deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-3666
Published: 2005-11-18
Description: Multiple unspecified format string vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable.
CVSS Score: 10.0 (HIGH)
References: http://jvn.jp/niscc/NISCC-273756/index.html; http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/; http://www.kb.cert.org/vuls/id/226364
CVE: CVE-2005-3667
Published: 2005-11-18
Description: Multiple unspecified vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts related to denial of service, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable.  In addition, since "denial of service" is an impact and not a vulnerability, it is unknown which underlying vulnerabilities are actually covered by this particular candidate.
CVSS Score: 5.0 (MEDIUM)
References: http://jvn.jp/niscc/NISCC-273756/index.html; http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/; http://www.kb.cert.org/vuls/id/226364
CVE: CVE-2005-3668
Published: 2005-11-18
Description: Multiple buffer overflows in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts related to denial of service, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable.
CVSS Score: 5.0 (MEDIUM)
References: http://jvn.jp/niscc/NISCC-273756/index.html; http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/; http://www.kb.cert.org/vuls/id/226364
CVE: CVE-2005-3669
Published: 2005-11-18
Description: Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote attackers to cause a denial of service (device reset) via certain malformed IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of details in the Cisco advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
CVSS Score: 5.0 (MEDIUM)
References: http://jvn.jp/niscc/NISCC-273756/index.html; http://secunia.com/advisories/17553; http://securitytracker.com/id?1015198
CVE: CVE-2005-3670
Published: 2005-11-18
Description: Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in HP HP-UX B.11.00, B.11.11, and B.11.23 running IPSec, HP Jetdirect 635n IPv6/IPsec Print Server, and HP Tru64 UNIX 5.1B-3 and 5.1B-2/PK4, allow remote attackers to cause a denial of service via certain IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of details in the HP advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
CVSS Score: 7.8 (HIGH)
References: http://jvn.jp/niscc/NISCC-273756/index.html; http://secunia.com/advisories/17598; http://secunia.com/advisories/19174
CVE: CVE-2005-3671
Published: 2005-11-18
Description: The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers to cause a denial of service via (1) a crafted packet using 3DES with an invalid key length, or (2) unspecified inputs when Aggressive Mode is enabled and the PSK is known, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
CVSS Score: 7.8 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2005-12/0138.html; http://archives.neohapsis.com/archives/bugtraq/2005-12/0161.html; http://jvn.jp/niscc/NISCC-273756/index.html
CVE: CVE-2005-3672
Published: 2005-11-18
Description: The Internet Key Exchange version 1 (IKEv1) implementation in Stonesoft StoneGate Firewall before 2.6.1 allows remote attackers to cause a denial of service via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of details in the Stonesoft advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
CVSS Score: 5.0 (MEDIUM)
References: http://jvn.jp/niscc/NISCC-273756/index.html; http://secunia.com/advisories/17566; http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/
CVE: CVE-2005-3673
Published: 2005-11-18
Description: The Internet Key Exchange version 1 (IKEv1) implementation in Check Point products allows remote attackers to cause a denial of service via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
CVSS Score: 7.8 (HIGH)
References: http://jvn.jp/niscc/NISCC-273756/index.html; http://secunia.com/advisories/17621; http://secureknowledge.us.checkpoint.com/SecureKnowledge/viewSolutionDocument.do?id=sk31316
CVE: CVE-2005-3674
Published: 2005-11-18
Description: The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Sun Solaris 9 and 10 allows remote attackers to cause a denial of service (in.iked crash) via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
CVSS Score: 7.8 (HIGH)
References: http://jvn.jp/niscc/NISCC-273756/index.html; http://secunia.com/advisories/17554; http://securitytracker.com/id?1015210
CVE: CVE-2005-3314
Published: 2005-11-18
Description: Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code via "long verb arguments."
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/17641; http://securitytracker.com/id?1015240; http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972665.htm
CVE: CVE-2005-3349
Published: 2005-11-18
Description: GNU Gnump3d before 2.9.8 allows local users to modify or delete arbitrary files via a symlink attack on the index.lok temporary file.
CVSS Score: 1.9 (LOW)
CWE: CWE-59
References: http://secunia.com/advisories/17646; http://secunia.com/advisories/17647; http://secunia.com/advisories/17656
CVE: CVE-2005-3355
Published: 2005-11-18
Description: Directory traversal vulnerability in GNU Gnump3d before 2.9.8 has unknown impact via "CGI parameters, and cookie values".
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/17646; http://secunia.com/advisories/17647; http://secunia.com/advisories/17656
CVE: CVE-2005-2629
Published: 2005-11-18
Description: Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large value in the length field of the first data packet, which leads to a stack-based buffer overflow, a different vulnerability than CVE-2004-1481.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3021&w=2; http://secunia.com/advisories/17514/; http://secunia.com/advisories/17559
CVE: CVE-2005-2630
Published: 2005-11-18
Description: Heap-based buffer overflow in DUNZIP32.DLL for RealPlayer 8, 10, and 10.5 and RealOne Player 1 and 2 allows remote attackers to execute arbitrary code via a crafted RealPlayer Skin (RJS) file, a different vulnerability than CVE-2004-1094.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6033&w=2; http://secunia.com/advisories/17514/; http://secunia.com/advisories/17860
CVE: CVE-2005-3353
Published: 2005-11-18
Description: The exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to cause a denial of service (infinite loop) via a malformed JPEG image.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.php.net/bug.php?id=34704; http://docs.info.apple.com/article.html?artnum=303382; http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522
CVE: CVE-2005-3675
Published: 2005-11-18
Description: The Transmission Control Protocol (TCP) allows remote attackers to cause a denial of service (bandwidth consumption) by sending ACK messages for packets that have not yet been received (optimistic ACKs), which can cause the sender to increase its transmission rate until it fills available bandwidth.
CVSS Score: 7.8 (HIGH)
References: http://www.cs.umd.edu/~capveg/optack/optack-extended.pdf; http://www.kb.cert.org/vuls/id/102014; http://www.securityfocus.com/bid/15468/
CVE: CVE-2005-3676
Published: 2005-11-18
Description: SQL injection vulnerability in download.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the file parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4200&w=2; http://www.osvdb.org/20945; http://www.securityfocus.com/bid/15399/
CVE: CVE-2005-3677
Published: 2005-11-18
Description: Buffer overflow in RealNetworks RealPlayer 10 and 10.5 allows remote attackers to execute arbitrary code via a crafted image in a RealPlayer Skin (RJS) file.  NOTE: due to the lack of details, it is unclear how this is different than CVE-2005-2629 and CVE-2005-2630, but the vendor advisory implies that it is different.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1104&w=2; http://secunia.com/advisories/17514; http://service.real.com/help/faq/security/051110_player/EN/
CVE: CVE-2005-3678
Published: 2005-11-18
Description: Google Talk before 1.0.0.76, with email notification enabled, allows remote attackers to cause a denial of service (connection reset) via email with a blank sender.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4902&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3283&w=2; http://www.securityfocus.com/bid/15369
CVE: CVE-2005-3679
Published: 2005-11-18
Description: SQL injection vulnerability in admin/index.php in ActiveCampaign 1-2-All Broadcast Email allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username field in the admin control panel.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3863&w=2; http://www.osvdb.org/20949; http://www.securityfocus.com/bid/15400/
CVE: CVE-2005-3680
Published: 2005-11-18
Description: Directory traversal vulnerability in editor_registry.php in XOOPS 2.2.3 allows remote attackers to read or include arbitrary local files via a .. (dot dot) in the xoopsConfig[language] parameter.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4660&w=2; http://secunia.com/advisories/17573/; http://www.securityfocus.com/bid/15406/
CVE: CVE-2005-3681
Published: 2005-11-18
Description: SQL injection vulnerability in viewcat.php in XOOPS WF-Downloads module 2.05 allows remote attackers to execute arbitrary SQL commands via the list parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4660&w=2; http://secunia.com/advisories/17575; http://www.osvdb.org/20852
CVE: CVE-2005-3682
Published: 2005-11-18
Description: Multiple SQL injection vulnerabilities in Wizz Forum 1.20 allow remote attackers to execute arbitrary SQL commands via (1) the AuthID parameter in ForumAuthDetails.php, and the TopicID parameter in (2) ForumTopicDetails.php and (3) ForumReply.php.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9843&w=2; http://secunia.com/advisories/17548/; http://securityreason.com/securityalert/181
CVE: CVE-2005-3683
Published: 2005-11-19
Description: Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of service (application crash), and possibly execute arbitrary code, via a long USER command.
CVSS Score: 7.5 (HIGH)
References: http://freeftpd.com/?ctt=changelog; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]1294&w=2; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]4774&w=2
CVE: CVE-2005-3684
Published: 2005-11-19
Description: Multiple buffer overflows in freeFTPd 1.0.8, without logging enabled, allow remote authenticated attackers to cause a denial of service (application crash), and possibly execute arbitrary code, via long (1) MKD and (2) DELE commands.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]7499&w=2; http://secunia.com/advisories/17624; http://www.osvdb.org/20909
CVE: CVE-2005-3685
Published: 2005-11-19
Description: Cross-site scripting (XSS) vulnerability in shopadmin.asp in VP-ASP Shopping Cart 5.50 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://membres.lycos.fr/newnst/exploit/VPASP%20Shopping_By_ConcorDHacK.txt; http://secunia.com/advisories/17602; http://securitytracker.com/id?1015238
CVE: CVE-2005-3686
Published: 2005-11-19
Description: SQL injection vulnerability in search.inc.php in Unclassified NewsBoard before 1.5.3 Patch 4 allows remote attackers to execute arbitrary SQL commands via the (1) DateFrom or (2) DateUntil parameter to forum.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/0511-exploits/unb153pl3_xpl.html; http://rgod.altervista.org/unb153pl3_xpl.html; http://secunia.com/advisories/17614
CVE: CVE-2005-3687
Published: 2005-11-19
Description: cancel_account.php in WHM AutoPilot 2.5.30 and earlier allows remote attackers to cancel requests for arbitrary accounts via a modified c parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/17630; http://www.securityfocus.com/bid/15483; http://secunia.com/advisories/17630
CVE: CVE-2005-3688
Published: 2005-11-19
Description: Cross-site scripting (XSS) vulnerability in members.php in XMB 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the "Your Current Mood" field in the registration page.
CVSS Score: 4.3 (MEDIUM)
References: http://irannetjob.com/content/view/163/28/; http://secunia.com/advisories/17642; http://securitytracker.com/id?1015237
CVE: CVE-2005-3689
Published: 2005-11-19
Description: post.php in XMB 1.9.2 allows remote attackers to obtain the installation path via an invalid fid parameter in a newthread action.
CVSS Score: 5.0 (MEDIUM)
References: http://irannetjob.com/content/view/163/28/; http://secunia.com/advisories/17642; http://www.securityfocus.com/archive/1/417078/30/0/threaded
CVE: CVE-2005-3690
Published: 2005-11-19
Description: Stack-based buffer overflow in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to execute arbitrary code via a long mailbox name in the (1) select, (2) create, (3) delete, (4) rename, (5) subscribe, or (6) unsubscribe commands.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0581.html; http://secunia.com/advisories/17633; http://secunia.com/secunia_research/2005-59/advisory/
CVE: CVE-2005-3691
Published: 2005-11-19
Description: Directory traversal vulnerability in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to create or rename arbitrary mail directories via the mailbox name argument of the (1) create or (2) rename commands.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/17633; http://secunia.com/secunia_research/2005-59/advisory/; http://securitytracker.com/id?1015239
CVE: CVE-2005-3692
Published: 2005-11-19
Description: Cross-site scripting (XSS) vulnerability in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) retid parameter in badlogin.php, (2) Content-Type headers in HTML mails, and (3) HTML mail attachments.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0580.html; http://secunia.com/advisories/16665; http://secunia.com/secunia_research/2005-58/advisory/
CVE: CVE-2005-3693
Published: 2005-11-19
Description: The AxWebRemoveCtrl ActiveX control for uninstalling the SunnComm MediaMax DRM allows remote attackers to download and execute arbitrary code, a similar vulnerability to CVE-2005-3650.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/17639; http://www.freedom-to-tinker.com/?p=931; http://www.osvdb.org/20950
CVE: CVE-2005-3694
Published: 2005-11-20
Description: centericq 4.20.0-r3 with "Enable peer-to-peer communications" set allows remote attackers to cause a denial of service (segmentation fault and crash) via short zero-length packets, and possibly packets of length 1 or 2, as demonstrated using Nessus.
CVSS Score: 7.8 (HIGH)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334089; http://secunia.com/advisories/17798; http://secunia.com/advisories/17818
CVE: CVE-2005-3346
Published: 2005-11-20
Description: Buffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows local users to inject arbitrary environment variables, such as LD_PRELOAD, via pathname arguments of the form "$VAR/EVAR=arg", which cause the EVAR portion to be appended to a buffer returned by a getenv function call.
CVSS Score: 7.2 (HIGH)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=338312; http://pulltheplug.org/users/core/files/x_osh3.sh; http://secunia.com/advisories/17527
CVE: CVE-2005-3351
Published: 2005-11-20
Description: SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients ("To" addresses), which triggers a bus error in Perl.
CVSS Score: 5.0 (MEDIUM)
References: http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4570; http://lwn.net/Alerts/159300/; http://osvdb.org/11581
CVE: CVE-2005-3354
Published: 2005-11-20
Description: Stack-based buffer overflow in the ldif_get_line function in ldif.c of Sylpheed before 2.1.6 allows user-assisted attackers to execute arbitrary code by having local users import LDIF files with long lines.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/20675; http://secunia.com/advisories/17492; http://secunia.com/advisories/17525/
CVE: CVE-2005-2709
Published: 2005-11-20
Description: The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function pointers in memory that was used for the ctl_table.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/17504; http://secunia.com/advisories/17541; http://secunia.com/advisories/17648
CVE: CVE-2005-3528
Published: 2005-11-20
Description: Cross-site scripting (XSS) vulnerability in tiki-view_forum_thread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to inject arbitrary web script or HTML via the topics_offset parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://moritz-naumann.com/adv/0003/tikiw/0003.txt; http://secunia.com/advisories/17521; http://www.securityfocus.com/archive/1/416152/30/0/threaded
CVE: CVE-2005-3529
Published: 2005-11-20
Description: tiki-view_forum_thread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to obtain the installation path via an invalid topics_sort_mode parameter, possibly related to an SQL injection vulnerability.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://moritz-naumann.com/adv/0003/tikiw/0003.txt; http://secunia.com/advisories/17521; http://securityreason.com/securityalert/165
CVE: CVE-2005-3530
Published: 2005-11-20
Description: Cross-site scripting (XSS) vulnerability in Antville 1.1 allows remote attackers to inject arbitrary web script or HTML via the notfound.skin error document.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2557&w=2; http://moritz-naumann.com/adv/0004/antvxss/0004.txt; http://secunia.com/advisories/17520/
CVE: CVE-2005-3695
Published: 2005-11-20
Description: Cross-site scripting (XSS) vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the m parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/17587; http://securitytracker.com/id?1015234; http://www.osvdb.org/20908
CVE: CVE-2005-3696
Published: 2005-11-20
Description: SQL injection vulnerability in Arki-DB 1.0 and 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a view action (view.php) to index.php.
CVSS Score: 7.5 (HIGH)
References: http://addict3d.org/index.php?page=viewarticle&type=security&ID=5268; http://secunia.com/advisories/17627; http://www.osvdb.org/20944
CVE: CVE-2005-3697
Published: 2005-11-21
Description: Unspecified vulnerability in the administration interface in Uresk Links 2.0 Lite allows remote attackers to bypass authentication via unspecified vectors in index.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17625; http://www.securityfocus.com/bid/15469; http://secunia.com/advisories/17625
CVE: CVE-2005-3698
Published: 2005-11-21
Description: PHP Easy Download allows remote attackers to bypass authentication via edit.php.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/15470; http://www.securityfocus.com/bid/15470
CVE: CVE-2005-3699
Published: 2005-11-21
Description: Opera Web Browser 8.50 and 8.0 through 8.0.2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/17571; http://secunia.com/advisories/17571
CVE: CVE-2005-3715
Published: 2005-11-21
Description: Senao SI-680H Wireless VoIP Phone Firmware 0.03.0839 leaves the VxWorks debugger UDP port 17185 available without authentication, which allows attackers to access the phone OS, obtain sensitive information, and cause a denial of service.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038836.html; http://secunia.com/advisories/17606; http://www.securityfocus.com/bid/15475
CVE: CVE-2005-3716
Published: 2005-11-21
Description: The SNMP daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has hard-coded public credentials that cannot be changed, which allows attackers to obtain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038834.html; http://secunia.com/advisories/17629; http://www.securityfocus.com/bid/15476
CVE: CVE-2005-3717
Published: 2005-11-21
Description: The telnet daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has a default username "target" and password "password", which allows remote attackers to gain full access to the system.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038834.html; http://secunia.com/advisories/17629; http://www.securityfocus.com/bid/15476