rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-1333 
Directory traversal vulnerability in the Bluetooth file and object exchange (OBEX) services in Mac OS X 10.3.9 allows remote attackers to read arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-04T04:00:00.000Z
CVE-2005-1335 
Unknown vulnerability in Mac OS X 10.3.9 allows local users to gain privileges via (1) chfn, (2) chpass, and (3) chsh, which "use external helper programs in an insecure manner."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-04T04:00:00.000Z
CVE-2005-1336 
Buffer overflow in the Foundation framework for Mac OS X 10.3.9 allows local users to execute arbitrary code via a long environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-04T04:00:00.000Z
CVE-2005-1337 
Apple Help Viewer 2.0.7 and 3.0.0 in Mac OS X 10.3.9 allows remote attackers to read and execute arbitrary scrpts with less restrictive privileges via a help:// URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-04T04:00:00.000Z
CVE-2005-1338 
Mac OS X 10.3.9, when using an LDAP server that does not use ldap_extended_operation, may store initial LDAP passwords for new accounts in plaintext.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-04T04:00:00.000Z
CVE-2005-1339 
lukemftpd in Mac OS X 10.3.9 allows remote authenticated users to escape the chroot environment by logging in with their full name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-04T04:00:00.000Z
CVE-2005-1340 
The HTTP proxy service in Server Admin for Mac OS X 10.3.9 does not restrict access when it is enabled, which allows remote attackers to use the proxy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-04T04:00:00.000Z
CVE-2005-1341 
Apple Terminal 1.4.4 allows attackers to execute arbitrary commands via terminal escape sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-04T04:00:00.000Z
CVE-2005-1342 
The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-04T04:00:00.000Z
CVE-2005-1343 
Stack-based buffer overflow in the VPN daemon (vpnd) for Mac OS X before 10.3.9 allows local users to execute arbitrary code via a long -i (Server_id) argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-04T04:00:00.000Z
CVE-2005-1344 
Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument.  NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is executed from a CGI program.  Therefore this may not be a vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-27T04:00:00.000Z
CVE-2005-1345 
Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-28T04:00:00.000Z
CVE-2005-1346 
Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27, SAV/Filter for Domino NT 3.1.1.87, and Mail Security for Exchange 4.5.4.743, when running on Windows, allows remote attackers to cause a denial of service (component crash) and avoid detection via a crafted RAR file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-28T04:00:00.000Z
CVE-2005-1347 
** UNVERIFIABLE **  NOTE: this issue describes a problem that can not be independently verified as of 20050421.  Adobe Acrobat reader (AcroRd32.exe) 6.0 and earlier allows remote attackers to cause a denial of service ("Invalid-ID-Handle-Error" error) and modify memory beginning at a particular address, possibly allowing the execution of arbitrary code, via a crafted PDF file.  NOTE: the vendor has stated that the reporter refused to provide sufficient details to confirm the issue.  In addition, due to the lack of details in the original advisory, an independent verification is not possible.  Finally, the reliability of the original reporter is unknown.  This item has only been assigned a CVE identifier for tracking purposes, and to serve as a concrete example of the newly defined UNVERIFIABLE and PRERELEASE content decisions in CVE, which must be discussed by the Editorial Board. Without additional details or independent verification by reliable sources, it is highly likely that this item will be REJECTED.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-28T04:00:00.000Z
CVE-2005-1348 
Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to execute arbitrary code via a long HTTP Authorization header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-28T04:00:00.000Z
CVE-2005-1349 
Buffer overflow in Convert-UUlib (Convert::UUlib) before 1.051 allows remote attackers to execute arbitrary code via a malformed parameter to a read operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-28T04:00:00.000Z
CVE-2005-1350 
The ad.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-28T04:00:00.000Z
CVE-2005-1351 
The ad.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-28T04:00:00.000Z
CVE-2005-1352 
Cross-site scripting (XSS) vulnerability in the ad.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-28T04:00:00.000Z
CVE-2005-1353 
The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-28T04:00:00.000Z
CVE-2005-1354 
The forum.pl script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-28T04:00:00.000Z
CVE-2005-1355 
includer.cgi in The Includer allows remote attackers to read arbitrary files via a full pathname in the argument, a similar vulnerability to CVE-2005-0801.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-28T04:00:00.000Z
CVE-2005-1356 
Cross-site scripting (XSS) vulnerability in includer.cgi script in The Includer allows remote attackers to inject arbitrary web script or HTML via the argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-28T04:00:00.000Z
CVE-2005-1357 
text.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-28T04:00:00.000Z
CVE-2005-1358 
text.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-28T04:00:00.000Z
CVE-2005-1359 
Cross-site scripting (XSS) vulnerability in text.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-28T04:00:00.000Z
CVE-2005-1360 
PHP remote file inclusion vulnerability in error.php in GrayCMS 1.1 allows remote attackers to execute arbitrary PHP code by modifying the path_prefix parameter to reference a URL on a remote web server that contains the code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-28T04:00:00.000Z
CVE-2005-1361 
Multiple SQL injection vulnerabilities in MetaCart e-Shop 8.0 allow remote attackers to execute arbitrary SQL commands via the (1) intProdID parameter in product.asp or (2) strCatalog_NAME parameter to productsByCategory.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-28T04:00:00.000Z
CVE-2005-1362 
Multiple SQL injection vulnerabilities in MetaCart 2.0 for Paypal allow remote attackers to execute arbitrary SQL commands via the (1) intProdID parameter to product.asp, (2) intCatalogID or (3) strSubCatalogID parameters to productsByCategory.asp, (4) chkText, (5) strText, (6) chkPrice, (7) intPrice, (8) chkCat, or (9) strCat parameters to searchAction.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-28T04:00:00.000Z
CVE-2005-1363 
Multiple SQL injection vulnerabilities in MetaCart 2.0 for PayFlow allow remote attackers to execute arbitrary commands via (1) intCatalogID, (2) strSubCatalogID, or (3) strSubCatalog_NAME parameter to productsByCategory.asp, (4) curCatalogID, (5) strSubCatalog_NAME, (6) intCatalogID, or (7) page parameter to productsByCategory.asp or (8) intProdID parameter to product.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-28T04:00:00.000Z
CVE-2005-1364 
Multiple SQL injection vulnerabilities in MetaBid Auctions allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password fields in logIn.asp, or (3) intAuctionID parameter to item.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-28T04:00:00.000Z
CVE-2005-1365 
Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" (slash) characters and ".." sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-16T04:00:00.000Z
CVE-2005-1366 
Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dirname/../cgi-bin" in a URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-16T04:00:00.000Z
CVE-2005-1367 
Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web document root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-16T04:00:00.000Z
CVE-2005-1368 
The key_user_lookup function in security/keys/key.c in Linux kernel 2.6.10 to 2.6.11.8 may allow attackers to cause a denial of service (oops) via SMP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1369 
The (1) it87 and (2) via686a drivers in I2C for Linux 2.6.x before 2.6.11.8, and 2.6.12 before 2.6.12-rc2, create the sysfs "alarms" file with write permissions, which allows local users to cause a denial of service (CPU consumption) by attempting to write to the file, which does not have an associated store function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1370 
Unknown vulnerability in Radia Management Agent (RMA) in HP OpenView Radia Management Portal (RMP) 1.x and 2.x allows remote attackers to execute arbitrary commands via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1371 
BPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before opening files through the Help menu, which allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1372 
nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1373 
Multiple SQL injection vulnerabilities in index.php in Dream4 Koobi CMS 4.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) q or (2) p parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1374 
Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to inject arbitrary web script or HTML via (1) exercise_result.php, (2) exercice_submit.php, (3) agenda.php, (4) learningPathList.php, (5) learningPathAdmin.php, (6) learningPath.php, (7) userLog.php, (8) tool parameter to toolaccess_details.php, (9) data parameter to user_access_details.php, or (10) coursePath parameter to myagenda.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1375 
Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary SQL commands via (1) learningPath.php, (2) learningPathAdmin.php, (3) learnPath_details.php, (4) modules_pool.php, (5) module.php, (6) uInfo parameter in userInfo.php, or (7) exo_id parameter to exercises_details.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1376 
Multiple directory traversal vulnerabilities in (1) document.php or (2) insertMyDoc.php in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote project administrators to upload arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1377 
Multiple PHP remote file inclusion vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary PHP code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1378 
SQL injection vulnerability in posting_notes.php in the notes module for phpBB allows remote attackers to execute arbitrary SQL commands via the p parameter, which is used in the $post_id variable, and other attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1379 
The LAM runtime environment package (lam-runtime-7.0.6-2mdk) on Mandrake Linux installs the mpi user without a password, which allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1380 
Cross-site scripting (XSS) vulnerability in BEA Admin Console 8.1 allows remote attackers to execute arbitrary web script or HTML via the server parameter to a JndiFramesetAction action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1381 
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web script or HTML via the (1) cache_dump_file or (2) PartialPageErrorPage parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1382 
The webcacheadmin module in Oracle Webcache 9i allows remote attackers to corrupt arbitrary files via a full pathname in the cache_dump_file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1383 
The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attackers to bypass HTTP Server mod_access restrictions via a request to the webcache TCP port 7778.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1384 
Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to index.php, (2) phpcoinsessid parameter to login.php, (3) id, (4) dtopic_id, or (5) dcat_id to mod.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1385 
Safari 1.3 allows remote attackers to cause a denial of service (application crash) via a long https URL that triggers a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1386 
PHP-Nuke 7.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) ipban.php, (2) db.php, (3) lang-norwegian.php, (4) lang-indonesian.php, (5) lang-greek.php, (6) a request to Web_Links with the portuguese language (lang-portuguese.php), (7) a request to Web_Links with the indonesian language (lang-indonesian.php), (8) a request to the survey module with the indonesian language (lang-indonesian.php), (9) a request to the Reviews module with the portuguese language, or (10) a request to the Journal module with the portuguese language, which reveal the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1387 
Cocktail 3.5.4 and possibly earlier in Mac OS X passes the administrative password on the command line to sudo in cleartext, which allows local users to gain sensitive information by running listing processes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1388 
Cross-site scripting (XSS) vulnerability in SURVIVOR before 0.9.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1391 
Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long Host HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1392 
The SQL install script in phpMyAdmin 2.6.2 is created with world-readable permissions, which allows local users to obtain the initial database password by reading the script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1393 
Multiple buffer overflows in ArcGIS for ESRI ArcInfo Workstation 9.0 allow local users to execute arbitrary code via long command line arguments to (1) asmaster, (2) asuser, (3) asutility, (4) se, or (5) asrecovery.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1394 
Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format string specifiers in the ARCHOME environment variable to (1) wservice or (2) lockmgr.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1395 
Buffer overflow in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier may allow local users to gain privileges via a long (1) XAPPLRESLANGPATH or (2) XAPPLRESDIR environment variable, or (3) command line argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1396 
Race condition in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier allows local users to write to arbitrary files via a symlink attack on the ce_edit_log temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1397 
SQL injection vulnerability in search.php for PHP-Calendar before 0.10.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1398 
phpcart.php in PHPCart 3.2 allows remote attackers to change product price information by modifying the (1) price or (2) postage parameters.  NOTE: it was later reported that 3.4 through 4.6.4 are also affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-02T04:00:00.000Z
CVE-2005-1399 
FreeBSD 4.6 to 4.11 and 5.x to 5.4 uses insecure default permissions for the /dev/iir device, which allows local users to execute restricted ioctl calls to read or modify data on hardware that is controlled by the iir driver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-06T04:00:00.000Z
CVE-2005-1400 
The i386_get_ldt system call in FreeBSD 4.7 to 4.11 and 5.x to 5.4 allows local users to access sensitive kernel memory via arguments with negative or very large values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-06T04:00:00.000Z
CVE-2005-1401 
Format string vulnerability in the client for Mtp-Target 1.2.2 and earlier allows remote attackers to execute arbitrary code via game messages or other text.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1402 
Integer signedness error in certain older versions of the NeL library, as used in Mtp-Target 1.2.2 and earlier, and possibly other products, allows remote attackers to cause a denial of service (memory consumption or server crash) via a negative value in a STLport call, which is not caught by a signed comparison.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1403 
Multiple cross-site scripting (XSS) vulnerabilities in JustWilliam's Amazon Webstore 04050100 allow remote attackers to inject arbitrary web script or HTML via the (1) image parameter to closeup.php, the (2) currentIsExpanded or (3) searchFor parameters to index.php, (4) the currentNumber parameter to software_CAD_Technical_60002_uk.htm, or (5) a cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1404 
MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the (1) nbuser parameter to post.php or (2) sender parameter to privmsg.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1405 
HTTP response splitting vulnerability in the @SetHTTPHeader function in Lotus Domino 6.5.x before 6.5.4 and 6.0.x before 6.0.5 allows attackers to poison the web cache via malicious applications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-03T04:00:00.000Z
CVE-2005-1406 
The kernel in FreeBSD 4.x to 4.11 and 5.x to 5.4 does not properly clear certain fixed-length buffers when copying variable-length data for use by applications, which could allow those applications to read previously used sensitive memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-06T04:00:00.000Z