deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-3460
Published: 2006-08-03
Description: Heap-based buffer overflow in the JPEG decoder in the TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an encoded JPEG stream that is longer than the scan line size (TiffScanLineSize).
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P; ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc; http://lwn.net/Alerts/194228/
CVE: CVE-2006-3461
Published: 2006-08-03
Description: Heap-based buffer overflow in the PixarLog decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P; ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc; http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
CVE: CVE-2006-3462
Published: 2006-08-03
Description: Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P; ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc; http://docs.info.apple.com/article.html?artnum=304063
CVE: CVE-2006-3463
Published: 2006-08-03
Description: The EstimateStripByteCounts function in TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large td_nstrips value, which triggers an infinite loop.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P; ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc; http://lwn.net/Alerts/194228/
CVE: CVE-2006-3464
Published: 2006-08-03
Description: TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via large offset values in a TIFF directory that lead to an integer overflow and other unspecified vectors involving "unchecked arithmetic operations".
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P; ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc; http://lwn.net/Alerts/194228/
CVE: CVE-2006-3465
Published: 2006-08-03
Description: Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers to cause a denial of service (instability or crash) and execute arbitrary code via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P; ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc; http://docs.info.apple.com/article.html?artnum=304063
CVE: CVE-2006-3499
Published: 2006-08-03
Description: The dynamic linker (dyld) in Apple Mac OS X 10.3.9 allows local users to obtain sensitive information via unspecified dynamic linker options that affect the use of standard error (stderr) by privileged applications.
CVSS Score: 2.1 (LOW)
References: http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html; http://secunia.com/advisories/21253; http://www.osvdb.org/27737
CVE: CVE-2006-3500
Published: 2006-08-03
Description: The dynamic linker (dyld) in Apple Mac OS X 10.4.7 allows local users to execute arbitrary code via an "improperly handled condition" that leads to use of "dangerous paths," probably related to an untrusted search path vulnerability.
CVSS Score: 7.2 (HIGH)
References: http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html; http://secunia.com/advisories/21253; http://www.osvdb.org/27738
CVE: CVE-2006-3501
Published: 2006-08-03
Description: Integer overflow in ImageIO for Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Radiance image.
CVSS Score: 5.1 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html; http://secunia.com/advisories/21253; http://www.kb.cert.org/vuls/id/172244
CVE: CVE-2006-3502
Published: 2006-08-03
Description: Unspecified vulnerability in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GIF image that triggers a memory allocation failure that is not properly handled.
CVSS Score: 5.1 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html; http://secunia.com/advisories/21253; http://www.kb.cert.org/vuls/id/651844
CVE: CVE-2006-3503
Published: 2006-08-03
Description: Integer overflow in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malformed GIF image.
CVSS Score: 5.1 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html; http://secunia.com/advisories/21253; http://www.kb.cert.org/vuls/id/605908
CVE: CVE-2006-3504
Published: 2006-08-03
Description: The Download Validation in LaunchServices for Apple Mac OS X 10.4.7 can identify certain HTML as "safe", which could allow attackers to execute Javascript code in local context when the "Open 'safe' files after downloading" option is enabled in Safari.
CVSS Score: 5.1 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html; http://secunia.com/advisories/21253; http://www.osvdb.org/27743
CVE: CVE-2006-3505
Published: 2006-08-03
Description: WebKit in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML document that causes WebKit to access an object that has already been deallocated.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html; http://secunia.com/advisories/21253; http://www.kb.cert.org/vuls/id/566132
CVE: CVE-2006-3634
Published: 2006-08-04
Description: The (1) __futex_atomic_op and (2) futex_atomic_cmpxchg_inatomic functions in Linux kernel 2.6.17-rc4 to 2.6.18-rc2 perform the atomic futex operation in the kernel address space instead of the user address space, which allows local users to cause a denial of service (crash).
CVSS Score: 4.9 (MEDIUM)
References: http://security-tracker.debian.org/tracker/CVE-2006-3634; http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bafe00cc9297ca77b66e5c83e5e65e17c0c997c8; http://security-tracker.debian.org/tracker/CVE-2006-3634
CVE: CVE-2006-3975
Published: 2006-08-04
Description: Unspecified vulnerability in CA eTrust Antivirus WebScan allows remote attackers to execute arbitrary code due to "improper bounds checking when processing certain user input."
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21320; http://securitytracker.com/id?1016637; http://www.securityfocus.com/archive/1/442244/100/0/threaded
CVE: CVE-2006-3976
Published: 2006-08-04
Description: Unspecified vulnerability in CA eTrust Antivirus WebScan before 1.1.0.1048 allows remote attackers to install arbitrary files.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/21320; http://securitytracker.com/id?1016637; http://www.securityfocus.com/archive/1/442244/100/0/threaded
CVE: CVE-2006-3977
Published: 2006-08-04
Description: Unspecified vulnerability in CA eTrust Antivirus WebScan before 1.1.0.1048 has unknown impact and remote attackers related to "improper processing of outdated WebScan components."
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/21320; http://securitytracker.com/id?1016637; http://www.securityfocus.com/archive/1/442244/100/0/threaded
CVE: CVE-2006-3457
Published: 2006-08-05
Description: Symantec On-Demand Agent (SODA) before 2.5 MR2 Build 2157, and the Virtual Desktop module in Symantec On-Demand Protection (SODP) before 2.6 Build 2233, do not properly encrypt files that are subject to policy-based automatic encryption, which might allow local users to read sensitive data via an unspecified decryption method.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/21280; http://securitytracker.com/id?1016619; http://www.securityfocus.com/archive/1/441850/100/0/threaded
CVE: CVE-2006-3980
Published: 2006-08-05
Description: PHP remote file inclusion vulnerability in administrator/components/com_mgm/help.mgm.php in Mambo Gallery Manager (MGM) 0.95r2 and earlier for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/21268; http://securityreason.com/securityalert/1322; http://www.osvdb.org/27650
CVE: CVE-2006-3981
Published: 2006-08-05
Description: PHP remote file inclusion vulnerability in about.mgm.php in Mambo Gallery Manager (MGM) 0.95r2 and earlier for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://www.vupen.com/english/advisories/2006/3054; https://exchange.xforce.ibmcloud.com/vulnerabilities/28072; http://www.vupen.com/english/advisories/2006/3054
CVE: CVE-2006-3982
Published: 2006-08-05
Description: PHP remote file inclusion vulnerability in quickie.php in Knusperleicht Quickie, probably 0.2, allows remote attackers to execute arbitrary PHP code via a URL in the QUICK_PATH parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1321; http://www.securityfocus.com/archive/1/441814/100/0/threaded; http://www.securityfocus.com/bid/19271
CVE: CVE-2006-3983
Published: 2006-08-05
Description: PHP remote file inclusion vulnerability in editprofile.php in php(Reactor) 1.27pl1 allows remote attackers to execute arbitrary PHP code via a URL in the pathtohomedir parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/19259; http://www.vupen.com/english/advisories/2006/3087; https://exchange.xforce.ibmcloud.com/vulnerabilities/28100
CVE: CVE-2006-3984
Published: 2006-08-05
Description: PHP remote file inclusion vulnerability in phpAdsNew/view.inc.php in Albasoftware Phpauction 2.1 and possibly later versions, with phpAdsNew 2.0.5, allows remote attackers to execute arbitrary PHP code via a URL in the phpAds_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1320; http://www.bb-pcsecurity.de/sicherheit_264.htm; http://www.securityfocus.com/archive/1/441716/100/0/threaded
CVE: CVE-2006-3985
Published: 2006-08-05
Description: Stack-based buffer overflow in DZIPS32.DLL 6.0.0.4 in ConeXware PowerArchiver 9.62.03 allows user-assisted attackers to execute arbitrary code by adding a new file to a crafted ZIP archive that already contains a file with a long name.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/21199; http://securityreason.com/securityalert/1334; http://securitytracker.com/id?1016579
CVE: CVE-2006-3986
Published: 2006-08-05
Description: PHP remote file inclusion vulnerability in index.php in Knusperleicht Newsletter 3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the NL_PATH parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21314; http://securityreason.com/securityalert/1328; http://www.securityfocus.com/archive/1/441807/100/0/threaded
CVE: CVE-2006-3987
Published: 2006-08-05
Description: Multiple PHP remote file inclusion vulnerabilities in index.php in Knusperleicht FileManager 1.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) dwl_download_path or (2) dwl_include_path parameters.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/21294; http://securityreason.com/securityalert/1327; http://www.securityfocus.com/archive/1/441813/100/0/threaded
CVE: CVE-2006-3988
Published: 2006-08-05
Description: PHP remote file inclusion vulnerability in index.php in Knusperleicht newsReporter 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the news_include_path parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/21312; http://securityreason.com/securityalert/1326; http://www.securityfocus.com/archive/1/441808/100/0/threaded
CVE: CVE-2006-3989
Published: 2006-08-05
Description: PHP remote file inclusion vulnerability in index.php in Knusperleicht Shoutbox 4.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sb_include_path parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/21302; http://securityreason.com/securityalert/1325; http://www.osvdb.org/27709
CVE: CVE-2006-3990
Published: 2006-08-05
Description: Multiple PHP remote file inclusion vulnerabilities in Paul M. Jones Savant2, possibly when used with the com_mtree component for Mambo and Joomla!, allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter in (1) Savant2_Plugin_stylesheet.php, (2) Savant2_Compiler_basic.php, (3) Savant2_Error_pear.php, (4) Savant2_Error_stack.php, (5) Savant2_Filter_colorizeCode.php, (6) Savant2_Filter_trimwhitespace.php, (7) Savant2_Plugin_ahref.php, (8) Savant2_Plugin_ahrefcontact.php, (9) Savant2_Plugin_ahreflisting.php, (10) Savant2_Plugin_ahreflistingimage.php, (11) Savant2_Plugin_ahrefmap.php, (12) Savant2_Plugin_ahrefownerlisting.php, (13) Savant2_Plugin_ahrefprint.php, (14) Savant2_Plugin_ahrefrating.php, (15) Savant2_Plugin_ahrefrecommend.php, (16) Savant2_Plugin_ahrefreport.php, (17) Savant2_Plugin_ahrefreview.php, (18) Savant2_Plugin_ahrefvisit.php, (19) Savant2_Plugin_checkbox.php, (20) Savant2_Plugin_cycle.php, (21) Savant2_Plugin_dateformat.php, (22) Savant2_Plugin_editor.php, (23) Savant2_Plugin_form.php, (24) Savant2_Plugin_image.php, (25) Savant2_Plugin_input.php, (26) Savant2_Plugin_javascript.php, (27) Savant2_Plugin_listalpha.php, (28) Savant2_Plugin_listingname.php, (29) Savant2_Plugin_modify.php, (30) Savant2_Plugin_mtpath.php, (31) Savant2_Plugin_options.php, (32) Savant2_Plugin_radios.php, (33) Savant2_Plugin_rating.php, or (34) Savant2_Plugin_textarea.php.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1324; http://securitytracker.com/id?1016560; http://www.osvdb.org/28679
CVE: CVE-2006-3991
Published: 2006-08-05
Description: PHP remote file inclusion vulnerability in index.php in Vlad Vostrykh Voodoo chat 1.0RC1b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/19277; http://www.vupen.com/english/advisories/2006/3091; https://exchange.xforce.ibmcloud.com/vulnerabilities/28197
CVE: CVE-2006-3992
Published: 2006-08-05
Description: Unspecified vulnerability in the Centrino (1) w22n50.sys, (2) w22n51.sys, (3) w29n50.sys, and (4) w29n51.sys Microsoft Windows drivers for Intel 2200BG and 2915ABG PRO/Wireless Network Connection before 10.5 with driver 9.0.4.16 allows remote attackers to execute arbitrary code via certain frames that trigger memory corruption.
CVSS Score: 5.1 (MEDIUM)
References: http://securitytracker.com/id?1016621; http://support.intel.com/support/wireless/wlan/sb/CS-023065.htm; http://www.kb.cert.org/vuls/id/230208
CVE: CVE-2006-3993
Published: 2006-08-05
Description: PHP remote file inclusion vulnerability in copyright.php in Olaf Noehring The Search Engine Project (TSEP) 0.942 allows remote attackers to execute arbitrary PHP code via a URL in the tsep_config[absPath] parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/21291; http://securityreason.com/securityalert/1323; http://securitytracker.com/id?1016626
CVE: CVE-2006-3994
Published: 2006-08-05
Description: SQL injection vulnerability in the u2u_send_recp function in u2u.inc.php in XMB (aka extreme message board) 1.9.6 Alpha and earlier allows remote attackers to execute arbitrary SQL commands via the u2uid parameter to u2u.php, which is directly accessed from $_POST and bypasses the protection scheme.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21293; http://www.securityfocus.com/bid/19280; http://www.vupen.com/english/advisories/2006/3088
CVE: CVE-2006-3995
Published: 2006-08-05
Description: Multiple PHP remote file inclusion vulnerabilities in (1) uhp_config.php, and possibly (2) footer.php, (3) functions.php, (4) install.uhp.php, (5) toolbar.uhp.html.php, (6) uhp.class.php, and (7) uninstall.uhp.php, in the UHP (User Home Pages) 0.5 component (aka com_uhp) for Mambo or Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://attrition.org/pipermail/vim/2007-March/001457.html; http://attrition.org/pipermail/vim/2007-March/001458.html; http://kurdishsecurity.blogspot.com/2006/07/kurdish-security-15-user-home-pges.html
CVE: CVE-2006-3996
Published: 2006-08-05
Description: SQL injection vulnerability in links/index.php in ATutor 1.5.3.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the (1) desc or (2) asc parameters.
CVSS Score: 6.5 (MEDIUM)
References: http://atutor.ca/news.php#010806; http://retrogod.altervista.org/atutor_1531_sql.html; http://secunia.com/advisories/21308
CVE: CVE-2006-0395
Published: 2006-08-05
Description: The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an unsafe type, which allows user-assisted remote attackers to execute arbitrary code via crafted file types.
CVSS Score: 5.1 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=303382; http://lists.apple.com/archives/client-management/2006/Mar/msg00030.html; http://secunia.com/advisories/19064
CVE: CVE-2006-3997
Published: 2006-08-05
Description: PHP remote file inclusion vulnerability in hsList.php in WoWRoster (aka World of Warcraft Roster) 1.5.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21299; http://securityreason.com/securityalert/1329; http://securitytracker.com/id?1016631
CVE: CVE-2006-3998
Published: 2006-08-05
Description: PHP remote file inclusion vulnerability in conf.php in WoWRoster (aka World of Warcraft Roster) 1.5.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/19269; http://www.vupen.com/english/advisories/2006/3094; http://www.wowroster.net/Forums/viewtopic/t=333.html
CVE: CVE-2006-3999
Published: 2006-08-05
Description: ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users to subvert BlackICE by replacing pamversion.dll.  NOTE: in most cases, the attack would not cross privilege boundaries because replacing pamversion.dll requires administrative privileges. However, this issue is a vulnerability because BlackICE is intended to protect against certain rogue privileged actions.
CVSS Score: 4.6 (MEDIUM)
References: http://securityreason.com/securityalert/1338; http://securitytracker.com/id?1016618; http://www.securityfocus.com/archive/1/441829/100/0/threaded
CVE: CVE-2006-4000
Published: 2006-08-05
Description: Directory traversal vulnerability in cgi-bin/preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the file parameter.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/21258; http://www.securityfocus.com/archive/1/441861/100/0/threaded; http://www.securityfocus.com/bid/19276
CVE: CVE-2006-4001
Published: 2006-08-05
Description: Login.pm in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest account, which allows remote attackers to read sensitive information such as e-mail logs, and possibly e-mail contents and the admin password.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21258; http://www.securityfocus.com/archive/1/441857/100/0/threaded; http://www.securityfocus.com/archive/1/442039/100/0/threaded
CVE: CVE-2006-3123
Published: 2006-08-07
Description: Multiple integer overflows in the (1) dodecrypt and (2) doencrypt functions in cfs_fh.c in cfsd in Matt Blaze Cryptographic File System (CFS) 1.4.1 before Debian GNU/Linux package 1.4.1-17 allow local users to cause a denial of service (daemon crash) by appending data to a file that is larger than 2 Gb.
CVSS Score: 2.1 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=371076; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=371076; http://secunia.com/advisories/21310
CVE: CVE-2006-4002
Published: 2006-08-07
Description: Cross-site scripting (XSS) vulnerability in user.module in Drupal 4.6 before 4.6.9, and 4.7 before 4.7.3, allows remote attackers to inject arbitrary web script or HTML via the msg parameter.  NOTE: portions of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://drupal.org/node/76748; http://secunia.com/advisories/21332; http://secunia.com/advisories/21503
CVE: CVE-2006-4003
Published: 2006-08-07
Description: The config method in Henrik Storner Hobbit monitor before 4.1.2p2 permits access to files outside of the intended configuration directory, which allows remote attackers to obtain sensitive information via requests to the hobbitd daemon on port 1984/tcp.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/21317; http://sourceforge.net/project/shownotes.php?release_id=436594&group_id=128058; http://www.securityfocus.com/archive/1/442036/100/0/threaded
CVE: CVE-2006-4004
Published: 2006-08-07
Description: Directory traversal vulnerability in index.php in vbPortal 3.0.2 through 3.6.0 Beta 1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the bbvbplang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/21287; http://www.phpportals.com/forums/showthread.php?t=17308; http://www.securityfocus.com/bid/19257
CVE: CVE-2006-4005
Published: 2006-08-07
Description: BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via (1) a certain malformed PKGF_ackreq packet, which triggers a crash in the rscache_add() function in pkgcache.c; and (2) an error packet, which is intended to be received by clients and force client shutdown, but also triggers server shutdown.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/bcloneboom-adv.txt; http://aluigi.org/poc/bcloneboom.zip; http://secunia.com/advisories/21303
CVE: CVE-2006-4006
Published: 2006-08-07
Description: The do_gameinfo function in BomberClone 0.11.6 and earlier, and possibly other functions, does not reset the packet data size, which causes the send_pkg function (packets.c) to use this data size when sending a reply, and allows remote attackers to read portions of server memory.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://aluigi.altervista.org/adv/bcloneboom-adv.txt; http://aluigi.org/poc/bcloneboom.zip; http://secunia.com/advisories/21303