deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-5418
Published: 2006-10-20
Description: PHP remote file inclusion vulnerability in archive/archive_topic.php in pbpbb archive for search engines (SearchIndexer) (aka phpBBSEI) for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/22443; http://securityreason.com/securityalert/1751; http://www.securityfocus.com/archive/1/448621/100/0/threaded
CVE: CVE-2006-5419
Published: 2006-10-20
Description: PHP remote file inclusion vulnerability in client.php in University of Glasgow Specimen Image Database (SID), when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22447; http://www.securityfocus.com/bid/20574; http://www.vupen.com/english/advisories/2006/4063
CVE: CVE-2006-5420
Published: 2006-10-20
Description: Kerio WinRoute Firewall 6.2.2 and earlier allows remote attackers to cause a denial of service (crash) via malformed DNS responses.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/22986; http://securitytracker.com/id?1017067; http://www.kerio.com/kwf_history.html
CVE: CVE-2006-5421
Published: 2006-10-20
Description: WSN Forum 1.3.4 and earlier allows remote attackers to execute arbitrary PHP code via a modified pathname in the pathtoconfig parameter that points to an avatar image that contains PHP code, which is then accessed from prestart.php.  NOTE: this issue has been labeled remote file inclusion, but that label only applies to the attack, not the underlying vulnerability.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22360; http://www.securityfocus.com/bid/20586; http://www.vupen.com/english/advisories/2006/4081
CVE: CVE-2006-5422
Published: 2006-10-20
Description: PHP remote file inclusion vulnerability in calcul-page.php in Lodel (patchlodel) 0.7.3 allows remote attackers to execute arbitrary PHP code via a URL in the home parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0783&w=2; http://secunia.com/advisories/22429; http://www.securityfocus.com/bid/20551
CVE: CVE-2006-5423
Published: 2006-10-20
Description: PHP remote file inclusion vulnerability in admin/admin_module.php in Lou Portail 1.4.1, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the g_admin_rep parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22461; http://www.securityfocus.com/bid/20609; http://www.vupen.com/english/advisories/2006/4087
CVE: CVE-2006-5424
Published: 2006-10-20
Description: Unspecified vulnerability in Justsystem Ichitaro 2006, 2006 trial version, and Government 2006 allows remote attackers to execute arbitrary code via a modified document, possibly because of a buffer overflow, a different vulnerability than CVE-2006-4326.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-399
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://secunia.com/advisories/22386; http://www.justsystem.co.jp/info/pd6004.html
CVE: CVE-2006-5425
Published: 2006-10-20
Description: XORP (eXtensible Open Router Platform) 1.2 and 1.3 allows remote attackers to cause a denial of service (application crash) via an Open Shortest Path First (OSPF) Link State Advertisement (LSA) with an invalid LSA length field.
CVSS Score: 5.0 (MEDIUM)
References: http://labs.musecurity.com/advisories/MU-200610-01.txt; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]6681&w=2; http://secunia.com/advisories/22462
CVE: CVE-2006-5426
Published: 2006-10-20
Description: PHP remote file inclusion vulnerability in lib/lcUser.php in LoCal Calendar System 1.1 remote attackers to execute arbitrary PHP code via a URL in the LIBDIR parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22484; http://www.securityfocus.com/bid/20619; http://www.vupen.com/english/advisories/2006/4100
CVE: CVE-2006-5427
Published: 2006-10-20
Description: PHP remote file inclusion vulnerability in plugins/main.php in Php AMX 0.9.0, when register_globals is enabled or magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the plug_path parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/22455; http://www.securityfocus.com/bid/20601; http://www.vupen.com/english/advisories/2006/4088
CVE: CVE-2006-5428
Published: 2006-10-20
Description: rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a display_get_requesters operation, which allows remote attackers to bypass the GUI login and obtain sensitive information (ticket data) via a direct request.
CVSS Score: 5.0 (MEDIUM)
References: http://forum.cerberusweb.com/showthread.php?t=7922; http://secunia.com/advisories/22418; http://www.securityfocus.com/bid/20598
CVE: CVE-2006-5429
Published: 2006-10-20
Description: Multiple PHP remote file inclusion vulnerabilities in Barry Nauta BRIM 1.2.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the renderer parameter in template.tpl.php in (1) templates/barrel/, (2) templates/sidebar/, (3) templates/text-only, (4) templates/slashdot/, (5) templates/penguin/, (6) templates/pda/, (7) templates/oerdec/, (8) templates/nifty/, (9) templates/mylook, and (10) templates/barry/.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22465; http://www.securityfocus.com/bid/20594; http://www.vupen.com/english/advisories/2006/4086
CVE: CVE-2006-5430
Published: 2006-10-20
Description: Cross-site scripting (XSS) vulnerability in the search functionality in db-central (dbc) Enterprise CMS and db-central CMS allows remote attackers to inject arbitrary web script or HTML via the needle parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/22407; http://www.osvdb.org/29832; http://www.securityfocus.com/bid/20622
CVE: CVE-2006-5431
Published: 2006-10-20
Description: PHP remote file inclusion vulnerability in gorum/dbproperty.php in PHPOutsourcing Zorum 3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the appDirName parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1748; http://www.securityfocus.com/archive/1/449105/100/0/threaded; http://www.securityfocus.com/bid/20606
CVE: CVE-2006-4926
Published: 2006-10-20
Description: The NDIS-TDI Hooking Engine, as used in the (1) KLICK (KLICK.SYS) and (2) KLIN (KLIN.SYS) device drivers 2.0.0.281 for in Kaspersky Labs Anti-Virus 6.0.0.303 and other Anti-Virus and Internet Security products, allows local users to execute arbitrary code via crafted Irp structure with invalid addresses in the 0x80052110 IOCTL.
CVSS Score: 7.2 (HIGH)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=425; http://secunia.com/advisories/22478; http://securitytracker.com/id?1017093
CVE: CVE-2006-5432
Published: 2006-10-20
Description: Multiple direct static code injection vulnerabilities in db/txt.inc.php in phpPowerCards 2.10, when register_globals is enabled, allow remote attackers to create or overwrite arbitrary files via the (1) email[to], (2) email[from], (3) name[to], (4) name[from], (5) picture, (6) comment, or (7) sessionID parameter, as demonstrated by creating a new .php file that permits remote file inclusion, and then requesting this file.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/22471; http://www.osvdb.org/29840; http://www.securityfocus.com/bid/20620
CVE: CVE-2006-5433
Published: 2006-10-20
Description: PHP remote file inclusion vulnerability in modules/guestbook/index.php in ALiCE-CMS 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[local_root] parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/20585; https://exchange.xforce.ibmcloud.com/vulnerabilities/29633; https://www.exploit-db.com/exploits/2582
CVE: CVE-2006-5434
Published: 2006-10-20
Description: PHP remote file inclusion vulnerability in p-news.php in P-News 1.16 and 1.17 allows remote attackers to execute arbitrary PHP code via a URL in the pn_lang parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/20569; https://exchange.xforce.ibmcloud.com/vulnerabilities/29587; https://www.exploit-db.com/exploits/2577
CVE: CVE-2006-5435
Published: 2006-10-20
Description: PHP remote file inclusion vulnerability in groupcp.php in phpBB 2.0.10 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.  NOTE: CVE and the vendor dispute this vulnerability because $phpbb_root_path is defined before use
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/archive/1/449114/100/0/threaded; http://www.securityfocus.com/archive/1/449232/100/0/threaded; http://www.securityfocus.com/archive/1/449114/100/0/threaded
CVE: CVE-2006-5436
Published: 2006-10-20
Description: PHP remote file inclusion vulnerability in index.php in FreeFAQ 1.0.e allows remote attackers to execute arbitrary PHP code via a URL in the faqpath parameter.
CVSS Score: 7.5 (HIGH)
References: http://downloads.securityfocus.com/vulnerabilities/exploits/freefaq-0.9.e-rfi.pl; http://www.securityfocus.com/bid/20621; http://downloads.securityfocus.com/vulnerabilities/exploits/freefaq-0.9.e-rfi.pl
CVE: CVE-2006-5437
Published: 2006-10-20
Description: Directory traversal vulnerability in upgrade.php in phpAdsNew 2.0.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the phpAds_config[language] parameter.  NOTE: this issue could not be reproduced by a third party
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/448994/100/0/threaded; http://www.securityfocus.com/archive/1/449084/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/29640
CVE: CVE-2006-5438
Published: 2006-10-20
Description: PHP remote file inclusion vulnerability in adminfoot.php in Comdev Forum 4.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22464; http://www.osvdb.org/29844; http://www.vupen.com/english/advisories/2006/4104
CVE: CVE-2006-5439
Published: 2006-10-20
Description: PHP remote file inclusion vulnerability in adminfoot.php in Comdev Misc Tools 4.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/22470; http://www.osvdb.org/29833; http://www.vupen.com/english/advisories/2006/4101
CVE: CVE-2006-5440
Published: 2006-10-20
Description: PHP remote file inclusion vulnerability in adminfoot.php in Comdev Form Designer 4.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22459; http://www.osvdb.org/29845; http://www.vupen.com/english/advisories/2006/4103
CVE: CVE-2006-5441
Published: 2006-10-20
Description: PHP remote file inclusion vulnerability in adminfoot.php in Comdev Web Blogger 4.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22433; http://www.osvdb.org/29846; http://www.vupen.com/english/advisories/2006/4102
CVE: CVE-2006-5442
Published: 2006-10-21
Description: ViewVC 1.0.2 and earlier does not specify a charset in its HTTP headers or HTML documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks that inject arbitrary UTF-7 encoded JavaScript code via a view.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/22395; http://securityreason.com/securityalert/1755; http://viewvc.tigris.org/servlets/ReadMsg?list=announce&msgNo=5&raw=true
CVE: CVE-2006-5443
Published: 2006-10-23
Description: Unspecified vulnerability in XIAO Gang WWW Interactive Mathematics Server (WIMS) before 3.60 allows remote attackers to modify unspecified data via unspecified vectors involving "variable rights."
CVSS Score: 5.0 (MEDIUM)
References: http://freshmeat.net/projects/wims/?branch_id=11538&release_id=238917; http://secunia.com/advisories/22415; http://www.vupen.com/english/advisories/2006/4108
CVE: CVE-2006-5444
Published: 2006-10-23
Description: Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c) in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer comparison and leads to a heap-based buffer overflow.
CVSS Score: 7.5 (HIGH)
References: http://ftp.digium.com/pub/asterisk/releases/ChangeLog-1.0.12; http://ftp.digium.com/pub/asterisk/releases/ChangeLog-1.2.13; http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050171.html
CVE: CVE-2006-5445
Published: 2006-10-23
Description: Unspecified vulnerability in the SIP channel driver (channels/chan_sip.c) in Asterisk 1.2.x before 1.2.13 and 1.4.x before 1.4.0-beta3 allows remote attackers to cause a denial of service (resource consumption) via unspecified vectors that result in the creation of "a real pvt structure" that uses more resources than necessary.
CVSS Score: 7.8 (HIGH)
References: http://ftp.digium.com/pub/asterisk/releases/ChangeLog-1.2.13; http://secunia.com/advisories/22651; http://secunia.com/advisories/22979
CVE: CVE-2006-5446
Published: 2006-10-23
Description: SQL injection vulnerability in lobby/config.php in Casinosoft Casino Script (aka Masvet) 3.2 allows remote attackers to execute arbitrary SQL commands via the cfam parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/22398; http://www.securityfocus.com/bid/20646; http://www.securitylab.ru/forum/read.php?FID=16&TID=23884
CVE: CVE-2006-5447
Published: 2006-10-23
Description: Cross-site scripting (XSS) vulnerability in index.php in DEV Web Management System (WMS) 1.5 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/1758; http://www.securityfocus.com/archive/1/449121/100/0/threaded; http://www.securityfocus.com/bid/20590
CVE: CVE-2006-5448
Published: 2006-10-23
Description: The drmstor.dll ActiveX object in Microsoft Windows Digital Rights Management System (DRM) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long parameter to the StoreLicense function, which triggers "memory corruption" and possibly a buffer overflow.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1756; http://www.securityfocus.com/archive/1/448097/100/200/threaded; http://securityreason.com/securityalert/1756
CVE: CVE-2006-5449
Published: 2006-10-23
Description: procmail in Ingo H3 before 1.1.2 Horde module allows remote authenticated users to execute arbitrary commands via shell metacharacters in the mailbox destination of a filter rule.
CVSS Score: 6.5 (MEDIUM)
References: http://bugs.horde.org/ticket/?Horde=6ed1a009f[PII_REDACTED]976a45948339e&id=4513; http://lists.horde.org/archives/announce/2006/000296.html; http://secunia.com/advisories/22482
CVE: CVE-2006-5450
Published: 2006-10-23
Description: SQL injection vulnerability in index.asp in Kinesis Interactive Cinema System (KICS) CMS allows remote attackers to execute arbitrary SQL commands via the (1) txtUsername (user) or (2) txtPassword (pass) parameters.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22493; http://securityreason.com/securityalert/1757; http://www.osvdb.org/29901
CVE: CVE-2006-5451
Published: 2006-10-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in TorrentFlux 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) action, (2) file, and (3) users array variables in (a) admin.php, which are not properly handled when the administrator views the Activity Log; and the (4) torrent parameter, as used by the displayName variable, in (b) startpop.php, different vectors than CVE-2006-5227.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/22384; http://www.securityfocus.com/archive/1/448619/100/100/threaded; http://www.securityfocus.com/archive/1/448947/100/0/threaded
CVE: CVE-2006-5452
Published: 2006-10-23
Description: Buffer overflow in dtmail on HP Tru64 UNIX 4.0F through 5.1B and HP-UX B.11.00 through B.11.23 allows local users to execute arbitrary code via a long -a (aka attachment) argument.
CVSS Score: 4.6 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00793091; http://secunia.com/advisories/22451; http://secunia.com/advisories/22528
CVE: CVE-2006-5453
Published: 2006-10-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in Bugzilla 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1, and 2.23.x before 2.23.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) page headers using the H1, H2, and H3 HTML tags in global/header.html.tmpl, (2) description fields of certain items in various edit cgi scripts, and (3) the id parameter in showdependencygraph.cgi.
CVSS Score: 3.5 (LOW)
References: http://secunia.com/advisories/22409; http://secunia.com/advisories/22790; http://secunia.com/advisories/22826
CVE: CVE-2006-5454
Published: 2006-10-23
Description: Bugzilla 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1, and 2.23.x before 2.23.3 allow remote attackers to obtain (1) the description of arbitrary attachments by viewing the attachment in "diff" mode in attachment.cgi, and (2) the deadline field by viewing the XML format of the bug in show_bug.cgi.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/22409; http://secunia.com/advisories/22790; http://security.gentoo.org/glsa/glsa-200611-04.xml
CVE: CVE-2006-5455
Published: 2006-10-23
Description: Cross-site request forgery (CSRF) vulnerability in editversions.cgi in Bugzilla before 2.22.1 and 2.23.x before 2.23.3 allows user-assisted remote attackers to create, modify, or delete arbitrary bug reports via a crafted URL.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/22409; http://secunia.com/advisories/22790; http://security.gentoo.org/glsa/glsa-200611-04.xml
CVE: CVE-2006-5456
Published: 2006-10-23
Description: Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-119
References: ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc; http://packages.debian.org/changelogs/pool/main/g/graphicsmagick/graphicsmagick_1.1.7-9/changelog#versionversion1.1.7-9; http://secunia.com/advisories/22569
CVE: CVE-2006-5457
Published: 2006-10-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in the registration form in Casinosoft Casino Script (Masvet) 3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) surname field.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securitylab.ru/forum/read.php?FID=16&TID=23884; http://www.securitylab.ru/forum/read.php?FID=16&TID=23884
CVE: CVE-2006-5458
Published: 2006-10-23
Description: PHP remote file inclusion vulnerability in common.php in Hinton Design phpht Topsites allows remote attackers to execute arbitrary PHP code via a URL in the phpht_real_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22404; http://www.securityfocus.com/bid/20491; http://www.vupen.com/english/advisories/2006/4023
CVE: CVE-2006-5459
Published: 2006-10-23
Description: Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) $_ENGINE[eng_dir] and possibly (2) spaw_root parameters in admin/includes/spaw/spaw_script.js.php, and the (3) $_ENGINE[eng_dir], (4) $spaw_root, (5) $spaw_dir, and (6) $spaw_base_url parameters in admin/includes/spaw/config/spaw_control.config.php, different vectors than CVE-2006-5291.  NOTE: CVE analysis as of 20061021 is inconclusive, but suggests that some or all of the suggested attack vectors are ineffective.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1761; http://www.securityfocus.com/archive/1/448574/100/100/threaded; http://securityreason.com/securityalert/1761
CVE: CVE-2006-5460
Published: 2006-10-23
Description: Multiple PHP remote file inclusion vulnerabilities in Hinton Design phpht Topsites allow remote attackers to execute arbitrary PHP code via a URL in the phpht_real_path parameter to (1) index.php, (2) certain other scripts in the top-level directory, and (3) certain scripts in the admin/ directory.  NOTE: CVE disputes this vulnerability because $phpht_real_path is defined before use in index.php and most other files except common.php, which is already covered by CVE-2006-5458
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1759; http://www.securityfocus.com/archive/1/448610/100/100/threaed; http://securityreason.com/securityalert/1759
CVE: CVE-2006-3455
Published: 2006-10-23
Description: The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3, allows local users to execute arbitrary code via a modified address for the output buffer argument to the DeviceIOControl function.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/22536; http://securitytracker.com/id?1017108; http://securitytracker.com/id?1017109
CVE: CVE-2006-4573
Published: 2006-10-24
Description: Multiple unspecified vulnerabilities in the "utf8 combining characters handling" (utf8_handle_comb function in encoding.c) in screen before 4.0.3 allows user-assisted attackers to cause a denial of service (crash or hang) via certain UTF8 sequences.
CVSS Score: 2.6 (LOW)
References: http://docs.info.apple.com/article.html?artnum=305530; http://lists.apple.com/archives/security-announce/2007/May/msg00004.html; http://lists.gnu.org/archive/html/screen-users/2006-10/msg00028.html
CVE: CVE-2006-4509
Published: 2006-10-24
Description: Integer overflow in the evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request.
CVSS Score: 10.0 (HIGH)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=427; http://secunia.com/advisories/22506; http://securitytracker.com/id?1017104
CVE: CVE-2006-4510
Published: 2006-10-24
Description: The evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request containing a value that is larger than the number of objects transmitted, which triggers an invalid free of unallocated memory.
CVSS Score: 10.0 (HIGH)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=428; http://secunia.com/advisories/22506; http://securitytracker.com/id?1017104