deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-5062
Published: 2006-09-28
Description: PHP remote file inclusion vulnerability in templates/pb/language/lang_nl.php in PBLang (PBL) 4.66z and earlier allows remote attackers to execute arbitrary PHP code via a URL in the temppath parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22121; http://www.securityfocus.com/bid/20184; http://www.vupen.com/english/advisories/2006/3772
CVE: CVE-2006-5063
Published: 2006-09-28
Description: Cross-site scripting (XSS) vulnerability in Elog 2.6.1 allows remote attackers to inject arbitrary web script or HTML by editing log entries in HTML mode.
CVSS Score: 5.1 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=389361; http://secunia.com/advisories/22057; http://secunia.com/advisories/23580
CVE: CVE-2006-5064
Published: 2006-09-28
Description: Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) entryid parameter in comment.php, (2) page parameter in index.php, or the (3) uid parameter in user.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 5.1 (MEDIUM)
References: http://securitytracker.com/id?1017258; http://www.osvdb.org/31367; http://www.osvdb.org/31368
CVE: CVE-2006-5065
Published: 2006-09-28
Description: PHP remote file inclusion vulnerability in libs/dbmax/mysql.php in ZoomStats 1.0.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[lib][db][path] parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://www.securityfocus.com/bid/20165; http://zoomstats.cvs.sourceforge.net/zoomstats/zoomstats/libs/dbmax/mysql.php?view=markup; https://exchange.xforce.ibmcloud.com/vulnerabilities/29120
CVE: CVE-2006-5066
Published: 2006-09-28
Description: Multiple cross-site scripting (XSS) vulnerabilities in DanPHPSupport 0.5, and other versions before 1.0, allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in index.php or the (2) do parameter in admin.php.
CVSS Score: 5.1 (MEDIUM)
References: http://securityreason.com/securityalert/1648; http://www.securityfocus.com/archive/1/447002/100/0/threaded; http://www.securityfocus.com/archive/1/448693/100/0/threaded
CVE: CVE-2006-5067
Published: 2006-09-28
Description: PHP remote file inclusion vulnerability in loader.php in PHP System Administration Toolkit (PHPSaTK) allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config] parameter.  NOTE: this issue is disputed by CVE; analysis shows that the GLOBALS[config] variable is initialized before being used
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1647; http://www.attrition.org/pipermail/vim/2006-September/001054.html; http://www.securityfocus.com/archive/1/446882/100/0/threaded
CVE: CVE-2006-5068
Published: 2006-09-28
Description: PHP remote file inclusion vulnerability in admin/index.php in Brudaswen (1) BrudaNews 1.1 and earlier and (2) BrudaGB 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the o parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22115; http://www.osvdb.org/29176; http://www.securityfocus.com/bid/20192
CVE: CVE-2006-5069
Published: 2006-09-28
Description: Cross-site scripting (XSS) vulnerability in class.tx_indexedsearch.php in the Indexed Search 2.9.0 extension for Typo3 before 4.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter.
CVSS Score: 2.6 (LOW)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]0694&w=2; http://secunia.com/advisories/22071; http://securityreason.com/securityalert/1646
CVE: CVE-2006-5070
Published: 2006-09-28
Description: PHP remote file inclusion vulnerability in fsl2/objects/fs_form_links.php in faceStones Personal 2.0.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[fsinit][objpath] parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/22107; http://www.osvdb.org/29178; http://www.securityfocus.com/bid/20188
CVE: CVE-2006-5071
Published: 2006-09-28
Description: Multiple cross-site scripting (XSS) vulnerabilities in eyeOS before 0.9.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) eyeNav and (2) system/baixar.php.
CVSS Score: 4.3 (MEDIUM)
References: http://eyeos.blogspot.com/2006/09/eyeos-091-released.html; http://secunia.com/advisories/22117; http://sourceforge.net/project/shownotes.php?group_id=145027&release_id=450490
CVE: CVE-2006-2937
Published: 2006-09-28
Description: OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc; ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc; http://docs.info.apple.com/article.html?artnum=304829
CVE: CVE-2006-2940
Published: 2006-09-28
Description: OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc; ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc; http://docs.info.apple.com/article.html?artnum=304829
CVE: CVE-2006-3738
Published: 2006-09-28
Description: Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc; ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc; http://docs.info.apple.com/article.html?artnum=304829
CVE: CVE-2006-4343
Published: 2006-09-28
Description: The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-476
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc; ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc; http://docs.info.apple.com/article.html?artnum=304829
CVE: CVE-2006-4925
Published: 2006-09-29
Description: packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash) by sending an invalid protocol sequence with USERAUTH_SUCCESS before NEWKEYS, which causes newkeys[mode] to be NULL.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.gentoo.org/show_bug.cgi?id=148228; http://secunia.com/advisories/22245; http://secunia.com/advisories/22298
CVE: CVE-2006-5073
Published: 2006-09-29
Description: Unspecified vulnerability in Sun Solaris 8, 9 and 10 allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets, a different vulnerability than CVE-2006-5013.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/22132; http://secunia.com/advisories/22581; http://securitytracker.com/id?1016968
CVE: CVE-2006-5074
Published: 2006-09-29
Description: Cross-site scripting (XSS) vulnerability in home.php in PHP Invoice 2.2 allows remote attackers to inject arbitrary web script or HTML via the alert parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/22123; http://securityreason.com/securityalert/1652; http://www.securityfocus.com/archive/1/447015/100/0/threaded
CVE: CVE-2006-5075
Published: 2006-09-29
Description: The Kernel SSL Proxy service (svc:/network/ssl/proxy) in Sun Solaris 10 before 20060926 allows remote attackers to cause a denial of service (system crash) via unspecified vectors related to an SSL client.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/22136; http://securitytracker.com/id?1016936; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102563-1
CVE: CVE-2006-5076
Published: 2006-09-29
Description: Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End 0.4.5 allow remote attackers to execute arbitrary PHP code via a URL in the includes_path parameter in (1) admin/index.php, (2) Facts.php, or (3) search.php.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1650; http://www.securityfocus.com/archive/1/447005/100/0/threaded; http://www.securityfocus.com/archive/1/448776/100/0/threaded
CVE: CVE-2006-5077
Published: 2006-09-29
Description: PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Chris Smith Minerva Build 238 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/22256; http://www.securityfocus.com/bid/20185; http://www.vupen.com/english/advisories/2006/3880
CVE: CVE-2006-5078
Published: 2006-09-29
Description: PHP remote file inclusion vulnerability in view/general.php in Kristian Niemi Polaring 00.04.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _SESSION[dirMain] parameter.
CVSS Score: 7.5 (HIGH)
References: http://sourceforge.net/forum/forum.php?forum_id=620481; http://www.securityfocus.com/bid/20183; https://exchange.xforce.ibmcloud.com/vulnerabilities/29138
CVE: CVE-2006-5079
Published: 2006-09-29
Description: PHP remote file inclusion vulnerability in class.mysql.php in Matt Humphrey paBugs 2.0 Beta 3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path_to_bt_dir parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/20222; http://www.vupen.com/english/advisories/2006/3784; https://exchange.xforce.ibmcloud.com/vulnerabilities/29179
CVE: CVE-2006-5080
Published: 2006-09-29
Description: Cross-site scripting (XSS) vulnerability in the search function in Six Apart Movable Type 3.3 to 3.32, and Movable Type Enterprise 1.01 and 1.02, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://secunia.com/advisories/22109; http://www.osvdb.org/29177
CVE: CVE-2006-5081
Published: 2006-09-29
Description: PHP remote file inclusion vulnerability in acc.php in QuickBlogger (QB) 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1651; http://securitytracker.com/id?1016934; http://www.securityfocus.com/archive/1/447003/100/0/threaded
CVE: CVE-2006-5082
Published: 2006-09-29
Description: Unspecified vulnerability in Sugar Suite Open Source (SugarCRM) before 4.2.1 Patch C (20060917) has unspecified impact, related to code execution, and unspecified attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22110; http://www.securityfocus.com/bid/20217; http://www.sugarcrm.com/forums/showthread.php?t=16348
CVE: CVE-2006-5083
Published: 2006-09-29
Description: PHP remote file inclusion vulnerability in includes/functions_portal.php in Integrated MODs (IM) Portal 1.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22113; http://www.securityfocus.com/bid/84255; http://www.vupen.com/english/advisories/2006/3774
CVE: CVE-2006-5084
Published: 2006-09-29
Description: Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5.*.79 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed Skype URL, as originally reported to involve a null dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/22185/; http://security-protocols.com/vids/skype_osx_0day.htm; http://securitytracker.com/id?1016966
CVE: CVE-2006-5085
Published: 2006-09-29
Description: Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nom_blog parameter, which is injected into include/variables.php.
CVSS Score: 7.5 (HIGH)
References: http://acid-root.new.fr/poc/12060927.txt; http://secunia.com/advisories/22163; http://securityreason.com/securityalert/1653
CVE: CVE-2006-5086
Published: 2006-09-29
Description: Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin user via a direct request to insere_base.php with modified (1) login and (2) pass parameters.  NOTE: this issue was claimed to be SQL injection by the original researcher, but it is not.
CVSS Score: 6.4 (MEDIUM)
References: http://acid-root.new.fr/poc/12060927.txt; http://secunia.com/advisories/22163; http://securityreason.com/securityalert/1653
CVE: CVE-2006-4247
Published: 2006-09-29
Description: Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to "an erroneous security declaration."
CVSS Score: 6.4 (MEDIUM)
References: http://plone.org/about/security/advisories/cve-2006-4247; http://plone.org/about/security/advisories/cve-2006-4247
CVE: CVE-2006-5087
Published: 2006-09-29
Description: Multiple PHP remote file inclusion vulnerabilities in evoBB 0.3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter in (1) track.php or (2) connect.php.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/20189; https://exchange.xforce.ibmcloud.com/vulnerabilities/29145; https://www.exploit-db.com/exploits/2431
CVE: CVE-2006-5088
Published: 2006-09-29
Description: PHP remote file inclusion vulnerability in connected_users.lib.php3 in phpHeaven phpMyChat 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the ChatPath parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1654; http://www.nyubicrew.org/adv/solpot-adv-09.txt; http://www.securityfocus.com/archive/1/447012/100/0/threaded
CVE: CVE-2006-5089
Published: 2006-09-29
Description: PHP remote file inclusion vulnerability in mybic_server.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information. CVE disputes this vulnerability because the file variable is defined before use in a way that prevents arbitrary inclusion
CVSS Score: 7.5 (HIGH)
References: http://sourceforge.net/project/downloading.php?group_id=164457&filename=mybic_0_6_5.zip; http://www.securityfocus.com/bid/20208; http://sourceforge.net/project/downloading.php?group_id=164457&filename=mybic_0_6_5.zip
CVE: CVE-2006-5090
Published: 2006-09-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in Phoenix Evolution CMS (PECMS) allow remote attackers to inject arbitrary web script or HTML via the (1) mod or (2) action parameters in index.php, or the (3) pageid parameter in modules/pageedit/index.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/33676; http://osvdb.org/33677; http://www.securityfocus.com/bid/20212
CVE: CVE-2006-5091
Published: 2006-09-29
Description: Unspecified vulnerability in HP-UX B.11.11 and B.11.23 CIFS Server (Samba) allows local users to gain privileges or obtain "unauthorized access" via unspecified vectors.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/22079; http://securityreason.com/securityalert/1664; http://www.securityfocus.com/archive/1/446941/100/0/threaded
CVE: CVE-2006-5092
Published: 2006-09-29
Description: PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary PHP code via a URL in the navigation_start parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22061; http://www.osvdb.org/29217; http://www.securityfocus.com/bid/20230
CVE: CVE-2006-5093
Published: 2006-09-29
Description: PHP remote file inclusion vulnerability in index.php in Tagmin Control Center in TagIt! Tagboard 2.1.B Build 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://kernel-32.blogspot.com/2006/09/tagmin-cc-21b-remote-file-include.html; http://secunia.com/advisories/22189; http://www.osvdb.org/29293
CVE: CVE-2006-5094
Published: 2006-09-29
Description: PHP remote file inclusion vulnerability in includes/functions_kb.php in the phpBB XS 2 (Spain version) allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter, a different vector than CVE-2006-4780 or CVE-2006-4893.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/22177; http://securityreason.com/securityalert/1660; http://www.nyubicrew.org/adv/solpot-adv-10.txt
CVE: CVE-2006-5095
Published: 2006-09-29
Description: PHP remote file inclusion vulnerability in index.php in MyPhotos 0.1.3b beta allows remote attackers to execute arbitrary PHP code via the includesdir parameter.  NOTE: this issue is disputed by CVE on 20060927, since the includesdir is defined before being used when the product is installed according to the provided instructions
CVSS Score: 7.5 (HIGH)
References: http://attrition.org/pipermail/vim/2006-September/001057.html; http://securityreason.com/securityalert/1656; http://www.securityfocus.com/archive/1/446876/100/0/threaded
CVE: CVE-2006-5096
Published: 2006-09-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in VirtueMart (formerly known as mambo-phpShop) Joomla! eCommerce Edition CMS 1.0.11, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the Itemid parameter in a (1) com_contact or (2) subscribe action.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/22162; http://securityreason.com/securityalert/1657; http://www.securityfocus.com/archive/1/447168/100/0/threaded
CVE: CVE-2006-5097
Published: 2006-09-29
Description: PHP remote file inclusion vulnerability in index.php in net2ftp, possibly 0.1 through 0.62, allows remote attackers to execute arbitrary PHP code via a URL in the application_rootdir parameter. NOTE: this issue has been disputed by a third party researcher, CVE, and the vendor.  The vendor says "the variable is set in settings.inc.php, so this is not a vulnerability.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1655; http://www.attrition.org/pipermail/vim/2006-October/001076.html; http://www.attrition.org/pipermail/vim/2006-October/001077.html
CVE: CVE-2006-5098
Published: 2006-09-29
Description: lib/exec/fetch.php in DokuWiki before 2006-03-09e allows remote attackers to cause a denial of service (CPU consumption) via large w and h parameters, when resizing an image.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.splitbrain.org/?do=details&id=924; http://secunia.com/advisories/22192; http://secunia.com/advisories/22199
CVE: CVE-2006-5099
Published: 2006-09-29
Description: lib/exec/fetch.php in DokuWiki before 2006-03-09e, when conf[imconvert] is configured to use ImageMagick, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) w and (2) h parameters, which are not filtered when invoking convert.
CVSS Score: 7.5 (HIGH)
References: http://bugs.splitbrain.org/?do=details&id=926; http://secunia.com/advisories/22192; http://secunia.com/advisories/22199
CVE: CVE-2006-4387
Published: 2006-10-03
Description: Apple Mac OS X 10.4 through 10.4.7, when the administrator clears the "Allow user to administer this computer" checkbox in System Preferences for a user, does not remove the user's account from the appserveradm or appserverusr groups, which still allows the user to manage WebObjects applications.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html; http://secunia.com/advisories/22187; http://securitytracker.com/id?1016955
CVE: CVE-2006-4390
Published: 2006-10-03
Description: CFNetwork in Apple Mac OS X 10.4 through 10.4.7 and 10.3.9 allows remote SSL sites to appear as trusted sites by using encryption without authentication, which can cause the lock icon in Safari to be displayed even when the site's identity cannot be trusted.
CVSS Score: 2.6 (LOW)
References: http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html; http://secunia.com/advisories/22187; http://securitytracker.com/id?1016952
CVE: CVE-2006-4391
Published: 2006-10-03
Description: Buffer overflow in Apple ImageIO on Apple Mac OS X 10.4 through 10.4.7 allows remote attackers to execute arbitrary code via a malformed JPEG2000 image.
CVSS Score: 5.1 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html; http://secunia.com/advisories/22187; http://securitytracker.com/id?1016953
CVE: CVE-2006-4392
Published: 2006-10-03
Description: The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep before 4.2, allows local users to gain privileges via a parent process that forces an exception in a setuid child and uses Mach exception ports to modify the child's thread context and task address space in a way that causes the child to call a parent-controlled function.
CVSS Score: 7.2 (HIGH)
References: http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html; http://secunia.com/advisories/22187; http://securityreason.com/securityalert/1663
CVE: CVE-2006-4393
Published: 2006-10-03
Description: Unspecified vulnerability in LoginWindow in Apple Mac OS X 10.4 through 10.4.7, when Fast User Switching is enabled, allows local users to gain access to Kerberos tickets of other users.
CVSS Score: 3.7 (LOW)
References: http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html; http://secunia.com/advisories/22187; http://securitytracker.com/id?1016959
CVE: CVE-2006-4394
Published: 2006-10-03
Description: A logic error in LoginWindow in Apple Mac OS X 10.4 through 10.4.7, allows network accounts without GUIds to bypass service access controls and log into the system using loginwindow via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html; http://secunia.com/advisories/22187; http://securitytracker.com/id?1016959
CVE: CVE-2006-4395
Published: 2006-10-03
Description: Unspecified vulnerability in QuickDraw Manager in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows context-dependent attackers to cause a denial of service ("memory corruption" and crash) via a crafted PICT image that is not properly handled by a certain "unsupported QuickDraw operation."
CVSS Score: 5.1 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html; http://secunia.com/advisories/22187; http://securitytracker.com/id?1016956
CVE: CVE-2006-4397
Published: 2006-10-03
Description: Unchecked error condition in LoginWindow in Apple Mac OS X 10.4 through 10.4.7 prevents Kerberos tickets from being destroyed if a user does not successfully log on to a network account from the login window, which might allow later users to gain access to the original user's Kerberos tickets.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html; http://secunia.com/advisories/22187; http://securitytracker.com/id?1016959