE-2005-0506 State: PUBLISHED Published: 2005-02-22T05:00:00 Last Updated: 2024-08-07T21:13:54.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a registry key, which allows local and possibly remote users to steal usernames and passwords and impersonate other users via keys such as Avaya\IP400\Generic. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110909733831694&w=2 - http://marc.info/?l=bugtraq&m=110910486128709&w=2 - http://support.avaya.com/elmodocs2/security/ASA-2005-041_Sensitive_Info_Leak.pdf
CVE ID: CVE-2005-0507 State: PUBLISHED Published: 2005-02-22T05:00:00 Last Updated: 2024-08-07T21:13:54.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SD Server 4.0.70 and earlier allows remote attackers to read arbitrary files via .. sequences in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.gdsoftware.dk/ - http://marc.info/?l=full-disclosure&m=110901639709476&w=2 - http://marc.info/?l=bugtraq&m=110910535122762&w=2 - http://secunia.com/advisories/14365
CVE ID: CVE-2005-0508 State: PUBLISHED Published: 2005-02-22T05:00:00 Last Updated: 2024-08-07T21:13:54.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain features of the Rhino scripting engine due to a "script security issue." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12619 - http://secunia.com/advisories/14336 - http://xml.apache.org/batik/#SecurityWarning
CVE ID: CVE-2005-0509 State: PUBLISHED Published: 2005-02-22T05:00:00 Last Updated: 2024-08-07T21:13:54.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (.Net) allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<". Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110867912714913&w=2 - http://secunia.com/advisories/14325 - http://it-project.ru/andir/docs/aspxvuln/aspxvuln.en.xml
CVE ID: CVE-2005-0510 State: PUBLISHED Published: 2005-02-22T05:00:00 Last Updated: 2024-08-07T21:13:54.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: The daemon for fallback-reboot before 0.995 allows attackers to cause a denial of service (daemon exit), possibly related to verbose debug messages when the daemon is not on a tty. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14328 - http://dcs.nac.uci.edu/~strombrg/fallback-reboot/
CVE ID: CVE-2005-0511 State: PUBLISHED Published: 2005-02-23T05:00:00 Last Updated: 2024-08-07T21:13:54.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers to execute arbitrary PHP code via nested variables in the template parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14326 - http://www.vbulletin.com/forum/showthread.php?postid=819562 - http://marc.info/?l=bugtraq&m=110910899415763&w=2 - http://www.securityfocus.com/bid/12622
CVE ID: CVE-2005-0512 State: PUBLISHED Published: 2005-02-23T05:00:00 Last Updated: 2024-08-07T21:13:54.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Tar.php in Mambo 4.5.2 allows remote attackers to execute arbitrary PHP code by modifying the mosConfig_absolute_path parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2004-1693. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14337 - http://mamboforge.net/frs/download.php/4043/Patch_4.5.2_to_4.5.2.1.zip
CVE ID: CVE-2005-0513 State: PUBLISHED Published: 2005-02-23T05:00:00 Last Updated: 2024-08-07T21:13:54.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in mail_autocheck.php in the Email This Entry add-on for pMachine Pro 2.4, and possibly other versions including pMachine Free, allows remote attackers to execute arbitrary PHP code by directly requesting mail_autocheck.php and modifying the pm_path parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2003-1086. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12597 - http://www.sec
Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12597 - http://www.securityfocus.com/bid/15473 - http://marc.info/?l=full-disclosure&m=110883604531802&w=2
CVE ID: CVE-2005-0514 State: PUBLISHED Published: 2005-02-23T05:00:00 Last Updated: 2024-08-07T21:13:54.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Verity Ultraseek before 5.3.3 allows remote attackers to inject arbitrary HTML and web script via search parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.mikx.de/index.php?p=6 - http://secunia.com/advisories/14367 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html - http://www.kb.cert.org/vuls/id/716144
CVE ID: CVE-2005-0515 State: PUBLISHED Published: 2005-03-18T05:00:00 Last Updated: 2024-08-07T21:13:54.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Smc.exe in My Firewall Plus 5.0 build 1117, and possibly other versions, does not drop privileges before launching the Log Viewer export functionality, which allows local users to corrupt arbitrary files by saving log files. Additional Analyst Notes: - CVE Program Container: References: - http://www.webroot.com/services/mfp_advisory.php - http://www.securityfocus.com/bid/12842 - http://secunia.com/advisories/13577 - http://secunia.com/secunia_research/2004-20/advisory/
CVE ID: CVE-2005-0516 State: PUBLISHED Published: 2005-02-23T05:00:00 Last Updated: 2024-08-07T21:13:54.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ImageGalleryPlugin (ImageGalleryPlugin.pm) in Twiki allows remote attackers to execute arbitrary commands via certain commands that generate thumbnails. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14384 - http://marc.info/?l=bugtraq&m=110918725225288&w=2 - http://www.enyo.de/fw/security/notes/twiki-robustness.html - http://static.enyo.de/fw/patches/twiki/imagegallery-robustness-20041128.diff
CVE ID: CVE-2005-0517 State: PUBLISHED Published: 2005-02-23T05:00:00 Last Updated: 2024-08-07T21:13:54.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: PeerFTP_5 stores sensitive information such as passwords in plaintext in the PeerFTP.ini files, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013263
CVE ID: CVE-2005-0518 State: PUBLISHED Published: 2005-02-23T05:00:00 Last Updated: 2024-08-07T21:13:54.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: eXeem 0.21 stores sensitive information such as passwords in plaintext in the Exeem registry key, which allows local users to gain privileges via the proxy_user and proxy_password values. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013266
CVE ID: CVE-2005-0519 State: PUBLISHED Published: 2005-02-23T05:00:00 Last Updated: 2024-08-07T21:13:54.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: ArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a ZIP file containing a shortcut (.LNK) file, using SITE UNZIP to extract the .LNK file onto the server, then accessing the file, a different vulnerability than CVE-2005-0520. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12487 - http://www.osvdb.org/13614 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17939 - http://www.argosoft.com/ftpserver/changelist.aspx - http://secun
://exchange.xforce.ibmcloud.com/vulnerabilities/17939 - http://www.argosoft.com/ftpserver/changelist.aspx - http://secunia.com/advisories/14172
CVE ID: CVE-2005-0520 State: PUBLISHED Published: 2005-02-23T05:00:00 Last Updated: 2024-08-07T21:13:54.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: ArGoSoft FTP Server before 1.4.2.8 allows remote attackers to read arbitrary files via shortcut (.LNK) files in the SITE COPY command, a different vulnerability than CVE-2005-0519. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19442 - http://www.argosoft.com/ftpserver/changelist.aspx - http://www.securityfocus.com/bid/12632 - http://www.osvdb.org/14061
CVE ID: CVE-2005-0521 State: PUBLISHED Published: 2005-02-23T05:00:00 Last Updated: 2024-08-07T21:13:54.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: SendLink 1.5 stores sensitive information, possibly including passwords, in plaintext in the data.eat file, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013269
CVE ID: CVE-2005-0522 State: PUBLISHED Published: 2005-02-23T05:00:00 Last Updated: 2024-08-07T21:13:54.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chat Anywhere 2.72a stores sensitive information such as passwords in plaintext in the .INI file for a chatroom, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013270
CVE ID: CVE-2005-0523 State: PUBLISHED Published: 2005-02-23T05:00:00 Last Updated: 2024-08-07T21:13:54.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in ProZilla 1.3.7.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the Location header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/exploits/5WP082KEUW.html - http://www.securityfocus.com/bid/12635 - http://deicide.siyahsapka.org/exploits/proz_ex2.c - http://www.debian.org/security/2005/dsa-719
CVE ID: CVE-2005-0524 State: PUBLISHED Published: 2005-04-03T05:00:00 Last Updated: 2024-08-07T21:13:54.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: The php_handle_iff function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service (infinite loop) via a -8 size value. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15183 - http://securitytracker.com/id?1013619 - http://www.redhat.com/support/errata/RHSA-2005-406.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19920 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:072