rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-1249 
The IMAP daemon (IMAPD32.EXE) in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (CPU consumption) via an LSUB command with a large number of null characters, which causes an infinite loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-25T04:00:00.000Z
CVE-2005-1250 
SQL injection vulnerability in the logon screen of the web front end (NmConsole/Login.asp) for IpSwitch WhatsUp Professional 2005 SP1 allows remote attackers to execute arbitrary SQL commands via the (1) User Name field (sUserName parameter) or (2) Password (sPassword parameter).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-22T04:00:00.000Z
CVE-2005-1252 
Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote attackers to read arbitrary files via "..\" (dot dot backslash) sequences in the query string argument in a GET request to a non-existent .jsp file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-25T04:00:00.000Z
CVE-2005-1254 
Stack-based buffer overflow in the IMAP server for Ipswitch IMail 8.12 and 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to cause a denial of service (crash) via a SELECT command with a large argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-25T04:00:00.000Z
CVE-2005-1255 
Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allow remote attackers to execute arbitrary code via a LOGIN command with (1) a long username argument or (2) a long username argument that begins with a special character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-25T04:00:00.000Z
CVE-2005-1256 
Stack-based buffer overflow in the IMAP daemon (IMAPD32.EXE) in IMail 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to execute arbitrary code via a STATUS command with a long mailbox name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-25T04:00:00.000Z
CVE-2005-1260 
bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a "decompression bomb").
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-19T04:00:00.000Z
CVE-2005-1261 
Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message (IM) with a large URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-11T04:00:00.000Z
CVE-2005-1262 
Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed MSN message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-11T04:00:00.000Z
CVE-2005-1263 
The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to execute arbitrary code via an ELF binary that, in certain conditions involving the create_elf_tables function, causes a negative length argument to pass a signed integer comparison, leading to a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-11T04:00:00.000Z
CVE-2005-1264 
Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-17T04:00:00.000Z
CVE-2005-1265 
The mmap function in the Linux Kernel 2.6.10 can be used to create memory maps with a start address beyond the end address, which allows local users to cause a denial of service (kernel crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-14T04:00:00.000Z
CVE-2005-1266 
Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service (CPU consumption and slowdown) via a message with a long Content-Type header without any boundaries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-22T04:00:00.000Z
CVE-2005-1267 
The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-20T04:00:00.000Z
CVE-2005-1268 
Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remote attackers to cause a denial of service (child process crash) via a CRL that causes a buffer overflow of one null byte.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2005-1269 
Gaim before 1.3.1 allows remote attackers to cause a denial of service (application crash) via a Yahoo! message with non-ASCII characters in a file name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-14T04:00:00.000Z
CVE-2005-1270 
The (1) check_update.sh and (2) rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-28T04:00:00.000Z
CVE-2005-1272 
Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port (1) 6070 or (2) 6050.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-05T04:00:00.000Z
CVE-2005-1274 
Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via an HTTP unlock request and a long "If" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1275 
Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a PNM file with a small colors value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1278 
The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero length, as demonstrated using a GRE packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1279 
tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not properly handled by RT_ROUTING_INFO, or (2) LDP packet, which is not properly handled by the ldp_print function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1280 
The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1281 
Ethereal 0.10.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1282 
Multiple cross-site scripting (XSS) vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the src parameter in an IMG tag, (2) User settings, or (3) Address book input boxes in the webmail interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1283 
Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to (1) read arbitrary files via the UIDL parameter to the msg script or (2) copy or move the user's .eml file to arbitrary locations via the delete script, a different vulnerability than CVE-2005-0367.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1284 
The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Allow Creation of Accounts From the Web Interface" is disabled, via a direct HTTP POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1285 
Cross-site scripting (XSS) vulnerability in thread.php in WoltLab Burning Board 2.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the hilight parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1286 
Unquoted Windows search path vulnerability in BitDefender 8 allows local users to prevent BitDefender from starting by creating a malicious C:\program.exe, possibly due to the lack of quoting of the full pathname when executing a process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1287 
Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1288 
inc_login_check.asp ACS Blog 0.8 through 1.1.3 allows remote attackers to gain administrator privileges via the "in" value in a cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1289 
index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art and possibly (2) cat parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1290 
Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) u parameter to profile.php, (2) highlight parameter to viewtopic.php, or (3) forumname or forumdesc parameters to admin_forums.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1291 
Multiple SQL injection vulnerabilities in CartWIZ ASP Cart allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) addToCart.asp or (2) productDetails.asp, the (3) priceFrom, (4) idCategory, or (5) priceTo parameter to searchResults.asp, or (6) the idParentCategory parameter to productCatalogSubCats.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1292 
Multiple cross-site scripting (XSS) vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web script or HTML via the idProduct parameter to (1) tellAFriend.asp or (2) addToWishlist.asp, redirect parameter to (3) access.asp or (4) login.asp, message parameter to (5) login.asp or (6) error.asp, or (7) sku or (8) name parameter to searchResults.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1293 
Multiple SQL injection vulnerabilities in default.asp in StorePortal 2.63 allow remote attackers to execute arbitrary SQL commands via the (1) language, (2) bpic, (3) idcategory, (4) content, (5) keyword, or (6) idproduct parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1294 
The affix_sock_register in the Affix Bluetooth Protocol Stack for Linux might allow local users to gain privileges via a socket call with a negative protocol value, which is used as an array index.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1295 
include.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1296 
include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1297 
Cross-site scripting (XSS) vulnerability in the include.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1298 
The inserter.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1299 
The inserter.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1300 
Cross-site scripting (XSS) vulnerability in the inserter.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1301 
nProtect:Netizen 2005.3.17.1 does not properly verify that the update module is downloaded from an authorized site, which allows remote malicious web sites to write arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1302 
SQL injection vulnerability in Confixx 3.08 and earlier allows remote attackers to execute arbitrary SQL commands via the "change user" field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1303 
The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1304 
The citat.pl script allows remote attackers to execute arbitrary files via shell metacharacters in the argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1305 
The hyper.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-1306 
The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-15T04:00:00.000Z
CVE-2005-1307 
The (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working directory to find and execute the productname.sh script, which allows local users to execute arbitrary code by copying and calling the scripts from a user-controlled directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-17T04:00:00.000Z
CVE-2005-1308 
SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1309 
Cross-site scripting (XSS) vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML via the (1) entry title field or (2) comment body text.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1310 
SQL injection vulnerability in bBlog 0.7.4 allows remote attackers to execute arbitrary SQL commands via the postid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1311 
Cross-site scripting (XSS) vulnerability in Yappa-NG before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1312 
PHP remote file inclusion vulnerability in Yappa-NG before 2.3.2 allows remote attackers to execute arbitrary PHP code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1313 
Cross-site scripting (XSS) vulnerability in Horde Passwd module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1314 
Cross-site scripting (XSS) vulnerability in Horde Kronolith module before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1315 
Cross-site scripting (XSS) vulnerability in Horde Turba module before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1316 
Cross-site scripting (XSS) vulnerability in Horde Accounts module before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1317 
Cross-site scripting (XSS) vulnerability in Horde Chora module before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1318 
Cross-site scripting (XSS) vulnerability in Horde Forwards E-Mail Forwarding Manager before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1319 
Cross-site scripting (XSS) vulnerability in Horde IMP Webmail client before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1320 
Cross-site scripting (XSS) vulnerability in Horde Mnemo Note Manager before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1321 
Cross-site scripting (XSS) vulnerability in Horde Vacation module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1322 
Cross-site scripting (XSS) vulnerability in Horde Nag Task List Manager before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1323 
Buffer overflow in NetFtpd for NetTerm 5.1.1 and earlier allows remote attackers to execute arbitrary code via a long USER command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1324 
Multiple cross-site scripting (XSS) vulnerabilities in index.php for phpMyVisites allow remote attackers to inject arbitrary web script or HTML via the (1) part, (2) per, or (3) site parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1325 
set_lang.php in phpMyVisites 1.3 allows remote attackers to read and include arbitrary files via the mylang parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1326 
Buffer overflow in VooDoo cIRCle BOTNET before 1.0.33 allows remote authenticated attackers to cause a denial of service (client crash) via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1327 
Cross-site scripting (XSS) vulnerability in pms.php for Woltlab Burning Board 2.3.1 PL2 and earlier allows remote attackers to inject arbitrary web script or HTML via the folderid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1328 
OneWorldStore allows remote attackers to cause a denial of service (application crash) via a direct request to owConnections/chksettings.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1329 
owOfflineCC.asp in OneWorldStore allows remote attackers to obtain sensitive information by modifying the idOrder parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1330 
AppKit in Mac OS X 10.3.9 allows attackers to cause a denial of service (Cocoa application crash) via a malformed TIFF image that causes the NXSeek to use an incorrect offset, leading to an unhandled exception.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-04T04:00:00.000Z
CVE-2005-1331 
The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is different than the actual code that would be run, which could allow remote attackers to trick users into executing malicious code via certain URI characters such as NULL, control characters, and homographs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-04T04:00:00.000Z
CVE-2005-1332 
Bluetooth-enabled systems in Mac OS X 10.3.9 enables the Bluetooth file exchange service by default, which allows remote attackers to access files without the user being notified, and local users to access files via the default directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-04T04:00:00.000Z