deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-3358
Published: 2006-07-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web script or HTML via the (1) words, (2) id, (3) cat_id, and (4) tim parameters, which are not sanitized before being returned in an error page.  NOTE: it is possible that some of these vectors are resultant from an SQL injection issue.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/20943; http://securityreason.com/securityalert/1188; http://www.osvdb.org/26976
CVE: CVE-2006-3359
Published: 2006-07-06
Description: Multiple SQL injection vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web script or HTML via the (1) words, (2) id, (3) topmenuitem, and (4) cat_id parameters in (a) index.php; and the (5) category parameter in (b) inc/rss_feed.php.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1188; http://www.osvdb.org/26978; http://www.securityfocus.com/archive/1/438858/100/0/threaded
CVE: CVE-2006-3360
Published: 2006-07-06
Description: Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence and a trailing null (%00) byte in the lng parameter, which will display a different error message if the file exists.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0065.html; http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0066.html; http://secunia.com/advisories/20939
CVE: CVE-2006-3361
Published: 2006-07-06
Description: PHP remote file inclusion vulnerability in Stud.IP 1.3.0-2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the (1) _PHPLIB[libdir] parameter in studip-phplib/oohforms.inc and (2) ABSOLUTE_PATH_STUDIP parameter in studip-htdocs/archiv_assi.php.
CVSS Score: 5.1 (MEDIUM)
References: http://hamid.ir/security/studip.txt; http://securitytracker.com/id?1016418; http://www.securityfocus.com/bid/18741
CVE: CVE-2006-3362
Published: 2006-07-06
Description: Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) Geeklog 1.4.0 through 1.4.0sr3, (2) toendaCMS 1.0.0 Shizouka Stable and earlier, (3) WeBid 0.5.4, and possibly other products, when installed on Apache with mod_mime, allows remote attackers to upload and execute arbitrary PHP code via a filename with a .php extension and a trailing extension that is allowed, such as .zip.
CVSS Score: 5.1 (MEDIUM)
References: http://retrogod.altervista.org/toenda_100_shizouka_xpl.html; http://secunia.com/advisories/20886; http://secunia.com/advisories/21117
CVE: CVE-2006-3363
Published: 2006-07-06
Description: PHP remote file inclusion vulnerability in index.php in the Glossaire module 1.7 for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the pa parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://securityreason.com/securityalert/1195; http://securitytracker.com/id?1016425; http://www.securityfocus.com/archive/1/438939/100/0/threaded
CVE: CVE-2006-3364
Published: 2006-07-06
Description: SQL injection vulnerability in index.php in the NP_SEO plugin in BLOG:CMS before 4.1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
References: http://blogcms.com/wiki/changelog; http://retrogod.altervista.org/blogcms_400k_sql.html; http://secunia.com/advisories/20859
CVE: CVE-2006-3365
Published: 2006-07-06
Description: V3 Chat allows remote attackers to obtain the installation path via (1) an invalid id parameter to mail/index.php or (2) membername parameter to messenger/online.php, which displays the path in an error page due to an incorrect SQL statement.
CVSS Score: 2.6 (LOW)
CWE: CWE-200
References: http://securitytracker.com/id?1016340; http://www.securityfocus.com/archive/1/437755/100/200/threaded; http://www.securityfocus.com/archive/1/438069/100/200/threaded
CVE: CVE-2006-3366
Published: 2006-07-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or HTML via crafted HTML tags, as demonstrated by the IMG tag, in the (1) id parameter in (a) mail/index.php and (b) mail/reply.php; (2) login_id parameter in (c) members/is_online.php; (3) site_id parameter in (d) messenger/online.php, (e) messenger/search.php, and (f) messenger/profile.php; (4) contact_name parameter in messenger/search.php; (5) membername parameter in (g) messenger/profileview.php; (6) unspecified parameters used when "editing a profile"; and (7) cust_name parameter in (h) messenger/expire.php.  NOTE: The vendor disputes the vectors involving files in the messenger directory, stating "... the referenced folder 'messenger' was never available to the general public...".
CVSS Score: 2.6 (LOW)
References: http://securitytracker.com/id?1016340; http://www.securityfocus.com/archive/1/437755/100/200/threaded; http://www.securityfocus.com/archive/1/438069/100/200/threaded
CVE: CVE-2006-3367
Published: 2006-07-06
Description: Mp3 JudeBox Server (Mp3NetBox) Beta 1 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/1192; http://www.securityfocus.com/archive/1/438964/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/27572
CVE: CVE-2006-3368
Published: 2006-07-06
Description: Efone 20000723 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/20902; http://securityreason.com/securityalert/1192; http://www.securityfocus.com/archive/1/438964/100/0/threaded
CVE: CVE-2006-3369
Published: 2006-07-06
Description: Kamikaze-QSCM 0.1 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/20918; http://securityreason.com/securityalert/1192; http://www.securityfocus.com/archive/1/438964/100/0/threaded
CVE: CVE-2006-3370
Published: 2006-07-06
Description: Blueboy 1.0.3 stores bb_news_config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/1192; http://www.securityfocus.com/archive/1/438964/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/27576
CVE: CVE-2006-3371
Published: 2006-07-06
Description: Eupla Foros 1.0 stores the inc/config.inc file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/20945; http://securityreason.com/securityalert/1192; http://www.securityfocus.com/archive/1/438964/100/0/threaded
CVE: CVE-2006-3372
Published: 2006-07-06
Description: Apple Safari 2.0.4/419.3 allows remote attackers to cause a denial of service (application crash) via a DHTML setAttributeNode function call with zero arguments, which triggers a null dereference.
CVSS Score: 5.0 (MEDIUM)
References: http://browserfun.blogspot.com/2006/07/mobb-5-dhtml-setattributenode.html; http://securitytracker.com/id?1016441; http://www.osvdb.org/26838
CVE: CVE-2006-3373
Published: 2006-07-06
Description: Unspecified vulnerability in the client/bin/logfetch script in Hobbit 4.2-beta allows local users to read arbitrary files, related to logfetch running as setuid root.
CVSS Score: 2.1 (LOW)
References: http://securityreason.com/securityalert/1191; http://www.securityfocus.com/archive/1/438818/100/0/threaded; http://www.securityfocus.com/bid/18752
CVE: CVE-2006-3374
Published: 2006-07-06
Description: PHP remote file inclusion vulnerability in index.php in Randshop 1.2 and earlier, including 0.9.3, allows remote attackers to execute arbitrary PHP code via a URL in the incl parameter.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1016438; http://www.securityfocus.com/archive/1/439040/100/0/threaded; http://www.securityfocus.com/archive/1/439063/100/0/threaded
CVE: CVE-2006-3375
Published: 2006-07-06
Description: PHP remote file inclusion vulnerability in includes/header.inc.php in Randshop 1.1.1 allows remote attackers to execute arbitrary PHP code via the dateiPfad parameter.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1016436; http://www.securityfocus.com/bid/18763; http://www.vupen.com/english/advisories/2006/2740
CVE: CVE-2006-3376
Published: 2006-07-06
Description: Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file.
CVSS Score: 7.5 (HIGH)
References: http://rhn.redhat.com/errata/RHSA-2006-0597.html; http://secunia.com/advisories/20921; http://secunia.com/advisories/21064
CVE: CVE-2006-3377
Published: 2006-07-06
Description: Cross-site scripting (XSS) vulnerability in JMB Software AutoRank PHP 3.02 and earlier, and AutoRank Pro 5.01 and earlier, allows remote attackers to inject arbitrary web script or HTML via the (1) Keyword parameter in search.php and the (2) Username parameter in main.cgi.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/20903; http://secunia.com/advisories/20929; http://securitytracker.com/id?1016428
CVE: CVE-2006-3378
Published: 2006-07-06
Description: passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag, does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/20950; http://secunia.com/advisories/20966; http://secunia.com/advisories/21480
CVE: CVE-2006-3379
Published: 2006-07-06
Description: Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service (CPU consumption) by performing a diff between large, crafted pages that trigger the worst case.
CVSS Score: 5.0 (MEDIUM)
References: http://hikiwiki.org/en/advisory20060703.html; http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://secunia.com/advisories/20741
CVE: CVE-2006-3380
Published: 2006-07-06
Description: Algorithmic complexity vulnerability in FreeStyle Wiki before 3.6.2 allows remote attackers to cause a denial of service (CPU consumption) by performing a diff between large, crafted pages that trigger the worst case.
CVSS Score: 5.0 (MEDIUM)
References: http://fswiki.poi.jp/wiki.cgi?page=%CD%FA%CE%F2%2F2006-7-3; http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://secunia.com/advisories/20875
CVE: CVE-2006-3381
Published: 2006-07-06
Description: SturGeoN Upload allows remote attackers to execute arbitrary PHP code by uploading a file with a .php extension, then directly accessing the file.  NOTE: It is uncertain whether this is a vulnerability or a feature of the product.
CVSS Score: 7.5 (HIGH)
References: http://acidr00t.free.fr/poc/sturgeonupv1.txt; http://www.securityfocus.com/archive/1/438876/100/0/threaded; http://www.securityfocus.com/bid/18764
CVE: CVE-2006-3382
Published: 2006-07-06
Description: Cross-site scripting (XSS) vulnerability in search.php in mAds 1.0 allows remote attackers to inject arbitrary web script or HTML via the "search string".
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/20932; http://securityreason.com/securityalert/1189; http://www.securityfocus.com/archive/1/438869/100/0/threaded
CVE: CVE-2006-3383
Published: 2006-07-06
Description: Cross-site scripting (XSS) vulnerability in index.php in mAds 1.0 allows remote attackers to inject arbitrary web script or HTML via Javascript events such as onmouseover within a URL.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party reports.
CVSS Score: 5.8 (MEDIUM)
References: http://secunia.com/advisories/20932; http://www.vupen.com/english/advisories/2006/2641; https://exchange.xforce.ibmcloud.com/vulnerabilities/27510
CVE: CVE-2006-3384
Published: 2006-07-06
Description: SQL injection vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) texte parameters.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/20936; http://www.acid-root.new.fr/advisories/news52.txt; http://www.securityfocus.com/archive/1/438859/100/0/threaded
CVE: CVE-2006-3385
Published: 2006-07-06
Description: Cross-site scripting (XSS) vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) id and (2) disabled parameters.
CVSS Score: 5.8 (MEDIUM)
References: http://secunia.com/advisories/20936; http://www.acid-root.new.fr/advisories/news52.txt; http://www.securityfocus.com/archive/1/438859/100/0/threaded
CVE: CVE-2006-3386
Published: 2006-07-06
Description: index.php in Vincent Leclercq News 5.2 allows remote attackers to obtain sensitive information, such as the installation path, via a mail[] parameter with invalid values.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/20936; http://www.acid-root.new.fr/advisories/news52.txt; http://www.securityfocus.com/archive/1/438859/100/0/threaded
CVE: CVE-2006-3387
Published: 2006-07-06
Description: Directory traversal vulnerability in sources/post.php in Fusion News 1.0, when register_globals is enabled, allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the fil_config parameter, which can be used to execute PHP code that has been injected into a log file.
CVSS Score: 5.1 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/26619; https://www.exploit-db.com/exploits/1812; https://exchange.xforce.ibmcloud.com/vulnerabilities/26619
CVE: CVE-2006-3388
Published: 2006-07-06
Description: Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via the table parameter.
CVSS Score: 5.8 (MEDIUM)
References: http://lists.suse.com/archive/suse-security-announce/2006-Nov/0010.html; http://secunia.com/advisories/20907; http://secunia.com/advisories/23086
CVE: CVE-2006-3389
Published: 2006-07-06
Description: index.php in WordPress 2.0.3 allows remote attackers to obtain sensitive information, such as SQL table prefixes, via an invalid paged parameter, which displays the information in an SQL error message.  NOTE: this issue has been disputed by a third party who states that the issue does not leak any target-specific information.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/20928; http://secunia.com/advisories/21447; http://security.gentoo.org/glsa/glsa-200608-19.xml
CVE: CVE-2006-3390
Published: 2006-07-06
Description: WordPress 2.0.3 allows remote attackers to obtain the installation path via a direct request to various files, such as those in the (1) wp-admin, (2) wp-content, and (3) wp-includes directories, possibly due to uninitialized variables.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/20928; http://secunia.com/advisories/21447; http://security.gentoo.org/glsa/glsa-200608-19.xml
CVE: CVE-2006-3391
Published: 2006-07-06
Description: The Execute function in iMBCContents ActiveX Control before 2.0.0.59 allows remote attackers to execute arbitrary files via the file URI handler.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/20938; http://www.osvdb.org/27049; http://www.securityfocus.com/bid/18848
CVE: CVE-2006-3392
Published: 2006-07-06
Description: Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequences before bytes such as "%01" are removed from the filename.  NOTE: This is a different issue than CVE-2006-3274.
CVSS Score: 5.0 (MEDIUM)
References: http://attrition.org/pipermail/vim/2006-July/000923.html; http://attrition.org/pipermail/vim/2006-June/000912.html; http://secunia.com/advisories/20892
CVE: CVE-2006-3393
Published: 2006-07-06
Description: Papyrus NASCAR Racing 4 4.1.3.1.6 and earlier, 2002 Season 1.1.0.2 and earlier, and 2003 Season 1.2.0.1 and earlier allows remote attackers to cause a denial of service (CPU consumption) by sending an empty UDP datagram, which is not properly discarded due to use of the FIONREAD asynchronous socket.
CVSS Score: 7.8 (HIGH)
References: http://aluigi.altervista.org/adv/nascarzero-adv.txt; http://secunia.com/advisories/20947; http://www.securityfocus.com/bid/18778
CVE: CVE-2006-3394
Published: 2006-07-06
Description: SQL injection vulnerability in the files mod in index.php in BXCP 0.3.0.4 allows remote attackers to execute arbitrary SQL commands via the where parameter in a view action.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20908; http://www.osvdb.org/26938; http://www.securityfocus.com/bid/18765
CVE: CVE-2006-3395
Published: 2006-07-06
Description: PHP remote file inclusion vulnerability in top.php in SiteBuilder-FX 3.5 allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/20923; http://securitytracker.com/id?1016417; http://www.jaascois.com/exploits/18602017/
CVE: CVE-2006-3396
Published: 2006-07-06
Description: PHP remote file inclusion vulnerability in galleria.html.php in Galleria Mambo Module 1.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/20949; http://securityreason.com/securityalert/1197; http://securitytracker.com/id?1016437
CVE: CVE-2006-3397
Published: 2006-07-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in Taskjitsu before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, including the (1) title and (2) description parameters when creating a task.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/20912; http://www.pkrinternet.com/download/RELEASE-NOTES.txt; http://www.securityfocus.com/bid/18818
CVE: CVE-2006-3398
Published: 2006-07-06
Description: The "change password forms" in Taskjitsu before 2.0.1 includes password hashes in hidden form fields, which allows remote attackers to obtain sensitive information from the (1) Category Editor and (2) User Information editor.
CVSS Score: 5.0 (MEDIUM)
References: http://www.pkrinternet.com/download/RELEASE-NOTES.txt; http://www.vupen.com/english/advisories/2006/2660; https://www.pkrinternet.com/taskjitsu/task/3400
CVE: CVE-2006-3399
Published: 2006-07-06
Description: Cross-site scripting (XSS) vulnerability in wiki.php in MoniWiki before 1.1.2-20060702 allows remote attackers to inject arbitrary Javascript via the URL, which is reflected back in an error message, a variant of CVE-2004-1632.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/20909; http://securityreason.com/securityalert/1196; http://www.osvdb.org/26958
CVE: CVE-2006-3400
Published: 2006-07-06
Description: Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP) GOLD 1.03 allows remote attackers to cause a denial of service and possibly execute code by sending a long command from the server.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20946; http://www.securityfocus.com/bid/18777; http://www.vupen.com/english/advisories/2006/2657
CVE: CVE-2006-3401
Published: 2006-07-06
Description: Stack-based buffer overflow in Quake 3 Engine as used by Quake 3: Arena 1.32b and 1.32c allows remote attackers to cause a denial of service and possibly execute code via long CS_ITEMS values.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/20946; http://secunia.com/advisories/20961; http://www.securityfocus.com/bid/18777
CVE: CVE-2006-3402
Published: 2006-07-06
Description: SQL injection vulnerability in VirtuaStore 2.0 allows remote attackers to execute arbitrary SQL commands via the password parameter when logging in.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1016421; http://www.securityfocus.com/bid/18790; https://exchange.xforce.ibmcloud.com/vulnerabilities/27534
CVE: CVE-2006-3404
Published: 2006-07-06
Description: Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a large num_axes value in the VECTORS property.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-120
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=377049; http://bugzilla.gnome.org/show_bug.cgi?id=346742; http://secunia.com/advisories/20976
CVE: CVE-2006-3405
Published: 2006-07-07
Description: Cross-site scripting (XSS) vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) delete, (2) pathext, and (3) edit parameters.
CVSS Score: 5.8 (MEDIUM)
References: http://securityreason.com/securityalert/1199; http://securitytracker.com/id?1016427; http://www.securityfocus.com/archive/1/438960/100/0/threaded
CVE: CVE-2006-3406
Published: 2006-07-07
Description: Directory traversal vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to modify arbitrary files via a .. (dot dot) sequence in the edit parameter.
CVSS Score: 6.4 (MEDIUM)
References: http://securityreason.com/securityalert/1199; http://www.securityfocus.com/archive/1/438960/100/0/threaded; http://securityreason.com/securityalert/1199
CVE: CVE-2006-3407
Published: 2006-07-07
Description: Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-printable characters.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/20277; http://secunia.com/advisories/20514; http://security.gentoo.org/glsa/glsa-200606-04.xml
CVE: CVE-2006-3408
Published: 2006-07-07
Description: Unspecified vulnerability in the directory server (dirserver) in Tor before 0.1.1.20 allows remote attackers to cause an unspecified denial of service via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/20277; http://secunia.com/advisories/20514; http://security.gentoo.org/glsa/glsa-200606-04.xml
CVE: CVE-2006-3409
Published: 2006-07-07
Description: Integer overflow in Tor before 0.1.1.20 allows remote attackers to execute arbitrary code via crafted large inputs, which result in a buffer overflow when elements are added to smartlists.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20277; http://secunia.com/advisories/20514; http://security.gentoo.org/glsa/glsa-200606-04.xml
CVE: CVE-2006-3410
Published: 2006-07-07
Description: Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit nodes," which allows remote attackers to conduct unspecified statistical attacks.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/20277; http://secunia.com/advisories/20514; http://security.gentoo.org/glsa/glsa-200606-04.xml