rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-3226 
Multiple interpretation error in unspecified versions of ArcaVir Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3227 
Multiple interpretation error in unspecified versions of UNA Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3228 
Multiple interpretation error in unspecified versions of Ikarus AntiVirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3229 
Multiple interpretation error in unspecified versions of ClamAV Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3230 
Multiple interpretation error in unspecified versions of Panda Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3231 
Multiple interpretation error in unspecified versions of CAT Quick Heal allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3232 
Multiple interpretation error in unspecified versions of TheHacker allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3233 
Multiple interpretation error in unspecified versions of Trustix Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3234 
Multiple interpretation error in unspecified versions of Grisoft AVG Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3235 
Multiple interpretation error in unspecified versions of Proland Protector Plus 2000 Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3236 
Multiple SQL injection vulnerabilities in Cyphor 0.19 allow remote attackers to execute arbitrary SQL and obtain administrative access via (1) the fid parameter of newmsg.php, which can enable XSS attacks when the SQL syntax is invalid or (2) the nick parameter of lostpwd.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3237 
Cross-site scripting (XSS) vulnerability in Cyphor 0.19 allows remote attackers to inject arbitrary web script or HTML via the t_login parameter of footer.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3238 
Multiple unspecified vulnerabilities in Solaris 10 SCTP Socket Option Processing allows local users to cause a denial of service (panic) via unspecified attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3239 
The OLE2 unpacker in clamd in Clam AntiVirus (ClamAV) 0.87-1 allows remote attackers to cause a denial of service (segmentation fault) via a DOC file with an invalid property tree, which triggers an infinite recursion in the ole2_walk_property_tree function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3240 
Race condition in Microsoft Internet Explorer allows user-assisted attackers to overwrite arbitrary files and possibly execute code by tricking a user into performing a drag-and-drop action from certain objects, such as file objects within a folder view, then predicting the drag action, and re-focusing to a malicious window.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-02-14T11:00:00.000Z
CVE-2005-3241 
Multiple vulnerabilities in Ethereal 0.10.12 and earlier allow remote attackers to cause a denial of service (memory consumption) via unspecified vectors in the (1) ISAKMP, (2) FC-FCS, (3) RSVP, and (4) ISIS LSP dissector.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3242 
Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (crash) via unknown vectors in (1) the IrDA dissector and (2) the SMB dissector when SMB transaction payload reassembly is enabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3243 
Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the (1) SLIMP3 and (2) AgentX dissector.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3244 
The BER dissector in Ethereal 0.10.3 to 0.10.12 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3245 
Unspecified vulnerability in the ONC RPC dissector in Ethereal 0.10.3 to 0.10.12, when the "Dissect unknown RPC program numbers" option is enabled, allows remote attackers to cause a denial of service (memory consumption).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3246 
Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (null dereference) via unknown vectors in the (1) SCSI, (2) sFlow, or (3) RTnet dissectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3247 
The SigComp UDVM in Ethereal 0.10.12 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3248 
Unspecified vulnerability in the X11 dissector in Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (divide-by-zero) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3249 
Unspecified vulnerability in the WSP dissector in Ethereal 0.10.1 to 0.10.12 allows remote attackers to cause a denial of service or corrupt memory via unknown vectors that cause Ethereal to free an invalid pointer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3250 
Unknown vulnerability in Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors related to the "/proc" filesystem, which trigger a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-17T04:00:00.000Z
CVE-2005-3251 
Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include arbitrary files via ".."  sequences in the g2_itemId parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-17T04:00:00.000Z
CVE-2005-3252 
Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code via a crafted UDP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-18T04:00:00.000Z
CVE-2005-3253 
Wireless Access Points (AP) for (1) Avaya AP-3 through AP-6 2.5 to 2.5.4, and AP-7/AP-8 2.5 and other versions before 3.1, and (2) Proxim AP-600 and AP-2000 before 2.5.5, and Proxim AP-700 and AP-4000 after 2.4.11 and before 3.1, use a static WEP key of "12345", which allows remote attackers to bypass authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-16T11:00:00.000Z
CVE-2005-3254 
The CGIwrap program before 3.9 on Debian GNU/Linux uses an incorrect minimum value of 100 for a UID to determine whether it can perform a seteuid operation, which could allow attackers to execute code as other system UIDs that are greater than the minimum value, which should be 1000 on Debian systems.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-18T04:00:00.000Z
CVE-2005-3255 
The (1) cgiwrap and (2) php-cgiwrap packages before 3.9 in Debian GNU/Linux provide access to debugging CGIs under the web document root, which allows remote attackers to obtain sensitive information via direct requests to those CGIs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-18T04:00:00.000Z
CVE-2005-3256 
The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, which allows parties with that key to decrypt the message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-18T04:00:00.000Z
CVE-2005-3257 
The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-18T04:00:00.000Z
CVE-2005-3258 
The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service (segmentation fault) via certain "odd" responses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-20T04:00:00.000Z
CVE-2005-3259 
Multiple SQL injection vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) login field, (2) "search this thread" feature, (3) "search for posts" feature, (4) "forgot password" feature, (5) list parameter in userlistpre.php, and the (6) select, (7) categ, and (8) to parameters in index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-20T04:00:00.000Z
CVE-2005-3260 
Multiple cross-site scripting (XSS) vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to inject arbitrary web script or HTML via (1) the url parameter in dereferrer.php and (2) the file parameter in imagewin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-20T04:00:00.000Z
CVE-2005-3261 
getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obtain sensitive information via a direct request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-20T04:00:00.000Z
CVE-2005-3262 
Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifiers in a UUE/XXE file, which are not properly handled when WinRAR displays diagnostic errors related to an invalid filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-20T04:00:00.000Z
CVE-2005-3263 
Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via an ACE archive containing a file with a long name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-20T04:00:00.000Z
CVE-2005-3264 
Cross-site scripting (XSS) vulnerability in thread.php for Zeroblog 1.1f and 1.2a allows remote attackers to inject arbitrary web script or HTML via the threadID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-20T04:00:00.000Z
CVE-2005-3265 
Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via (1) callto:// and (2) skype:// links, or (3) a non-standard VCARD, possibly due to an underlying error in the SysUtils.WideFmtStr Delphi routine.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3267 
Integer overflow in Skype client before 1.4.x.84 on Windows, before 1.3.x.17 on Mac OS, before 1.2.x.18 on Linux, and 1.1.x.6 and earlier allows remote attackers to cause a denial of service (crash) via crafted network data with a large Object Counter value, which leads to a resultant heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-3268 
yiff server (yiff-server) 2.14.2 on Debian GNU/Linux runs as root and does not properly verify ownership of files that it opens, which allows local users to read arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-20T04:00:00.000Z
CVE-2005-3269 
Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate Server before 7.1 SP1, (4) Sun ONE Directory Server 5.1 SP4 and earlier, and (5) Sun ONE Administration Server 5.2 allows remote attackers to cause a denial of service (admin server crash), or local users to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-20T04:00:00.000Z
CVE-2005-3270 
Untrusted search path vulnerability in DiskMountNotify for Symantec Norton AntiVirus 9.0.3 allows local users to gain privileges by modifying the PATH to reference a malicious (1) ps or (2) grep file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-20T04:00:00.000Z
CVE-2005-3271 
Exec in Linux kernel 2.6 does not properly clear posix-timers in multi-threaded environments, which results in a resource leak and could allow a large number of multiple local users to cause a denial of service by using more posix-timers than specified by the quota for a single user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-20T04:00:00.000Z
CVE-2005-3272 
Linux kernel before 2.6.12 allows remote attackers to poison the bridge forwarding table using frames that have already been dropped by filtering, which can cause the bridge to forward spoofed packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-20T04:00:00.000Z
CVE-2005-3273 
The rose_rt_ioctl function in rose_route.c for Radionet Open Source Environment (ROSE) in Linux 2.6 kernels before 2.6.12, and 2.4 before 2.4.29, does not properly verify the ndigis argument for a new route, which allows attackers to trigger array out-of-bounds errors with a large number of digipeats.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-20T04:00:00.000Z
CVE-2005-3274 
Race condition in ip_vs_conn_flush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, allows local users to cause a denial of service (null dereference) by causing a connection timer to expire while the connection table is being flushed before the appropriate lock is acquired.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-20T04:00:00.000Z
CVE-2005-3275 
The NAT code (1) ip_nat_proto_tcp.c and (2) ip_nat_proto_udp.c in Linux kernel 2.6 before 2.6.13 and 2.4 before 2.4.32-rc1 incorrectly declares a variable to be static, which allows remote attackers to cause a denial of service (memory corruption) by causing two packets for the same protocol to be NATed at the same time, which leads to memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-20T04:00:00.000Z
CVE-2005-3276 
The sys_get_thread_area function in process.c in Linux 2.6 before 2.6.12.4 and 2.6.13 does not clear a data structure before copying it to userspace, which might allow a user process to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-20T04:00:00.000Z
CVE-2005-3277 
The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell metacharacters ("`" or single backquote) in a request that is not properly handled when an error occurs, as demonstrated by killing the connection, a different vulnerability than CVE-2002-1473.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-21T04:00:00.000Z
CVE-2005-3278 
Integer overflow in the openpsfile function in gsinterf.c for Jan Kybic BitMap Viewer (BMV) 1.2 allows local users to execute arbitrary code via a PostScript (PS) file containing a large number of pages value, which leads to a resultant buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-3279 
Stack-based buffer overflow in the vgasco_printf function in Jan Kybic BitMap Viewer (BMV) 1.2, when compiled with the M_UNIX flag and running setuid, allows local users to gain privileges via a long filename in the -b command line option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-3280 
Paros 3.2.5 uses a default password for the "sa" account in the underlying HSQLDB database and does not restrict access to the local machine, which allows remote attackers to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-3281 
Directory traversal vulnerability in NukeFixes 3.1 for PHP-Nuke 7.8 allows remote attackers to include arbitrary files via the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-3282 
Splatt Forum 3.0 to 3.2 allows remote attackers to bypass authentication via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-3283 
Cross-site scripting (XSS) vulnerability in TikiWiki before 1.9.1.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-3284 
Multiple buffer overflows in AhnLab V3 AntiVirus V3Pro 2004 before 6.0.0.488, V3Net for Windows Server 6.0 before 6.0.0.488, and MyV3, with compressed file scanning enabled, allow remote attackers to execute arbitrary code via crafted (1) ALZ, (2) UUE, or (3) XXE archives.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-3285 
Cross-site scripting (XSS) vulnerability in comersus_backoffice_searchItemForm.asp in Comersus BackOffice Plus allows remote attackers to inject arbitrary web script or HTML via the (1) forwardTo1, (2) forwardTo2, (3) nameFT1, or (4) nameFT2 parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-3286 
The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of service (crash) by setting the PAGE_NOACCESS or PAGE_GUARD protection on the Page Environment Block (PEB), which triggers an exception, aka the "PEB lockout vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-3287 
Incomplete blacklist vulnerability in Mailsite Express allows remote attackers to upload and possibly execute files via attachments with executable extensions such as ASPX, which are not converted to .TXT like other dangerous extensions, and which can be directly requested from the cache directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-3288 
Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose page" feature, then accessing the file from the cache directory before saving or sending the message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-3289 
LSCFG in IBM AIX 5.2 and 5.3 does not create temporary files securely, which allows local users to corrupt /etc/passwd and possibly other system files via the trace file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-3290 
SQL injection vulnerability in Accelerated Mortgage Manager allows remote attackers to execute arbitrary SQL commands via the password field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-3291 
Stani's Python Editor (SPE) 0.7.5 is installed with world-writable permissions, which allows local users to gain privileges by modifying executable files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z