rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-2944 
The perform_file_save function in GNOME Workstation Command Center (gwcc) 0.9.6 and earlier allows local users to create and overwrite arbitrary files via a symlink attack on the gwcc_out.txt temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-16T04:00:00.000Z
CVE-2005-2945 
arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive information from files created by (1) arc (arc.c) or (2) marc (marc.c).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-16T04:00:00.000Z
CVE-2005-2946 
The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm, which makes it easier for remote attackers to forge certificates with a valid certificate authority signature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-16T04:00:00.000Z
CVE-2005-2947 
Buffer overflow in KillProcess 2.20 and earlier allows user-assisted attackers to execute arbitrary code via an exe file with a long FileDescription in the version resource.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-16T04:00:00.000Z
CVE-2005-2948 
KillProcess 2.20 and earlier allows local users to bypass kill list restrictions by launching multiple processes at the same time, which are not all killed by KillProcess.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-16T04:00:00.000Z
CVE-2005-2949 
pam_per_user before 0.4 does not verify if the user name changes between authentication attempts and uses the same subrequest handle, which allows remote attackers or local users to login as other users by using certain applications that allow the username to be changed during authentication, such as /bin/login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-16T04:00:00.000Z
CVE-2005-2950 
Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-16T04:00:00.000Z
CVE-2005-2951 
Directory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary PHP commands via ".." sequences and "%00" (trailing null byte) characters in the l parameter, which is used in an include_once statement.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-16T04:00:00.000Z
CVE-2005-2952 
Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the l parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-16T04:00:00.000Z
CVE-2005-2953 
Cross-site scripting (XSS) vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary web script or HTML via the Customer_Login parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-16T04:00:00.000Z
CVE-2005-2954 
SQL injection vulnerability in password_reminder.php in ATutor before 1.5.1 pl1 allows remote attackers to execute arbitrary SQL commands via the email field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-16T04:00:00.000Z
CVE-2005-2955 
config.inc.php in ATutor 1.5.1, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which allows authenticated administrators or educators to execute arbitrary code by uploading files with other executable extensions such as .inc, .php4, or others.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-16T04:00:00.000Z
CVE-2005-2956 
ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain user chat conversations via direct requests to those files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-16T04:00:00.000Z
CVE-2005-2957 
Stack-based buffer overflow in AVIRA Desktop for Windows 1.00.00.68 with AVPACK32.DLL 6.31.0.3, when archive scanning is enabled, allows remote attackers to execute arbitrary code via a long filename in an ACE archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-16T04:00:00.000Z
CVE-2005-2958 
Multiple format string vulnerabilities in the GNOME Data Access library for GNOME2 (libgda2) 1.2.1 and earlier allow attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-25T04:00:00.000Z
CVE-2005-2959 
Incomplete blacklist vulnerability in sudo 1.6.8 and earlier allows local users to gain privileges via the (1) SHELLOPTS and (2) PS4 environment variables before executing a bash script on behalf of another user, which are not cleared even though other variables are.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-25T04:00:00.000Z
CVE-2005-2960 
cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a different vulnerability than CVE-2005-3137.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-05T04:00:00.000Z
CVE-2005-2961 
Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remote servers to execute arbitrary code via a search response with a crafted string in the HREF field of an <A> tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-05T04:00:00.000Z
CVE-2005-2962 
The post-installation script for ntlmaps before 0.9.9 sets world-readable permissions for the configuration file, which allows local users to obtain the username and password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-30T04:00:00.000Z
CVE-2005-2963 
The mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for all locations that use the require group directive, even when other authentication mechanisms are specified, which might allow remote authenticated users to bypass security restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-13T04:00:00.000Z
CVE-2005-2964 
Stack-based buffer overflow in AbiWord before 2.2.10 allows attackers to execute arbitrary code via the RTF import mechanism.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-28T04:00:00.000Z
CVE-2005-2966 
The Python SVG import plugin (diasvg_import.py) for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a crafted SVG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-05T04:00:00.000Z
CVE-2005-2967 
Format string vulnerability in input_cdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format string specifiers in metadata in CDDB server responses when the victim plays a CD.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-14T04:00:00.000Z
CVE-2005-2968 
Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the browser on the command line, which is sent unfiltered to bash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-20T04:00:00.000Z
CVE-2005-2969 
The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-18T04:00:00.000Z
CVE-2005-2970 
Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service (memory consumption) via aborted connections, which prevents the memory for the transaction pool from being reused for other connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-25T04:00:00.000Z
CVE-2005-2971 
Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-20T04:00:00.000Z
CVE-2005-2972 
Multiple stack-based buffer overflows in the RTF import feature in AbiWord before 2.2.11 allow user-assisted attackers to execute arbitrary code via an RTF file with long identifiers, which are not properly handled in the (1) ParseLevelText, (2) getCharsInsideBrace, (3) HandleLists, (4) or (5) HandleAbiLists functions in ie_imp_RTF.cpp, a different vulnerability than CVE-2005-2964.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-23T04:00:00.000Z
CVE-2005-2973 
The udp_v6_get_port function in udp.c in Linux 2.6 before 2.6.14-rc5, when running IPv6, allows local users to cause a denial of service (infinite loop and crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-27T04:00:00.000Z
CVE-2005-2974 
libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-04T00:00:00.000Z
CVE-2005-2975 
io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ before 2.8.7 allows attackers to cause a denial of service (infinite loop) via a crafted XPM image with a large number of colors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T11:00:00.000Z
CVE-2005-2976 
Integer overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ before 2.8.7 allows attackers to cause a denial of service (crash) or execute arbitrary code via an XPM file with large height, width, and colour values, a different vulnerability than CVE-2005-3186.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T11:00:00.000Z
CVE-2005-2977 
The SELinux version of PAM before 0.78 r3 allows local users to perform brute force password guessing attacks via unix_chkpwd, which does not log failed guesses or delay its responses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-01T02:00:00.000Z
CVE-2005-2978 
pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap (PNM) images to Portable Network Graphics (PNG), which might allow attackers to execute arbitrary code by modifying the stack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-18T04:00:00.000Z
CVE-2005-2979 
SQL injection vulnerability in index.php in phpoutsourcing Noah's classifieds allows remote attackers to execute arbitrary SQL commands via the rollid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-19T04:00:00.000Z
CVE-2005-2980 
Cross-site scripting (XSS) vulnerability in index.php in phpoutsourcing Noah's classifieds 1.3 allows remote attackers to inject arbitrary web script or HTML via the rollid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-19T04:00:00.000Z
CVE-2005-2981 
Cross-site scripting (XSS) vulnerability in Orion 1.3.8 and 1.4.5 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the resulting 404 error page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-19T04:00:00.000Z
CVE-2005-2982 
Cross-site scripting (XSS) vulnerability in CompaqHTTPServer 2.1 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the resulting 404 error page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-19T04:00:00.000Z
CVE-2005-2983 
SQL injection vulnerability in Oracle Reports that use Lexical References allows remote attackers to execute arbitrary SQL commands via the values in the parameter form that appears when the paramform parameter is set to yes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-19T04:00:00.000Z
CVE-2005-2984 
Avocent CCM console server running firmware 2.1 CCM4850 allows remote authenticated attackers to bypass port restrictions by connecting to the server via SSH and using the connect command to access the serial port.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-19T04:00:00.000Z
CVE-2005-2985 
SQL injection vulnerability in search_result.php in AEwebworks aeDating Script 4.0 and earlier allows remote attackers to execute arbitrary SQL statements via the Country parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-19T04:00:00.000Z
CVE-2005-2986 
The v3flt2k.sys driver in AhnLab V3Pro 2004 Build 6.0.0.383, V3 VirusBlock 2005 Build 6.0.0.383, V3Net for Windows Server 6.0 Build 6.0.0.383 does not properly validate the source of the DeviceIoControl commands, which allows remote attackers to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-19T04:00:00.000Z
CVE-2005-2987 
SQL injection vulnerability in login.php in Digital Scribe 1.4 allows remote attackers to execute arbitrary SQL commands via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-19T04:00:00.000Z
CVE-2005-2988 
HP LaserJet 2430, and possibly other printers that use Jetdirect controls, stores information about recently printed documents without proper protection, which could allow remote attackers to obtain sensitive information via SNMP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-19T04:00:00.000Z
CVE-2005-2989 
Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) tid parameter to topic.php, the uid parameter to (2) misc.php or (3) pm.php, or the fid parameter to (3) forums.php or (4) newpost.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-19T04:00:00.000Z
CVE-2005-2990 
AuthInfo.java in LineContol Java Client (jlc) before 0.8.1 stores sensitive information such as user passwords in log files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-19T04:00:00.000Z
CVE-2005-2991 
ncompress 4.2.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files using (1) zdiff or (2) zcmp, a different vulnerability than CVE-2004-0970.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-20T04:00:00.000Z
CVE-2005-2992 
arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different type of vulnerability than CVE-2005-2945.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-13T04:00:00.000Z
CVE-2005-2993 
Unspecified vulnerability in the FTP Daemon (ftpd) for HP Tru64 UNIX 4.0F PK8 and other versions up to HP Tru64 UNIX 5.1B-3, and HP-UX B.11.00, B.11.04, B.11.11, and B.11.23, allows remote authenticated users to cause a denial of service (hang).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-20T04:00:00.000Z
CVE-2005-2994 
Unspecified vulnerability in the web client for IBM Rational ClearQuest 2002.05.00 and 2002.05.20, and 2003.06.00 through 2003.06.15 before SR5, allows remote attackers to execute XML Style Sheets (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-20T04:00:00.000Z
CVE-2005-2995 
bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on (1) the temporary file used by autoconf/randpass when openssl is not available, or (2) the mtx.[PID] temporary file in mtx-changer.in.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-20T04:00:00.000Z
CVE-2005-2996 
Multiple heap-based and stack-based buffer overflows in certain DCOM server components in VERITAS Storage Exec Storage Exec 5.3 before Hotfix 9 and StorageCentral 5.2 before Hot Fix 2 allow remote attackers to execute arbitrary code via certain ActiveX controls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-20T04:00:00.000Z
CVE-2005-2997 
Multiple directory traversal vulnerabilities in PHP Advanced Transfer Manager 1.30 allow remote attackers to read arbitrary files via ".." sequences in (1) the currentdir parameter to txt.php, or the current_dir parameter to (2) htm.php or (3) html.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-20T04:00:00.000Z
CVE-2005-2998 
PHP Advanced Transfer Manager 1.30 has a default password for the administrator user, which allows remote attackers to upload and execute arbitrary PHP files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-20T04:00:00.000Z
CVE-2005-2999 
PHP Advanced Transfer Manager 1.30 allows remote attackers to obtain sensitive PHP configuration information via a direct request to test.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-20T04:00:00.000Z
CVE-2005-3000 
Multiple cross-site scripting (XSS) vulnerabilities in viewers/txt.php in PHP Advanced Transfer Manager 1.30 allow remote attackers to inject arbitrary web script or HTML via the (1) font, (2) normalfontcolor, or (3) mess[31] parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-20T04:00:00.000Z
CVE-2005-3001 
Unspecified vulnerability in the "tl" driver in Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-20T04:00:00.000Z
CVE-2005-3002 
Multi-Computer Control System (MCCS) 1.0 allows remote attackers to cause a denial of service via a malformed UDP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-20T04:00:00.000Z
CVE-2005-3003 
SQL injection vulnerability in index.php in NooTopList 1.0.0 release 17 allows remote attackers to execute arbitrary SQL commands via the (1) o or (2) sort parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-21T04:00:00.000Z
CVE-2005-3004 
SQL injection vulnerability in Interakt MX Shop 3.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) idp, (2) id_ctg, or (3) id_prd parameters to the pages module in index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-21T04:00:00.000Z
CVE-2005-3005 
Helpdesk Software Hesk allows remote attackers to bypass authentication for (1) admin.php and (2) admin_main.php by modifying the PHPSESSID session ID parameter or cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-21T04:00:00.000Z
CVE-2005-3006 
The mail client in Opera before 8.50 opens attached files from the user's cache directory without warning the user, which might allow remote attackers to inject arbitrary web script and spoof attachment filenames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-21T04:00:00.000Z
CVE-2005-3007 
Opera before 8.50 allows remote attackers to spoof the content type of files via a filename with a trailing "." (dot), which might allow remote attackers to trick users into processing dangerous content.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-21T04:00:00.000Z
CVE-2005-3008 
Tofu 0.2 allows remote attackers to execute arbitrary Python code via crafted pickled objects, which Tofu unpickles and executes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-21T04:00:00.000Z
CVE-2005-3009 
Cross-site scripting (XSS) vulnerability in CuteNews allows remote attackers to inject arbitrary web script or HTML via the mod parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-21T04:00:00.000Z
CVE-2005-3010 
Direct static code injection vulnerability in the flood protection feature in inc/shows.inc.php in CuteNews 1.4.0 and earlier allows remote attackers to execute arbitrary PHP code via the HTTP_CLIENT_IP header (Client-Ip), which is injected into data/flood.db.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-21T04:00:00.000Z
CVE-2005-3011 
The sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-21T04:00:00.000Z
CVE-2005-3012 
The MasterDataCD::createImage function in masterdatacd.cpp for SimpleCDR-X 1.3.3 creates the .temp temporary directory with insecure permissions, which allows local users to read sensitive ISO images.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-21T04:00:00.000Z
CVE-2005-3013 
Buffer overflow in liby2util in Yet another Setup Tool (YaST) for SuSE Linux 9.3 allows local users to execute arbitrary code via a long Loc entry.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-21T04:00:00.000Z
CVE-2005-3014 
Cross-site scripting (XSS) vulnerability in Ensim webplliance allows remote attackers to inject arbitrary web script or HTML via the Login (OCW_login_username) field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-21T04:00:00.000Z
CVE-2005-3015 
Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 6.5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) BaseTarget or (2) Src parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-21T04:00:00.000Z
CVE-2005-3016 
Multiple unspecified vulnerabilities in the WYSIWYG editor in PHP-Nuke before 7.9 Final have unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-21T04:00:00.000Z
CVE-2005-3017 
PHP file inclusion vulnerability in index.php in Content2Web 1.0.1 allows remote attackers to include arbitrary files via the show parameter, which can lead to resultant errors such as path disclosure, SQL error messages, and cross-site scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-21T04:00:00.000Z