rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-3402 
SQL injection vulnerability in VirtuaStore 2.0 allows remote attackers to execute arbitrary SQL commands via the password parameter when logging in.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-06T20:00:00.000Z
CVE-2006-3403 
The smdb daemon (smbd/service.c) in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a large number of share connection requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-12T19:00:00.000Z
CVE-2006-3404 
Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a large num_axes value in the VECTORS property.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-06T20:00:00.000Z
CVE-2006-3405 
Cross-site scripting (XSS) vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) delete, (2) pathext, and (3) edit parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3406 
Directory traversal vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to modify arbitrary files via a .. (dot dot) sequence in the edit parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3407 
Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-printable characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3408 
Unspecified vulnerability in the directory server (dirserver) in Tor before 0.1.1.20 allows remote attackers to cause an unspecified denial of service via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3409 
Integer overflow in Tor before 0.1.1.20 allows remote attackers to execute arbitrary code via crafted large inputs, which result in a buffer overflow when elements are added to smartlists.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3410 
Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit nodes," which allows remote attackers to conduct unspecified statistical attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3411 
TLS handshakes in Tor before 0.1.1.20 generate public-private keys based on TLS context rather than the connection, which makes it easier for remote attackers to conduct brute force attacks on the encryption keys.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3412 
Tor before 0.1.1.20 does not sufficiently obey certain firewall options, which allows remote attackers to bypass intended access restrictions for dirservers, direct connections, or proxy servers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3413 
The privoxy configuration file in Tor before 0.1.1.20, when run on Apple OS X, logs all data via the "logfile", which allows attackers to obtain potentially sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3414 
Tor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses, which allows remote attackers to arbitrarily group users by providing preferential address resolution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3415 
Tor before 0.1.1.20 uses improper logic to validate the "OR" destination, which allows remote attackers to perform a man-in-the-middle (MITM) attack via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3416 
Tor before 0.1.1.20 kills the circuit when it receives an unrecognized relay command, which causes network circuits to be disbanded.  NOTE: while this item is listed under the "Security fixes" section of the developer changelog, the developer clarified on 20060707 that this is only a self-DoS.  Therefore this issue should not be included in CVE
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3417 
Tor client before 0.1.1.20 prefers entry points based on is_fast or is_stable flags, which could allow remote attackers to be preferred over nodes that are identified as more trustworthy "entry guard" (is_guard) systems by directory authorities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3418 
Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allows remote attackers to spoof the fingerprint line, which might be trusted by users or other applications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3419 
Tor before 0.1.1.20 uses OpenSSL pseudo-random bytes (RAND_pseudo_bytes) instead of cryptographically strong RAND_bytes, and seeds the entropy value at start-up with 160-bit chunks without reseeding, which makes it easier for attackers to conduct brute force guessing attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3420 
Cross-site request forgery (CSRF) vulnerability in editpost.php in MyBulletinBoard (MyBB) before 1.1.5 allows remote attackers to perform unauthorized actions as a logged in user and delete arbitrary forum posts via a bbcode IMG tag with a modified delete parameter in a deletepost action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3421 
PHP remote file inclusion vulnerability in SmartSiteCMS 1.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the root parameter in (1) comment.php, (2) admin/comedit.php, (3) admin/test.php, (4) admin/index.php, and (5) admin/include/inc_adminfoot.php, a different set of vectors than CVE-2006-3162.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3422 
PHP remote file inclusion vulnerability in WonderEdit Pro CMS allows remote attackers to execute arbitrary PHP code via the config[template_path] parameter in user_bottom.php, as used by multiple templates including (1) rwb (template/rwb/user_bottom.php), (2) gwb (template/rwb/user_bottom.php, (3) blues, (4) bluwhi, and (5) grns.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3423 
WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which allows remote attackers to execute arbitrary code via a website that activates the GpcUrlRoot and GpcIniFileName ActiveX controls to cause the client to download a DLL file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3424 
Multiple buffer overflows in WebEx Downloader ActiveX Control, possibly in versions before November 2005, allow remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3425 
FastPatch for (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1, and (b) Novell ZENworks 6.2 SR1 and earlier, does not require authentication for dagent/proxyreg.asp, which allows remote attackers to list, add, or delete PatchLink Distribution Point (PDP) proxy servers via modified (1) List, (2) Proxy, or (3) Delete parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3426 
Directory traversal vulnerability in (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (b) Novell ZENworks 6.2 SR1 and earlier allows remote attackers to overwrite arbitrary files and directories via a .. (dot dot) sequence in the (1) action, (2) agentid, or (3) index parameters to dagent/nwupload.asp, which are used as pathname components.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3427 
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by declaring the sourceURL attribute on an uninitialized DirectAnimation.StructuredGraphicsControl ActiveX Object, which triggers a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3428 
Cross-site scripting (XSS) vulnerability in TigerTom TTCalc 1.0 allows remote attackers to inject arbitrary web script or HTML via the year parameter in (1) loan.php and (2) mortgage.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3429 
Cross-site scripting (XSS) vulnerability in TigerTom TTCalc 1.0 allows remote attackers to inject arbitrary web script or HTML via the currency parameter in (1) loan.php and (2) mortgage.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3430 
SQL injection vulnerability in checkprofile.asp in (1) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (2) Novell ZENworks 6.2 SR1 and earlier, allows remote attackers to execute arbitrary SQL commands via the agentid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T00:00:00.000Z
CVE-2006-3431 
Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arbitrary code via a crafted STYLE record in a spreadsheet that triggers the overflow when the user attempts to repair the document or selects the "Style" option, as demonstrated by nanika.xls.  NOTE: Microsoft has confirmed to CVE via e-mail that this is different than the other Excel vulnerabilities announced before 20060707, including CVE-2006-3059 and CVE-2006-3086.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T18:00:00.000Z
CVE-2006-3434 
Unspecified vulnerability in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string that triggers memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-10T22:00:00.000Z
CVE-2006-3435 
PowerPoint in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac does not properly parse the slide notes field in a document, which allows remote user-assisted attackers to execute arbitrary code via crafted data in this field, which triggers an erroneous object pointer calculation that uses data from within the document. NOTE: this issue is different than other PowerPoint vulnerabilities including CVE-2006-4694.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-10T21:00:00.000Z
CVE-2006-3436 
Cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-10T21:00:00.000Z
CVE-2006-3438 
Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll "uses a file containing a malformed function," aka "Hyperlink Object Function Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T00:00:00.000Z
CVE-2006-3439 
Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a different vulnerability than CVE-2006-1314.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T01:00:00.000Z
CVE-2006-3440 
Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka "Winsock Hostname Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T01:00:00.000Z
CVE-2006-3441 
Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted record response.  NOTE: while MS06-041 implies that there is a single issue, there are multiple vectors, and likely multiple vulnerabilities, related to (1) a heap-based buffer overflow in a DNS server response to the client, (2) a DNS server response with malformed ATMA records, and (3) a length miscalculation in TXT, HINFO, X25, and ISDN records.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T01:00:00.000Z
CVE-2006-3442 
Unspecified vulnerability in Pragmatic General Multicast (PGM) in Microsoft Windows XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted multicast message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-12T23:00:00.000Z
CVE-2006-3443 
Untrusted search path vulnerability in Winlogon in Microsoft Windows 2000 SP4, when SafeDllSearchMode is disabled, allows local users to gain privileges via a malicious DLL in the UserProfile directory, aka "User Profile Elevation of Privilege Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T01:00:00.000Z
CVE-2006-3444 
Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, probably a buffer overflow, allows local users to obtain privileges via unspecified vectors involving an "unchecked buffer."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T00:00:00.000Z
CVE-2006-3445 
Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via a large length value in an .ACF file, which results in a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-14T21:00:00.000Z
CVE-2006-3448 
Buffer overflow in the Step-by-Step Interactive Training in Microsoft Windows 2000 SP4, XP SP2 and Professional, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a long Syllabus string in crafted bookmark link files (cbo, cbl, or .cbm), a different issue than CVE-2005-1212.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-13T20:00:00.000Z
CVE-2006-3449 
Unspecified vulnerability in Microsoft PowerPoint 2000 through 2003, possibly a buffer overflow, allows user-assisted remote attackers to execute arbitrary commands via a malformed record in the BIFF file format used in a PPT file, a different issue than CVE-2006-1540, aka "Microsoft PowerPoint Malformed Record Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T00:00:00.000Z
CVE-2006-3450 
Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using the document.getElementByID Javascript function to access crafted Cascading Style Sheet (CSS) elements, and possibly other unspecified vectors involving certain layout positioning combinations in an HTML file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-08T23:00:00.000Z
CVE-2006-3451 
Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to construct a chain of Cascading Style Sheets (CSS), which allows remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-08T23:00:00.000Z
CVE-2006-3452 
Adobe Reader and Acrobat 6.0.4 and earlier, on Mac OSX, has insecure file and directory permissions, which allows local users to gain privileges by overwriting program files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-12T22:00:00.000Z
CVE-2006-3453 
Buffer overflow in Adobe Acrobat 6.0 to 6.0.4 allows remote attackers to execute arbitrary code via unknown vectors in a document that triggers the overflow when it is distilled to PDF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-13T17:00:00.000Z
CVE-2006-3454 
Multiple format string vulnerabilities in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allow local users to execute arbitrary code via format strings in (1) Tamper Protection and (2) Virus Alert Notification messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T00:00:00.000Z
CVE-2006-3455 
The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3, allows local users to execute arbitrary code via a modified address for the output buffer argument to the DeviceIOControl function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-23T20:00:00.000Z
CVE-2006-3456 
The Symantec NAVOPTS.DLL ActiveX control (aka Symantec.Norton.AntiVirus.NAVOptions) 12.2.0.13, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, is designed for use only in application-embedded web browsers, which allows remote attackers to "crash the control" via unspecified vectors related to content on a web site, and place Internet Explorer into a "defunct state" in which remote attackers can execute arbitrary code in addition to other Symantec ActiveX controls, regardless of whether they are marked safe for scripting.  NOTE: this CVE was inadvertently used for an E-mail Auto-Protect issue, but that issue has been assigned CVE-2007-3771.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2006-3457 
Symantec On-Demand Agent (SODA) before 2.5 MR2 Build 2157, and the Virtual Desktop module in Symantec On-Demand Protection (SODP) before 2.6 Build 2233, do not properly encrypt files that are subject to policy-based automatic encryption, which might allow local users to read sensitive data via an unspecified decryption method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T00:00:00.000Z
CVE-2006-3458 
Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T23:00:00.000Z
CVE-2006-3459 
Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdir_count value in the TIFFFetchShortPair function in tif_dirread.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-03T01:00:00.000Z
CVE-2006-3460 
Heap-based buffer overflow in the JPEG decoder in the TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an encoded JPEG stream that is longer than the scan line size (TiffScanLineSize).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-03T01:00:00.000Z
CVE-2006-3461 
Heap-based buffer overflow in the PixarLog decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-03T01:00:00.000Z
CVE-2006-3462 
Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-03T01:00:00.000Z
CVE-2006-3463 
The EstimateStripByteCounts function in TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large td_nstrips value, which triggers an infinite loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-03T01:00:00.000Z
CVE-2006-3464 
TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via large offset values in a TIFF directory that lead to an integer overflow and other unspecified vectors involving "unchecked arithmetic operations".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-03T01:00:00.000Z
CVE-2006-3465 
Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers to cause a denial of service (instability or crash) and execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-03T01:00:00.000Z
CVE-2006-3467 
Integer overflow in FreeType before 2.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PCF file, as demonstrated by the Red Hat bad1.pcf test file, due to a partial fix of CVE-2006-1861.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T23:00:00.000Z
CVE-2006-3468 
Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service (file system panic) via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle (inode number), which triggers an error and causes an exported directory to be remounted read-only.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T21:00:00.000Z