rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-3653 
Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-23T20:00:00.000Z
CVE-2005-3654 
Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of packets with 0xFF characters to the Telnet port (TCP 23), which corrupts the heap.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-06T00:00:00.000Z
CVE-2005-3655 
Heap-based buffer overflow in Novell Open Enterprise Server Remote Manager (novell-nrm) in Novell SUSE Linux Enterprise Server 9 allows remote attackers to execute arbitrary code via an HTTP POST request with a negative Content-Length parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-14T01:00:00.000Z
CVE-2005-3656 
Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-06T11:00:00.000Z
CVE-2005-3657 
The ActiveX control in MCINSCTL.DLL for McAfee VirusScan Security Center does not use the IObjectSafetySiteLock API to restrict access to required domains, which allows remote attackers to create or append to arbitrary files via the StartLog and AddLog methods in the MCINSTALL.McLog object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-21T11:00:00.000Z
CVE-2005-3658 
Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise Backup Software (EBS) 7.1 through 7.2L, allow remote attackers to execute arbitrary code or cause a denial of service (unresponsive application) via malformed RPC packets to (1) RPC program number 390109 (nsrd.exe) and (2) RPC program number 390113 (nsrexecd.exe).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-18T02:00:00.000Z
CVE-2005-3659 
nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise Backup Software (EBS) 7.1 through 7.2L, allows remote attackers to cause a denial of service (nsrd service crash) via a malformed RPC request to RPC program number 390109, which triggers a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-18T02:00:00.000Z
CVE-2005-3660 
Linux kernel 2.4 and 2.6 allows attackers to cause a denial of service (memory exhaustion and panic) by creating a large number of connected file descriptors or socketpairs and setting a large data transfer buffer, then preventing Linux from being able to finish the transfer by causing the process to become a zombie, or closing the file descriptor without closing an associated reference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-22T23:00:00.000Z
CVE-2005-3661 
Dell TrueMobile 2300 Wireless Broadband Router running firmware 3.0.0.8 and 5.1.1.6, and possibly other versions, allows remote attackers to reset authentication credentials, then change configuration or firmware, via a direct request to apply.cgi with the Page parameter set to adv_password.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T11:00:00.000Z
CVE-2005-3662 
Off-by-one buffer overflow in pnmtopng before 2.39, when using the -alpha command line option (Alphas_Of_Color), allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNM file with exactly 256 colors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T02:00:00.000Z
CVE-2005-3663 
Unquoted Windows search path vulnerability in Kaspersky Anti-Virus 5.0 might allow local users to gain privileges via a malicious "program.exe" file in the C: folder.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T11:00:00.000Z
CVE-2005-3664 
Heap-based buffer overflow in Kaspersky Anti-Virus Engine, as used in Kaspersky Personal 5.0.227, Anti-Virus On-Demand Scanner for Linux 5.0.5, and F-Secure Anti-Virus for Linux 4.50 allows remote attackers to execute arbitrary code via a crafted CHM file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T11:00:00.000Z
CVE-2005-3665 
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_HOST variable and (2) various scripts in the libraries directory that handle header generation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T11:00:00.000Z
CVE-2005-3666 
Multiple unspecified format string vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T21:00:00.000Z
CVE-2005-3667 
Multiple unspecified vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts related to denial of service, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable.  In addition, since "denial of service" is an impact and not a vulnerability, it is unknown which underlying vulnerabilities are actually covered by this particular candidate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T21:00:00.000Z
CVE-2005-3668 
Multiple buffer overflows in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts related to denial of service, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of information in the original sources, it is likely that this candidate will be REJECTed once it is known which implementations are actually vulnerable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T21:00:00.000Z
CVE-2005-3669 
Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote attackers to cause a denial of service (device reset) via certain malformed IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of details in the Cisco advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T21:00:00.000Z
CVE-2005-3670 
Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in HP HP-UX B.11.00, B.11.11, and B.11.23 running IPSec, HP Jetdirect 635n IPv6/IPsec Print Server, and HP Tru64 UNIX 5.1B-3 and 5.1B-2/PK4, allow remote attackers to cause a denial of service via certain IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of details in the HP advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T21:00:00.000Z
CVE-2005-3671 
The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers to cause a denial of service via (1) a crafted packet using 3DES with an invalid key length, or (2) unspecified inputs when Aggressive Mode is enabled and the PSK is known, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T21:00:00.000Z
CVE-2005-3672 
The Internet Key Exchange version 1 (IKEv1) implementation in Stonesoft StoneGate Firewall before 2.6.1 allows remote attackers to cause a denial of service via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of details in the Stonesoft advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T21:00:00.000Z
CVE-2005-3673 
The Internet Key Exchange version 1 (IKEv1) implementation in Check Point products allows remote attackers to cause a denial of service via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T21:00:00.000Z
CVE-2005-3674 
The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Sun Solaris 9 and 10 allows remote attackers to cause a denial of service (in.iked crash) via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T21:00:00.000Z
CVE-2005-3675 
The Transmission Control Protocol (TCP) allows remote attackers to cause a denial of service (bandwidth consumption) by sending ACK messages for packets that have not yet been received (optimistic ACKs), which can cause the sender to increase its transmission rate until it fills available bandwidth.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T23:00:00.000Z
CVE-2005-3676 
SQL injection vulnerability in download.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T23:00:00.000Z
CVE-2005-3677 
Buffer overflow in RealNetworks RealPlayer 10 and 10.5 allows remote attackers to execute arbitrary code via a crafted image in a RealPlayer Skin (RJS) file.  NOTE: due to the lack of details, it is unclear how this is different than CVE-2005-2629 and CVE-2005-2630, but the vendor advisory implies that it is different.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T23:00:00.000Z
CVE-2005-3678 
Google Talk before 1.0.0.76, with email notification enabled, allows remote attackers to cause a denial of service (connection reset) via email with a blank sender.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T23:00:00.000Z
CVE-2005-3679 
SQL injection vulnerability in admin/index.php in ActiveCampaign 1-2-All Broadcast Email allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username field in the admin control panel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T23:00:00.000Z
CVE-2005-3680 
Directory traversal vulnerability in editor_registry.php in XOOPS 2.2.3 allows remote attackers to read or include arbitrary local files via a .. (dot dot) in the xoopsConfig[language] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T23:00:00.000Z
CVE-2005-3681 
SQL injection vulnerability in viewcat.php in XOOPS WF-Downloads module 2.05 allows remote attackers to execute arbitrary SQL commands via the list parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T23:00:00.000Z
CVE-2005-3682 
Multiple SQL injection vulnerabilities in Wizz Forum 1.20 allow remote attackers to execute arbitrary SQL commands via (1) the AuthID parameter in ForumAuthDetails.php, and the TopicID parameter in (2) ForumTopicDetails.php and (3) ForumReply.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T23:00:00.000Z
CVE-2005-3683 
Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of service (application crash), and possibly execute arbitrary code, via a long USER command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-19T01:00:00.000Z
CVE-2005-3684 
Multiple buffer overflows in freeFTPd 1.0.8, without logging enabled, allow remote authenticated attackers to cause a denial of service (application crash), and possibly execute arbitrary code, via long (1) MKD and (2) DELE commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-19T01:00:00.000Z
CVE-2005-3685 
Cross-site scripting (XSS) vulnerability in shopadmin.asp in VP-ASP Shopping Cart 5.50 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-19T01:00:00.000Z
CVE-2005-3686 
SQL injection vulnerability in search.inc.php in Unclassified NewsBoard before 1.5.3 Patch 4 allows remote attackers to execute arbitrary SQL commands via the (1) DateFrom or (2) DateUntil parameter to forum.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-19T01:00:00.000Z
CVE-2005-3687 
cancel_account.php in WHM AutoPilot 2.5.30 and earlier allows remote attackers to cancel requests for arbitrary accounts via a modified c parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-19T01:00:00.000Z
CVE-2005-3688 
Cross-site scripting (XSS) vulnerability in members.php in XMB 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the "Your Current Mood" field in the registration page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-19T01:00:00.000Z
CVE-2005-3689 
post.php in XMB 1.9.2 allows remote attackers to obtain the installation path via an invalid fid parameter in a newthread action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-19T01:00:00.000Z
CVE-2005-3690 
Stack-based buffer overflow in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to execute arbitrary code via a long mailbox name in the (1) select, (2) create, (3) delete, (4) rename, (5) subscribe, or (6) unsubscribe commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-19T01:00:00.000Z
CVE-2005-3691 
Directory traversal vulnerability in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to create or rename arbitrary mail directories via the mailbox name argument of the (1) create or (2) rename commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-19T01:00:00.000Z
CVE-2005-3692 
Cross-site scripting (XSS) vulnerability in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) retid parameter in badlogin.php, (2) Content-Type headers in HTML mails, and (3) HTML mail attachments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-19T01:00:00.000Z
CVE-2005-3693 
The AxWebRemoveCtrl ActiveX control for uninstalling the SunnComm MediaMax DRM allows remote attackers to download and execute arbitrary code, a similar vulnerability to CVE-2005-3650.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-19T01:00:00.000Z
CVE-2005-3694 
centericq 4.20.0-r3 with "Enable peer-to-peer communications" set allows remote attackers to cause a denial of service (segmentation fault and crash) via short zero-length packets, and possibly packets of length 1 or 2, as demonstrated using Nessus.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-20T20:00:00.000Z
CVE-2005-3695 
Cross-site scripting (XSS) vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the m parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-20T22:00:00.000Z
CVE-2005-3696 
SQL injection vulnerability in Arki-DB 1.0 and 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a view action (view.php) to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-20T22:00:00.000Z
CVE-2005-3697 
Unspecified vulnerability in the administration interface in Uresk Links 2.0 Lite allows remote attackers to bypass authentication via unspecified vectors in index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-21T11:00:00.000Z
CVE-2005-3698 
PHP Easy Download allows remote attackers to bypass authentication via edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-21T11:00:00.000Z
CVE-2005-3699 
Opera Web Browser 8.50 and 8.0 through 8.0.2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-21T11:00:00.000Z
CVE-2005-3700 
Unknown vulnerability in iodbcadmintool in the ODBC Administrator utility in Mac OS X and OS X Server 10.3.9 and 10.4.3 allows local users to execute arbitrary code via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T02:02:00.000Z
CVE-2005-3701 
Unspecified vulnerability in passwordserver in Mac OS X Server 10.3.9 and 10.4.3, when creating an Open Directory master server, allows local users to gain privileges via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T02:02:00.000Z
CVE-2005-3702 
Safari in Mac OS X and OS X Server 10.3.9 and 10.4.3 allows remote attackers to cause files to be downloaded to locations outside the download directory via a long file name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T02:02:00.000Z
CVE-2005-3704 
System log server in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to spoof syslog messages in log files by injecting various control characters such as newline (NL).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T02:02:00.000Z
CVE-2005-3705 
Heap-based buffer overflow in WebKit in Mac OS X and OS X Server 10.3.9 and 10.4.3, as used in applications such as Safari, allows remote attackers to execute arbitrary code via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-01T02:02:00.000Z
CVE-2005-3706 
Heap-based buffer overflow in LibSystem in Mac OS X 10.4 through 10.4.5 allows context-dependent attackers to execute arbitrary code by causing an application that uses LibSystem to request a large amount of memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-02T19:00:00.000Z
CVE-2005-3707 
Buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via crafted TGA image files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-11T18:00:00.000Z
CVE-2005-3708 
Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via crafted TGA image files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-11T18:00:00.000Z
CVE-2005-3709 
Integer underflow in Apple Quicktime before 7.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Color Map Entry Size in a TGA image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-11T18:00:00.000Z
CVE-2005-3710 
Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a TIFF image file with modified image height and width (ImageWidth) tags.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-11T18:00:00.000Z
CVE-2005-3711 
Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a TIFF image file with modified (1) "strips" (StripByteCounts) or (2) "bands" (StripOffsets) values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-11T18:00:00.000Z
CVE-2005-3712 
Heap-based buffer overflow in rsync in Mac OS X 10.4 through 10.4.5 allows remote authenticated users to execute arbitrary code via long extended attributes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-02T19:00:00.000Z
CVE-2005-3713 
Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a GIF image file with a crafted Netscape Navigator Application Extension Block that modifies the heap in the Picture Modifier block.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-11T18:00:00.000Z
CVE-2005-3714 
The network interface for Apple AirPort Express 6.x before Firmware Update 6.3, and AirPort Extreme 5.x before Firmware Update 5.7, allows remote attackers to cause a denial of service (unresponsive interface) via malformed packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-05T23:00:00.000Z
CVE-2005-3715 
Senao SI-680H Wireless VoIP Phone Firmware 0.03.0839 leaves the VxWorks debugger UDP port 17185 available without authentication, which allows attackers to access the phone OS, obtain sensitive information, and cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-21T11:00:00.000Z
CVE-2005-3716 
The SNMP daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has hard-coded public credentials that cannot be changed, which allows attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-21T11:00:00.000Z
CVE-2005-3717 
The telnet daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has a default username "target" and password "password", which allows remote attackers to gain full access to the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-21T11:00:00.000Z