rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-0672 
Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via text strings that are not null terminated, which triggers a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0673 
Cross-site scripting (XSS) vulnerability in usercp_register.php for phpBB 2.0.13 allows remote attackers to inject arbitrary web script or HTML by setting the (1) allowhtml, (2) allowbbcode, or (3) allowsmilies parameters to inject HTML into signatures for personal messages, possibly when they are processed by privmsg.php or viewtopic.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0674 
Cross-site scripting (XSS) vulnerability in the News module for paBox 1.6 allows remote attackers to inject arbitrary web script or HTML via the text hidden parameter in an HTTP POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0675 
Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.5 allows remote attackers to inject arbitrary web script or HTML via the (1) list or (2) frommethod parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0676 
index.php in Zorum 3.5 allows remote attackers to trigger an SQL error, and possibly inject arbitrary SQL commands, via the search capability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0677 
index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0678 
PHP remote file inclusion vulnerability in formmail.inc.php for Form Mail Script 2.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the script_root to reference a URL on a remote web server that contains the code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0679 
PHP remote file inclusion vulnerability in tell_a_friend.inc.php for Tell A Friend Script 2.7 before 20050305 allows remote attackers to execute arbitrary PHP code by modifying the script_root parameter to reference a URL on a remote web server that contains the code.  NOTE: it was later reported that 2.4 is also affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0680 
PHP remote file inclusion vulnerability in download_center_lite.inc.php for Download Center Lite 1.6 allows remote attackers to execute arbitrary PHP code by modifying the script_root parameter to reference a URL on a remote web server that contains the code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0681 
Nokia Symbian 60 allows remote attackers to cause a denial of service (phone restart) via a Bluetooth nickname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0682 
Cross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via certain inputs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0684 
Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long file parameter after a percent ("%") sign or (2) a long Lock-Token string to the WebDAV functionality, which is not properly handled by the getLockTokenHeader function in WDVHandler_CommonUtils.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2005-0685 
Multiple access validation errors in OutStart Participate Enterprise (PE) allow remote attackers to (1) browse arbitrary directory trees by modifying the rootFolder parameter to displaynavigator.jsp, (2) rename arbitrary directory objects by modifying the selectedObject parameter to renamepopup.jsp, (3) delete arbitrary directory objects by modifying the selectedObjectsCSV parameter to displaydeletenavigator.jsp, and conduct other unauthorized activities via the (4) showDeleteView, (5) showWebFolderView, (6) showLibraryView, (7) showMyLibraryView, (8) singleSelectObject, (9) processRadioSelection, (10) processCheckboxSelection, (11) singleSelectObject, (12) addToSelectedObjects, or (13) removeFromSelectedObjects commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-08T05:00:00.000Z
CVE-2005-0686 
Integer overflow in mlterm 2.5.0 through 2.9.1, with gdk-pixbuf support enabled, allows remote attackers to execute arbitrary code via a large image file that is used as a background.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-08T05:00:00.000Z
CVE-2005-0687 
Format string vulnerability in Hashcash 1.16 allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via format string specifiers in a reply address, which is not properly handled when printing the header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-08T05:00:00.000Z
CVE-2005-0688 
Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability (CVE-1999-0016).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-08T05:00:00.000Z
CVE-2005-0689 
includer.cgi in The Includer allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the URL or (2) the template parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-08T05:00:00.000Z
CVE-2005-0690 
Gene6 FTP Server does not properly restrict access to the control console, which allows local users to modify the server configuration and gain privileges, as demonstrated by defining a SITE command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-08T05:00:00.000Z
CVE-2005-0691 
PHP remote file inclusion vulnerability in article mode for modules.php in SocialMPN allows remote attackers to execute arbitrary PHP code by modifying the name parameter to reference a URL on a remote web server that contains the code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-08T05:00:00.000Z
CVE-2005-0692 
Cross-site scripting (XSS) vulnerability in fusion_core.php for PHP-Fusion 5.x allows remote attackers to inject arbitrary web script or HTML via a message with IMG bbcode containing character-encoded Javascript.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-08T05:00:00.000Z
CVE-2005-0693 
Buffer overflow in JoWood Chaser 1.50 and earlier allows remote attackers to cause a denial of service (client or server crash) and execute arbitrary code via a long nickname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-08T05:00:00.000Z
CVE-2005-0694 
Hosting Controller 6.1 Hotfix 1.7 and earlier stores log files under the web root, which allows remote attackers to obtain sensitive information via a direct request to HCDiskQuotaService.csv.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-08T05:00:00.000Z
CVE-2005-0695 
The password recovery feature (forgotpassword.asp) in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-08T05:00:00.000Z
CVE-2005-0696 
Buffer overflow in ArGoSoft FTP Server 1.4.2.8 allows remote authenticated users to execute arbitrary code via a long DELE command. NOTE: this issue was later reported to also affect 1.4.3.5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-08T05:00:00.000Z
CVE-2005-0697 
SQL injection vulnerability in the process_picture function xp_publish.php in CopperExport 0.2.1 allows remote attackers to execute arbitrary SQL commands, possibly via the (1) title, (2) caption, or (3) keywords parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-08T05:00:00.000Z
CVE-2005-0698 
PHP remote file inclusion vulnerability in PHPWebLog 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the (1) G_PATH parameter to init.inc.php or the (2) PATH parameter to index.php to reference a URL on a remote web server that contains the code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-09T05:00:00.000Z
CVE-2005-0699 
Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11.c) for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via RADIUS authentication packets with large length values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-09T05:00:00.000Z
CVE-2005-0700 
The export_index action in myadmin.php for Aztek Forum 4.0 allows remote attackers to obtain database files, possibly by setting the ATK_ADMIN cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-09T05:00:00.000Z
CVE-2005-0701 
Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\\.\\.."  (modified dot dot backslash) sequences to UTL_FILE functions such as (1) UTL_FILE.FOPEN or (2) UTL_FILE.frename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-09T05:00:00.000Z
CVE-2005-0702 
SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in forum messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-09T05:00:00.000Z
CVE-2005-0703 
Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11.000 through 3.97.20.032, Pro 65/75/90 1.001.00.060 through 1.001.02.084, and others, has an "unauthenticated account," which allows remote attackers to modify system configuration, a different vulnerability than CVE-2005-1179.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-09T05:00:00.000Z
CVE-2005-0704 
Buffer overflow in the Etheric dissector in Ethereal 0.10.7 through 0.10.9 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-17T05:00:00.000Z
CVE-2005-0705 
The GPRS-LLC dissector in Ethereal 0.10.7 through 0.10.9, with the "ignore cipher bit" option enabled. allows remote attackers to cause a denial of service (application crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-17T05:00:00.000Z
CVE-2005-0706 
Buffer overflow in discdb.c for grip 3.1.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the cddb lookup to return more matches than expected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-09T05:00:00.000Z
CVE-2005-0707 
Buffer overflow in the IMAP daemon (IMAP4d32.exe) for Ipswitch Collaboration Suite (ICS) before 8.15 Hotfix 1 allows remote authenticated users to execute arbitrary code via a long EXAMINE command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-10T05:00:00.000Z
CVE-2005-0708 
The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer portions of kernel memory if a file is truncated while it is being sent, which could allow remote attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-05T04:00:00.000Z
CVE-2005-0709 
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-11T05:00:00.000Z
CVE-2005-0710 
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute arbitrary libraries by using INSERT INTO to modify the mysql.func table, which is processed by the udf_init function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-11T05:00:00.000Z
CVE-2005-0711 
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-11T05:00:00.000Z
CVE-2005-0712 
Mac OS X before 10.3.8 users world-writable permissions for certain directories, which may allow local users to gain privileges, possibly via the receipt cache or ColorSync profiles.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-22T05:00:00.000Z
CVE-2005-0713 
The Bluetooth Setup Assistant for Mac OS X before 10.3.8 can be launched without a keyboard or Bluetooth device, which allows local users to bypass access restrictions and gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-22T05:00:00.000Z
CVE-2005-0715 
AFP Server in Mac OS X before 10.3.8 uses insecure permissions for "Drop Boxes," which allows local users to read the contents of a Drop Box.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-22T05:00:00.000Z
CVE-2005-0716 
Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions, allows local users to execute arbitrary code via a long CF_CHARSET_PATH environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-22T05:00:00.000Z
CVE-2005-0718 
Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the connection during a (1) PUT or (2) POST request, which causes Squid to access previously freed memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2005-0719 
Unknown vulnerability in the systems message queue in HP Tru64 Unix 4.0F PK8 through 5.1B-2/PK4 allows local users to cause a denial of service (process crash) for processes such as nfsstat, pfstat, arp, ogated, rarpd, route, sendmail, srconfig, strsetup, trpt, netstat, and xntpd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2005-0720 
PHP remote file inclusion vulnerability in admin/header.php in PHP mcNews 1.3 allows remote attackers to execute arbitrary PHP code by modifying the skinfile parameter to reference a URL on a remote web server that contains the code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2005-0721 
PHP remote file inclusion vulnerability in modules.php in eXPerience2 allows remote attackers to execute arbitrary PHP code by modifying the file parameter to reference a URL on a remote web server that contains the code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2005-0722 
eXPerience2 allows remote attackers to obtain the full path for the web root via a direct request to modules.php without any parameters, which leaks the path in a PHP error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2005-0723 
Cross-site scripting (XSS) vulnerability in the jumpmenu function in functions.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL parameters, which is not properly cleansed in the $pageurl variable, as demonstrated using pafiledb.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2005-0724 
paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via (1) an invalid str parameter to pafiledb.php, or a direct request to (2) viewall.php, (3) stats.php, (4) search.php, (5) rate.php, (6) main.php, (7) license.php, (8) category.php, (9) download.php, (10) file.php, (11) email.php, or (12) admin.php, which reveals the path in a PHP error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2005-0725 
SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows remote attackers to execute arbitrary SQL commands via the articleid parameter to article.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2005-0726 
SQL injection vulnerability in editpost.php in UBB.threads 6.0 allows remote attackers to execute arbitrary SQL commands via the Number parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-12T05:00:00.000Z
CVE-2005-0729 
Format string vulnerability in Xpand Rally 1.1.0.0 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2005-0730 
PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service via a request to a file on the floppy drive, as demonstrated using A:\a.txt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2005-0731 
PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to Filelist.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2005-0732 
PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to obtain the full path of the web server via a request for a non-existent filename, which leaks the full path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2005-0733 
PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2005-0734 
PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service (memory exhaustion and process crash) via a large number of HTTP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2005-0735 
newsscript.pl for NewsScript allows remote attackers to gain privileges by setting the mode parameter to admin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2005-0736 
Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2005-0737 
Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2005-0738 
Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) by deleting or moving a folder with deeply nested subfolders, which causes Microsoft Exchange Information Store service (Store.exe) to hang as a result of a large number of recursive calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2005-0739 
The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could leave it vulnerable to buffer overflows, as demonstrated using modified length values that are not properly handled by the dissect_pdus and pduval_to_str functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2005-0740 
The TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of service (system panic) via crafted values in the TCP timestamp option, which causes invalid arguments to be used when calculating the retransmit timeout.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2005-0741 
Cross-site scripting (XSS) vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a usersrecentposts action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2005-0742 
Cross-site scripting (XSS) vulnerability in Sun Java System Application Server 7 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2005-0743 
The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote attackers to upload arbitrary PHP scripts, whose file extensions are not filtered.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2005-0744 
The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privileges by (1) sniffing the connection on TCP port 51100 and replaying the authentication information or (2) obtaining and replaying the PCZQX02 authentication cookie from the browser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2005-0745 
UTStarcom iAN-02EX VoIP Analog Terminal Adaptor (ATA) allows local users to bypass ATA access restrictions by dialing "*#26845#" and causing a device reset.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2005-0746 
The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z