deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-4790
Published: 2005-12-31
Description: Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0, and possibly other distributions, cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) beagle, (2) tomboy, or (3) blam.  NOTE: in August 2007, the tomboy vector was reported for other distributions.
CVSS Score: 6.9 (MEDIUM)
References: http://bugs.gentoo.org/show_bug.cgi?id=188806; http://bugs.gentoo.org/show_bug.cgi?id=189249; http://bugs.gentoo.org/show_bug.cgi?id=199841
CVE: CVE-2005-4791
Published: 2005-12-31
Description: Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) liferea or (2) banshee.
CVSS Score: 2.1 (LOW)
References: http://osvdb.org/39580; http://secunia.com/advisories/27771; http://sourceforge.net/project/shownotes.php?release_id=555823&group_id=87005
CVE: CVE-2005-4792
Published: 2005-12-31
Description: SQL injection vulnerability in index.php in Appalachian State University phpWebSite 0.10.1 and earlier allows remote attackers to execute arbitrary SQL commands via the module parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/15088; http://www.securityfocus.com/bid/15088
CVE: CVE-2005-4793
Published: 2005-12-31
Description: Multiple unspecified vulnerabilities in the web utility function in Hitachi Cm2/Network Node Manager and JP1/Cm2/Network Node Manager before 20050930 allow attackers to execute arbitrary commands, disable services, and "exploit vulnerabilities."
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1014997; http://www.hitachi-support.com/security_e/vuls_e/HS05-018_e/index-e.html; http://securitytracker.com/id?1014997
CVE: CVE-2005-4794
Published: 2005-12-31
Description: Cisco IP Phones 7902/7905/7912, ATA 186/188, Unity Express, ACNS, and Subscriber Edge Services Manager (SESM) allows remote attackers to cause a denial of service (crash or instability) via a compressed DNS packet with a label length byte with an incorrect offset.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/15472; http://securitytracker.com/id?1014043; http://securitytracker.com/id?1014044
CVE: CVE-2005-4795
Published: 2005-12-31
Description: Unspecified vulnerability in the multi-language environment library (libmle) in Solaris 7 and 8, as shipped with the Japanese locale, allows local users to gain privileges via unknown attack vectors.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/16219; http://securitytracker.com/id?1014579; http://sunsolve.sun.com/search/document.do?assetkey=1-26-101807-1
CVE: CVE-2005-4796
Published: 2005-12-31
Description: Unspecified vulnerability in the XView library (libxview.so) in Solaris 2.5 to 10 allows local users to corrupt files via unknown vectors related to the handling of the clipboard selection while an XView application exits.
CVSS Score: 3.6 (LOW)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-100881-1; http://sunsolve.sun.com/search/document.do?assetkey=1-26-27525-1; http://www.ciac.org/ciac/bulletins/p-264.shtml
CVE: CVE-2005-4797
Published: 2005-12-31
Description: Directory traversal vulnerability in printd line printer daemon (lpd) in Solaris 7 through 10 allows remote attackers to delete arbitrary files via ".." sequences in an "Unlink data file" command.
CVSS Score: 5.0 (MEDIUM)
References: http://downloads.securityfocus.com/vulnerabilities/exploits/solaris_lpd_unlink.pm; http://secunia.com/advisories/16367; http://securitytracker.com/id?1014635
CVE: CVE-2005-4798
Published: 2005-12-31
Description: Buffer overflow in NFS readlink handling in the Linux Kernel 2.4 up to 2.4.31 allows remote NFS servers to cause a denial of service (crash) via a long symlink, which is not properly handled in (1) nfs2xdr.c or (2) nfs3xdr.c and causes a crash in the NFS client.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/20398; http://secunia.com/advisories/22082; http://secunia.com/advisories/22093
CVE: CVE-2005-4799
Published: 2005-12-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the Homepage field (aka the Website field) in an "image-related comment" and (2) the img_size field in view.php.  NOTE: due to lack of details from the researcher, it is not clear whether the comment vector overlaps CVE-2005-1886.
CVSS Score: 5.1 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2005-10/0161.html; http://secunia.com/advisories/17041; http://www.osvdb.org/19958
CVE: CVE-2005-4800
Published: 2005-12-31
Description: Direct static code injection vulnerability in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allows remote authenticated administrators to inject arbitrary PHP code via the TestGallery parameter in a mod_info action to modify_gallery.php, which inserts the code into guid_info.php.  NOTE: this issue is easier to exploit due to a separate CSRF vulnerability.
CVSS Score: 9.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2005-10/0161.html; http://secunia.com/advisories/17041; http://www.osvdb.org/19960
CVE: CVE-2005-4801
Published: 2005-12-31
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to perform unauthorized actions as a logged-in user, as demonstrated by tricking the administrator to access a web page that performs a mod_info action in modify_gallery.php.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2005-10/0161.html; http://secunia.com/advisories/17041; http://securityreason.com/securityalert/79
CVE: CVE-2005-4802
Published: 2005-12-31
Description: Flexbackup 1.2.1 and earlier allows local users to overwrite files and execute code via a symlink attack on temporary files.  NOTE: the raw source referenced an incorrect candidate number; this is the correct number to use.
CVSS Score: 4.6 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334350; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2513&w=2; http://secunia.com/advisories/17209
CVE: CVE-2005-4803
Published: 2005-12-31
Description: graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files.  NOTE: this issue was originally associated with a different CVE identifier, CVE-2005-2965, which had been used for multiple different issues.  This is the correct identifier.
CVSS Score: 3.6 (LOW)
References: http://secunia.com/advisories/17121; http://secunia.com/advisories/17125; http://secunia.com/advisories/17207
CVE: CVE-2005-4804
Published: 2005-12-31
Description: Unspecified vulnerability in Sun Java System Application Server Platform Edition and Enterprise Edition 8.1 2005 Q1, and Platform Edition UR1, allows remote attackers to read .jar files via unknown vectors related to deployed web applications.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/16802; http://sunsolve.sun.com/search/document.do?assetkey=1-26-101905-1; http://www.ciac.org/ciac/bulletins/p-305.shtml
CVE: CVE-2005-4805
Published: 2005-12-31
Description: Unspecified vulnerability in Sun Java System Application Server 7 Standard and Platform Edition 6 and earlier, and 2004Q2 Standard and Platform Edition Update 2 and earlier, allows remote attackers to obtain the source code for Java Server pages (JSP) via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/17164; http://securitytracker.com/id?1015047; http://sunsolve.sun.com/search/document.do?assetkey=1-26-101910-1
CVE: CVE-2005-4806
Published: 2005-12-31
Description: Multiple unspecified vulnerabilities in Sun Java System Web Proxy Server 3.6 SP7 and earlier allow remote attackers to cause a denial of service (unresponsive service) via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/16757; http://securitytracker.com/id?1014875; http://sunsolve.sun.com/search/document.do?assetkey=1-26-101913-1
CVE: CVE-2005-4807
Published: 2005-12-31
Description: Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050721 allows attackers to execute arbitrary code via a .c file with crafted inline assembly code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://bugs.gentoo.org/show_bug.cgi?id=99464; http://secunia.com/advisories/21508; http://secunia.com/advisories/21530
CVE: CVE-2005-4808
Published: 2005-12-31
Description: Buffer overflow in reset_vars in config/tc-crx.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050714 allows user-assisted attackers to have an unknown impact via a crafted .s file.
CVSS Score: 7.6 (HIGH)
References: http://sources.redhat.com/bugzilla/show_bug.cgi?id=1069; http://www.ubuntu.com/usn/usn-366-1; https://exchange.xforce.ibmcloud.com/vulnerabilities/44661
CVE: CVE-2005-4809
Published: 2005-12-31
Description: Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof the URL in the Status Bar via an A HREF tag that contains a TABLE tag that contains another A tag.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]1287&w=2; http://secunia.com/advisories/14568; http://securitytracker.com/id?1013423
CVE: CVE-2005-4810
Published: 2005-12-31
Description: Microsoft Internet Explorer 7.0 Beta3 and earlier allows remote attackers to cause a denial of service (crash) via a "text/html" HTML Content-type header sent in response to an XMLHttpRequest (AJAX).
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2005-07/0434.html; http://www.osvdb.org/18510; https://exchange.xforce.ibmcloud.com/vulnerabilities/21553
CVE: CVE-2005-4811
Published: 2005-12-31
Description: The hugepage code (hugetlb.c) in Linux kernel 2.6, possibly 2.6.12 and 2.6.13, in certain configurations, allows local users to cause a denial of service (crash) by triggering an mmap error before a prefault, which causes an error in the unmap_hugepage_area function.
CVSS Score: 4.9 (MEDIUM)
References: http://marc.info/?l=linux-kernel&m=[PII_REDACTED]7157; http://secunia.com/advisories/22292; http://secunia.com/advisories/22945
CVE: CVE-2005-4812
Published: 2005-12-31
Description: The SISCO OSI stack for Windows, as used by MMS-EASE 7.10 and earlier, AX-S4 MMS 5.01 and earlier, AX-S4 ICCP 3.0103 and earlier, and the ICCP Toolkit for MMS-EASE 4.10 and earlier, allows remote attackers to cause a denial of service (process crash) via certain network traffic, as demonstrated using a Nessus scan.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/22047; http://www.kb.cert.org/vuls/id/468798; http://www.securityfocus.com/bid/20130
CVE: CVE-2005-4813
Published: 2005-12-31
Description: Unspecified vulnerability in Report Application Server (Crystalras.exe) before 11.0.0.1370, as used in Business Objects Crystal Reports XI, Crystal Reports Server XI, and BusinessObjects Enterprise XI, allows remote attackers to cause a denial of service (application hang) via certain network traffic, possibly involving multiple simultaneous TCP connections.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/16282; http://securitytracker.com/id?1014604; http://securitytracker.com/id?1014605
CVE: CVE-2005-4814
Published: 2005-12-31
Description: Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with the PHP interpreter, allows remote attackers to upload and execute arbitrary PHP code by placing .phtml files in the userfiles/ directory.
CVSS Score: 7.5 (HIGH)
References: http://sourceforge.net/project/shownotes.php?release_id=456920&group_id=82171; http://www.osvdb.org/29902; http://sourceforge.net/project/shownotes.php?release_id=456920&group_id=82171
CVE: CVE-2005-4815
Published: 2005-12-31
Description: SAP 6.4 before 6.40 patch 4, 6.2 before 6.20 patch 1364, 4.6 before 4.6D patch 1767, 45 before 45B patch 913, 40 before 40B patch 1008, and 31 before 31I patch 735 do not properly restrict process execution by lnaxdm/sapsys, which allows remote attackers to execute arbitrary code via a certain UDP packet that ends with the name of a local executable file, aka the "FX SAP R/3 gwrd vuln."
CVSS Score: 7.5 (HIGH)
References: http://lists.darklab.org/pipermail/darklab/2006-January/000209.html; http://lists.virus.org/darklab-0509/msg00011.html; http://lists.virus.org/darklab-0509/msg00017.html
CVE: CVE-2005-4816
Published: 2005-12-31
Description: Buffer overflow in mod_radius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/dailydave/2006-q1/0122.html; http://bugs.proftpd.org/show_bug.cgi?id=2658; http://www.debian.org/security/2007/dsa-1245
CVE: CVE-2005-4817
Published: 2005-12-31
Description: Format string vulnerability in ui.c in Textbased MSN Client (TMSNC) before 0.2.5 allows attackers to cause a denial of service and possibly execute arbitrary code via unknown attack vectors that cause format strings to be injected into the wprintw function.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/16752; http://sourceforge.net/project/shownotes.php?release_id=355808; http://www.osvdb.org/displayvuln.php?osvdb_id=19311
CVE: CVE-2005-4818
Published: 2005-12-31
Description: Multiple SQL injection vulnerabilities in Copernicus Europa allow remote attackers to execute arbitrary SQL commands via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/14895; http://www.securityfocus.com/bid/14895
CVE: CVE-2005-4819
Published: 2005-12-31
Description: Cross-site scripting (XSS) vulnerability in Lotus Domino versions before 6.5.4 fix pack 1 (FP1) and versions before 7.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg21201845; http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21217285; http://www.osvdb.org/displayvuln.php?osvdb_id=19614
CVE: CVE-2005-4820
Published: 2005-12-31
Description: SMC Wireless Router model SMC7904WBRA allows remote attackers to cause a denial of service (reboot) by flooding the router with traffic.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/14809; https://exchange.xforce.ibmcloud.com/vulnerabilities/40019; http://www.securityfocus.com/bid/14809
CVE: CVE-2005-4821
Published: 2005-12-31
Description: Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbitrary SQL commands via parameters including (1) the m parameter in auth.php, (2) the f parameter in events.php, or (3) the e parameter in plug.php.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0381.html; http://www.g-0.org/code/ldu-adv.html; http://www.osvdb.org/19504
CVE: CVE-2005-4822
Published: 2005-12-31
Description: SQL injection vulnerability in projects/project-edit.asp in Digger Solutions Intranet Open Source (IOS) version 2.7.2 allows remote attackers to execute arbitrary SQL commands via the project_id parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/ref/19/DiggerIOS_Ver_2.7.2_SQL_Injection_Vulnerability.pdf; http://secunia.com/advisories/16870; http://www.osvdb.org/19574
CVE: CVE-2005-4823
Published: 2005-12-31
Description: Buffer overflow in the HP HTTP Server 5.0 through 5.95 of the HP Web-enabled Management Software allows remote attackers to execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2005-02/0235.html; http://secunia.com/advisories/14311; http://securitytracker.com/id?1013182
CVE: CVE-2005-4824
Published: 2005-12-31
Description: PHP remote file inclusion vulnerability in web/classes.php in Siteframe before 3.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the LOCAL_PATH parameter, a different vulnerability than CVE-2005-1965.
CVSS Score: 7.5 (HIGH)
References: http://list.broadpool.com/pipermail/siteframe/2005-October/001416.html; http://list.broadpool.com/pipermail/siteframe/2005-October/001416.html
CVE: CVE-2005-4825
Published: 2005-12-31
Description: Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service (disk consumption), or make unauthorized files accessible, by uploading files through requests to certain JSP scripts, a related issue to CVE-2005-4332.
CVSS Score: 5.7 (MEDIUM)
References: http://www.cisco.com/warp/public/707/cisco-response-20051221-CCA.shtml; http://www.osvdb.org/21959; http://www.securityfocus.com/archive/1/419645/30/0/threaded
CVE: CVE-2005-4826
Published: 2005-12-31
Description: Unspecified vulnerability in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(22)EA3 on Catalyst 2950T switches allows remote attackers to cause a denial of service (device reboot) via a crafted Subset-Advert message packet, a different issue than CVE-2006-4774, CVE-2006-4775, and CVE-2006-4776.
CVSS Score: 6.1 (MEDIUM)
References: http://osvdb.org/33013; http://secunia.com/advisories/23892; http://securitytracker.com/id?1017568
CVE: CVE-2005-4827
Published: 2005-12-31
Description: Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy and make requests outside of the intended domain by calling open on an XMLHttpRequest object (Microsoft.XMLHTTP) and using tab, newline, and carriage return characters within the first argument (method name), which is supported by some proxy servers that convert tabs to spaces.  NOTE: this issue can be leveraged to conduct referer spoofing, HTTP Request Smuggling, and other attacks.
CVSS Score: 7.5 (HIGH)
References: http://seclists.org/fulldisclosure/2007/Feb/0081.html; http://www.securityfocus.com/archive/1/411585; http://www.securityfocus.com/archive/1/459172/100/0/threaded
CVE: CVE-2005-4828
Published: 2005-12-31
Description: Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a "." in the wrong place, which causes kolabfilter to add another ".", which might break clear-text signatures and attachments.  NOTE: it is not clear whether this issue crosses privilege boundaries, so this might not be a vulnerability.
CVSS Score: 6.4 (MEDIUM)
References: http://kolab.org/security/kolab-vendor-notice-07.txt; http://www.mandriva.com/security/advisories?name=MDKSA-2006:013; http://www.osvdb.org/22538
CVE: CVE-2005-4829
Published: 2005-12-31
Description: VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a requested page, which has unknown impact and remote attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://virtuemart.svn.sourceforge.net/viewvc/%2Acheckout%2A/virtuemart/trunk/virtuemart/CHANGELOG.php?revision=692; http://virtuemart.svn.sourceforge.net/viewvc/%2Acheckout%2A/virtuemart/trunk/virtuemart/CHANGELOG.php?revision=692
CVE: CVE-2005-4830
Published: 2005-12-31
Description: CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the content-type parameter.
CVSS Score: 7.6 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030514.html; http://www.securityfocus.com/archive/1/461382/100/0/threaded; http://www.securityfocus.com/bid/12112
CVE: CVE-2005-4831
Published: 2005-12-31
Description: viewcvs in ViewCVS 0.9.2 allows remote attackers to set the Content-Type header to arbitrary values via the content-type parameter, which can be leveraged for cross-site scripting (XSS) and other attacks, as demonstrated using (1) "text/html", or (2) "image/jpeg" with an image that is rendered as HTML by Internet Explorer, a different vulnerability than CVE-2004-1062.  NOTE: it was later reported that 0.9.4 is also affected.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030514.html; http://www.securityfocus.com/archive/1/461382/100/0/threaded; http://www.securityfocus.com/bid/12112
CVE: CVE-2005-4832
Published: 2005-12-31
Description: SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL commands with elevated privileges via the SUBSCRIPTION_NAME parameter in the (1) SYS.DBMS_CDC_SUBSCRIBE and (2) SYS.DBMS_CDC_ISUBSCRIBE packages, a different vector than CVE-2005-1197.
CVSS Score: 7.5 (HIGH)
References: http://www.appsecinc.com/resources/alerts/oracle/2005-02.html; http://www.argeniss.com/research/OraDBMS_CDC_SUBSCRIBEExploit.txt; http://www.argeniss.com/research/OraDBMS_CDC_SUBSCRIBEWorkaround.sql
CVE: CVE-2005-4833
Published: 2005-12-31
Description: IBM WebSphere Application Server (WAS) 6.0 before 20050201, when serving pages in an Application WAR or an Extended Document Root, allows remote attackers to obtain the JSP source code and other sensitive information via "a specific JSP URL," related to lack of normalization of the URL format.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/34177; http://secunia.com/advisories/24478; http://www-1.ibm.com/support/docview.wss?uid=swg21243541
CVE: CVE-2005-4834
Published: 2005-12-31
Description: IBM WebSphere Application Server (WAS) 5.0.2.5 through 5.1.1.3 allows remote attackers to obtain JSP source code and other sensitive information, related to incorrect request processing by the web container.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/24478; http://www-1.ibm.com/support/docview.wss?uid=swg21243541; http://www-1.ibm.com/support/docview.wss?uid=swg24008814
CVE: CVE-2005-4835
Published: 2005-12-31
Description: The ath_rate_sample function in the ath_rate/sample/sample.c sample code in MadWifi before 0.9.3 allows remote attackers to cause a denial of service (failed KASSERT and system crash) by moving a connected system to a location with low signal strength, and possibly other vectors related to a race condition between interface enabling and packet transmission.
CVSS Score: 7.1 (HIGH)
References: http://madwifi.org/ticket/162; http://madwifi.org/ticket/279; http://madwifi.org/ticket/287
CVE: CVE-2005-4836
Published: 2005-12-31
Description: The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which allows remote attackers to read JSP source files and obtain sensitive information.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://tomcat.apache.org/security-4.html; http://www.securityfocus.com/bid/28483; https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E
CVE: CVE-2005-4837
Published: 2005-12-31
Description: snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of service (crash) by causing a particular TCP disconnect, which triggers a free of an incorrect variable, a different vulnerability than CVE-2005-2177.
CVSS Score: 10.0 (HIGH)
CWE: CWE-16, CWE-189
References: http://secunia.com/advisories/25114; http://secunia.com/advisories/25115; http://secunia.com/advisories/25411