rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-2070 
The ClamAV Mail fILTER (clamav-milter) 0.84 through 0.85d, when used in Sendmail using long timeouts, allows remote attackers to cause a denial of service by keeping an open connection, which prevents ClamAV from reloading.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-29T04:00:00.000Z
CVE-2005-2071 
traceroute in Sun Solaris 10 on x86 systems allows local users to execute arbitrary code with PRIV_NET_RAWACCESS privileges via (1) a large number of -g arguments or (2) a malformed -s argument with a trailing . (dot).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-29T04:00:00.000Z
CVE-2005-2072 
The runtime linker (ld.so) in Solaris 8, 9, and 10 trusts the LD_AUDIT environment variable in setuid or setgid programs, which allows local users to gain privileges by (1) modifying LD_AUDIT to reference malicious code and possibly (2) using a long value for LD_AUDIT.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-29T04:00:00.000Z
CVE-2005-2073 
Unknown vulnerability in IBM DB2 8.1.4 through 8.1.9 and 8.2.0 through 8.2.2 allows local users with SELECT privileges to conduct unauthorized activities and insert, update or delete table contents.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-29T04:00:00.000Z
CVE-2005-2074 
Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.0.105 allows remote attackers to inject arbitrary web script or HTML via a news or article post, possibly involving the (1) news_body, (2) article_description, or (3) article_body parameters to submit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-29T04:00:00.000Z
CVE-2005-2075 
PHP-Fusion 5.0 and 6.0 stores the database file with a predictable filename under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the filename in the administration/db_backups directory in PHP-Fusion 6.0 or the fusion_admin/db_backups directory in 5.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-29T04:00:00.000Z
CVE-2005-2076 
HP Version Control Repository Manager (VCRM) before 2.1.1.730 does not properly handle the "@" character in a proxy password, which could allow attackers with physical access to obtain portions of the password when it is displayed to the screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-29T04:00:00.000Z
CVE-2005-2077 
Cross-site scripting (XSS) vulnerability in error.asp for Hosting Controller allows remote attackers to inject arbitrary web script or HTML via the error parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-29T04:00:00.000Z
CVE-2005-2078 
BisonFTP Server V4R1 allows remote authenticated users to cause a denial of service via an invalid command with a long argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-29T04:00:00.000Z
CVE-2005-2079 
Heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0 through 10.0 for Windows Servers allows remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-29T04:00:00.000Z
CVE-2005-2080 
Unknown vulnerability in Remote Agent for Windows Servers (RAWS) in VERITAS Backup Exec 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for NetWare, allows remote attackers to gain privileges by copying the handle for the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-29T04:00:00.000Z
CVE-2005-2081 
Stack-based buffer overflow in the function that parses commands in Asterisk 1.0.7, when the 'write = command' option is enabled, allows remote attackers to execute arbitrary code via a command that has two double quotes followed by a tab character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-30T04:00:00.000Z
CVE-2005-2082 
im_trbbs.cgi in imTRSET 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the df parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-30T04:00:00.000Z
CVE-2005-2083 
Format string vulnerability in IMAP4 in IA eMailServer Corporate Edition 5.2.2 build 1051 allows remote attackers to cause a denial of service (application crash) via a LIST command with format string specifiers as the second argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-30T04:00:00.000Z
CVE-2005-2084 
Cross-site scripting (XSS) vulnerability in SearchResults.aspx in Community Forum allows remote attackers to inject arbitrary web script or HTML via the q parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-30T04:00:00.000Z
CVE-2005-2085 
Buffer overflow in Inframail Advantage Server Edition 6.0 through 6.7 allows remote attackers to cause a denial of service (process crash) via a long (1) SMTP FROM field or possibly (2) FTP NLST command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-30T04:00:00.000Z
CVE-2005-2086 
PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute arbitrary PHP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-30T04:00:00.000Z
CVE-2005-2087 
Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls, as demonstrated using the JVIEW Profiler (Javaprxy.dll).  NOTE: the researcher says that the vendor could not reproduce this problem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-30T04:00:00.000Z
CVE-2005-2088 
The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Apache to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-30T04:00:00.000Z
CVE-2005-2089 
Microsoft IIS 5.0 and 6.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes IIS to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-30T04:00:00.000Z
CVE-2005-2090 
Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-30T04:00:00.000Z
CVE-2005-2091 
IBM WebSphere 5.1 and WebSphere 5.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes WebSphere to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-30T04:00:00.000Z
CVE-2005-2092 
BEA Systems WebLogic 8.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes WebLogic to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-30T04:00:00.000Z
CVE-2005-2093 
Oracle 9i Application Server (Oracle9iAS) 9.0.2 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Application Server to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-30T04:00:00.000Z
CVE-2005-2094 
Sun SunONE web server 6.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes SunONE to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-30T04:00:00.000Z
CVE-2005-2095 
options_identities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the $_POST variable, which allows remote attackers to modify or read the preferences of other users, conduct cross-site scripting XSS) attacks, and write arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-13T04:00:00.000Z
CVE-2005-2096 
zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-06T04:00:00.000Z
CVE-2005-2097 
xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-16T04:00:00.000Z
CVE-2005-2098 
The KEYCTL_JOIN_SESSION_KEYRING operation in the Linux kernel before 2.6.12.5 contains an error path that does not properly release the session management semaphore, which allows local users or remote attackers to cause a denial of service (semaphore hang) via a new session keyring (1) with an empty name string, (2) with a long name string, (3) with the key quota reached, or (4) ENOMEM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-22T04:00:00.000Z
CVE-2005-2099 
The Linux kernel before 2.6.12.5 does not properly destroy a keyring that is not instantiated properly, which allows local users or remote attackers to cause a denial of service (kernel oops) via a keyring with a payload that is not empty, which causes the creation to fail, leading to a null dereference in the keyring destructor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-22T04:00:00.000Z
CVE-2005-2100 
The rw_vm function in usercopy.c in the 4GB split patch for the Linux kernel in Red Hat Enterprise Linux 4 does not perform proper bounds checking, which allows local users to cause a denial of service (crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-25T04:00:00.000Z
CVE-2005-2101 
langen2kvtml in KDE 3.0 to 3.4.2 creates insecure temporary files in /tmp with predictable names, which allows local users to overwrite arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-17T04:00:00.000Z
CVE-2005-2102 
The AIM/ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) via a filename that contains invalid UTF-8 characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-16T04:00:00.000Z
CVE-2005-2103 
Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an away message with a large number of AIM substitution strings, such as %t or %n.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-16T04:00:00.000Z
CVE-2005-2104 
sysreport before 1.3.7 allows local users to obtain sensitive information via a symlink attack on a temporary directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-07T04:00:00.000Z
CVE-2005-2105 
Cisco IOS 12.2T through 12.4 allows remote attackers to bypass Authentication, Authorization, and Accounting (AAA) RADIUS authentication, if the fallback method is set to none, via a long username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-01T04:00:00.000Z
CVE-2005-2106 
Unknown vulnerability in Drupal 4.5.0 through 4.5.3, 4.6.0, and 4.6.1 allows remote attackers to execute arbitrary PHP code via a public comment or posting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-01T04:00:00.000Z
CVE-2005-2107 
Multiple cross-site scripting (XSS) vulnerabilities in post.php in WordPress 1.5.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) p or (2) comment parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-01T04:00:00.000Z
CVE-2005-2108 
SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via input that is not filtered in the HTTP_RAW_POST_DATA variable, which stores the data in an XML file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-01T04:00:00.000Z
CVE-2005-2109 
wp-login.php in WordPress 1.5.1.2 and earlier allows remote attackers to change the content of the forgotten password e-mail message via the message variable, which is not initialized before use.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-01T04:00:00.000Z
CVE-2005-2110 
WordPress 1.5.1.2 and earlier allows remote attackers to obtain sensitive information via (1) a direct request to menu-header.php or a "1" value in the feed parameter to (2) wp-atom.php, (3) wp-rss.php, or (4) wp-rss2.php, which reveal the path in an error message.  NOTE: vector [1] was later reported to also affect WordPress 2.0.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-01T04:00:00.000Z
CVE-2005-2111 
login.cgi in Community Link Pro Web Editor allows remote attackers to execute arbitrary commands via the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-01T04:00:00.000Z
CVE-2005-2112 
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.0.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) order parameter to edit.php or (2) cid parameter to comment_edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-01T04:00:00.000Z
CVE-2005-2113 
SQL injection vulnerability in the loginUser function in the XMLRPC server in XOOPS 2.0.11 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via crafted values in an XML file, as demonstrated using the blogger.getPost method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-01T04:00:00.000Z
CVE-2005-2114 
Mozilla 1.7.8, Firefox 1.0.4, Camino 0.8.4, Netscape 8.0.2, and K-Meleon 0.9, and possibly other products that use the Gecko engine, allow remote attackers to cause a denial of service (application crash) via JavaScript that repeatedly calls an empty function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-01T04:00:00.000Z
CVE-2005-2115 
Soldier of Fortune II 1.02x and 1.03 allows remote attackers to cause a denial of service (server crash) via a large ID value in the ignore command, which is used as an array index and causes an out-of-bounds operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-01T04:00:00.000Z
CVE-2005-2117 
Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote user-assisted attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-21T04:00:00.000Z
CVE-2005-2118 
Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary commands via a crafted shortcut (.lnk) file with long font properties that lead to a buffer overflow when the user views the file's properties using Windows Explorer, a different vulnerability than CVE-2005-2122.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-21T04:00:00.000Z
CVE-2005-2119 
The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) allocates a 4K page of memory regardless of the required size, which allows attackers to overwrite arbitrary memory locations using an incorrect size value that is provided to the NdrAllocate function, which writes management data to memory outside of the allocated buffer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-11T04:00:00.000Z
CVE-2005-2120 
Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "\" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-13T04:00:00.000Z
CVE-2005-2122 
Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to execute arbitrary commands via a shortcut (.lnk) file with long font properties that lead to a buffer overflow in the Client/Server Runtime Server Subsystem (CSRSS), a different vulnerability than CVE-2005-2118.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-21T04:00:00.000Z
CVE-2005-2123 
Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allow remote attackers to execute arbitrary code via crafted Windows Metafile (WMF) and Enhanced Metafile (EMF) format images that lead to heap-based buffer overflows, as demonstrated using MRBP16::bCheckRecord.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-29T21:00:00.000Z
CVE-2005-2124 
Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1, related to "An unchecked buffer" and possibly buffer overflows, allows remote attackers to execute arbitrary code via a crafted Windows Metafile (WMF) format image, aka "Windows Metafile Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-29T21:00:00.000Z
CVE-2005-2126 
The FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4, when "Enable Folder View for FTP Sites" is enabled and the user manually initiates a file transfer, allows user-assisted, remote FTP servers to overwrite files in arbitrary locations via crafted filenames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-21T04:00:00.000Z
CVE-2005-2127 
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, as originally demonstrated using the (1) DDS Library Shape Control (Msdds.dll) COM object, and other objects including (2) Blnmgrps.dll, (3) Ciodm.dll, (4) Comsvcs.dll, (5) Danim.dll, (6) Htmlmarq.ocx, (7) Mdt2dd.dll (as demonstrated using a heap corruption attack with uninitialized memory), (8) Mdt2qd.dll, (9) Mpg4ds32.ax, (10) Msadds32.ax, (11) Msb1esen.dll, (12) Msb1fren.dll, (13) Msb1geen.dll, (14) Msdtctm.dll, (15) Mshtml.dll, (16) Msoeacct.dll, (17) Msosvfbr.dll, (18) Mswcrun.dll, (19) Netshell.dll, (20) Ole2disp.dll, (21) Outllib.dll, (22) Psisdecd.dll, (23) Qdvd.dll, (24) Repodbc.dll, (25) Shdocvw.dll, (26) Shell32.dll, (27) Soa.dll, (28) Srchui.dll, (29) Stobject.dll, (30) Vdt70.dll, (31) Vmhelper.dll, and (32) Wbemads.dll, aka a variant of the "COM Object Instantiation Memory Corruption vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-19T04:00:00.000Z
CVE-2005-2128 
QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a crafted strn element with a modified length value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-11T04:00:00.000Z
CVE-2005-2132 
RPC portmapper (rpcbind) in SCO UnixWare 7.1.1 m5, 7.1.3 mp5, and 7.1.4 mp2 allows remote attackers or local users to cause a denial of service (lack of response) via multiple invalid portmap requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-08-03T04:00:00.000Z
CVE-2005-2134 
The (1) clcs and (2) emuxki drivers in NetBSD 1.6 through 2.0.2 allow local users to cause a denial of service (kernel crash) by using the set-parameters ioctl on an audio device to change the block size and set the pause state to "unpaused" in the same ioctl, which causes a divide-by-zero error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-05T04:00:00.000Z
CVE-2005-2135 
SQL injection vulnerability in verify.asp in EtoShop Dynamic Biz Website Builder (QuickWeb) 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) T1 or (2) T2 parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-05T04:00:00.000Z