deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-6589
Published: 2006-12-15
Description: Cross-site scripting (XSS) vulnerability in ecommerce/control/keywordsearch in the Apache Open For Business Project (OFBiz) and Opentaps 0.9.3 allows remote attackers to inject arbitrary web script or HTML via the SEARCH_STRING parameter, a different issue than CVE-2006-6587. NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
References: http://jira.undersunconsulting.com/browse/OFBIZ-559; http://secunia.com/advisories/23457; http://www.securityfocus.com/bid/21702
CVE: CVE-2006-6590
Published: 2006-12-15
Description: PHP remote file inclusion vulnerability in usercp_menu.php in AR Memberscript allows remote attackers to execute arbitrary PHP code via a URL in the script_folder parameter.
CVSS Score: 7.5 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/30891; https://www.exploit-db.com/exploits/2931; https://exchange.xforce.ibmcloud.com/vulnerabilities/30891
CVE: CVE-2006-6591
Published: 2006-12-15
Description: PHP remote file inclusion vulnerability in fonctions/template.php in EXlor 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the repphp parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/2040; http://www.securityfocus.com/archive/1/448689/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/29582
CVE: CVE-2006-6592
Published: 2006-12-15
Description: Multiple PHP remote file inclusion vulnerabilities in Bloq 0.5.4 allow remote attackers to execute arbitrary PHP code via a URL in the page[path] parameter to (1) index.php, (2) admin.php, (3) rss.php, (4) rdf.php, (5) rss2.php, or (6) files/mainfile.php.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/2039; http://www.securityfocus.com/archive/1/448603/100/0/threaded; http://www.securityfocus.com/bid/20512
CVE: CVE-2006-6593
Published: 2006-12-15
Description: PHP remote file inclusion vulnerability in zufallscodepart.php in AMAZONIA MOD for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/2038; http://www.securityfocus.com/archive/1/448644/100/0/threaded; http://www.securityfocus.com/bid/20526
CVE: CVE-2006-6594
Published: 2006-12-15
Description: SQL injection vulnerability in utilities/usermessages.asp in ScriptMate User Manager 2.0 allows remote attackers to execute arbitrary SQL commands via the mesid parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/23372; http://securitytracker.com/id?1017384; http://www.hackerscenter.com/archive/view.asp?id=26656
CVE: CVE-2006-6595
Published: 2006-12-15
Description: Multiple SQL injection vulnerabilities in ScriptMate User Manager 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via "Manage Resources" and possibly other unspecified components.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1017384; http://www.hackerscenter.com/archive/view.asp?id=26656; http://www.vupen.com/english/advisories/2006/5025
CVE: CVE-2006-6596
Published: 2006-12-15
Description: HyperAccess 8.4 allows user-assisted remote attackers to execute arbitrary vbscript and commands via a session (HAW) file, which can be automatically opened using Internet Explorer.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/23366; http://securityreason.com/securityalert/2045; http://www.securityfocus.com/archive/1/454388/100/0/threaded
CVE: CVE-2006-6597
Published: 2006-12-15
Description: Argument injection vulnerability in HyperAccess 8.4 allows user-assisted remote attackers to execute arbitrary vbscript and commands via the /r option in a telnet:// URI, which is configured to use hawin32.exe.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-88
References: http://secunia.com/advisories/23366; http://securityreason.com/securityalert/2045; http://www.securityfocus.com/archive/1/454388/100/0/threaded
CVE: CVE-2006-6598
Published: 2006-12-15
Description: Directory traversal vulnerability in viewnfo.php in (1) TorrentFlux before 2.2 and (2) torrentflux-b4rt before 2.1-b4rt-972 allows remote authenticated users to read arbitrary files via .. (dot dot) sequences in the path parameter, a different vector than CVE-2006-6328.
CVSS Score: 6.5 (MEDIUM)
References: http://secunia.com/advisories/23402; http://tf-b4rt.berlios.de/changelog-torrentflux_2.1-b4rt.txt; http://www.securityfocus.com/bid/21613
CVE: CVE-2006-6599
Published: 2006-12-15
Description: maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters (";" semicolon) in the announce parameter.
CVSS Score: 6.0 (MEDIUM)
References: http://secunia.com/advisories/23270; http://www.securityfocus.com/bid/21526; https://exchange.xforce.ibmcloud.com/vulnerabilities/30850
CVE: CVE-2006-6600
Published: 2006-12-15
Description: Cross-site scripting (XSS) vulnerability in dir.php in TorrentFlux 2.2, when allows remote attackers to inject arbitrary web script or HTML via double URL-encoded strings in the dir parameter, a related issue to CVE-2006-5609.
CVSS Score: 6.0 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23400582; http://secunia.com/advisories/23270; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23400582
CVE: CVE-2006-6601
Published: 2006-12-15
Description: Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a .MID (MIDI) file with a malformed header chunk without any track chunks, possibly involving (1) number of tracks of (2) time division fields that are set to 0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://www.attrition.org/pipermail/vim/2006-December/001182.html; http://www.securityfocus.com/archive/1/454505/100/0/threaded; http://www.securityfocus.com/bid/21612
CVE: CVE-2006-6602
Published: 2006-12-15
Description: explorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a crafted WMV file.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/archive/1/454502/100/0/threaded; http://www.securityfocus.com/archive/1/454584/100/0/threaded; http://www.securityfocus.com/bid/21612
CVE: CVE-2006-6603
Published: 2006-12-15
Description: Buffer overflow in the YMMAPI.YMailAttach ActiveX control (ymmapi.dll) before 2005.1.1.4 in Yahoo! Messenger allows remote attackers to execute arbitrary code via a crafted HTML document.  NOTE: some details were obtained from third party information.
CVSS Score: 9.3 (HIGH)
References: http://messenger.yahoo.com/security_update.php?id=120806; http://secunia.com/advisories/23401; http://securitytracker.com/id?1017387
CVE: CVE-2006-6604
Published: 2006-12-15
Description: Directory traversal vulnerability in downloaddetails.php in TorrentFlux 2.2 allows remote authenticated users to read arbitrary files via .. (dot dot) sequences in the alias parameter, a different vector than CVE-2006-6328.
CVSS Score: 6.5 (MEDIUM)
References: http://secunia.com/advisories/23270; http://www.securityfocus.com/bid/21525; https://exchange.xforce.ibmcloud.com/vulnerabilities/30831
CVE: CVE-2006-5872
Published: 2006-12-18
Description: login.pl in SQL-Ledger before 2.6.21 and LedgerSMB before 1.1.5 allows remote attackers to execute arbitrary Perl code via the "-e" flag in the script parameter, which is used as an argument to the perl program.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/23375; http://secunia.com/advisories/23419; http://securitytracker.com/id?1017391
CVE: CVE-2006-6606
Published: 2006-12-18
Description: Multiple SQL injection vulnerabilities in Clarens jclarens before 0.6.2 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/23350; http://sourceforge.net/project/shownotes.php?release_id=470844; http://www.securityfocus.com/bid/21588
CVE: CVE-2006-6607
Published: 2006-12-18
Description: The Java Key Store (JKS) for WebSphere Application Server (WAS) for IBM Tivoli Identity Manager (ITIM) 4.6 places the JKS password in a -Djavax.net.ssl.trustStorePassword command line argument, which allows local users to obtain the password by listing the process or using other methods.
CVSS Score: 2.7 (LOW)
References: http://secunia.com/advisories/23359; http://securitytracker.com/id?1017380; http://www-1.ibm.com/support/docview.wss?uid=swg21251069
CVE: CVE-2006-6608
Published: 2006-12-18
Description: Unspecified vulnerability in SSH key based authentication in HP Integrated Lights Out (iLO) 1.70 through 1.87, and iLO 2 1.00 through 1.11, on Proliant servers, allows remote attackers to "gain unauthorized access."
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/23336; http://securitytracker.com/id?1017378; http://www.securityfocus.com/bid/21575
CVE: CVE-2006-6609
Published: 2006-12-18
Description: Nexuiz before 2.2.1 allows remote attackers to cause a denial of service (resource exhaustion or crash) via unspecified vectors related to "fake players." NOTE: some of these details are obtained from third party information.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/24298; http://secunia.com/advisories/24313; http://security.gentoo.org/glsa/glsa-200702-09.xml
CVE: CVE-2006-6610
Published: 2006-12-18
Description: clientcommands in Nexuiz before 2.2.1 has unknown impact and remote attack vectors related to "remote console command injection."
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/24298; http://secunia.com/advisories/24313; http://security.gentoo.org/glsa/glsa-200702-09.xml
CVE: CVE-2006-6611
Published: 2006-12-18
Description: PHP remote file inclusion vulnerability in interface.php in Barman 0.0.1r3 allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.attrition.org/pipermail/vim/2006-December/001184.html; http://www.securityfocus.com/bid/21544; http://www.vupen.com/english/advisories/2006/4944
CVE: CVE-2006-6612
Published: 2006-12-18
Description: PHP remote file inclusion vulnerability in basic.inc.php in PhpMyCms 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the basepath_start parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.attrition.org/pipermail/vim/2006-December/001185.html; http://www.securityfocus.com/bid/21583; http://www.vupen.com/english/advisories/2006/5031
CVE: CVE-2006-6613
Published: 2006-12-18
Description: Directory traversal vulnerability in language.php in phpAlbum 0.4.1 Beta 6 and earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to include and execute arbitrary local files or obtain sensitive information via a .. (dot dot) in the pa_lang[include_file] parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by language.php.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securityfocus.com/bid/21519; http://www.vupen.com/english/advisories/2006/4927; https://exchange.xforce.ibmcloud.com/vulnerabilities/30817
CVE: CVE-2006-6614
Published: 2006-12-18
Description: The save_log_local function in Fully Automatic Installation (FAI) 2.10.1, and possibly 3.1.2, when verbose mode is enabled, stores the root password hash in /var/log/fai/current/fai.log, whose file permissions allow it to be copied to other hosts when fai-savelog is called and allows attackers to obtain the hash.
CVSS Score: 1.9 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=402644; http://secunia.com/advisories/23330; http://www.securityfocus.com/bid/21579
CVE: CVE-2006-6615
Published: 2006-12-18
Description: PHP remote file inclusion vulnerability in includes/act_constants.php in the Activity Games (mx_act) 0.92 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/21547; http://www.vupen.com/english/advisories/2006/4945; https://exchange.xforce.ibmcloud.com/vulnerabilities/30822
CVE: CVE-2006-6616
Published: 2006-12-18
Description: index.php in w00t Gallery 1.4.0 allows remote authenticated users with privileges for one installation to gain access to other installations on the same web server, aka "multi-gallery admin session spanning." NOTE: some of these details are obtained from third party information.
CVSS Score: 6.0 (MEDIUM)
References: http://secunia.com/advisories/23383; http://sourceforge.net/project/shownotes.php?release_id=471109; http://www.securityfocus.com/bid/21590
CVE: CVE-2006-6617
Published: 2006-12-18
Description: projectserver/logon/pdsrequest.asp in Microsoft Project Server 2003 allows remote authenticated users to obtain the MSProjectUser password for a SQL database via a GetInitializationData request, which includes the information in the UserName and Password tags of the response.
CVSS Score: 6.5 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051316.html; http://secunia.com/advisories/23391; http://securityreason.com/securityalert/2047
CVE: CVE-2006-6618
Published: 2006-12-18
Description: AntiHook 3.0.0.23 - Desktop relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) CommandLine, and (3) WindowTitle fields in the PEB.
CVSS Score: 7.2 (HIGH)
References: http://www.matousec.com/downloads/windows-personal-firewall-analysis/ex-coat.zip; http://www.matousec.com/info/advisories/Bypassing-process-identification-serveral-personal-firewalls-HIPS.php; http://www.securityfocus.com/archive/1/454522/100/0/threaded
CVE: CVE-2006-6619
Published: 2006-12-18
Description: AVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) CommandLine, and (3) WindowTitle fields in the PEB.
CVSS Score: 7.2 (HIGH)
References: http://www.matousec.com/downloads/windows-personal-firewall-analysis/ex-coat.zip; http://www.matousec.com/info/advisories/Bypassing-process-identification-serveral-personal-firewalls-HIPS.php; http://www.securityfocus.com/archive/1/454522/100/0/threaded
CVE: CVE-2006-6620
Published: 2006-12-18
Description: Comodo Personal Firewall 2.3.6.81 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) CommandLine, and (3) WindowTitle fields in the PEB.
CVSS Score: 7.2 (HIGH)
References: http://www.matousec.com/downloads/windows-personal-firewall-analysis/ex-coat.zip; http://www.matousec.com/info/advisories/Bypassing-process-identification-serveral-personal-firewalls-HIPS.php; http://www.securityfocus.com/archive/1/454522/100/0/threaded
CVE: CVE-2006-6621
Published: 2006-12-18
Description: Filseclab Personal Firewall 3.0.0.8686 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) CommandLine, and (3) WindowTitle fields in the PEB.
CVSS Score: 7.2 (HIGH)
References: http://www.matousec.com/downloads/windows-personal-firewall-analysis/ex-coat.zip; http://www.matousec.com/info/advisories/Bypassing-process-identification-serveral-personal-firewalls-HIPS.php; http://www.securityfocus.com/archive/1/454522/100/0/threaded
CVE: CVE-2006-6622
Published: 2006-12-18
Description: Soft4Ever Look 'n' Stop (LnS) 2.05p2 before 20061215 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) CommandLine, and (3) WindowTitle fields in the PEB.
CVSS Score: 7.2 (HIGH)
References: http://www.matousec.com/downloads/windows-personal-firewall-analysis/ex-coat.zip; http://www.matousec.com/info/advisories/Bypassing-process-identification-serveral-personal-firewalls-HIPS.php; http://www.securityfocus.com/archive/1/454522/100/0/threaded
CVE: CVE-2006-6623
Published: 2006-12-18
Description: Sygate Personal Firewall 5.6.2808 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) CommandLine, and (3) WindowTitle fields in the PEB.
CVSS Score: 7.2 (HIGH)
References: http://www.matousec.com/downloads/windows-personal-firewall-analysis/ex-coat.zip; http://www.matousec.com/info/advisories/Bypassing-process-identification-serveral-personal-firewalls-HIPS.php; http://www.securityfocus.com/archive/1/454522/100/0/threaded
CVE: CVE-2006-6624
Published: 2006-12-18
Description: The FTP Server in Sambar Server 6.4 allows remote authenticated users to cause a denial of service (application crash) via a long series of "./" sequences in the SIZE command.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/23376; http://securitytracker.com/id?1017393; http://www.securityfocus.com/bid/21617
CVE: CVE-2006-6625
Published: 2006-12-18
Description: Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in Moodle 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the navtail parameter.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securityfocus.com/bid/21596; http://www.securityfocus.com/data/vulnerabilities/exploits/21596.html; http://www.securityfocus.com/bid/21596
CVE: CVE-2006-6626
Published: 2006-12-18
Description: Cross-site scripting (XSS) vulnerability in an unspecified component of Moodle 1.5 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.  NOTE: It is unclear whether this candidate overlaps CVE-2006-4784 or CVE-2006-4941.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securityfocus.com/bid/21596; http://www.securityfocus.com/data/vulnerabilities/exploits/21596.html; http://www.securityfocus.com/bid/21596
CVE: CVE-2006-6627
Published: 2006-12-18
Description: Integer overflow in the packed PE file parsing implementation in BitDefender products before 20060829, including Antivirus, Antivirus Plus, Internet Security, Mail Protection for Enterprises, and Online Scanner; and BitDefender products for Microsoft ISA Server and Exchange 5.5 through 2003; allows remote attackers to execute arbitrary code via a crafted file, which triggers a heap-based buffer overflow, aka the "cevakrnl.xmd vulnerability."
CVSS Score: 10.0 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051319.html; http://secunia.com/advisories/23415; http://securityreason.com/securityalert/2044
CVE: CVE-2006-6628
Published: 2006-12-18
Description: Integer overflow in OpenOffice.org (OOo) 2.1 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted DOC file, as demonstrated by the 12122006-djtest.doc file, a variant of CVE-2006-6561 in a separate codebase.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/2043; http://www.milw0rm.com/sploits/12122006-djtest.doc; http://www.securityfocus.com/archive/1/454514/100/0/threaded
CVE: CVE-2006-6629
Published: 2006-12-18
Description: lib/WeBWorK/PG/Translator.pm in WeBWorK Program Generation (PG) Language before 2.3.1 uses an insufficiently restrictive regular expression to determine valid macro filenames, which allows attackers to load arbitrary macro files whose names contain the strings (1) dangerousMacros.pl, (2) PG.pl, or (3) IO.pl.
CVSS Score: 7.5 (HIGH)
References: http://devel.webwork.rochester.edu/twiki/bin/view/Webwork/PGLanguageRelease2pt3pt1; http://www.securityfocus.com/bid/21614; http://www.vupen.com/english/advisories/2006/5026
CVE: CVE-2006-6630
Published: 2006-12-18
Description: PHP remote file inclusion vulnerability in ListRecords.php in osprey 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the lib_dir parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/2042; http://www.securityfocus.com/archive/1/448903/100/0/threaded; http://securityreason.com/securityalert/2042
CVE: CVE-2006-6631
Published: 2006-12-18
Description: PHP remote file inclusion vulnerability in lib/xml/oai/GetRecord.php in osprey 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lib_dir parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securityfocus.com/bid/20552; https://exchange.xforce.ibmcloud.com/vulnerabilities/29586; https://www.exploit-db.com/exploits/2572
CVE: CVE-2006-6632
Published: 2006-12-18
Description: PHP remote file inclusion vulnerability in genepi.php in Genepi 1.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the topdir parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securityfocus.com/bid/20510; https://exchange.xforce.ibmcloud.com/vulnerabilities/29518; https://www.exploit-db.com/exploits/2539
CVE: CVE-2006-6633
Published: 2006-12-18
Description: PHP remote file inclusion vulnerability in include/yapbb_session.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[include_Bit] parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/20615; https://exchange.xforce.ibmcloud.com/vulnerabilities/29667; https://www.exploit-db.com/exploits/2594
CVE: CVE-2006-6634
Published: 2006-12-18
Description: Multiple PHP remote file inclusion vulnerabilities in the ExtCalThai (com_extcalendar) 0.9.1 and earlier component for Mambo allow remote attackers to execute arbitrary PHP code via a URL in (1) the CONFIG_EXT[LANGUAGES_DIR] parameter to admin_events.php, (2) the mosConfig_absolute_path parameter to extcalendar.php, or (3) the CONFIG_EXT[LIB_DIR] parameter to lib/mail.inc.php.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2006-10/0179.html; http://securityreason.com/securityalert/2041; http://www.securityfocus.com/bid/20487
CVE: CVE-2006-6635
Published: 2006-12-18
Description: PHP remote file inclusion vulnerability in includes/functions.php in JumbaCMS 0.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the jcms_root_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/20693; https://exchange.xforce.ibmcloud.com/vulnerabilities/29734; https://www.exploit-db.com/exploits/2628
CVE: CVE-2006-3896
Published: 2006-12-19
Description: The NeoScale Systems CryptoStor 700 series appliance before 2.6 relies on client-side ActiveX code for smartcard authentication, which allows remote attackers to bypass smartcard authentication, and gain access if able to present a valid username and password, by disabling ActiveX.
CVSS Score: 4.9 (MEDIUM)
References: http://secunia.com/advisories/23430; http://securitytracker.com/id?1017396; http://www.kb.cert.org/vuls/id/339004
CVE: CVE-2006-6106
Published: 2006-12-19
Description: Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 before 2.6.18.6, and 2.6.19.x, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via CAPI messages with a large value for the length of the (1) manu (manufacturer) or (2) serial (serial number) field.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.5; http://marc.info/?l=linux-kernel&m=[PII_REDACTED]7528&w=2; http://marc.info/?l=linux-kernel&m=[PII_REDACTED]9440&w=2