rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-4880 
Jax Guestbook 3.1 and 3.31 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain IP addresses of users via a direct request to (1) guestbook, (2) guestbook_ips2block, (3) ips2block, and (4) formmailer/logfile.csv.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-31T17:00:00.000Z
CVE-2005-4881 
The netlink subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.13-rc1 does not initialize certain padding fields in structures, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors, related to the (1) tc_fill_qdisc, (2) tcf_fill_node, (3) neightbl_fill_info, (4) neightbl_fill_param_info, (5) neigh_fill_info, (6) rtnetlink_fill_ifinfo, (7) rtnetlink_fill_iwinfo, (8) vif_delete, (9) ipmr_destroy_unres, (10) ipmr_cache_alloc_unres, (11) ipmr_cache_resolve, (12) inet6_fill_ifinfo, (13) tca_get_fill, (14) tca_action_flush, (15) tcf_add_notify, (16) tc_dump_action, (17) cbq_dump_police, (18) __nlmsg_put, (19) __rta_fill, (20) __rta_reserve, (21) inet6_fill_prefix, (22) rsvp_dump, and (23) cbq_dump_ovl functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-10-19T19:27:00.000Z
CVE-2005-4882 
tftpd in Philippe Jounin Tftpd32 2.74 and earlier, as used in Wyse Simple Imager (WSI) and other products, allows remote attackers to cause a denial of service (daemon crash) via a long filename in a TFTP read (aka RRQ or get) request, a different vulnerability than CVE-2002-2226.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-20T19:00:00.000Z
CVE-2005-4883 
Race condition in Philippe Jounin Tftpd32 before 2.80 allows remote attackers to cause a denial of service (daemon crash) via invalid "connect frames."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-20T19:00:00.000Z
CVE-2005-4884 
Unspecified vulnerability in the Oracle OLAP component in Oracle Database Server 10.1.0.4 (10g) allows remote authenticated attackers to affect availability via unknown vectors, aka DB02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-01-25T21:00:00.000Z
CVE-2005-4885 
Unspecified vulnerability on certain Sun StorEdge 6130 (SE6130) Controller Arrays allows remote attackers to delete data via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-01-28T20:00:00.000Z
CVE-2005-4886 
The selinux_parse_skb_ipv6 function in security/selinux/hooks.c in the Linux kernel before 2.6.12-rc4 allows remote attackers to cause a denial of service (OOPS) via vectors associated with an incorrect call to the ipv6_skip_exthdr function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-02-26T19:00:00.000Z
CVE-2005-4887 
NWFTPD.nlm before 5.06.05 in the FTP server in Novell NetWare 6.5 SP5 allows attackers to have an unspecified impact via vectors related to passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-05T15:15:00.000Z
CVE-2005-4888 
NWFTPD.nlm before 5.06.04 in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (excessive stale connections) by establishing many FTP sessions, which persist in the Not-Logged-In state after each session is completed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-05T15:15:00.000Z
CVE-2005-4889 
lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of an executable file during deletion of the file in an RPM package removal, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid or (2) setgid file, a related issue to CVE-2010-2059.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-08T18:00:00.000Z
CVE-2005-4890 
There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process.
Problem types: description: tty hijacking possible in "su" via TIOCSTI ioctl
Affected products: vendor: Red Hat
product: shadow
vendor: Red Hat
product: sudo
Published: 2019-11-04T18:38:09.000Z
CVE-2005-4891 
Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers to inject arbitrary SQL statements.
Problem types: description: SQL Injection
Affected products: vendor: Simple Machine Forum
product: Simple Machine Forum
Published: 2020-01-15T16:09:27.000Z
CVE-2005-4895 
Multiple integer overflows in TCMalloc (tcmalloc.cc) in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-25T19:00:00.000Z
CVE-2005-4900 
SHA-1 is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of SHA-1 in TLS 1.2.  NOTE: this CVE exists to provide a common identifier for referencing this SHA-1 issue; the existence of an identifier is not, by itself, a technology recommendation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-14T16:00:00.000Z
CVE-2006-0001 
Stack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted PUB file, which causes an overflow when parsing fonts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-12T23:00:00.000Z
CVE-2006-0002 
Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-10T22:00:00.000Z
CVE-2006-0003 
Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-12T00:00:00.000Z
CVE-2006-0004 
Microsoft PowerPoint 2000 in Office 2000 SP3 has an interaction with Internet Explorer that allows remote attackers to obtain sensitive information via a PowerPoint presentation that attempts to access objects in the Temporary Internet Files Folder (TIFF).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-02-14T20:00:00.000Z
CVE-2006-0005 
Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-02-14T19:00:00.000Z
CVE-2006-0006 
Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and XP SP1, and Media Player 10 on XP SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted bitmap (.BMP) file that specifies a size of 0 but contains additional data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-02-14T22:00:00.000Z
CVE-2006-0007 
Buffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted GIF image that triggers memory corruption when it is parsed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-11T21:00:00.000Z
CVE-2006-0008 
The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, which executes Notepad with the privileges of the program that displays the about box.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-02-14T19:00:00.000Z
CVE-2006-0009 
Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJ_MDROPPER.BH and Trojan.PPDropper.E in attacks against PowerPoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T23:00:00.000Z
CVE-2006-0010 
Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-10T22:00:00.000Z
CVE-2006-0012 
Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack vectors involving COM objects and "crafted files and directories," aka the "Windows Shell Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-12T00:00:00.000Z
CVE-2006-0013 
Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote authenticated users or Guests to execute arbitrary code via crafted RPC requests, a different vulnerability than CVE-2005-1207.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-02-14T19:00:00.000Z
CVE-2006-0014 
Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book (WAB) file containing "certain Unicode strings" and modified length values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-12T00:00:00.000Z
CVE-2006-0015 
Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to inject arbitrary web script or HTML, then leverage the attack to execute arbitrary programs or create new accounts, via the (1) operation, (2) command, and (3) name parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-11T23:00:00.000Z
CVE-2006-0019 
Heap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript interpreter engine in KDE 3.2.0 through 3.5.0 allows remote attackers to execute arbitrary code via a crafted, UTF-8 encoded URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-20T21:00:00.000Z
CVE-2006-0020 
An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millennium, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute code via a crafted WMF file with a manipulated WMF header size, possibly involving an integer overflow, a different vulnerability than CVE-2005-4560, and aka "WMF Image Parsing Memory Corruption Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-10T21:00:00.000Z
CVE-2006-0021 
Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet with an invalid IP option, aka the "IGMP v3 DoS Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-02-14T19:00:00.000Z
CVE-2006-0022 
Unspecified vulnerability in Microsoft PowerPoint in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP1 and SP2, Office 2004 for Mac, and v. X for Mac allows user-assisted attackers to execute arbitrary code via a PowerPoint document with a malformed record, which triggers memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-13T19:00:00.000Z
CVE-2006-0023 
Microsoft Windows XP SP1 and SP2 before August 2004, and possibly other operating systems and versions, uses insecure default ACLs that allow the Authenticated Users group to gain privileges by modifying critical configuration information for the (1) Simple Service Discovery Protocol (SSDP), (2) Universal Plug and Play Device Host (UPnP), (3) NetBT, (4) SCardSvr, (5) DHCP, and (6) DnsCache services, aka "Permissive Windows Services DACLs."  NOTE: the NetBT, SCardSvr, DHCP, DnsCache already require privileged access to exploit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-02-08T02:00:00.000Z
CVE-2006-0024 
Multiple unspecified vulnerabilities in Adobe Flash Player 8.0.22.0 and earlier allow remote attackers to execute arbitrary code via a crafted SWF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-15T16:00:00.000Z
CVE-2006-0025 
Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-13T19:00:00.000Z
CVE-2006-0026 
Buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows local and possibly remote attackers to execute arbitrary code via crafted Active Server Pages (ASP).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-11T22:00:00.000Z
CVE-2006-0027 
Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages with crafted (1) vCal or (2) iCal Calendar properties.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-09T22:00:00.000Z
CVE-2006-0028 
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T23:00:00.000Z
CVE-2006-0029 
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed description, which leads to memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T23:00:00.000Z
CVE-2006-0030 
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed graphic, which leads to memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T23:00:00.000Z
CVE-2006-0031 
Stack-based buffer overflow in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed record with a modified length value, which leads to memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T23:00:00.000Z
CVE-2006-0032 
Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Auto Select, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL, which is injected into an error message whose charset is set to UTF-7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-12T23:00:00.000Z
CVE-2006-0033 
Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted PNG image that triggers memory corruption when it is parsed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-11T21:00:00.000Z
CVE-2006-0034 
Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or BuildContext opcode, which triggers a bug in the NdrAllocate function, aka the MSDTC Invalid Memory Access Vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-09T23:00:00.000Z
CVE-2006-0035 
The netlink_rcv_skb function in af_netlink.c in Linux kernel 2.6.14 and 2.6.15 allows local users to cause a denial of service (infinite loop) via a nlmsg_len field of 0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-11T21:00:00.000Z
CVE-2006-0036 
ip_nat_pptp in the PPTP NAT helper (netfilter/ip_nat_helper_pptp.c) in Linux kernel 2.6.14, and other versions, allows remote attackers to cause a denial of service (memory corruption or crash) via an inbound PPTP_IN_CALL_REQUEST packet that causes a null pointer to be used in an offset calculation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-23T22:00:00.000Z
CVE-2006-0037 
ip_nat_pptp in the PPTP NAT helper (netfilter/ip_nat_helper_pptp.c) in Linux kernel 2.6.14, and other versions, allows local users to cause a denial of service (memory corruption or crash) via a crafted outbound packet that causes an incorrect offset to be calculated from pointer arithmetic when non-linear SKBs (socket buffers) are used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-23T22:00:00.000Z
CVE-2006-0038 
Integer overflow in the do_replace function in netfilter for Linux before 2.6.16-rc3, when using "virtualization solutions" such as OpenVZ, allows local users with CAP_NET_ADMIN rights to cause a buffer overflow in the copy_from_user function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-22T20:00:00.000Z
CVE-2006-0039 
Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local users with CAP_NET_ADMIN capabilities to read kernel memory by triggering the race condition in a way that produces a size value that is inconsistent with allocated memory, which leads to a buffer over-read in IPT_ENTRY_ITERATE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T22:00:00.000Z
CVE-2006-0040 
GNOME Evolution 2.4.2.1 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a text e-mail with a large number of URLs, possibly due to unknown problems in gtkhtml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-10T01:00:00.000Z
CVE-2006-0042 
Unspecified vulnerability in (1) apreq_parse_headers and (2) apreq_parse_urlencoded functions in Apache2::Request (Libapreq2) before 2.07 allows remote attackers to cause a denial of service (CPU consumption) via unknown attack vectors that result in quadratic computational complexity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-02-18T21:00:00.000Z
CVE-2006-0043 
Buffer overflow in the realpath function in nfs-server rpc.mountd, as used in SUSE Linux 9.1 through 10.0, allows local users to execute arbitrary code via unspecified vectors involving mount requests and symlinks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-31T02:00:00.000Z
CVE-2006-0044 
Unspecified vulnerability in context.py in Albatross web application toolkit before 1.33 allows remote attackers to execute arbitrary commands via unspecified vectors involving template files and the "handling of submitted form fields".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-18T02:00:00.000Z
CVE-2006-0045 
crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-20T21:00:00.000Z
CVE-2006-0046 
squid_redirect script in adzapper before 2006-01-29 allows remote attackers to cause a denial of service (CPU consumption) via a URL with a large number of trailing / (forward slashes), which might produce inefficient regular expressions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-02-13T11:00:00.000Z
CVE-2006-0047 
packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service (server crash) via crafted packets with negative compressed size values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-07T11:00:00.000Z
CVE-2006-0048 
Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service (segmentation fault) via certain fragmented packets, possibly involving invalid headers and an attacker-controlled payload length.  NOTE: this issue might be a buffer overflow or overread.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-26T00:00:00.000Z
CVE-2006-0049 
gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a control packet, which causes the check for concatenated signatures to report that the signature is valid, a different vulnerability than CVE-2006-0455.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-13T21:00:00.000Z
CVE-2006-0050 
snmptrapfmt in Debian 3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary log file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-23T11:00:00.000Z
CVE-2006-0051 
Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is "fetching remote playlists", which triggers the overflow in the http_peek function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-05T10:00:00.000Z
CVE-2006-0052 
The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service (mailing list delivery failure) via a multipart MIME message with a single part that has two blank lines between the first boundary and the end boundary.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-31T11:00:00.000Z