Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-2916 State: PUBLISHED Published: 2005-09-14T04:00:00Z Last Updated: 2024-09-17T01:46:07.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication until after an HTTP POST request has been processed, which allows remote attackers to (1) modify configuration using restore.cgi or (2) upload new firmware using upgrade.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=306&type=vulnerabilities - http://www.idefense.com/application/poi/display?id=307&type=vulnerabilities
CVE ID: CVE-2005-2917 State: PUBLISHED Published: 2005-09-30T04:00:00 Last Updated: 2024-08-07T22:53:29.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service (daemon restart). Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-192-1/ - http://securitytracker.com/id?1014920 - ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt - http://secunia.com/advisories/16992 - http://www.s
/ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt - http://secunia.com/advisories/16992 - http://www.securityfocus.com/bid/14977 - http://www.osvdb.org/19607 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24282 - http://fedoranews.org/updates/FEDORA--.shtml - http://secunia.com/advisories/17050 - http://www.redhat.com/support/errata/RHSA-2006-0052.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11580 - http://secunia.com/advisories/19532 - http://secunia.com/advisories/17177 - http://secunia.com/advisories/19161 - http://secunia.com/advisories/17015 - http
- http://secunia.com/advisories/17177 - http://secunia.com/advisories/19161 - http://secunia.com/advisories/17015 - http://www.redhat.com/support/errata/RHSA-2006-0045.html - http://www.debian.org/security/2005/dsa-828 - http://www.novell.com/linux/security/advisories/2005_27_sr.html
CVE ID: CVE-2005-2918 State: PUBLISHED Published: 2005-09-15T04:00:00 Last Updated: 2024-08-07T22:53:29.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: The open_cmd_tube function in mount.c for gtkdiskfree 1.9.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the gtkdiskfree temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112680706715109&w=2 - http://secunia.com/advisories/17056 - http://bugs.gentoo.org/show_bug.cgi?id=104565 - http://www.gentoo.org/security/en/glsa/glsa-200510-01.xml - http://secunia.com/advisories/16951 - http://www.zataz.net/adviso/gtkdiskfree-09052005.txt -
/glsa/glsa-200510-01.xml - http://secunia.com/advisories/16951 - http://www.zataz.net/adviso/gtkdiskfree-09052005.txt - http://www.debian.org/security/2005/dsa-822 - http://secunia.com/advisories/17005
CVE ID: CVE-2005-2919 State: PUBLISHED Published: 2005-09-20T04:00:00 Last Updated: 2024-08-07T22:53:29.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: libclamav/fsg.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers to cause a denial of service (infinite loop) via a crafted FSG packed executable. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_55_clamav.html - http://www.osvdb.org/19507 - http://secunia.com/advisories/16989 - http://www.debian.org/security/2005/dsa-824 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22308 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:16
ps://exchange.xforce.ibmcloud.com/vulnerabilities/22308 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:166 - http://www.gentoo.org/security/en/glsa/glsa-200509-13.xml - http://secunia.com/advisories/16848 - http://www.securityfocus.com/bid/14867 - http://sourceforge.net/project/shownotes.php?release_id=356974 - http://www.vupen.com/english/advisories/2005/1774
CVE ID: CVE-2005-2920 State: PUBLISHED Published: 2005-09-20T04:00:00 Last Updated: 2024-08-07T22:53:30.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in libclamav/upx.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers to execute arbitrary code via a crafted UPX packed executable. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_55_clamav.html - http://secunia.com/advisories/16989 - http://www.debian.org/security/2005/dsa-824 - http://www.kb.cert.org/vuls/id/363713 - http://www.gentoo.org/security/en/glsa/glsa-200509-13.xml - http://secunia.com/advisories/16848 - http://www.osv
63713 - http://www.gentoo.org/security/en/glsa/glsa-200509-13.xml - http://secunia.com/advisories/16848 - http://www.osvdb.org/19506 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22307 - http://www.securityfocus.com/bid/14866 - http://sourceforge.net/project/shownotes.php?release_id=356974 - http://www.vupen.com/english/advisories/2005/1774
CVE ID: CVE-2005-2922 State: PUBLISHED Published: 2006-03-23T23:00:00 Last Updated: 2024-08-07T22:53:29.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, and Helix Player allows remote malicious servers to cause a denial of service (crash) and possibly execute arbitrary code via a chunked Transfer-Encoding HTTP response in which either (1) the chunk header length is specified as -1, (2) the chunk header with a length that is less than the actual amount of sent data, or (3) a missing chunk header. Additional Analyst Notes: - CVE Program Cont
is less than the actual amount of sent data, or (3) a missing chunk header. Additional Analyst Notes: - CVE Program Container: References: - http://www.service.real.com/realplayer/security/03162006_player/en/ - http://secunia.com/advisories/19358 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11444 - http://www.novell.com/linux/security/advisories/2006_18_realplayer.html - http://www.vupen.com/english/advisories/2006/1057 - http://securitytracker.com/id?1015808 - http://www.redhat.com/support/errata/RHSA-2005-788.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25409 - http://secunia.com/advisories/19365 - http://www.securityfocus.com/bid/
ange.xforce.ibmcloud.com/vulnerabilities/25409 - http://secunia.com/advisories/19365 - http://www.securityfocus.com/bid/17202 - http://www.kb.cert.org/vuls/id/172489 - http://www.redhat.com/support/errata/RHSA-2005-762.html
CVE ID: CVE-2005-2923 State: PUBLISHED Published: 2005-12-07T01:00:00 Last Updated: 2024-08-07T22:53:29.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMAP server in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to cause a denial of service (crash) via a long argument to the LIST command, which causes IMail Server to reference invalid memory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17863 - http://www.vupen.com/english/advisories/2005/2782 - http://www.idefense.com/application/poi/display?id=347&type=vulnerabilities - http://securitytracker.com/id?1015318 - http://www.secu
efense.com/application/poi/display?id=347&type=vulnerabilities - http://securitytracker.com/id?1015318 - http://www.securityfocus.com/bid/15753
CVE ID: CVE-2005-2925 State: PUBLISHED Published: 2005-10-11T04:00:00 Last Updated: 2024-08-07T22:53:29.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metacharacters in a command line for a privileged binary in /usr/sysadm/privbin. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015031 - http://www.idefense.com/application/poi/display?id=312&type=vulnerabilities - http://secunia.com/advisories/17131 - http://www.osvdb.org/19907 - http://www.securityfocus.com/bid/15055 - https://exchange.xforce.ibmcloud.com/vulnerabili
- http://www.osvdb.org/19907 - http://www.securityfocus.com/bid/15055 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22561 - ftp://patches.sgi.com/support/free/security/advisories/20051001-01-P.asc - http://www.securityfocus.com/archive/1/427409/100/0/threaded
CVE ID: CVE-2005-2926 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-07T22:53:29.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in (1) backupsh and (2) authsh in SCO Openserver 5.0.7 allows local users to execute arbitrary code via a long HOME environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20153 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.40/SCOSA-2005.40.txt - http://www.securityfocus.com/bid/15160 - http://securitytracker.com/id?1015099 - http://www.idefense.com/application/poi/display?type=vulnerabilities - http://www.idefense.com/application/poi/displ
9 - http://www.idefense.com/application/poi/display?type=vulnerabilities - http://www.idefense.com/application/poi/display?type=vulnerabilities - http://www.osvdb.org/20154 - http://secunia.com/advisories/17274
CVE ID: CVE-2005-2927 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-07T22:53:29.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and 7.1.4, and possibly earlier versions, allows local users to execute arbitrary code via a long argument to the (1) prompt or (2) defprompt command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15159 - http://www.idefense.com/application/poi/display?type=vulnerabilities - http://securityreason.com/securityalert/101 - http://www.osvdb.org/20155 - http://securitytracker.com/id?1015098 - http://secunia.com/advisories/17
ecurityalert/101 - http://www.osvdb.org/20155 - http://securitytracker.com/id?1015098 - http://secunia.com/advisories/17275 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.41/SCOSA-2005.41.txt
CVE ID: CVE-2005-2929 State: PUBLISHED Published: 2005-11-18T11:00:00 Last Updated: 2024-08-07T22:53:29.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via (1) lynxcgi:, (2) lynxexec, and (3) lynxprog links, which are not properly restricted in the default configuration in some environments. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17556 - http://secunia.com/advisories/18376 - http://secunia.com/advisories/17666 - http://www.securityfocus.com/bid/15395 - http://www.vupen.com/english/advisories/2005/2394 - http://secunia
ries/17666 - http://www.securityfocus.com/bid/15395 - http://www.vupen.com/english/advisories/2005/2394 - http://secunia.com/advisories/17546 - http://secunia.com/advisories/17576 - http://www.openpkg.org/security/OpenPKG-SA-2005.026-lynx.html - http://secunia.com/advisories/17757 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9712 - http://www.idefense.com/application/poi/display?id=338&type=vulnerabilities - https://exchange.xforce.ibmcloud.com/vulnerabilities/23119 - http://www.securityfocus.com/archive/1/419763/100/0/threaded - http://www.gentoo.org/security/en/glsa/glsa-200511-09.xml - http://secunia.com/advisories/18659 - http://www.redhat.com/
http://www.gentoo.org/security/en/glsa/glsa-200511-09.xml - http://secunia.com/advisories/18659 - http://www.redhat.com/support/errata/RHSA-2005-839.html - http://securityreason.com/securityalert/173 - http://secunia.com/advisories/18051 - http://secunia.com/advisories/17512 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.7/SCOSA-2006.7.txt - http://www.mandriva.com/security/advisories?name=MDKSA-2005:211 - http://secunia.com/advisories/17372 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.55/SCOSA-2005.55.txt - http://securitytracker.com/id?1015195 - http://support.avaya.com/elmodocs2/security/ASA-2006-035.htm
CVE ID: CVE-2005-2930 State: PUBLISHED Published: 2005-10-28T04:00:00 Last Updated: 2024-08-07T22:53:29.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15234 - http://securityreason.com/securityalert/125 - http://secunia.com/advisories/17775 - http://www.idefense.com/application/poi/display?id=332&typ
com/securityalert/125 - http://secunia.com/advisories/17775 - http://www.idefense.com/application/poi/display?id=332&type=vulnerabilities - http://www.vupen.com/english/advisories/2005/2249 - http://securitytracker.com/id?1015120
CVE ID: CVE-2005-2931 State: PUBLISHED Published: 2005-12-07T01:00:00 Last Updated: 2024-08-07T22:53:29.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the (1) EXPN, (2) MAIL, (3) MAIL FROM, and (4) RCPT TO commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=346&type=vulnerabilities - http://securitytracker.com/id?1015317 - http://secunia.com/advisories/17863 - http://www.vupen.com/english/advisories/2005/
p://securitytracker.com/id?1015317 - http://secunia.com/advisories/17863 - http://www.vupen.com/english/advisories/2005/2782 - http://www.securityfocus.com/bid/15752 - http://www.ipswitch.com/support/imail/releases/imail_professional/im822.asp
CVE ID: CVE-2005-2932 State: PUBLISHED Published: 2007-08-21T17:00:00 Last Updated: 2024-08-07T22:53:29.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security Suite 5.5.062.004 and 6.5.737, use insecure default permissions for critical files, which allows local users to gain privileges or bypass security controls. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26513 - http://www.vupen.com/english/advisories/2007/2929 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36110 - http://labs.idefense.com/intelligence/vulnerabilities/display.ph
://exchange.xforce.ibmcloud.com/vulnerabilities/36110 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=584 - http://www.securityfocus.com/bid/25365 - http://securitytracker.com/id?1018588 - http://www.securityfocus.com/bid/25377 - http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=53
CVE ID: CVE-2005-2933 State: PUBLISHED Published: 2005-10-13T04:00:00 Last Updated: 2024-08-07T22:53:29.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:194 - http://www.redhat.com/support/errata/RHSA-2005-850.h
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:194 - http://www.redhat.com/support/errata/RHSA-2005-850.html - http://secunia.com/advisories/17950 - http://secunia.com/advisories/21252 - http://secunia.com/advisories/17276 - http://secunia.com/advisories/17148 - http://secunia.com/advisories/20222 - http://secunia.com/advisories/20210 - http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm - http://secunia.com/advisories/18554 - http://securityreason.com/securityalert/47 - http://secunia.com/advisories/17152 - http://rhn.redhat.com/errata/RHSA-2006-0276.html - http://www.debian.org/security/2005/dsa-861 - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/008
6.html - http://www.debian.org/security/2005/dsa-861 - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0081.html - http://secunia.com/advisories/17062/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9858 - ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U - http://www.securityfocus.com/bid/15009 - http://www.washington.edu/imap/ - http://www.redhat.com/support/errata/RHSA-2006-0501.html - http://www.redhat.com/support/errata/RHSA-2005-848.html - http://rhn.redhat.com/errata/RHSA-2006-0549.html - http://secunia.com/advisories/20951 - http://www.idefense.com/application/poi/display?id=313&type=vulnerabilities&flashstatu
://secunia.com/advisories/20951 - http://www.idefense.com/application/poi/display?id=313&type=vulnerabilities&flashstatus=true - https://exchange.xforce.ibmcloud.com/vulnerabilities/22518 - http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm - http://www.securityfocus.com/archive/1/430296/100/0/threaded - http://secunia.com/advisories/19832 - ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc - http://secunia.com/advisories/17930 - http://securitytracker.com/id?1015000 - http://www.kb.cert.org/vuls/id/933601 - http://www.gentoo.org/security/en/glsa/glsa-200510-10.xml - http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.500
/glsa/glsa-200510-10.xml - http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.500161 - http://secunia.com/advisories/21564 - http://www.securityfocus.com/archive/1/430303/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2005:189 - http://secunia.com/advisories/17928 - http://secunia.com/advisories/17336 - http://www.vupen.com/english/advisories/2006/2685 - http://secunia.com/advisories/17215 - http://www.novell.com/linux/security/advisories/2005_23_sr.html - http://secunia.com/advisories/17483
CVE ID: CVE-2005-2934 State: PUBLISHED Published: 2006-02-24T01:00:00 Last Updated: 2024-08-07T22:53:29.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ptrace in SCO UnixWare 7.1.3 and 7.1.4 allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24856 - http://securitytracker.com/id?1015676 - http://www.securityfocus.com/bid/16765 - http://secunia.com/advisories/18958 - http://www.idefense.com/application/poi/display?type=vulnerabilities - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.9/SCOSA-2006.9.txt
CVE ID: CVE-2005-2935 State: PUBLISHED Published: 2005-09-15T04:00:00 Last Updated: 2024-08-07T22:53:29.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in Microsoft AntiSpyware might allow local users to execute code via a malicious c:\program.exe file, which is run by AntiSpywareMain.exe when it attempts to execute gsasDtServ.exe. NOTE: it is not clear whether this overlaps CVE-2005-2940. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033909.html - http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033910.html
CVE ID: CVE-2005-2936 State: PUBLISHED Published: 2005-11-18T11:00:00 Last Updated: 2024-08-07T22:53:29.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, and RealPlayer 8 before 20060322 might allow local users to gain privileges via a malicious C:\program.exe file. Additional Analyst Notes: - CVE Program Container: References: - http://www.service.real.com/realplayer/security/03162006_player/en/ - http://secunia.com/advisories/19358 - http://www.securityfocus.com/bid/15448 - http://www.vupen.com/english/advisories/2006
p://secunia.com/advisories/19358 - http://www.securityfocus.com/bid/15448 - http://www.vupen.com/english/advisories/2006/1057 - http://www.idefense.com/application/poi/display?id=340&type=vulnerabilities - http://securitytracker.com/id?1015223 - http://service.real.com/help/faq/security/security111605.html
CVE ID: CVE-2005-2937 State: REJECTED Published: 2005-10-11T04:00:00 Last Updated: 2005-11-18T10:00:00 Description: No description available.
CVE ID: CVE-2005-2938 State: PUBLISHED Published: 2005-11-18T11:00:00 Last Updated: 2024-08-07T22:53:29.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in iTunesHelper.exe in iTunes 4.7.1.30 and iTunes 5 for Windows might allow local users to gain privileges via a malicious C:\program.exe file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2443 - http://www.idefense.com/application/poi/display?id=340&type=vulnerabilities - http://securitytracker.com/id?1015222
CVE ID: CVE-2005-2939 State: PUBLISHED Published: 2005-11-18T11:00:00 Last Updated: 2024-08-07T22:53:29.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in VMWare Workstation 5.0.0 build-13124 might allow local users to gain privileges via a malicious "program.exe" file in the C: folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15448 - http://www.idefense.com/application/poi/display?id=340&type=vulnerabilities - http://securitytracker.com/id?1015225
CVE ID: CVE-2005-2940 State: PUBLISHED Published: 2005-11-18T11:00:00 Last Updated: 2024-08-07T22:53:29.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in Microsoft Antispyware 1.0.509 (Beta 1) might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, involving the programs (1) GIANTAntiSpywareMain.exe, (2) gcASNotice.exe, (3) gcasServ.exe, (4) gcasSWUpdater.exe, or (5) GIANTAntiSpywareUpdater.exe. NOTE: it is not clear whether this overlaps CVE-2005-2935. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15448 - http://www.idefense.com/application/
es: - CVE Program Container: References: - http://www.securityfocus.com/bid/15448 - http://www.idefense.com/application/poi/display?id=340&type=vulnerabilities - http://securitytracker.com/id?1015226
CVE ID: CVE-2005-2942 State: REJECTED Published: 2005-10-12T04:00:00Z Last Updated: 2024-09-17T04:25:08.157Z Description: No description available.
CVE ID: CVE-2005-2943 State: PUBLISHED Published: 2005-10-13T04:00:00 Last Updated: 2024-08-07T22:53:29.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in sendmail in XMail before 1.22 allows remote attackers to execute arbitrary code via a long -t command line option. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-902 - http://www.idefense.com/application/poi/display?id=321&type=vulnerabilities - http://www.securityfocus.com/bid/15103 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22724 - http://www.gentoo.org/security/en/glsa/glsa-200512-05.xml - http://secunia.com/advisories/18052