Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/vulnerabilities/22724 - http://www.gentoo.org/security/en/glsa/glsa-200512-05.xml - http://secunia.com/advisories/18052 - http://www.xmailserver.org/ChangeLog.html#oct_12__2005_v_1_22 - http://securityreason.com/securityalert/81 - http://www.osvdb.org/20010 - http://securitytracker.com/id?1015055 - http://secunia.com/advisories/17637 - http://secunia.com/advisories/17194
CVE ID: CVE-2005-2944 State: PUBLISHED Published: 2005-09-16T04:00:00Z Last Updated: 2024-09-17T02:31:23.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: The perform_file_save function in GNOME Workstation Command Center (gwcc) 0.9.6 and earlier allows local users to create and overwrite arbitrary files via a symlink attack on the gwcc_out.txt temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16833 - http://bugs.gentoo.org/show_bug.cgi?id=104566 - http://www.zataz.net/adviso/gwcc-09052005.txt
CVE ID: CVE-2005-2945 State: PUBLISHED Published: 2005-09-16T04:00:00 Last Updated: 2024-08-07T22:53:29.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive information from files created by (1) arc (arc.c) or (2) marc (marc.c). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16805 - http://marc.info/?l=bugtraq&m=112689596714383&w=2 - http://www.zataz.net/adviso/arc-09052005.txt - http://www.debian.org/security/2005/dsa-843 - http://secunia.com/advisories/17068
CVE ID: CVE-2005-2946 State: PUBLISHED Published: 2005-09-16T04:00:00 Last Updated: 2024-08-07T22:53:29.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm, which makes it easier for remote attackers to forge certificates with a valid certificate authority signature. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.ubuntu.com/show_bug.cgi?id=13593 - http://www.ubuntu.com/usn/usn-179-1 - http://www.cits.rub.de/MD5Collisions/
CVE ID: CVE-2005-2947 State: PUBLISHED Published: 2005-09-16T04:00:00 Last Updated: 2024-08-07T22:53:30.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in KillProcess 2.20 and earlier allows user-assisted attackers to execute arbitrary code via an exe file with a long FileDescription in the version resource. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112629480300071&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22222 - http://marc.info/?l=bugtraq&m=112629550418406&w=2 - http://www.securityfocus.com/bid/14795
CVE ID: CVE-2005-2948 State: PUBLISHED Published: 2005-09-16T04:00:00 Last Updated: 2024-08-07T22:53:29.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: KillProcess 2.20 and earlier allows local users to bypass kill list restrictions by launching multiple processes at the same time, which are not all killed by KillProcess. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112629480300071&w=2
CVE ID: CVE-2005-2949 State: PUBLISHED Published: 2005-09-16T04:00:00 Last Updated: 2024-08-07T22:53:30.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: pam_per_user before 0.4 does not verify if the user name changes between authentication attempts and uses the same subrequest handle, which allows remote attackers or local users to login as other users by using certain applications that allow the username to be changed during authentication, such as /bin/login. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2 - http://secunia.com/advisories/16781/ - http://www.securityfocus.com/bid/14813 - http://marc.info/?l=bugtraq&m
yalert/2 - http://secunia.com/advisories/16781/ - http://www.securityfocus.com/bid/14813 - http://marc.info/?l=bugtraq&m=112654636915661&w=2
CVE ID: CVE-2005-2950 State: PUBLISHED Published: 2005-09-16T04:00:00 Last Updated: 2024-08-07T22:53:29.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.sawmill.net/version_history.html - http://www.nta-monitor.com/news/xss/sawmill/index.htm - http://secunia.com/advisories/16744/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22206 - http://marc.info/?l=bugtraq&m=112654659400488&w=2 - http://securityreason.com/securi
bmcloud.com/vulnerabilities/22206 - http://marc.info/?l=bugtraq&m=112654659400488&w=2 - http://securityreason.com/securityalert/1
CVE ID: CVE-2005-2951 State: PUBLISHED Published: 2005-09-16T04:00:00 Last Updated: 2024-08-07T22:53:29.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary PHP commands via ".." sequences and "%00" (trailing null byte) characters in the l parameter, which is used in an include_once statement. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22258 - http://secunia.com/advisories/16814/ - http://www.securityfocus.com/b
change.xforce.ibmcloud.com/vulnerabilities/22258 - http://secunia.com/advisories/16814/ - http://www.securityfocus.com/bid/14819 - http://rgod.altervista.org/azdg.html - http://marc.info/?l=bugtraq&m=112662698511403&w=2
CVE ID: CVE-2005-2952 State: PUBLISHED Published: 2005-09-16T04:00:00 Last Updated: 2024-08-07T22:53:29.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the l parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14817 - http://securityreason.com/securityalert/4 - http://www.h4cky0u.org/advisories/HYA-2005-007-subscribe-me-pro.txt - http://secunia.com/advisories/16796/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22249 - http://marc.info/?l=bugtraq&m=11266278541
visories/16796/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22249 - http://marc.info/?l=bugtraq&m=112662785418368&w=2
CVE ID: CVE-2005-2953 State: PUBLISHED Published: 2005-09-16T04:00:00 Last Updated: 2024-08-07T22:53:29.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary web script or HTML via the Customer_Login parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14828 - http://marc.info/?l=bugtraq&m=112684680903655&w=2 - http://secunia.com/advisories/16829/
CVE ID: CVE-2005-2954 State: PUBLISHED Published: 2005-09-16T04:00:00 Last Updated: 2024-08-07T22:53:29.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in password_reminder.php in ATutor before 1.5.1 pl1 allows remote attackers to execute arbitrary SQL commands via the email field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14831 - http://secunia.com/advisories/16813/ - http://www.osvdb.org/19411 - http://marc.info/?l=bugtraq&m=112671176100432&w=2 - http://www.vupen.com/english/advisories/2005/1751 - http://rgod.altervista.org/atutor151.html - http://www.atutor.ca/news.php#150905 - https://exch
h/advisories/2005/1751 - http://rgod.altervista.org/atutor151.html - http://www.atutor.ca/news.php#150905 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22282
CVE ID: CVE-2005-2955 State: PUBLISHED Published: 2005-09-16T04:00:00 Last Updated: 2024-08-07T22:53:29.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: config.inc.php in ATutor 1.5.1, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which allows authenticated administrators or educators to execute arbitrary code by uploading files with other executable extensions such as .inc, .php4, or others. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112671176100432&w=2 - http://rgod.altervista.org/atutor151.html
CVE ID: CVE-2005-2956 State: PUBLISHED Published: 2005-09-16T04:00:00 Last Updated: 2024-08-07T22:53:29.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain user chat conversations via direct requests to those files. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/9 - http://marc.info/?l=bugtraq&m=112671176100432&w=2 - http://rgod.altervista.org/atutor151.html - http://www.securityfocus.com/bid/14832
CVE ID: CVE-2005-2957 State: PUBLISHED Published: 2005-09-16T04:00:00 Last Updated: 2024-08-07T22:53:29.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in AVIRA Desktop for Windows 1.00.00.68 with AVPACK32.DLL 6.31.0.3, when archive scanning is enabled, allows remote attackers to execute arbitrary code via a long filename in an ACE archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14824 - http://www.avira.com/en/news/avira_desktop_for_windows_patched_against_vulnerability.html - http://secunia.com/secunia_research/2005-43/advisory/ - http://secunia.com/advisories/16691/ - http://marc.info/?l=
ml - http://secunia.com/secunia_research/2005-43/advisory/ - http://secunia.com/advisories/16691/ - http://marc.info/?l=bugtraq&m=112671128224841&w=2
CVE ID: CVE-2005-2958 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-07T22:53:29.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in the GNOME Data Access library for GNOME2 (libgda2) 1.2.1 and earlier allow attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-871 - http://secunia.com/advisories/17426 - http://securitytracker.com/id?1015107 - http://secunia.com/advisories/17500 - http://www.gentoo.org/security/en/glsa/glsa-200511-01.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2005:203 - http://secunia.com/adviso
en/glsa/glsa-200511-01.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2005:203 - http://secunia.com/advisories/17323 - http://secunia.com/advisories/17391 - http://secunia.com/advisories/17559 - http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00013.html - https://usn.ubuntu.com/212-1/ - http://www.securityfocus.com/bid/15200 - http://secunia.com/advisories/17339 - http://www.novell.com/linux/security/advisories/2005_27_sr.html
CVE ID: CVE-2005-2959 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-07T22:53:29.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in sudo 1.6.8 and earlier allows local users to gain privileges via the (1) SHELLOPTS and (2) PS4 environment variables before executing a bash script on behalf of another user, which are not cleared even though other variables are. Additional Analyst Notes: - CVE Program Container: References: - http://www.sudo.ws/bugs/show_bug.cgi?id=182 - http://secunia.com/advisories/17666 - http://secunia.com/advisories/18549 - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://www.mandriva.co
66 - http://secunia.com/advisories/18549 - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:201 - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://docs.info.apple.com/article.html?artnum=305214 - http://www.debian.org/security/2005/dsa-870 - http://secunia.com/advisories/17322 - http://secunia.com/advisories/17390 - http://www.novell.com/linux/security/advisories/2006_02_sr.html - http://www.securityfocus.com/bid/15191 - http://secunia.com/advisories/17345 - http://www.vupen.com/english/advisories/2007/0930 - http://secunia.com/advisories/17318 - https://usn.ubuntu.com/213-1/ - http://www.secur
om/english/advisories/2007/0930 - http://secunia.com/advisories/17318 - https://usn.ubuntu.com/213-1/ - http://www.securityfocus.com/advisories/9643 - http://www.openpkg.org/security/OpenPKG-SA-2006.002-sudo.html - http://secunia.com/advisories/24479
CVE ID: CVE-2005-2960 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T22:53:29.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a different vulnerability than CVE-2005-3137. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=107871 - http://secunia.com/advisories/17040 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22489 - http://www.securityfocus.com/bid/14994 - http://www.debian.org/security/2005/dsa-836 - http://www.ubuntu.com/usn/usn-198-1 - http://www.debian.
s.com/bid/14994 - http://www.debian.org/security/2005/dsa-836 - http://www.ubuntu.com/usn/usn-198-1 - http://www.debian.org/security/2005/dsa-835 - http://secunia.com/advisories/17182 - http://secunia.com/advisories/17037/ - http://groups.google.com/group/gnu.cfengine.help/browse_thread/thread/fc25e7d98f8ba401/38151ed821803be0#38151ed821803be0 - http://secunia.com/advisories/17142 - http://secunia.com/advisories/17038 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:184 - http://secunia.com/advisories/17215 - http://www.novell.com/linux/security/advisories/2005_23_sr.html
CVE ID: CVE-2005-2961 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T22:53:29.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remote servers to execute arbitrary code via a search response with a crafted string in the HREF field of an <A> tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-834 - http://secunia.com/advisories/17035 - http://www.securityfocus.com/bid/14993 - http://secunia.com/advisories/17021/ - https://exchange.xforce.ibmcloud.com/vulnerabiliti
.securityfocus.com/bid/14993 - http://secunia.com/advisories/17021/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22491
CVE ID: CVE-2005-2962 State: PUBLISHED Published: 2005-09-30T04:00:00 Last Updated: 2024-08-07T22:53:30.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: The post-installation script for ntlmaps before 0.9.9 sets world-readable permissions for the configuration file, which allows local users to obtain the username and password. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-830 - http://secunia.com/advisories/17017 - http://www.securityfocus.com/bid/16700
CVE ID: CVE-2005-2963 State: PUBLISHED Published: 2005-10-13T04:00:00 Last Updated: 2024-08-07T22:53:30.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for all locations that use the require group directive, even when other authentication mechanisms are specified, which might allow remote authenticated users to bypass security restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22520 - http://secunia.com/advisories/17348 - http://www.osvdb.org/19863 - http://secunia.com/advisories/17060
abilities/22520 - http://secunia.com/advisories/17348 - http://www.osvdb.org/19863 - http://secunia.com/advisories/17060/ - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=323789 - http://www.debian.org/security/2005/dsa-844 - http://frontal1.mandriva.com/security/advisories?name=MDKSA-2005:200 - http://www.securityfocus.com/bid/15224 - http://secunia.com/advisories/17067
CVE ID: CVE-2005-2964 State: PUBLISHED Published: 2005-09-28T04:00:00 Last Updated: 2024-08-07T22:53:30.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in AbiWord before 2.2.10 allows attackers to execute arbitrary code via the RTF import mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-188-1 - http://www.abiword.org/release-notes/2.2.10.phtml - http://securitytracker.com/id?1014982 - http://www.gentoo.org/security/en/glsa/glsa-200509-20.xml - http://www.debian.org/security/2005/dsa-894 - http://www.securityfocus.com/bid/14971 - http://secunia.com/advisories/17551 - http://secunia.com/advisor
2005/dsa-894 - http://www.securityfocus.com/bid/14971 - http://secunia.com/advisories/17551 - http://secunia.com/advisories/17052 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22454 - http://www.gentoo.org/security/en/glsa/glsa-200510-04.xml - http://secunia.com/advisories/17070 - http://secunia.com/advisories/16982 - http://www.osvdb.org/19717 - http://secunia.com/advisories/17215 - http://secunia.com/advisories/16990 - http://www.novell.com/linux/security/advisories/2005_23_sr.html - http://secunia.com/advisories/17012
CVE ID: CVE-2005-2965 State: REJECTED Published: 2005-10-11T04:00:00 Last Updated: 2005-11-04T10:00:00 Description: No description available.
CVE ID: CVE-2005-2966 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T22:53:29.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Python SVG import plugin (diasvg_import.py) for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a crafted SVG file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17059 - http://secunia.com/advisories/17047 - http://secunia.com/advisories/17095 - http://www.debian.org/security/2005/dsa-847 - http://www.vupen.com/english/advisories/2005/1950 - http://www.gentoo.org/security/en/glsa/glsa-200510-06.xml - http://www.debian.org/security/2006/d
advisories/2005/1950 - http://www.gentoo.org/security/en/glsa/glsa-200510-06.xml - http://www.debian.org/security/2006/dsa-1025 - http://www.securityfocus.com/bid/15000 - http://secunia.com/advisories/17083 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:187 - http://www.novell.com/linux/security/advisories/2005_22_sr.html - https://usn.ubuntu.com/193-1/ - http://secunia.com/advisories/17108
CVE ID: CVE-2005-2967 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T22:53:29.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in input_cdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format string specifiers in metadata in CDDB server responses when the victim plays a CD. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15044 - http://secunia.com/advisories/17132 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:180 - http://secunia.com/advisories/17282 - http://secunia.com/advisor
.mandriva.com/security/advisories?name=MDKSA-2005:180 - http://secunia.com/advisories/17282 - http://secunia.com/advisories/17097 - http://www.osvdb.org/19892 - http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.415454 - http://xinehq.de/index.php/security/XSA-2005-1 - http://www.debian.org/security/2005/dsa-863 - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0196.html - http://www.novell.com/linux/security/advisories/2005_24_sr.html - http://secunia.com/advisories/17111 - http://www.gentoo.org/security/en/glsa/glsa-200510-08.xml - http://www.ubuntu.com/usn/usn-196-1 - http://secunia.com/advisories/17179 - http://secunia.com/advisories/1
510-08.xml - http://www.ubuntu.com/usn/usn-196-1 - http://secunia.com/advisories/17179 - http://secunia.com/advisories/17162 - http://secunia.com/advisories/17099/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22545
CVE ID: CVE-2005-2968 State: PUBLISHED Published: 2005-09-20T04:00:00 Last Updated: 2024-08-07T22:53:29.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the browser on the command line, which is sent unfiltered to bash. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-868 - http://www.vupen.com/english/advisories/2005/1824 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt - http://www.securityfocus.com/bid/14888 - http://www.securityfocus.com/bid/15495 - https://bug
005.49/SCOSA-2005.49.txt - http://www.securityfocus.com/bid/14888 - http://www.securityfocus.com/bid/15495 - https://bugzilla.mozilla.org/show_bug.cgi?id=307185 - http://www.ubuntu.com/usn/usn-186-2 - http://secunia.com/advisories/16869 - http://www.redhat.com/support/errata/RHSA-2005-791.html - http://www.ubuntu.com/usn/usn-200-1 - http://secunia.com/advisories/17042 - http://www.debian.org/security/2005/dsa-866 - http://www.mozilla.org/security/announce/mfsa2005-58.html - http://secunia.com/advisories/17284 - http://secunia.com/advisories/17149 - http://secunia.com/advisories/17263 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11105 - http://www.k
ries/17263 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11105 - http://www.kb.cert.org/vuls/id/914681 - http://www.redhat.com/support/errata/RHSA-2005-785.html - http://www.ubuntu.com/usn/usn-186-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:174 - http://secunia.com/advisories/17090 - http://www.vupen.com/english/advisories/2005/1794
CVE ID: CVE-2005-2969 State: PUBLISHED Published: 2005-10-18T04:00:00 Last Updated: 2024-08-07T22:53:29.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17259 - http://secunia.com/advisories/23915 - http://www.novell.com/li
iner: References: - http://secunia.com/advisories/17259 - http://secunia.com/advisories/23915 - http://www.novell.com/linux/security/advisories/2005_61_openssl.html - http://secunia.com/advisories/26893 - http://secunia.com/advisories/17389 - http://www.vupen.com/english/advisories/2005/3056 - http://www.vupen.com/english/advisories/2007/2457 - http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm - http://secunia.com/advisories/17813 - http://www.securityfocus.com/bid/15071 - http://secunia.com/advisories/18165 - http://secunia.com/advisories/23340 - http://secunia.com/advisories/18123 - http://www.debian.org/security/2005/dsa-881 - http://www-1.ibm.com/support/docview.wss?uid=isg1SS