rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-3167 
Incomplete blacklist vulnerability in MediaWiki before 1.4.11 does not properly remove certain CSS inputs (HTML inline style attributes) that are processed as active content by Internet Explorer, which allows remote attackers to conduct cross-site scripting (XSS) attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-06T04:00:00.000Z
CVE-2005-3168 
The SECEDIT command on Microsoft Windows 2000 before Update Rollup 1 for SP4, when using a security template to set Access Control Lists (ACLs) on folders, does not apply ACLs on folders that are listed after a long folder entry, which could result in less secure permissions than specified by the template.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-06T04:00:00.000Z
CVE-2005-3169 
Microsoft Windows 2000 before Update Rollup 1 for SP4, when the "audit directory service access" policy is enabled, does not record a 565 event message for File Delete Child operations on an Active Directory object in the security event log, which could allow attackers to conduct unauthorized activities without detection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-06T04:00:00.000Z
CVE-2005-3170 
The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets Layer (LDAPS) even when the Certificate Authority (CA) is not trusted, which could allow attackers to trick users into believing that they are accessing a trusted site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-06T04:00:00.000Z
CVE-2005-3171 
Microsoft Windows 2000 before Update Rollup 1 for SP4 records Event ID 1704 to indicate that Group Policy security settings were successfully updated, even when the processing fails such as when Ntuser.pol cannot be accessed, which could cause system administrators to believe that the system is compliant with the specified settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-06T04:00:00.000Z
CVE-2005-3172 
The WideCharToMultiByte function in Microsoft Windows 2000 before Update Rollup 1 for SP4 does not properly convert strings with Japanese composite characters in the last character, which could prevent the string from being null terminated and lead to data corruption or enable buffer overflow attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-06T04:00:00.000Z
CVE-2005-3173 
Microsoft Windows 2000 before Update Rollup 1 for SP4 does not apply group policies if the user logs on using UPN credentials with a trailing dot, which prevents Windows 2000 from finding the correct domain controller and could allow the user to bypass intended restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-06T04:00:00.000Z
CVE-2005-3174 
Microsoft Windows 2000 before Update Rollup 1 for SP4 allows users to log on to the domain, even when their password has expired, if the fully qualified domain name (FQDN) is 8 characters long.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-06T04:00:00.000Z
CVE-2005-3175 
Microsoft Windows 2000 before Update Rollup 1 for SP4 allows a local administrator to unlock a computer even if it has been locked by a domain administrator, which allows the local administrator to access the session as the domain administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-06T04:00:00.000Z
CVE-2005-3176 
Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services client in a security log event if the client connects successfully, which could make it easier for attackers to escape detection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-06T04:00:00.000Z
CVE-2005-3177 
CHKDSK in Microsoft Windows 2000 before Update Rollup 1 for SP4, Windows XP, and Windows Server 2003, when running in fix mode, does not properly handle security descriptors if the master file table contains a large number of files or if the descriptors do not satisfy certain NTFS conventions, which could cause ACLs for some files to be reverted to less secure defaults, or cause security descriptors to be removed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-06T04:00:00.000Z
CVE-2005-3178 
Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during (1) zoom, (2) reduce, or (3) rotate operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-07T04:00:00.000Z
CVE-2005-3179 
drm.c in Linux kernel 2.6.10 to 2.6.13 creates a debug file in sysfs with world-readable and world-writable permissions, which allows local users to enable DRM debugging and obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-11T04:00:00.000Z
CVE-2005-3180 
The Orinoco driver (orinoco.c) in Linux kernel 2.6.13 and earlier does not properly clear memory from a previously used packet whose length is increased, which allows remote attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-11T04:00:00.000Z
CVE-2005-3181 
The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses an incorrect function to free names_cache memory, which prevents the memory from being tracked by AUDITSYSCALL code and leads to a memory leak that allows attackers to cause a denial of service (memory consumption).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-11T04:00:00.000Z
CVE-2005-3182 
Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers to execute arbitrary code via long headers such as (1) Host and (2) Accept in HTTP requests.  NOTE: the vendor suggests that this issues is "in an underlying Microsoft technology" which, if true, could mean that the overflow affects other products as well.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-20T04:00:00.000Z
CVE-2005-3183 
The HTBoundary_put_block function in HTBound.c for W3C libwww (w3c-libwww) allows remote servers to cause a denial of service (segmentation fault) via a crafted multipart/byteranges MIME message that triggers an out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-12T04:00:00.000Z
CVE-2005-3184 
Buffer overflow vulnerability in the unicode_to_bytes in the Service Location Protocol (srvloc) dissector (packet-srvloc.c) in Ethereal allows remote attackers to execute arbitrary code via a srvloc packet with a modified length value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-20T04:00:00.000Z
CVE-2005-3185 
Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-13T04:00:00.000Z
CVE-2005-3186 
Integer overflow in the GTK+ gdk-pixbuf XPM image rendering library in GTK+ 2.4.0 allows attackers to execute arbitrary code via an XPM file with a number of colors that causes insufficient memory to be allocated, which leads to a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T11:00:00.000Z
CVE-2005-3187 
The listening daemon in Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) via a long HTTP request that causes an out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-05T23:00:00.000Z
CVE-2005-3188 
Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via (1) an m3u file containing a long line ending in .wma or (2) a pls file containing a long File1 value ending in .wma, a different vulnerability than CVE-2006-0476.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-02-04T02:00:00.000Z
CVE-2005-3189 
Directory traversal vulnerability in Qualcomm WorldMail IMAP Server allows remote attackers to read arbitrary email messages via ".." sequences in the SELECT command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T02:00:00.000Z
CVE-2005-3190 
Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to execute arbitrary code via HTTP GET requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-13T04:00:00.000Z
CVE-2005-3191 
Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtml, (e) KOffice KWord, (f) CUPS, and (g) libextractor allow user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with an out-of-range number of components (numComps), which is used as an array index.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T01:00:00.000Z
CVE-2005-3192 
Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T01:00:00.000Z
CVE-2005-3193 
Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, (4) CUPS, and (5) libextractor allows user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with large size values that cause insufficient memory to be allocated.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T00:00:00.000Z
CVE-2005-3194 
Multiple buffer overflows in ALZip 6.12 (Korean), 6.1 (International), and 5.52 (English) allow remote attackers to execute arbitrary code via a long filename in a compressed (1) ALZ, (2) ARJ, (3) ZIP, (4) UUE, or (5) XXE archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3196 
Planet Technology Corp FGSW2402RS switch with firmware 1.2 has a default password, which allows attackers with physical access to the device's serial port to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3197 
Stack-based buffer overflow in PWIWrapper.dll for Webroot Desktop Firewall before 1.3.0build52 allows local users to execute arbitrary code as SYSTEM by sending a crafted DeviceIoControl command, then removing an allowed program from the firewall list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3198 
Webroot Desktop Firewall before 1.3.0build52 allows local users to disable the firewall, even when password protection is enabled, via certain DeviceIoControl commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3199 
Multiple SQL injection vulnerabilities in aradmin.asp for aspReady FAQ allow remote attackers to execute arbitrary SQL commands, possibly via the (1) txtLogin and (2) txtPassword parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3200 
Multiple cross-site scripting (XSS) vulnerabilities in Utopia News Pro (UNP) 1.1.3 and 1.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the sitetitle parameter in header.php and (2) the version and (3) query_count parameters in footer.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3201 
SQL injection vulnerability in news.php for Utopia News Pro (UNP) 1.1.3, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to execute arbitrary SQL via the newsid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3202 
Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 allow remote attackers to inject arbitrary web script or HTML, and subsequently execute SQL statements via the (1) p or (2) p_t02 parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3203 
The manual installation of Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 stores the SYS password in install.lst in plaintext, which allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3204 
Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3205 
Cross-site scripting (XSS) vulnerability in iSQL*Plus (iSQLPlus) in Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to inject arbitrary web script or HTML via script in the "set markup HTML TABLE" command, which is executed when the user selects a table.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3206 
iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service (TNS listener stop) via an HTTP request with an sid parameter that contains a STOP command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3207 
The forms servlet (f90servlet) in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service (TNS listener stop) via a userid parameter that contains a STOP command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3208 
Multiple SQL injection vulnerabilities in (1) aeNovo, (2) aeNovoShop and (3) aeNovoWYSI allow remote attackers to execute arbitrary SQL code via (a) the password parameter in control.asp, and (b) the strSQL parameter in search.asp, which can enable XSS attacks in resulting error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3209 
Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) control, (b) content, and (c) page tables, which allows attackers with database access to obtain those passwords and gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3210 
Multiple interpretation error in unspecified versions of Kaspersky Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3211 
Multiple interpretation error in unspecified versions of BitDefender Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3212 
Multiple interpretation error in unspecified versions of NOD32 Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3213 
Multiple interpretation error in unspecified versions of F-Prot Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3214 
Multiple interpretation error in unspecified versions of Avast Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3215 
Multiple interpretation error in unspecified versions of McAfee Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3216 
Multiple interpretation error in unspecified versions of Sophos Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3217 
Multiple interpretation error in unspecified versions of Symantec Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3218 
Multiple interpretation error in unspecified versions of Dr.Web Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3219 
Multiple interpretation error in unspecified versions of Avira Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3220 
Multiple interpretation error in unspecified versions of Norman Virus Control Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3221 
Multiple interpretation error in unspecified versions of Fortinet Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3222 
Multiple interpretation error in unspecified versions of VBA32 Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3223 
Multiple interpretation error in unspecified versions of Rising Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3224 
Multiple interpretation error in unspecified versions of AntiVir Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-3225 
Multiple interpretation error in unspecified versions of (1) eTrust-Iris and (2) eTrust-Vet Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z