deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-1218
Published: 2006-03-14
Description: Unspecified vulnerability in the HTTP proxy in Novell BorderManager 3.8 and earlier allows remote attackers to cause a denial of service (CPU consumption and ABEND) via unknown attack vectors related to "media streaming over HTTP 1.1".
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/19163; http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972993.htm; http://www.osvdb.org/23752
CVE: CVE-2006-1219
Published: 2006-03-14
Description: Directory traversal vulnerability in Gallery 2.0.3 and earlier, and 2.1 before RC-2a, allows remote attackers to include arbitrary PHP files via ".." (dot dot) sequences in the stepOrder parameter to (1) upgrade/index.php or (2) install/index.php.
CVSS Score: 5.0 (MEDIUM)
References: http://gallery.menalto.com/2.0.4_and_2.1_rc_2a_update; http://secunia.com/advisories/19175; http://www.securityfocus.com/bid/17051
CVE: CVE-2006-1220
Published: 2006-03-14
Description: Integer overflow in the mach_msg_send function in the kernel for Mac OS X might allow local users to execute arbitrary code via unknown attack vectors related to a large message header size, which leads to a heap-based buffer overflow.
CVSS Score: 4.6 (MEDIUM)
References: http://www.felinemenace.org/~nemo/; http://www.osvdb.org/28453; http://www.securityfocus.com/bid/17056
CVE: CVE-2006-0396
Published: 2006-03-14
Description: Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute arbitrary code via a long Real Name value in an e-mail attachment sent in AppleDouble format, which triggers the overflow when the user double-clicks on an attachment.
CVSS Score: 5.1 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=303453; http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html; http://secunia.com/advisories/19129
CVE: CVE-2006-0397
Published: 2006-03-14
Description: Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attackers to trick a user into opening an application that appears to be a safe file type. NOTE: due to the lack of specific information in the vendor advisory, it is not clear how CVE-2006-0397, CVE-2006-0398, and CVE-2006-0399 are different.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://docs.info.apple.com/article.html?artnum=303453; http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html; http://secunia.com/advisories/19129
CVE: CVE-2006-0398
Published: 2006-03-14
Description: Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attackers to trick a user into opening an application that appears to be a safe file type. NOTE: due to the lack of specific information in the vendor advisory, it is not clear how CVE-2006-0397, CVE-2006-0398, and CVE-2006-0399 are different.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://docs.info.apple.com/article.html?artnum=303453; http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html; http://secunia.com/advisories/19129
CVE: CVE-2006-0399
Published: 2006-03-14
Description: Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attackers to trick a user into opening an application that appears to be a safe file type. NOTE: due to the lack of specific information in the vendor advisory, it is not clear how CVE-2006-0397, CVE-2006-0398, and CVE-2006-0399 are different.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://docs.info.apple.com/article.html?artnum=303453; http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html; http://secunia.com/advisories/19129
CVE: CVE-2006-0400
Published: 2006-03-14
Description: CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to bypass the same-origin policy and execute Javascript in other domains via unknown vectors involving "crafted archives."
CVSS Score: 7.5 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=303453; http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html; http://secunia.com/advisories/19129
CVE: CVE-2006-1221
Published: 2006-03-14
Description: Untrusted search path vulnerability in the TrueVector service (VSMON.exe) in Zone Labs ZoneAlarm 6.x and Integrity does not search ZoneAlarm's own folders before other folders that are specified in a user's PATH, which might allow local users to execute code as SYSTEM by placing malicious DLLs into a folder that has insecure permissions, but is searched before ZoneAlarm's folder.  NOTE: since this issue is dependent on the existence of a vulnerability in a separate product (weak permissions of executables or libraries, or the execution of malicious code), perhaps it should not be included in CVE.
CVSS Score: 6.2 (MEDIUM)
References: http://reedarvin.thearvins.com/20060308-01.html; http://securitytracker.com/id?1015743; http://www.securityfocus.com/archive/1/427122/100/0/threaded
CVE: CVE-2006-1222
Published: 2006-03-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitrary web script or HTML via the (1) memo box title, (2) user email, and (3) homepage fields.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042872.html; http://secunia.com/advisories/19214; http://www.inetcop.org/upfiles/33INCSA.2006-0x82-029-zeroboard.pdf
CVE: CVE-2006-1223
Published: 2006-03-14
Description: Cross-site scripting (XSS) vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in the image BBcode tag.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/19215; http://securityreason.com/securityalert/572; http://www.jupiterportal.com/index.php?n=modules/forum&a=3&d=11&o=5&q=313
CVE: CVE-2006-1224
Published: 2006-03-14
Description: Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via a "%2E." (mixed encoding) in the pg parameter.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/19222; http://securityreason.com/securityalert/569; http://securitytracker.com/id?1015753
CVE: CVE-2006-1225
Published: 2006-03-14
Description: CRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject headers of outgoing e-mail messages and use Drupal as a spam proxy.
CVSS Score: 5.0 (MEDIUM)
References: http://drupal.org/node/53806; http://secunia.com/advisories/19245; http://secunia.com/advisories/19257
CVE: CVE-2006-1226
Published: 2006-03-14
Description: Cross-site scripting (XSS) vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://drupal.org/node/53803; http://secunia.com/advisories/19245; http://secunia.com/advisories/19257
CVE: CVE-2006-1227
Published: 2006-03-14
Description: Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8, when menu.module is used to create a menu item, does not implement access control for the page that is referenced, which might allow remote attackers to access administrator pages.
CVSS Score: 4.6 (MEDIUM)
References: http://drupal.org/node/53796; http://secunia.com/advisories/19245; http://secunia.com/advisories/19257
CVE: CVE-2006-1228
Published: 2006-03-14
Description: Session fixation vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to gain privileges by tricking a user to click on a URL that fixes the session identifier.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-287
References: http://drupal.org/node/53805; http://secunia.com/advisories/19245; http://secunia.com/advisories/19257
CVE: CVE-2006-1229
Published: 2006-03-14
Description: SQL injection vulnerability in search.asp in Hosting Controller 6.1 (Hotfix 2.9) allows remote attackers to execute arbitrary SQL commands via the search parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19191; http://www.osvdb.org/23802; http://www.vupen.com/english/advisories/2006/0914
CVE: CVE-2006-1230
Published: 2006-03-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in create.php in vCard 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) card_id, (2) uploaded, (3) card_fontsize, or (4) card_color parameter.  NOTE: the card_id vector was later reported to affect vCard 2.9, and the uploaded vector for 2.6.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/19216; http://securitytracker.com/id?1016183; http://www.osvdb.org/23838
CVE: CVE-2006-1231
Published: 2006-03-14
Description: CAPI4HylaFAX 1.3, when compiled with GENERATE_DEBUGSFFDATAFILE set, allows local users to modify arbitrary files via a symlink attack on the c2faxrecv_dbgdatafile.sff temporary file.
CVSS Score: 1.2 (LOW)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]3438&w=2; http://www.securityfocus.com/archive/1/427084/100/0/threaded; http://www.securityfocus.com/bid/17034
CVE: CVE-2006-1232
Published: 2006-03-14
Description: Multiple SQL injection vulnerabilities in DSDownload 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) key and (2) category parameters to (a) search.php and (b) downloads.php.
CVSS Score: 7.5 (HIGH)
References: http://evuln.com/vulns/99/summary.html; http://secunia.com/advisories/19202; http://securityreason.com/securityalert/626
CVE: CVE-2006-1233
Published: 2006-03-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in WMNews allow remote attackers to inject arbitrary web script or HTML via the (1) ArtCat parameter to wmview.php, (2) ctrrowcol parameter to footer.php, or (3) ArtID parameter to wmcomments.php.
CVSS Score: 4.3 (MEDIUM)
References: http://biyosecurity.be/bugs/wmnews.txt; http://secunia.com/advisories/19204; http://www.osvdb.org/23840
CVE: CVE-2006-1234
Published: 2006-03-14
Description: SQL injection vulnerability in index.php in DSCounter 1.2, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field (HTTP_X_FORWARDED_FOR environment variable) in an HTTP header.
CVSS Score: 5.1 (MEDIUM)
References: http://evuln.com/vulns/98/summary.html; http://secunia.com/advisories/19206; http://securityreason.com/securityalert/627
CVE: CVE-2006-0009
Published: 2006-03-14
Description: Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJ_MDROPPER.BH and Trojan.PPDropper.E in attacks against PowerPoint.
CVSS Score: 5.1 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0597.html; http://blogs.securiteam.com/?author=28; http://blogs.securiteam.com/?p=557
CVE: CVE-2006-0028
Published: 2006-03-14
Description: Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/19138; http://secunia.com/advisories/19238; http://securityreason.com/securityalert/583
CVE: CVE-2006-0029
Published: 2006-03-14
Description: Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed description, which leads to memory corruption.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/19138; http://secunia.com/advisories/19238; http://securityreason.com/securityalert/585
CVE: CVE-2006-0030
Published: 2006-03-14
Description: Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed graphic, which leads to memory corruption.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/19138; http://secunia.com/advisories/19238; http://securitytracker.com/id?1015766
CVE: CVE-2006-0031
Published: 2006-03-14
Description: Stack-based buffer overflow in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed record with a modified length value, which leads to memory corruption.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-02/1521.html; http://secunia.com/advisories/19138; http://secunia.com/advisories/19238
CVE: CVE-2006-1235
Published: 2006-03-14
Description: Directory traversal vulnerability in admin/deleteuser.php in HitHost 1.0.0 might allow remote attackers to delete directories (possibly only empty directories) via the $deleteuser variable.  NOTE: the initial disclosure for this issue indicated that the researcher was unable to prove this issue; however, this might have been due to certain behaviors of rmdir.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/19155; http://www.securityfocus.com/archive/1/426931/100/0/threaded; http://www.securityfocus.com/archive/1/427631/100/0/threaded
CVE: CVE-2006-1236
Published: 2006-03-15
Description: Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010.
CVSS Score: 7.5 (HIGH)
References: http://cvs.sourceforge.net/viewcvs.py/crossfire/crossfire/socket/request.c?rev=1.86&view=log; http://packetstormsecurity.com/files/163873/Crossfire-Server-1.0-Buffer-Overflow.html; http://secunia.com/advisories/19237
CVE: CVE-2006-0024
Published: 2006-03-15
Description: Multiple unspecified vulnerabilities in Adobe Flash Player 8.0.22.0 and earlier allow remote attackers to execute arbitrary code via a crafted SWF file.
CVSS Score: 5.1 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=307179; http://lists.apple.com/archives/security-announce/2006/May/msg00003.html; http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
CVE: CVE-2006-1237
Published: 2006-03-15
Description: Multiple SQL injection vulnerabilities in DSNewsletter 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the email parameter to (1) include/sub.php, (2) include/confirm.php, or (3) include/unconfirm.php.
CVSS Score: 7.5 (HIGH)
References: http://evuln.com/vulns/97/summary.html; http://secunia.com/advisories/19207; http://securityreason.com/securityalert/623
CVE: CVE-2006-1238
Published: 2006-03-15
Description: SQL injection vulnerability in DSLogin 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the $log_userid variable in (1) index.php and (2) admin/index.php.
CVSS Score: 5.1 (MEDIUM)
References: http://evuln.com/vulns/100/summary.html; http://secunia.com/advisories/19201; http://securityreason.com/securityalert/637
CVE: CVE-2006-1239
Published: 2006-03-15
Description: Cross-site scripting (XSS) vulnerability in issue/createissue.aspx in Gemini 2.0 allows remote attackers to inject arbitrary web script or HTML via the rtcDescription$RadEditor1 field.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/19049; http://www.osvdb.org/23907; http://www.securityfocus.com/bid/17092
CVE: CVE-2006-1240
Published: 2006-03-15
Description: Buffer overflow in inet_server.cpp in (1) fb_inet_server and (2) fbserver in Firebird 1.5.2.4731 allows local users to gain privileges via a long value of the -p argument.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043546.html; http://www.securityfocus.com/archive/1/427480/100/0/threaded; http://www.securityfocus.com/bid/17077
CVE: CVE-2006-1241
Published: 2006-03-15
Description: Firebird 1.5.2.4731 installs (1) fb_lock_mgr, (2) gds_drop, and (3) fb_inet_server with setuid firebird permissions, which might allow local users to gain privileges via a buffer overflow as identified by CVE-2006-1240, or possibly other vulnerabilities.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043546.html; http://www.securityfocus.com/archive/1/427480/100/0/threaded; http://www.securityfocus.com/bid/17077
CVE: CVE-2006-1242
Published: 2006-03-15
Description: The ip_push_pending_frames function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RST after receiving unsolicited TCP SYN-ACK packets, which allows remote attackers to conduct an Idle Scan (nmap -sI) attack, which bypasses intended protections against such attacks.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/19402; http://secunia.com/advisories/19955; http://secunia.com/advisories/20157
CVE: CVE-2006-1243
Published: 2006-03-15
Description: Directory traversal vulnerability in install05.php in Simple PHP Blog (SPB) 0.4.7.1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences and a NUL (%00) character in the blog_language parameter, as demonstrated by injecting PHP sequences into an Apache access_log file, which is then included using install05.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19270; http://sourceforge.net/forum/forum.php?forum_id=564904; http://www.attrition.org/pipermail/vim/2006-November/001138.html
CVE: CVE-2006-1244
Published: 2006-03-15
Description: Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) pdftohtml, and (d) libextractor, has unknown impact and user-assisted attack vectors, possibly involving errors in (1) gmem.c, (2) SplashXPathScanner.cc, (3) JBIG2Stream.cc, (4) JPXStream.cc, and/or (5) Stream.cc.  NOTE: this description is based on Debian advisory DSA 979, which is based on changes that were made after other vulnerabilities such as CVE-2006-0301 and CVE-2005-3624 through CVE-2005-3628 were fixed.  Some of these newer fixes appear to be security-relevant, although it is not clear if they fix specific issues or are defensive in nature.
CVSS Score: 7.6 (HIGH)
References: http://secunia.com/advisories/18948; http://secunia.com/advisories/19021; http://secunia.com/advisories/19065
CVE: CVE-2006-1182
Published: 2006-03-16
Description: Adobe Graphics Server 2.0 and 2.1 (formerly AlterCast) and Adobe Document Server (ADS) 5.0 and 6.0 allows local users to read files with certain extensions or overwrite arbitrary files and execute code via a crafted SOAP request to the AlterCast web service in which the request uses the (1) saveContent or (2) saveOptimized ADS commands, or the (3) loadContent command.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/19229; http://securityreason.com/securityalert/588; http://securitytracker.com/id?1015768
CVE: CVE-2006-1245
Published: 2006-03-17
Description: Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a large number of script action handlers such as onload and onmouseover, as demonstrated using onclick, aka the "Multiple Event Handler Memory Corruption Vulnerability."
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2006-02/0855.html; http://secunia.com/advisories/18957; http://secunia.com/advisories/19269
CVE: CVE-2006-1246
Published: 2006-03-17
Description: Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute arbitrary commands when mklvcopy calls external commands, possibly due to an untrusted search path vulnerability.
CVSS Score: 7.2 (HIGH)
References: http://attrition.org/pipermail/vim/2006-March/000641.html; http://secunia.com/advisories/19235; http://securitytracker.com/id?1015786
CVE: CVE-2006-1248
Published: 2006-03-17
Description: Unspecified vulnerability in usermod in HP-UX B.11.00, B.11.11, and B.11.23, when run with certain options that involve a new home directory, might cause usermod to change the ownership of all directories and files under the new directory, which might result in less secure permissions than intended.
CVSS Score: 4.6 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00614838; http://secunia.com/advisories/19305; http://securitytracker.com/id?1015782
CVE: CVE-2006-1249
Published: 2006-03-19
Description: Integer overflow in Apple QuickTime Player 7.0.3 and 7.0.4 and iTunes 6.0.1 and 6.0.2 allows remote attackers to execute arbitrary code via a FlashPix (FPX) image that contains a field that specifies a large number of blocks.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2006/May/msg00002.html; http://secunia.com/advisories/20069; http://securitytracker.com/id?1016067
CVE: CVE-2006-1250
Published: 2006-03-19
Description: Unspecified vulnerability in the Webmail module in Winmail before 4.3 has unknown impact and unknown remote attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www.magicwinmail.net/changelog.asp; http://www.securityfocus.com/bid/17009; http://www.vupen.com/english/advisories/2006/0858
CVE: CVE-2006-1251
Published: 2006-03-19
Description: Argument injection vulnerability in greylistclean.cron in sa-exim 4.2 allows remote attackers to delete arbitrary files via an email with a To field that contains a filename separated by whitespace, which is not quoted when greylistclean.cron provides the argument to the rm command.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-94
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345071; http://marc.merlins.org/linux/exim/files/sa-exim-cvs/Changelog.html; http://secunia.com/advisories/19225
CVE: CVE-2006-1252
Published: 2006-03-19
Description: Eval injection vulnerability in cal.php in Light Weight Calendar (LWC) 1.0 allows remote attackers to execute arbitrary PHP code via the date parameter to index.php.
CVSS Score: 7.5 (HIGH)
References: http://attrition.org/pipermail/vim/2006-March/000612.html; http://www.securityfocus.com/bid/17059; https://www.exploit-db.com/exploits/1570
CVE: CVE-2006-1253
Published: 2006-03-19
Description: Unspecified vulnerability in glFTPd before 2.01 RC5 allows remote attackers to bypass IP checks via a crafted DNS hostname, possibly a hostname that appears to be an IP address.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19221; http://www.glftpd.com/files/docs/changelog; http://www.securityfocus.com/bid/17118
CVE: CVE-2006-1254
Published: 2006-03-19
Description: Unspecified vulnerability in BorderWare MXtreme 5.0 and 6.0 allows remote attackers to have an unknown impact via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/19223; http://securitytracker.com/id?1015787; http://www.osvdb.org/23939