deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-0121
Published: 2006-01-09
Description: Multiple memory leaks in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (memory consumption and crash) via unknown vectors related to (1) unspecified vectors during the SSL handshake (SPR# MKIN67MQVW), (2) the stash file during the SSL handshake (SPR# MKIN693QUT), and possibly other vectors. NOTE: due to insufficient information in the original vendor advisory, it is not clear whether there is an attacker role in other memory leaks that are specified in the advisory.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/18328; http://www-1.ibm.com/support/docview.wss?uid=swg27007054; http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e[PII_REDACTED]062619d/20f66e356a76c90f8525702a00420e08?OpenDocument&Highlight=0%2CMKIN67MQVW
CVE: CVE-2006-0122
Published: 2006-01-09
Description: Cross-site scripting (XSS) vulnerability in Public/Index.asp in Aquifer CMS allows remote attackers to inject arbitrary web script or HTML via the Keyword parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://attrition.org/pipermail/vim/2006-January/000509.html; http://osvdb.org/ref/22/22247-aquifer.txt; http://secunia.com/advisories/18326
CVE: CVE-2006-0123
Published: 2006-01-09
Description: Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter in index.php and (2) pagid parameter in verpag.php, and possibly other vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://evuln.com/vulns/15/summary.html; http://secunia.com/advisories/18300; http://securitytracker.com/id?1015445
CVE: CVE-2006-0124
Published: 2006-01-09
Description: Cross-site scripting (XSS) vulnerability in crear.php in ADN Forum 1.0b allows remote attackers to inject arbitrary web script or HTML via the titulo parameter, which is used by the "Topic name" field.
CVSS Score: 4.3 (MEDIUM)
References: http://evuln.com/vulns/15/summary.html; http://secunia.com/advisories/18300; http://securitytracker.com/id?1015445
CVE: CVE-2006-0125
Published: 2006-01-09
Description: Unspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to include arbitrary files via the appserv_root parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  There is not enough detail from these third party sources to know whether this is directory traversal, remote file include, or another issue.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/18163; http://www.osvdb.org/22228; http://www.securityfocus.com/bid/16166
CVE: CVE-2006-0126
Published: 2006-01-09
Description: rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices.
CVSS Score: 4.6 (MEDIUM)
References: http://dist.schmorp.de/rxvt-unicode/Changes; http://secunia.com/advisories/18301; http://www.osvdb.org/22223
CVE: CVE-2006-0127
Published: 2006-01-09
Description: Directory traversal vulnerability in the IMAP service of Rockliffe MailSite before 6.1.22.1 allows remote authenticated users to rename the folders of other users via a .. (dot dot) in the RENAME command.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040969.html; http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041039.html; http://secunia.com/advisories/18318
CVE: CVE-2006-0128
Published: 2006-01-09
Description: Buffer overflow in the IMAP service of Rockliffe MailSite before 6.1.22.1 allows remote attackers to have an unknown impact via unknown attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040969.html; http://zur.homelinux.com/Advisories/RockliffeMailsiteDirTransveral.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/39991
CVE: CVE-2006-0129
Published: 2006-01-09
Description: Mail Management Agent (MAILMA) (aka Mail Management Server) in Rockliffe MailSite 7.0.3.1 and earlier generates different responses depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames via user requests to TCP port 106.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040970.html; http://secunia.com/advisories/18318; http://www.osvdb.org/22230
CVE: CVE-2006-0130
Published: 2006-01-09
Description: Mail Management Agent (MAILMA) (aka Mail Management Server) in Rockliffe MailSite 7.0.3.1 and earlier allows remote attackers to attempt authentication with an unlimited number of user account names and passwords without denying connections, limiting the rate of connections, or locking out an account.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040970.html; http://zur.homelinux.com/Advisories/RockliffeMailsiteUserEnum.txt; http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040970.html
CVE: CVE-2006-0131
Published: 2006-01-09
Description: boastMachine 3.1 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php and (2) side_menu.php, which reveals the path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://echo.or.id/adv/adv26-K-159-2006.txt; http://www.securityfocus.com/archive/1/420969/100/0/threaded; http://echo.or.id/adv/adv26-K-159-2006.txt
CVE: CVE-2006-0132
Published: 2006-01-09
Description: Directory traversal vulnerability in webftp.php in SysCP WebFTP 1.2.6 and possibly earlier allows remote attackers to include and execute arbitrary local PHP scripts, and possibly read other types of files, via a .. (dot dot) and a trailing null in the webftp_language parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/18355; http://www.securityfocus.com/archive/1/420973/100/0/threaded; http://www.securityfocus.com/bid/16175
CVE: CVE-2006-0133
Published: 2006-01-09
Description: Multiple directory traversal vulnerabilities in AIX 5.3 ML03 allow local users to determine the existence of files and read partial contents of certain files via a .. (dot dot) in the argument to (1) getCommand.new (aka getCommand) and (2) getShell, a different vulnerability than CVE-2005-4273.
CVSS Score: 3.6 (LOW)
References: http://securitytracker.com/id?1015429; http://www.securityfocus.com/archive/1/420589/100/0/threaded; http://www.securityfocus.com/bid/16102
CVE: CVE-2006-0134
Published: 2006-01-09
Description: Cross-site scripting (XSS) vulnerability in register.php in TheWebForum (twf) 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the www parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://evuln.com/vulns/17/exploit.html; http://evuln.com/vulns/17/summary.html; http://secunia.com/advisories/18392
CVE: CVE-2006-0135
Published: 2006-01-09
Description: SQL injection vulnerability in login.php in TheWebForum (twf) 1.2.1 allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the username parameter (aka the u variable).
CVSS Score: 7.5 (HIGH)
References: http://evuln.com/vulns/17/exploit.html; http://evuln.com/vulns/17/summary.html; http://secunia.com/advisories/18392
CVE: CVE-2006-0136
Published: 2006-01-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in the guestbook module in modules.php in Phanatic Softwares Chimera Web Portal System 0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) comment_poster, (2) comment_poster_email, (3) comment_poster_homepage, and (4) comment_text parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://evuln.com/vulns/7/exploit.html; http://evuln.com/vulns/7/summary.html; http://www.securityfocus.com/archive/1/420669/100/0/threaded
CVE: CVE-2006-0137
Published: 2006-01-09
Description: SQL injection vulnerability in linkcategory.php in Phanatic Softwares Chimera Web Portal System 0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
References: http://evuln.com/vulns/7/exploit.html; http://evuln.com/vulns/7/summary.html; http://www.osvdb.org/22420
CVE: CVE-2006-0138
Published: 2006-01-09
Description: aMSN (aka Alvaro's Messenger) allows remote attackers to cause a denial of service (client hang and termination of client's instant-messaging session) by repeatedly sending crafted data to the default file-transfer port (TCP 6891).
CVSS Score: 5.0 (MEDIUM)
References: http://www.osvdb.org/22186; http://www.securiteam.com/exploits/5JP090KHFQ.html; http://www.osvdb.org/22186
CVE: CVE-2006-0139
Published: 2006-01-09
Description: The send-private-message functionality (send-private-message.asp) in PD9 Software MegaBBS 2.1 allows remote attackers to read private messages of other users via a modified replyid parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/18342; http://securitytracker.com/id?1015452; http://www.hamid.ir/security/megabbs.txt
CVE: CVE-2006-0140
Published: 2006-01-09
Description: Cross-site scripting (XSS) vulnerability in post.php in NavBoard V16 Stable(2.6.0) and V17beta2 allows remote attackers to inject arbitrary web script or HTML via the (1) b, (2) textlarge, and (3) url bbcode tags.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://evuln.com/vulns/19/summary.html; http://secunia.com/advisories/18345; http://www.osvdb.org/22277
CVE: CVE-2006-0141
Published: 2006-01-09
Description: Qualcomm Eudora Internet Mail Server (EIMS) before 3.2.8 allows remote attackers to cause a denial of service (crash) via (1) malformed NTLM authentication requests, or a malformed (2) Incoming Mail X or (3) Temporary Mail file.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/18356; http://www.eudora.co.nz/updates.html; http://www.securityfocus.com/bid/16179
CVE: CVE-2006-0142
Published: 2006-01-09
Description: Cross-site scripting (XSS) vulnerability in andromeda.php in Andromeda 1.9.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the s parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/18359; http://www.securityfocus.com/bid/16183; http://www.vupen.com/english/advisories/2006/0096
CVE: CVE-2006-0083
Published: 2006-01-09
Description: Format string vulnerability in the logging code of SMS Server Tools (smstools) 1.14.8 and earlier allows local users to execute arbitrary code via unspecified attack vectors.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/18343; http://secunia.com/advisories/18357; http://www.debian.org/security/2005/dsa-930
CVE: CVE-2006-0143
Published: 2006-01-09
Description: Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of service (crash) via a WMF file containing (1) ExtCreateRegion or (2) ExtEscape function calls with arguments with inconsistent lengths.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://blogs.technet.com/msrc/archive/2006/01/09/417198.aspx; http://lostmon.blogspot.com/2007/08/windows-extended-file-attributes-buffer.html; http://securitytracker.com/id?1015453
CVE: CVE-2006-0144
Published: 2006-01-09
Description: The proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad, allows remote attackers to execute arbitrary PHP code by redirecting go-pear.php to a malicious proxy server that provides a modified version of Tar.php with a malicious extractModify function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://apache2triad.net/forums/viewtopic.php?p=14670; http://secunia.com/advisories/18390; http://www.securityfocus.com/archive/1/421469/100/0/threaded
CVE: CVE-2006-0145
Published: 2006-01-09
Description: The kernfs_xread function in kernfs in NetBSD 1.6 through 2.1, and OpenBSD 3.8, does not properly validate file offsets against negative 32-bit values that occur as a result of truncation, which allows local users to read arbitrary kernel memory and gain privileges via the lseek system call.
CVSS Score: 4.6 (MEDIUM)
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-001.txt.asc; http://secunia.com/advisories/18388; http://secunia.com/advisories/18712
CVE: CVE-2006-0146
Published: 2006-01-09
Description: The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7) MAXdev MD-Pro, and (8) MediaBeez, when the MySQL root password is empty, allows remote attackers to execute arbitrary SQL commands via the sql parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://retrogod.altervista.org/phpopenchat_30x_sql_xpl.html; http://secunia.com/advisories/17418; http://secunia.com/advisories/18233
CVE: CVE-2006-0147
Published: 2006-01-09
Description: Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PhpOpenChat, possibly (7) MAXdev MD-Pro, and (8) Simplog, allows remote attackers to execute arbitrary PHP functions via the do parameter, which is saved in a variable that is then executed as a function, as demonstrated using phpinfo.
CVSS Score: 7.5 (HIGH)
References: http://retrogod.altervista.org/phpopenchat_30x_sql_xpl.html; http://retrogod.altervista.org/simplog_092_incl_xpl.html; http://secunia.com/advisories/17418
CVE: CVE-2006-0148
Published: 2006-01-09
Description: NetSarang Xlpd 2.1 allows remote attackers to cause a denial of service (crash) via a large number of connections from the same IP address.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1015444; http://www.ipomonis.com/advisories/xlpd.txt; http://www.securityfocus.com/bid/16164
CVE: CVE-2006-0149
Published: 2006-01-09
Description: Cross-site scripting (XSS) vulnerability in SimpBook 1.0, with html_enable on (the default), allows remote attackers to inject arbitrary web script or HTML via the message field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-80
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041127.html; http://securitytracker.com/id?1015451; http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041127.html
CVE: CVE-2006-0150
Published: 2006-01-09
Description: Multiple format string vulnerabilities in the auth_ldap_log_reason function in Apache auth_ldap 1.6.0 and earlier allows remote attackers to execute arbitrary code via various vectors, including the username.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: http://secunia.com/advisories/18382; http://secunia.com/advisories/18405; http://secunia.com/advisories/18412
CVE: CVE-2006-0151
Published: 2006-01-09
Description: sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/18358; http://secunia.com/advisories/18363; http://secunia.com/advisories/18549
CVE: CVE-2006-0152
Published: 2006-01-10
Description: Cross-site scripting (XSS) in search_result.php in phpChamber 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the needle parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/18360; http://www.osvdb.org/22282; http://www.securityfocus.com/bid/16180
CVE: CVE-2006-0153
Published: 2006-01-10
Description: 427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, which allows remote attackers to bypass authentication by using a valid username and usertype and setting the authenticated cookie.
CVSS Score: 7.5 (HIGH)
References: http://evuln.com/vulns/18/summary.html; http://secunia.com/advisories/18354; http://www.osvdb.org/22274
CVE: CVE-2006-0154
Published: 2006-01-10
Description: SQL injection vulnerability in showthread.php in 427BB 2.2 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the ForumID parameter.
CVSS Score: 7.5 (HIGH)
References: http://evuln.com/vulns/18/summary.html; http://secunia.com/advisories/18354; http://www.osvdb.org/22275
CVE: CVE-2006-0155
Published: 2006-01-10
Description: Cross-site scripting (XSS) vulnerability in posts.php in 427BB 2.2 and 2.2.1 allows remote attackers to inject arbitrary Javascript via a new message with a url bbcode tag containing a javascript URI.
CVSS Score: 4.3 (MEDIUM)
References: http://evuln.com/vulns/18/summary.html; http://secunia.com/advisories/18354; http://www.osvdb.org/22276
CVE: CVE-2006-0156
Published: 2006-01-10
Description: Cross-site scripting (XSS) vulnerability in Foxrum 4.0.4f allows remote attackers to inject arbitrary Javascript via the javascript URI in bbcode url tags in (1) addpost1.php and (2) addtopic1.php.
CVSS Score: 4.3 (MEDIUM)
References: http://evuln.com/vulns/20; http://secunia.com/advisories/18386; http://securityreason.com/securityalert/325
CVE: CVE-2006-0157
Published: 2006-01-10
Description: settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the administrator password via a change action that specifies identical values for the passwd and admin_password parameters, then declares the new password string in the new_passwd and confirm_passwd parameters.
CVSS Score: 5.0 (MEDIUM)
References: http://downloads.securityfocus.com/vulnerabilities/exploits/MagicNewsPlus-pw-change.pl; http://secunia.com/advisories/18601; http://www.securityfocus.com/bid/16182
CVE: CVE-2006-0158
Published: 2006-01-10
Description: SQL injection vulnerability in index.php in CyberDoc SiteSuite CMS allows remote attackers to execute arbitrary SQL commands via the page parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/ref/22/22205-sitesuite.txt; http://secunia.com/advisories/18305; http://www.osvdb.org/22205
CVE: CVE-2006-0159
Published: 2006-01-10
Description: SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute arbitrary SQL commands via the email parameter.  NOTE: the provenance of this information is unknown, although it may be based on post-disclosure analysis of CVE-2006-0110; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/18327; http://www.osvdb.org/22264; http://www.vupen.com/english/advisories/2006/0073
CVE: CVE-2006-0160
Published: 2006-01-10
Description: SQL injection vulnerability in add_post.php3 in Venom Board 1.22 allows remote attackers to execute arbitrary SQL commands via the (1) parent, (2) root, and (3) topic_id parameters to post.php3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://evuln.com/vulns/21/summary.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3915&w=2; http://secunia.com/advisories/18383
CVE: CVE-2006-0161
Published: 2006-01-10
Description: Unspecified vulnerability in uucp in Sun Solaris 8 and 9 has unknown impact and attack vectors.  NOTE: due to the vagueness of the vendor advisory, it is not clear whether this is related to CVE-2004-0780.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/18371; http://secunia.com/advisories/19087; http://securitytracker.com/id?1015455
CVE: CVE-2006-0162
Published: 2006-01-10
Description: Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) before 0.88 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted UPX files.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041325.html; http://secunia.com/advisories/18379; http://secunia.com/advisories/18453
CVE: CVE-2006-0105
Published: 2006-01-10
Description: PostgreSQL 8.0.x before 8.0.6 and 8.1.x before 8.1.2, when running on Windows, allows remote attackers to cause a denial of service (postmaster exit and no new connections) via a large number of simultaneous connection requests.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.postgresql.org/pgsql-announce/2006-01/msg00001.php; http://secunia.com/advisories/18419; http://securityreason.com/securityalert/327
CVE: CVE-2006-0020
Published: 2006-01-10
Description: An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millennium, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute code via a crafted WMF file with a manipulated WMF header size, possibly involving an integer overflow, a different vulnerability than CVE-2005-4560, and aka "WMF Image Parsing Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://linuxbox.org/pipermail/funsec/2006-January/002828.html; http://secunia.com/advisories/18729; http://secunia.com/advisories/18912
CVE: CVE-2006-0002
Published: 2006-01-10
Description: Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/18368; http://securityreason.com/securityalert/330; http://securityreason.com/securityalert/331
CVE: CVE-2006-0010
Published: 2006-01-10
Description: Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2006/Jan/363; http://secunia.com/advisories/18311; http://secunia.com/advisories/18365
CVE: CVE-2006-0035
Published: 2006-01-11
Description: The netlink_rcv_skb function in af_netlink.c in Linux kernel 2.6.14 and 2.6.15 allows local users to cause a denial of service (infinite loop) via a nlmsg_len field of 0.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/18482; http://securityreason.com/securityalert/388; http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad8e4b75c8a7bed475d72ce09bf[PII_REDACTED]961
CVE: CVE-2006-0054
Published: 2006-01-11
Description: The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service (firewall crash) via ICMP IP fragments that match a reset, reject or unreach action, which leads to an access of an uninitialized pointer.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-824, CWE-824
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:04.ipfw.asc; http://secunia.com/advisories/18378; http://securitytracker.com/id?1015477
CVE: CVE-2006-0055
Published: 2006-01-11
Description: The ispell_op function in ee on FreeBSD 4.10 to 6.0 uses predictable filenames and does not confirm which file is being written, which allows local users to overwrite arbitrary files via a symlink attack when ee invokes ispell.
CVSS Score: 2.1 (LOW)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:02.ee.asc; http://secunia.com/advisories/18404; http://securitytracker.com/id?1015469
CVE: CVE-2006-0163
Published: 2006-01-11
Description: SQL injection vulnerability in the search module (modules/Search/index.php) of PHPNuke EV 7.7 -R1 allows remote attackers to execute arbitrary SQL commands via the query parameter, which is used by the search field.  NOTE: This is a different vulnerability than CVE-2005-3792.
CVSS Score: 7.5 (HIGH)
References: http://lostmon.blogspot.com/2006/01/phpnuke-ev-77-search-module-query.html; http://secunia.com/advisories/18394; http://www.osvdb.org/22316