Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-0004 State: PUBLISHED Published: 2005-01-20T05:00:00 Last Updated: 2024-08-07T20:57:40.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947 - http://www.debian.org/security/2005/dsa-647 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:036 - http://sunsolve.sun.com/search/document.do?asset
647 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:036 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1 - http://marc.info/?l=bugtraq&m=110608297217224&w=2 - http://secunia.com/advisories/13867 - http://www.securityfocus.com/bid/12277 - http://mysql.osuosl.org/doc/mysql/en/News-4.1.10.html - http://lists.mysql.com/internals/20600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18922
CVE ID: CVE-2005-0005 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T20:57:40.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a large number of layers. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9925 - http://www.debian.org/security/2005/dsa-646 - http://www.gentoo.org/security/en/glsa/glsa-200501-37.xml - http://marc.info/?l=bugtraq&m=110608222117215&w=2 - http://www.idefe
ww.gentoo.org/security/en/glsa/glsa-200501-37.xml - http://marc.info/?l=bugtraq&m=110608222117215&w=2 - http://www.idefense.com/application/poi/display?id=184&type=vulnerabilities - http://www.redhat.com/support/errata/RHSA-2005-071.html - http://www.redhat.com/support/errata/RHSA-2005-070.html
CVE ID: CVE-2005-0006 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T20:57:40.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: The COPS dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (infinite loop). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12326 - http://www.ethereal.com/appnotes/enpa-sa-00017.html - http://www.redhat.com/support/errata/RHSA-2005-037.html - http://secunia.com/advisories/13946/ - http://www.redhat.com/support/errata/RHSA-2005-011.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10801 -
rata/RHSA-2005-011.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18999 - http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml - http://www.ciac.org/ciac/bulletins/p-106.shtml - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:013
CVE ID: CVE-2005-0007 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T20:57:41.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the DLSw dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (application crash from assertion). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12326 - http://www.ethereal.com/appnotes/enpa-sa-00017.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11381 - http://www.redhat.com/support/errata/RHSA-2005-037.html - http://secunia.com/advisories/13946/ - http://www.re
3A11381 - http://www.redhat.com/support/errata/RHSA-2005-037.html - http://secunia.com/advisories/13946/ - http://www.redhat.com/support/errata/RHSA-2005-011.html - http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml - http://www.ciac.org/ciac/bulletins/p-106.shtml - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:013 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19000
CVE ID: CVE-2005-0008 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T20:57:40.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the DNP dissector in Ethereal 0.10.5 through 0.10.8 allows remote attackers to cause "memory corruption." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12326 - http://www.ethereal.com/appnotes/enpa-sa-00017.html - http://www.redhat.com/support/errata/RHSA-2005-037.html - http://secunia.com/advisories/13946/ - http://www.redhat.com/support/errata/RHSA-2005-011.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19001 - http://www.gentoo.org/sec
pport/errata/RHSA-2005-011.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19001 - http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml - http://www.ciac.org/ciac/bulletins/p-106.shtml - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:013 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10689
CVE ID: CVE-2005-0009 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T20:57:40.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the Gnutella dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (application crash). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19002 - http://www.securityfocus.com/bid/12326 - http://www.ethereal.com/appnotes/enpa-sa-00017.html - http://www.redhat.com/support/errata/RHSA-2005-037.html - http://secunia.com/advisories/13946/ - http://www.redhat.com/support/errata/RHSA-2005-011.html -
a/RHSA-2005-037.html - http://secunia.com/advisories/13946/ - http://www.redhat.com/support/errata/RHSA-2005-011.html - http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml - http://www.ciac.org/ciac/bulletins/p-106.shtml - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:013 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10623
CVE ID: CVE-2005-0010 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T20:57:40.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the MMSE dissector in Ethereal 0.10.4 through 0.10.8 allows remote attackers to cause a denial of service by triggering a free of statically allocated memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12326 - http://www.ethereal.com/appnotes/enpa-sa-00017.html - http://www.redhat.com/support/errata/RHSA-2005-037.html - http://secunia.com/advisories/13946/ - http://www.redhat.com/support/errata/RHSA-2005-011.html - https://exchange.xforce.ibmcloud.
unia.com/advisories/13946/ - http://www.redhat.com/support/errata/RHSA-2005-011.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19003 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9521 - http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml - http://www.ciac.org/ciac/bulletins/p-106.shtml - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:013
CVE ID: CVE-2005-0011 State: PUBLISHED Published: 2005-02-16T05:00:00 Last Updated: 2024-08-07T20:57:41.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars support for Instrument Neutral Distributed Interface (INDI) in KDE 3.3 to 3.3.2, allow local users and remote attackers to execute arbitrary code via stack-based buffer overflows. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/archives/fedora-announce-list/2005-February/msg00044.html - http://www.kde.org/info/security/advisory-20050215-1.txt - http://www.gentoo.org/security/en/glsa/glsa-200502-23.
html - http://www.kde.org/info/security/advisory-20050215-1.txt - http://www.gentoo.org/security/en/glsa/glsa-200502-23.xml - http://secunia.com/advisories/14306
CVE ID: CVE-2005-0012 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T20:57:40.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the a_Interface_msg function in Dillo before 0.8.3-r4 allows remote attackers to execute arbitrary code via format string specifiers in a web page. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200501-11.xml - http://secunia.com/advisories/13760/ - http://www.securityfocus.com/bid/12203 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18807 - http://secunia.com/advisories/13764
CVE ID: CVE-2005-0013 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T20:57:40.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-665 - http://www.osvdb.org/13297 - http://www.securityfocus.com/archive/1/433927/100/0/threaded - ftp://platan.vc.cvut.cz/pub/linux/ncpfs/Changes-2.2.6 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:028 - http://www.securityfocus.com/bid/124
s/Changes-2.2.6 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:028 - http://www.securityfocus.com/bid/12400 - http://securitytracker.com/id?1013019 - http://www.gentoo.org/security/en/glsa/glsa-200501-44.xml - http://www.redhat.com/support/errata/RHSA-2005-371.html
CVE ID: CVE-2005-0014 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T20:57:40.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/433927/100/0/threaded - ftp://platan.vc.cvut.cz/pub/linux/ncpfs/Changes-2.2.6 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:028 - http://www.securityfocus.com/bid/12400 - http://securitytracker.com/id?1013019 - http://www.gentoo.org/security/en/glsa/glsa-200501-44.xml - ht
s.com/bid/12400 - http://securitytracker.com/id?1013019 - http://www.gentoo.org/security/en/glsa/glsa-200501-44.xml - http://www.osvdb.org/13298
CVE ID: CVE-2005-0015 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T20:57:40.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: diatheke.pl in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-650 - http://securitytracker.com/id?1012955 - http://secunia.com/advisories/13897 - http://secunia.com/advisories/13941 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18997 - http://www.securityfocus.com/bid/12320
CVE ID: CVE-2005-0016 State: PUBLISHED Published: 2005-01-22T05:00:00 Last Updated: 2024-08-07T20:57:41.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the exported_display function in xatitv in gatos before 0.0.5 allows local users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18930 - http://secunia.com/advisories/13884/ - http://www.debian.org/security/2005/dsa-640
CVE ID: CVE-2005-0017 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T20:57:40.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: The f2c translator in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14067 - http://www.debian.org/security/2005/dsa-661 - http://securitytracker.com/id?1013028 - http://www.securityfocus.com/bid/12380 - http://www.gentoo.org/security/en/glsa/glsa-200501-43.xml - http://secunia.com/advisories/14041 - http://secunia.com/advisories/14052
CVE ID: CVE-2005-0018 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T20:57:40.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: The f2 shell script in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-661 - http://securitytracker.com/id?1013028 - http://www.securityfocus.com/bid/12380 - http://secunia.com/advisories/14041 - http://secunia.com/advisories/14052
CVE ID: CVE-2005-0019 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-07T20:57:40.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in hztty 2.0 and earlier allows local users to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14236 - http://www.securityfocus.com/bid/12518 - http://www.debian.org/security/2005/dsa-675 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19297 - http://securitytracker.com/id?1013154
CVE ID: CVE-2005-0020 State: PUBLISHED Published: 2005-01-22T05:00:00 Last Updated: 2024-08-07T20:57:40.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:010 - http://secunia.com/advisories/13828 - http://securitytracker.com/id?1012957 - http://www.securityfocus.com/bid/12274 - http://secunia.com/advisories/13898 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18933 - http://www.debian.org/security/2005/dsa-641 - http://secunia.com/advisories/13890 - http://www.osv
lnerabilities/18933 - http://www.debian.org/security/2005/dsa-641 - http://secunia.com/advisories/13890 - http://www.osvdb.org/13049
CVE ID: CVE-2005-0021 State: PUBLISHED Published: 2005-01-06T05:00:00 Last Updated: 2024-08-07T20:57:41.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the host_aton function, or (2) the -bh command line option or dnsdb PTR lookup, which triggers an overflow in the dns_build_reverse function. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=179&type=vulnerabilities - http://www.kb.cert.or
ainer: References: - http://www.idefense.com/application/poi/display?id=179&type=vulnerabilities - http://www.kb.cert.org/vuls/id/132992 - http://www.debian.org/security/2005/dsa-635 - http://ftp6.us.freebsd.org/pub/mail/exim/ChangeLogs/ChangeLog-4.44 - http://www.debian.org/security/2005/dsa-637 - http://www.idefense.com/application/poi/display?id=183&type=vulnerabilities - http://www.redhat.com/support/errata/RHSA-2005-025.html - http://security.gentoo.org/glsa/glsa-200501-23.xml - http://www.exim.org/mail-archives/exim-users/Week-of-Mon-20050103/msg00028.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10347
CVE ID: CVE-2005-0022 State: PUBLISHED Published: 2005-01-06T05:00:00 Last Updated: 2024-08-07T20:57:40.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained from Samba code, and as called by the auth_spa_client function, may allow attackers to execute arbitrary code during SPA authentication. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11293 - http://ftp6.us.freebsd.org/pub/mail/exim/ChangeLogs/ChangeLog-4.44 - http://marc.info/?l=bugtraq&m=110824870908614&w=2 - http://www.security
sd.org/pub/mail/exim/ChangeLogs/ChangeLog-4.44 - http://marc.info/?l=bugtraq&m=110824870908614&w=2 - http://www.securityfocus.com/bid/12188 - http://www.redhat.com/support/errata/RHSA-2005-025.html - http://www.idefense.com/application/poi/display?id=178&type=vulnerabilities - http://security.gentoo.org/glsa/glsa-200501-23.xml - http://www.exim.org/mail-archives/exim-users/Week-of-Mon-20050103/msg00028.html
CVE ID: CVE-2005-0023 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T20:57:41.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NOTE: the severity of this issue has been disputed. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/1931 - http://marc.info/?l=bugtraq&m=112879572407250&w=2 - http://www.securityfocus.com/bid/15004 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22496 - http://secunia.com/advisories/17023 - http://bugs.debian.org/cgi-bin/bu
ange.xforce.ibmcloud.com/vulnerabilities/22496 - http://secunia.com/advisories/17023 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330907 - http://bugzilla.gnome.org/show_bug.cgi?id=317312
CVE ID: CVE-2005-0033 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T20:57:40.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the code for recursion and glue fetching in BIND 8.4.4 and 8.4.5 allows remote attackers to cause a denial of service (crash) via queries that trigger the overflow in the q_usedns array that tracks nameservers and addresses. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1012996 - http://www.uniras.gov.uk/niscc/docs/al-20050125-00059.html - http://www.kb.cert.org/vuls/id/327633 - http://secunia.com/advisories/14009 - http://www.securityfocus.com/bid/12364 - htt
tp://www.kb.cert.org/vuls/id/327633 - http://secunia.com/advisories/14009 - http://www.securityfocus.com/bid/12364 - http://www.isc.org/index.pl?/sw/bind/bind8.php - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.1/SCOSA-2006.1.txt - http://www.isc.org/index.pl?/sw/bind/bind-security.php - http://secunia.com/advisories/18291 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19063
CVE ID: CVE-2005-0034 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T20:57:40.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: An "incorrect assumption" in the authvalidated validator function in BIND 9.3.0, when DNSSEC is enabled, allows remote attackers to cause a denial of service (named server exit) via crafted DNS packets that cause an internal consistency test (self-check) to fail. Additional Analyst Notes: - CVE Program Container: References: - http://www.trustix.org/errata/2005/0003/ - http://www.securityfocus.com/bid/12365 - http://www.isc.org/index.pl?/sw/bind/bind9.php - http://www.uniras.gov.uk/niscc/docs/al-20050125-00060.html - http://se
http://www.isc.org/index.pl?/sw/bind/bind9.php - http://www.uniras.gov.uk/niscc/docs/al-20050125-00060.html - http://secunia.com/advisories/14008 - http://www.isc.org/index.pl?/sw/bind/bind-security.php - http://www.kb.cert.org/vuls/id/938617 - http://securitytracker.com/id?1012995 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19062
CVE ID: CVE-2005-0035 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-07T20:57:41.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Acrobat web control in Adobe Acrobat and Acrobat Reader 7.0 and earlier, when used with Internet Explorer, allows remote attackers to determine the existence of arbitrary files via the LoadFile ActiveX method. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14813 - http://www.adobe.com/support/techdocs/331465.html - http://www.securityfocus.com/bid/12989 - http://www.osvdb.org/15242 - http://www.hyperdose.com/advisories/H2005-06.txt - http://www.vupen.com/english/advisories/20
tp://www.osvdb.org/15242 - http://www.hyperdose.com/advisories/H2005-06.txt - http://www.vupen.com/english/advisories/2005/0310 - http://www.niscc.gov.uk/niscc/docs/re-20050401-00264.pdf
CVE ID: CVE-2005-0036 State: PUBLISHED Published: 2006-04-28T01:00:00 Last Updated: 2024-08-07T20:57:41.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNS implementation in DeleGate 8.10.2 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13729 - http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en - http://www.osvdb.org/25291 - http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html
CVE ID: CVE-2005-0037 State: PUBLISHED Published: 2006-04-28T01:00:00 Last Updated: 2024-08-07T20:57:41.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNS implementation of DNRD before 2.10 allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13729 - http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en - http://www.osvdb.org/25291 - http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html
CVE ID: CVE-2005-0038 State: PUBLISHED Published: 2006-04-28T01:00:00 Last Updated: 2024-08-07T20:57:40.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13729 - http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en - http://www.osvdb.org/25291 - http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html
CVE ID: CVE-2005-0039 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-07T20:57:40.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain configurations of IPsec, when using Encapsulating Security Payload (ESP) in tunnel mode, integrity protection at a higher layer, or Authentication Header (AH), allow remote attackers to decrypt IPSec communications by modifying the outer packet in ways that cause plaintext data from the inner packet to be returned in ICMP messages, as demonstrated using bit-flipping attacks and (1) Destination Address Rewriting, (2) a modified header length that causes portions of the packet to be interpreted as IP Options, or (3) a mo